last executing test programs: 1m40.890527458s ago: executing program 3 (id=61): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x7, 0x8}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) 1m40.748936757s ago: executing program 3 (id=65): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) r3 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='erspan0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000480)=0x2f9d) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000100)={r2, @in6={{0xa, 0x3, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}}}, &(0x7f0000000240)=0x49) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0xe22, 0x0, @empty}, 0x1c) getrandom(0xfffffffffffffffe, 0xffffffffffffff9b, 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) copy_file_range(r0, &(0x7f00000004c0)=0x6, r1, &(0x7f0000000500)=0xffffffffffffff01, 0x5, 0x0) connect$pppl2tp(r5, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x8}}}}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x1100}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r2, 0x7, 0x1}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8917, &(0x7f0000000400)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0xac14141b}}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='ntfs3\x00', 0x221000d, 0x0) 1m40.440421604s ago: executing program 3 (id=69): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x40000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 1m40.416115135s ago: executing program 32 (id=69): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x40000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 1m9.380764586s ago: executing program 0 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x187) mount(0x0, &(0x7f0000019480)='./proc\x00', &(0x7f00000194c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000019500)='./proc/mtrr\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl(r0, 0x40104d01, &(0x7f0000019540)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000019540), 0x101180, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f0000019580)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000019300)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000019340)='./config\x00', &(0x7f0000019380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000193c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) getresuid(&(0x7f0000019600), &(0x7f0000019640), &(0x7f0000019680)) syz_emit_vhci(&(0x7f00000195c0)=ANY=[@ANYBLOB="040efc07140c"], 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000196c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001459785c4c43874ab526ea8500"/40], 0x48) read$FUSE(r9, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0, 0x40000}, 0x8040) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d03}]}) 1m8.849821498s ago: executing program 0 (id=400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0xb30, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa98, 0x178, 0x178, 0xa98, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1e8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100010001}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1346, 0x7fff, 0x0, '\x00', {0x7ff}}}}, {{@uncond, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x7}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x3}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x3}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0xc8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8, 0x2}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0xffffffff, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x40}}, 0x0) 1m8.779615852s ago: executing program 0 (id=401): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000680)="0022041100ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77a62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a12", 0x98) munlockall() r1 = userfaultfd(0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x73, 0x6, 0x0, @empty, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00005d1000/0x1000)=nil, 0x1000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) 1m8.689474244s ago: executing program 0 (id=404): syz_open_dev$loop(&(0x7f0000000240), 0xf01c, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x80000012, 0x1, 0x0, 0x0, 0x1d, 0x1c, "6bf125058e637b44e58c1c72a4c01c47e54a2793c042d4aea496bdbdce2feb94cb576a5d539a0f68412e32c700", "563e7e5b61a321b296a4d89ddf2f85a1df24909cbe49a11ff76e906b13a0c24fa2aa8ca406c1f9ec49aa05000200842300", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56224563b3", [0xa2, 0x3562]}) (async) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x80000012, 0x1, 0x0, 0x0, 0x1d, 0x1c, "6bf125058e637b44e58c1c72a4c01c47e54a2793c042d4aea496bdbdce2feb94cb576a5d539a0f68412e32c700", "563e7e5b61a321b296a4d89ddf2f85a1df24909cbe49a11ff76e906b13a0c24fa2aa8ca406c1f9ec49aa05000200842300", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56224563b3", [0xa2, 0x3562]}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r3, 0x209, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) capset(&(0x7f0000003280)={0x20080522}, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r5 = openat$cdrom(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000200)=@lsasf={0x8, 0x3, 0x1}) r6 = syz_io_uring_setup(0x2d64, &(0x7f0000000000)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}, 0x20) capset(0x0, &(0x7f0000000940)={0x200000, 0x200000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) userfaultfd(0x1) (async) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000980)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000009c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) close(0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000000540)={0x0, 0x87ec, 0x2, 0x1, 0x32a, 0x0, r1}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5895, 0x11a21, 0x2, 0x7d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x199c, 0x0, 0x0, 0x13c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7cf9, 0x1, 0x3, 0x238}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4b9d, 0x808, 0x3, 0x176}}], 0x4, &(0x7f0000001ec0)={0x2e, 0x24, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xa5}, 0x0, r9, '\x00', {0x0, 0x6fd, 0x0, &(0x7f0000000ec0)=@buf_512="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"}}, &(0x7f0000001f40)) bpf$PROG_LOAD(0x5, &(0x7f0000003300)={0x15, 0x17, &(0x7f00000033c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={r4, 0x20, &(0x7f0000000e40)={&(0x7f0000000c40)=""/198, 0xc6, 0x0, &(0x7f0000000d40)=""/225, 0xe1}}, 0x10) 1m8.558361273s ago: executing program 0 (id=408): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7ecb, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0x0, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80000000000000}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '/dev/vcsu#\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xd}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20009814}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000002f0027bd70007124fddbdf250400000007000b00050000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r7 = syz_open_procfs(0x0, &(0x7f0000000b80)='mounts\x00') read$FUSE(r7, &(0x7f0000000bc0)={0x2020}, 0x2020) recvmsg(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x2000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r10, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r9], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r11) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000fddbdf251000000008000300", @ANYRES32=r14], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4080) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r12, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4010}, 0x10040040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20004000) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x401, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0xfffffffffffffe39}}, 0x4000000) 1m8.300884882s ago: executing program 0 (id=414): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x80000000, 0x4) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000240)=@nl=@unspec, 0x80, 0x0}, 0x20004004) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f00000001c0)="01", 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa280180c200000086dd6008000800083a0000000000000000004d09ef760000000100000000000000000090780003003135afcd674b746504e1bcfab9431fa84c54180d2bd0f37479a74b932345e889fae228ff139f846c7300789c55c836acc66e8279c3359a8b9bb4e5ce50b09537798815678c376c82213a"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xc40) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01864c1, &(0x7f00000000c0)={r4, 0x0, 0xffffffffffffffff}) close_range(r5, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x80000000, 0x4) (async) socket$kcm(0xa, 0x2, 0x73) (async) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000240)=@nl=@unspec, 0x80, 0x0}, 0x20004004) (async) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) (async) write(r0, &(0x7f00000001c0)="01", 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa280180c200000086dd6008000800083a0000000000000000004d09ef760000000100000000000000000090780003003135afcd674b746504e1bcfab9431fa84c54180d2bd0f37479a74b932345e889fae228ff139f846c7300789c55c836acc66e8279c3359a8b9bb4e5ce50b09537798815678c376c82213a"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xc40) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01864c1, &(0x7f00000000c0)={r4}) (async) close_range(r5, r5, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (async) 53.092279317s ago: executing program 33 (id=414): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x80000000, 0x4) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000240)=@nl=@unspec, 0x80, 0x0}, 0x20004004) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f00000001c0)="01", 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa280180c200000086dd6008000800083a0000000000000000004d09ef760000000100000000000000000090780003003135afcd674b746504e1bcfab9431fa84c54180d2bd0f37479a74b932345e889fae228ff139f846c7300789c55c836acc66e8279c3359a8b9bb4e5ce50b09537798815678c376c82213a"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xc40) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01864c1, &(0x7f00000000c0)={r4, 0x0, 0xffffffffffffffff}) close_range(r5, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100)=0x80000000, 0x4) (async) socket$kcm(0xa, 0x2, 0x73) (async) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000240)=@nl=@unspec, 0x80, 0x0}, 0x20004004) (async) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) (async) write(r0, &(0x7f00000001c0)="01", 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa280180c200000086dd6008000800083a0000000000000000004d09ef760000000100000000000000000090780003003135afcd674b746504e1bcfab9431fa84c54180d2bd0f37479a74b932345e889fae228ff139f846c7300789c55c836acc66e8279c3359a8b9bb4e5ce50b09537798815678c376c82213a"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0xc40) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01864c1, &(0x7f00000000c0)={r4}) (async) close_range(r5, r5, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (async) 43.137119971s ago: executing program 4 (id=665): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000001780)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) readv(r0, &(0x7f00000117c0)=[{&(0x7f0000011800)=""/243, 0xfffffdef}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000011bc0)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000011c00)={0xa, 0x4e22, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000011c40)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r3, &(0x7f0000011c80)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00000000", 0x70) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000011d00)={0x0, 0x0, &(0x7f0000011d40)={&(0x7f0000011d80)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000011dc0)='./file0\x00', 0x40242, 0x31) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000011e00), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000011e40)='./file0\x00', &(0x7f0000011e80), 0x60000, &(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRESOCT, @ANYRESOCT=r4]) read$FUSE(r6, &(0x7f0000011f00)={0x2020}, 0x2020) write$FUSE_INIT(r6, 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000013f40)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339bc2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebc631d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c0100000000000000a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000015f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000016000)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000016040)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000016080)) socket(0x2, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) write(r7, &(0x7f00000160c0)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) setns(0xc9, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000016100)={0x0, 0x0, &(0x7f0000016140)={&(0x7f0000016180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x94840, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 42.980614629s ago: executing program 4 (id=667): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/profiling', 0x214100, 0x144) read$snddsp(r1, &(0x7f00000000c0)=""/10, 0xa) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/2817], 0xb04) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/netdevsim/devices/netdevsim0/new_port\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r2, &(0x7f0000000480)='4', 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8081) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 42.911347251s ago: executing program 4 (id=670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x401) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xffff}, {0xb, 0xfff1}, {0xf, 0x6}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = fsopen(&(0x7f0000000140)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r8 = dup(r7) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000440)='./file0\x00', r8}, 0x18) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x3f00000000000000) unlink(&(0x7f0000000500)='./file0\x00') write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 42.053248559s ago: executing program 4 (id=672): ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4000004) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000700)='THAWED\x00', 0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$overlay(0x0, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0), 0x1200000, &(0x7f0000001e00)) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x6c, 0xc, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000003900), &(0x7f0000003940)=0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000039c0), 0x12) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000003b00)={&(0x7f0000003a00)=[0x0, 0x0, 0x0], &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003a80)=[0x0], &(0x7f0000003ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x1, 0x5}) socket(0x9, 0x5, 0x4) syz_80211_inject_frame(&(0x7f0000003d00)=@device_b, &(0x7f0000003d40)=@mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @initial, {0xb, 0x1}}, 0x1, 0x4, 0x52, @val={0x10, 0x1, 0x7a}, [{0xdd, 0x50, "a6757060740fb918f5a6d8910ef410eaa856c7f45df4370edc2c53342b9b5c6578a9fd592ae173d3eae9d096d5e821955950cc49ad01eeb5aed1dd44db4c11807450d1350878b1fde22abf8910f18adb"}]}, 0x73) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x70, 0x1, 0x4, 0xd04, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xe4}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) 42.048610622s ago: executing program 4 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x19d) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/memory/memory0/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='online\n\x00', 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x13, 0x4, [{0x2, 0x101}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='online\n\x00', 0x7) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000900)='1\x00', 0x2) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x1bc, 0x6, {0xffffffffffffffff}, {0x0}, 0x9, 0x670}) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000f40)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000f80)='./sys\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) read$FUSE(r1, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000003080)='./sys/devices/system/memory/auto_online_blocks\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000003180)='./file0\x00', &(0x7f00000031c0), 0x80, &(0x7f0000003200)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f00000052c0)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000005340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000007340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007400)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f0000007440)="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", 0x2000, &(0x7f0000009440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009500)={0x150, 0x0, 0x6, [{{0x5, 0x2, 0x2, 0x8, 0x2, 0x9, {0x1, 0xa4d, 0x1, 0xe591, 0x1, 0xc00000000000, 0x10000, 0x5, 0x1ff, 0x8000, 0x9, r11, r12, 0x7ffffffe, 0xa}}, {0x2, 0x3, 0x5, 0x0, 'fuse\x00'}}, {{0x5, 0x2, 0x5, 0x7ff, 0x7ff, 0xe, {0x3, 0x3, 0x4, 0x81, 0x80000001, 0x1c00000000000, 0x6, 0x7, 0x7f, 0x4000, 0x4, r11, 0x0, 0x80000000, 0x8}}, {0x6, 0x1, 0x5, 0x6, 'fuse\x00'}}]}, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000009680)={0x0, 0x0, 0x0}, &(0x7f00000096c0)=0xc) setxattr$system_posix_acl(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000009700)={{}, {0x1, 0x3}, [{0x2, 0x3, r3}, {0x2, 0x1, r4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x3, r5}], {0x4, 0x4}, [{0x8, 0x3, r6}, {0x8, 0x0, r7}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x5, r8}, {0x8, 0x4, r12}, {0x8, 0x3, r13}], {0x10, 0x7}}, 0x74, 0x2) mount(&(0x7f0000000b00)=@nullb, &(0x7f0000000c00)='./mnt\x00', &(0x7f0000000d00)='ext4\x00', 0x0, &(0x7f0000000e00)='dax\x00') 41.97382209s ago: executing program 4 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000061ef0300ac1414aac6ec060001000000"], 0x38}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 40.550657577s ago: executing program 1 (id=697): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028d80000bca30000000000003403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 40.550197372s ago: executing program 1 (id=698): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000c2000000bf6100000000000f0701000004000000850000005e000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.457153111s ago: executing program 1 (id=699): socket$kcm(0x2, 0x200000000000001, 0x106) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180)=0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60010000, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000005e00019eb17738540600000000000000", @ANYRES32=0x0, @ANYRES8=r3], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e00000011008b8804", 0x9}], 0x1}, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) (async) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) (async) r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f00000002c0)='./cgroup/../file0\x00', 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380)=r6, 0x12) (async) r9 = openat$cgroup_ro(r7, &(0x7f00000003c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000400)=0x1, 0x12) (async) timer_settime(r2, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0) (async) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./dev\x00', 0x0) (async) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/vhci\x00', 0x20802, 0x1) write(r10, &(0x7f0000000540)="04c1", 0x2) 40.399796939s ago: executing program 1 (id=701): r0 = socket$inet_udp(0x2, 0x2, 0x0) read(r0, &(0x7f0000002040)=""/4100, 0x1004) 39.52069176s ago: executing program 1 (id=707): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf61000000000000070100000400000085000000c2000000bf610000000000180701000004000000850000005e000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39.52037565s ago: executing program 1 (id=708): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000073c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000007400)={0x0, 0x0, &(0x7f0000007440)={&(0x7f0000007480)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028083f2c2c2da117a6a"], 0x40}}, 0x0) r3 = syz_io_uring_setup(0x13cd, &(0x7f0000000580)={0x0, 0x4f88, 0x1000, 0x400003, 0x11a, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000180), &(0x7f0000000540)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000006f80)={&(0x7f0000006fc0)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000a900000000000000000000000000000000000000000000000027ccecd3539dbba0ffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fd8c00000000000002000000000000080000000000000000000000000000000044004500ac141424000000000000000000000000000000003c000000000000000000000000000000000000000000000102000000040100000200"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000007100)={&(0x7f00000074c0)=ANY=[@ANYRES64=r4, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="03000000004bd2f232001100ac14142400000000000000000000000000000000000000000000000000000001fc020000000000000000000000000001ac1414bb0000000000000055183f30003c0400000200000002000200"], 0xa0}, 0x1, 0x0, 0x0, 0x23cd43cd18704583}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000006dc0), 0x400, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000007200), 0x2, 0x0) write$UHID_CREATE2(r11, &(0x7f0000007240)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eca00000000000000000240003006d04000082c0"], 0x13c) write$UHID_DESTROY(r11, &(0x7f0000007380), 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000002700)={0x50, 0xfffffffffffffffe, r12, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffd}}, 0x50) r14 = openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000027c0), 0x2000, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004880)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r14, &(0x7f00000048c0)=""/1024, 0x400) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006e40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000006f00)={&(0x7f0000006e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006ec0)={&(0x7f0000006e80)={0x28, r15, 0x100, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r13}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x40000) syz_fuse_handle_req(r9, &(0x7f0000004cc0), 0x2000, &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d80)=ANY=[@ANYBLOB="3000000000000000000000000000f900e1ffffff0000000000001f00000000000400000000000000232c2c3d00000000"], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x0, 0xe, 0x0, &(0x7f0000000500)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x2}, 0x50) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 26.689959466s ago: executing program 34 (id=681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000061ef0300ac1414aac6ec060001000000"], 0x38}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 24.474082537s ago: executing program 35 (id=708): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000073c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000007400)={0x0, 0x0, &(0x7f0000007440)={&(0x7f0000007480)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028083f2c2c2da117a6a"], 0x40}}, 0x0) r3 = syz_io_uring_setup(0x13cd, &(0x7f0000000580)={0x0, 0x4f88, 0x1000, 0x400003, 0x11a, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000180), &(0x7f0000000540)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000006f80)={&(0x7f0000006fc0)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000a900000000000000000000000000000000000000000000000027ccecd3539dbba0ffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fd8c00000000000002000000000000080000000000000000000000000000000044004500ac141424000000000000000000000000000000003c000000000000000000000000000000000000000000000102000000040100000200"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000007100)={&(0x7f00000074c0)=ANY=[@ANYRES64=r4, @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="03000000004bd2f232001100ac14142400000000000000000000000000000000000000000000000000000001fc020000000000000000000000000001ac1414bb0000000000000055183f30003c0400000200000002000200"], 0xa0}, 0x1, 0x0, 0x0, 0x23cd43cd18704583}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000006dc0), 0x400, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000007200), 0x2, 0x0) write$UHID_CREATE2(r11, &(0x7f0000007240)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eca00000000000000000240003006d04000082c0"], 0x13c) write$UHID_DESTROY(r11, &(0x7f0000007380), 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0xc0c89425, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000002700)={0x50, 0xfffffffffffffffe, r12, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffd}}, 0x50) r14 = openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000027c0), 0x2000, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004880)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r14, &(0x7f00000048c0)=""/1024, 0x400) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006e40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000006f00)={&(0x7f0000006e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006ec0)={&(0x7f0000006e80)={0x28, r15, 0x100, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r13}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x40000) syz_fuse_handle_req(r9, &(0x7f0000004cc0), 0x2000, &(0x7f0000006cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d80)=ANY=[@ANYBLOB="3000000000000000000000000000f900e1ffffff0000000000001f00000000000400000000000000232c2c3d00000000"], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x0, 0xe, 0x0, &(0x7f0000000500)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x2}, 0x50) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 24.269054518s ago: executing program 2 (id=781): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000060850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.268146857s ago: executing program 2 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f00000000c0)={0x3, 0x0, [{0x303, 0x0, 0xffffffffffffffff}, {0x127c91937a50e468, 0x0, 0x100000003}, {0xa11, 0x0, 0x66}]}) ioctl(0xffffffffffffffff, 0x3b8f, &(0x7f0000000180)="280000000600000001000000040000000000000000000fff0010") (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x5, 0x4c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x10, 0x22f0, 'bridge_slave_0\x00', 'pim6reg1\x00', 'macvlan1\x00', 'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0xff], @random="5af0e09b10c2", [0x17e, 0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x6, 0xb3f, 0x264, 0x0, 0x0, "ac74ae6605cca14f1ee3c0dff674d8d98e2f8c9884ad7f0b085be25071edb80543a2e6f95d26cfcc97afb6bd90da93465a6d155e656bb8f57afda6e5e4caa565"}}}}, {0x5, 0x40, 0x60, 'bridge_slave_0\x00', 'veth0_macvtap\x00', 'veth0_to_bridge\x00', 'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0xa8, 0xf8, [], [@common=@dnat={'dnat\x00', 0xfc, {{@local, 0x10}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffff, 'syz1\x00', {0x8}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x5, 0xfbfb, 'team0\x00', 'geneve1\x00', 'sit0\x00', 'xfrm0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xe8, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x1, 0x5, 0x2, 0x0, 0x0, "4113ddd2122ea0a620cb57fa6f9cf4ec9e155ac926be8e962dad86d20465c69c1eac1cdc948fc2cac4905ac8b98addb56dc09f0fb3c24ff6d3907c021f2a9dfa"}}}}, {0x3, 0x22, 0x6, 'syzkaller0\x00', 'syzkaller0\x00', 'bond_slave_1\x00', 'tunl0\x00', @remote, [0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x4b, 0x82, {0xe}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{0x5, 0x6, 0x1c, 'ip6tnl0\x00', 'wg1\x00', 'team0\x00', 'veth1\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"25efac4d21c32c459e294894b8cd981e21d7508f556c54e0c746905a02b5"}}}]}]}, 0x540) (async) setns(r4, 0x24020000) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000047c0)={0x0, 0x2000, 0xffff, 0x3231564e, 0x0, [0x2], [0x2000, 0x0, 0xc7], [0x7fffffff, 0x3, 0x0, 0x2], [0x43e, 0x0, 0x0, 0x200]}) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000048c0)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004940), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000004980)={0x0, 0x0, &(0x7f00000049c0)={&(0x7f0000004a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000340)="000102030405060708090a0b0c0d0e0f", 0x10) (async) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="0102030405060708090a0b0c0d0e0f1011", 0x11}, {&(0x7f0000000480)="3d587b180bd067afc99442e234ba1e", 0xf}], 0x2, 0x0, 0x0, 0x4000}, 0x44000) (async) clock_gettime(0x0, &(0x7f0000004640)={0x0, 0x0}) recvmmsg(r9, &(0x7f0000004480)=[{{&(0x7f0000000500)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000580)=""/162, 0xa2}], 0x1, &(0x7f0000000c40)=""/214, 0xd6}, 0x70}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/159, 0x9f}, {&(0x7f0000001e80)=""/217, 0xd9}, {&(0x7f0000001f80)=""/50, 0x32}], 0x4, &(0x7f0000002000)=""/96, 0x60}, 0x4}, {{&(0x7f0000002080)=@xdp, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002100)=""/66, 0x42}, {&(0x7f0000002180)=""/94, 0x5e}, {&(0x7f0000002200)=""/58, 0x3a}, {&(0x7f0000002240)=""/118, 0x76}, {&(0x7f00000022c0)=""/53, 0x35}, {&(0x7f0000002300)=""/163, 0xa3}], 0x6, &(0x7f0000002440)=""/173, 0xad}, 0x3}, {{&(0x7f0000002500)=@isdn, 0x80, &(0x7f0000002800)=[{&(0x7f0000002580)=""/192, 0xc0}, {&(0x7f0000002640)=""/109, 0x6d}, {&(0x7f00000026c0)=""/79, 0x4f}, {&(0x7f0000002740)=""/129, 0x81}], 0x4, &(0x7f0000002840)=""/28, 0x1c}, 0x45b85673}, {{&(0x7f0000002880)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002900)=""/62, 0x3e}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/206, 0xce}, {&(0x7f0000003a40)=""/224, 0xe0}, {&(0x7f0000003b40)}], 0x5, &(0x7f0000003c00)=""/181, 0xb5}, 0x81}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003cc0)=""/95, 0x5f}, {&(0x7f0000003d40)=""/120, 0x78}, {&(0x7f0000003dc0)=""/154, 0x9a}, {&(0x7f0000003e80)=""/50, 0x32}], 0x4, &(0x7f0000003f00)=""/193, 0xc1}, 0x27}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004000)=""/187, 0xbb}, {&(0x7f00000040c0)=""/68, 0x44}, {&(0x7f0000004140)=""/34, 0x22}, {&(0x7f0000004180)=""/143, 0x8f}, {&(0x7f0000004240)=""/166, 0xa6}, {&(0x7f0000004300)=""/242, 0xf2}], 0x6}, 0x3}], 0x7, 0x120, &(0x7f0000004680)={r10, r11+10000000}) (async) read$alg(r9, &(0x7f00000004c0)=""/37, 0x25) setresuid(0x0, 0xee00, 0xee01) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000001c0)={0x112845180, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r13, 0xc0d05604, &(0x7f00000046c0)={0x1, @sliced={0x9, [0x80, 0x7, 0x917f, 0x7, 0x4, 0xd0cf, 0x5, 0x2, 0x0, 0xf340, 0x1, 0x8, 0x8, 0x9, 0x9, 0xffff, 0x7, 0xb2c7, 0x4, 0x42, 0x5, 0xa, 0x107, 0x0, 0x6, 0xb9ac, 0x6, 0x8000, 0x9, 0xfff8, 0xd, 0x3d, 0x1ff, 0x800, 0x2, 0x4, 0x8000, 0x4, 0x5, 0x3, 0x8f8, 0x0, 0x5a68, 0x5, 0x6, 0x2, 0xc1ad, 0x6], 0x3}}) (async) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 23.280341843s ago: executing program 2 (id=787): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a010200000000000000000100fffe0900010073797a300014000000060a0104000000000000000001000000140000001100010000000000000000000000000a00"/104], 0x68}}, 0x0) (async) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/206, 0xce}], 0x1, 0x10000, 0x47d) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/console\x00', 0x1, 0x0) write$binfmt_aout(r3, &(0x7f0000000600)={{0x108, 0x5, 0x4, 0x3c6, 0xb6, 0x3, 0x118, 0x3ff}}, 0x20) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TESTDATA={0x21, 0x45, "1639055fa8ad864bf623ef81455dedde8e42407e5669c2cbd2f12dffa4"}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000084) (async) timer_create(0x4, &(0x7f0000000640)={0x0, 0x35, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000680)=0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000700)={{r5, r6+60000000}, {0x77359400}}, &(0x7f0000000740)) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080047000030000002000090e304ed797eae00069078ac1e0001ac1414118303d989", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907806af"], 0x0) (async) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 23.276881234s ago: executing program 2 (id=789): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x22) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@setneightbl={0x8c, 0x43, 0x0, 0x70bd2d, 0x25dfdbfb, {0x1c}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x5cc}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9c9d}, @NDTA_THRESH3={0x8, 0x4, 0x6}, @NDTA_THRESH3={0x8, 0x4, 0xfffffffc}, @NDTA_THRESH1={0x8, 0x2, 0x9}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x3}, @NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x4}, @NDTPA_IFINDEX={0x8, 0x1, r2}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x5be8}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0xc}]}, @NDTA_THRESH2={0x8, 0x3, 0x8}, @NDTA_THRESH1={0x8, 0x2, 0x82f}]}, 0x8c}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, r2, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044801}, 0x44) 23.20071439s ago: executing program 2 (id=791): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000500)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000540)={0x18, 0x0, {0x3, @empty, 'bridge0\x00'}}, 0x1e) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20028}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x24008084) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x4c}}, 0x884) 23.199309903s ago: executing program 2 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @remote, 0x1}, {0xa, 0x4e21, 0x9, @remote, 0x4}, r3}}, 0x48) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) chdir(&(0x7f0000000340)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000180), 0xd) r5 = syz_open_dev$ndb(&(0x7f00000007c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000800)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000000840), 0xa0d, 0x0, 0x0) setsockopt(r0, 0x5, 0xce1a, &(0x7f0000000500)="86799212f3e8d258f3c932dfceff32bbcdc7d54c672bf69851f6d5b0f94aa645c50b72229f6483e715e56a803d3dc1525f3bce923d5a15edcb2dfd37704841de74c00ed37f859705380b98ae8a0561da16ee3dd6574e976e80eca5f5e9ada22adf5f1fca79851d4cab962ef54a5d255c907b8544b52b342a5237475509f59079ef999ccc29bc6bee97f2b8d6fc599c3333a2a8a422ffd8ca02c1777ec0c3fa64b4084ce228731176371863d611c9394b429fc4bd85247d1356f4a99cba42d5b0173d9229ad9de4bcc297f44c75cde8c60a252a43275e1b40a15a8bc2835dbd7cb331317ea55df895fe", 0xe9) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000740)={0x80000001, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000780)={r7, 0x8}) 17.970385502s ago: executing program 7 (id=816): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c1) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0xfffd, @loopback}, {0x1, @random="b3a2a73bf317"}, 0x4a, {0x2, 0xfffc, @dev}, 'veth1_to_bridge\x00'}) (async) r2 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x1, @multicast}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}) (async) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f00000000c0)="4336fecc", 0x4}], 0x2) 17.969430924s ago: executing program 7 (id=817): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000001380)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000013c0)='hybla', 0x5) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001240), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000001640)={0x0, [[0x80000002, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffff9ff], [0x39a0, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff8, 0x5], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xe8e1, 0xffffffff, 0x2]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x1869f, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x5, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000000)={0x5, 0x8}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f00000012c0)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000001500)={0x5, 0x7, 0x1, 0x4, 0x401, 0x400000000000, 0x4, 0x9, 0x2, 0x7, 0x341, 0x5}) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000001280)={{0x1, 0x1, 0x18, r4, {0xb}}, './dev/mapper/control\x00'}) ioctl(r4, 0xc138fd10, &(0x7f0000001200)="0400000000000000000000007e01") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000015c0)=ANY=[@ANYRES16=0x0], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 17.895302499s ago: executing program 7 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000080)='qnx4\x00', 0x41404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) socket(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x8000, 0x1f7) fanotify_init(0x0, 0x80000) pipe2(&(0x7f0000000500), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000800)='L', 0x1, 0x7ffffffe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17.830828494s ago: executing program 7 (id=819): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000c0850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.826602342s ago: executing program 7 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,version=9p2000.u']) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) stat(&(0x7f0000000280)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x800) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000380)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f00000003c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0xf}, 0x1}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'netdevsim0\x00', &(0x7f0000000440)=@ethtool_link_settings={0x2a, 0x8, 0x4, 0x7, 0x7, 0xc0, 0x1, 0x3, 0x5, 0xdf, [0x80, 0x0, 0x32, 0x7, 0x0, 0xa0, 0x10, 0x5]}}) setreuid(0xee00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd700001000000090000003c0003800800030000000000140002007663616e300000000000000000000000080001000200000014000600ff010000000000000000000000000001c8342651c750f70b92700072999ff4485b84a471c754fdd1a571e069e79799bbb6f640c9d04777a5a35127638e20d876f0772802af13023fb568bbe8a121db513f80b370c2bb570c7a823084f5e3e94526c307a10861857fa79b92034cd027a15032"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) r5 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZe8z\xb0\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) 17.710376635s ago: executing program 7 (id=821): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x370, 0x2e8, 0x2e8, 0x370, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev={0xac, 0x14, 0x14, 0x8}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x2}, [0xffffffff], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001580)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x40, 0x19, 0xfe, r2}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000001340), 0x1ff, 0x0) (async, rerun: 32) r6 = syz_open_dev$dri(&(0x7f0000001380), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f00000013c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000001400)={&(0x7f0000001440)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000001480)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000014c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000001500)={0x0, 0x0, r9, r8, 0x0, 0x3, 0x0, 0x7fe, {0x5, 0x2, 0x8, 0x206a, 0x200, 0x2, 0x2, 0x5, 0x4cac, 0xe156, 0x2, 0x0, 0xfffffff7, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (async, rerun: 32) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000200)=0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000001200), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) (async) write$nci(r10, &(0x7f0000001300)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0xfe, 0x0, 0x1}}, 0x6) (async, rerun: 64) r14 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r16, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x8000080, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x4, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x3, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x4, 0x74db, 0x400000, 0x9, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x7, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x9, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0xaf, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0xc, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x2, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x8000004, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0xd, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) (async) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000001140)={0x2, 0xaff}, &(0x7f0000001180)=0x8) setsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r14, 0x84, 0x82, &(0x7f00000011c0)={r17}, 0x8) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (rerun: 64) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 32) 17.52940628s ago: executing program 5 (id=822): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000002140)=0xe) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002180), 0xc1101, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000021c0)=0x1) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000002200)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002240), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000002280)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f00000022c0)=0x1) syz_open_procfs$namespace(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='stack\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 17.528707326s ago: executing program 5 (id=823): ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x4000004) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000700)='THAWED\x00', 0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$overlay(0x0, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0), 0x1200000, &(0x7f0000001e00)) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e80)={0x6c, 0xc, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000003900), &(0x7f0000003940)=0x4) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000039c0), 0x12) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000003b00)={&(0x7f0000003a00)=[0x0, 0x0, 0x0], &(0x7f0000003a40)=[0x0], 0x0, 0x0, 0x3, 0x1}) socket(0x9, 0x5, 0x4) syz_80211_inject_frame(&(0x7f0000003d00)=@device_b, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x70, 0x1, 0x4, 0xd04, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xe4}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) 16.949938217s ago: executing program 5 (id=824): ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = eventfd2(0x6, 0x80000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x2, r1}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x800, 0x96f2, 0x8, 0x20000000000000, 0x6, 0x0, 0xb7, 0x7, 0x8, 0x10, 0x8, 0x4, 0x40, 0x2}}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000001100)={0x0, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f00000011c0)={0x188, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x141000, 0x111) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001440)={0x1, 0x4}, &(0x7f0000001480)=0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001500), r3) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0xa0, r6, 0x236, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x542}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb74}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x375}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000040}, 0x14000840) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000001680)) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000016c0)={0x1, r5}) readv(r5, &(0x7f0000001bc0)=[{&(0x7f0000001700)=""/80, 0x50}, {&(0x7f0000001780)=""/75, 0x4b}, {&(0x7f0000001800)=""/186, 0xba}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000001900)=""/166, 0xa6}, {&(0x7f00000019c0)=""/200, 0xc8}, {&(0x7f0000001ac0)=""/233, 0xe9}], 0x7) readv(r0, &(0x7f0000002cc0)=[{&(0x7f0000001c40)=""/73, 0x49}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000002d00)={@local}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002d40)={0xaa, 0x200}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002dc0), r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000002ec0)={'syztnl2\x00', &(0x7f0000002e00)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x1, 0x5, {{0x1b, 0x4, 0x1, 0x6, 0x6c, 0x66, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @loopback, {[@ssrr={0x89, 0x17, 0x10, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @broadcast]}, @timestamp_addr={0x44, 0xc, 0xdd, 0x1, 0x3, [{@private=0xa010102, 0x400}]}, @generic={0x89, 0x7, "c0114d3de8"}, @ra={0x94, 0x4}, @noop, @rr={0x7, 0x7, 0x7d, [@remote]}, @cipso={0x86, 0x9, 0x1, [{0x2, 0x3, "03"}]}, @rr={0x7, 0x17, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @private=0xa010102, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000003000)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f00)={0xa4, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x70, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "aa401d2469ea8998a9731f6225a017dd9ed091daf7eb367a594473a3bb67e5ae9115c8a05c096d401f"}, @ETHTOOL_A_BITSET_MASK={0x28, 0x5, "11ab4584f3d89c796efb24736d971e85f1bbd0ab8a83fd91c9dc7ba880c502505c2fd854"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x46}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x14}, 0x4004) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000003080)=@riscv64_sbi_sta={0x803000000a000000, &(0x7f0000003040)=0x2}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000030c0)) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1ce2) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x50, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x40005) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f0000003240)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f00000033c0)={&(0x7f0000003340)=[r9, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003380)=[0x5, 0x8, 0x1, 0x3], 0x5}) 16.949117185s ago: executing program 5 (id=826): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000280)=0x3, 0x4) (async, rerun: 64) sendmmsg(r5, &(0x7f00000002c0), 0x400000000000159, 0x40840) (async, rerun: 64) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async, rerun: 64) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0x1, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x40}]}) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000680)='./bus\x00', &(0x7f00000006c0), 0x40, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 32) chdir(&(0x7f0000000740)='./bus\x00') (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file2\x00', 0x143042, 0x80) (rerun: 32) pwritev2(r7, &(0x7f00000007c0)=[{&(0x7f0000000800)='\x00', 0x1}], 0x1, 0x10004, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r8, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={&(0x7f00000009c0)='./file2\x00', &(0x7f0000000a00)=[0x2], 0x0, 0x0, 0x1}}, 0x40) setns(0xc9, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x5, 0x0, 0x0, &(0x7f0000000b00)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x42}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000b80)) (async, rerun: 64) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000060000009500000000000000ed07b8b442314dca9417d323debe101e6356d5368ab4e5fb867be3ec543164cac527ed70e035b90284b03e7ceda0e018"], &(0x7f0000000600)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map, r10, 0x2f, 0x2034, r10}, 0x20) 15.9798985s ago: executing program 5 (id=828): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/fs/o2cb/logmask/TCP\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='off\n', 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write(r0, &(0x7f0000000100)='deny\n', 0x5) write(r0, &(0x7f0000000140)='allow\n', 0x6) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0) lseek(r3, 0x8002000000006, 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0xffffffffffffff72, 0x7, r3, 0x0, 0x0, 0x0, 0x4, 0x6644b, 0x20f313}) clock_getres(0x9, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000280)={0xc, r5}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f00000002c0)={0x30}) 15.678854321s ago: executing program 5 (id=829): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000180000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.611655784s ago: executing program 36 (id=829): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000180000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.418655612s ago: executing program 8 (id=830): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10002, 0xf, 0x3, 0x0, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x400000f5, 0x0, 0x10000003c04}]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x4004084, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000380), 0x5, 0x29fa01) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r6, 0x6f50, 0x28000000000) r7 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0xb) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r9, 0x0) keyctl$set_timeout(0xf, r7, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={r4, r10}) openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 13.290737227s ago: executing program 8 (id=833): newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x1000) (async) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000000c0)=@rnullb={'/dev/syzrnull', 0x0}, r1, &(0x7f0000000400)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000016c0)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000000000000000000d17e0000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000002885154084f1efd616b707a7e1311f077a"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 13.290355715s ago: executing program 8 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000a80)=ANY=[@ANYBLOB="120110030a4308083767010080910102030109022400018e0510070904fb0b0280d2d20009059f02400007000709050102"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000980)={0x18, &(0x7f00000009c0)={0x0, 0xe, 0x5, "0c9917e701"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000a40)=0x9) 10.220095804s ago: executing program 8 (id=853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe0881) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) shutdown(r3, 0x0) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x101) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x67c6, 0x0, 0x0) epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}], 0x2, 0xfffffffd, &(0x7f0000000200)={[0x4a]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x2000200b}) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0xe, 0x0, &(0x7f0000000e40)="3242703ecfd6570416cc88c91c0e", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.569669514s ago: executing program 37 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @remote, 0x1}, {0xa, 0x4e21, 0x9, @remote, 0x4}, r3}}, 0x48) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) chdir(&(0x7f0000000340)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000180), 0xd) r5 = syz_open_dev$ndb(&(0x7f00000007c0), 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r5, 0xab01, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000800)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000000840), 0xa0d, 0x0, 0x0) setsockopt(r0, 0x5, 0xce1a, &(0x7f0000000500)="86799212f3e8d258f3c932dfceff32bbcdc7d54c672bf69851f6d5b0f94aa645c50b72229f6483e715e56a803d3dc1525f3bce923d5a15edcb2dfd37704841de74c00ed37f859705380b98ae8a0561da16ee3dd6574e976e80eca5f5e9ada22adf5f1fca79851d4cab962ef54a5d255c907b8544b52b342a5237475509f59079ef999ccc29bc6bee97f2b8d6fc599c3333a2a8a422ffd8ca02c1777ec0c3fa64b4084ce228731176371863d611c9394b429fc4bd85247d1356f4a99cba42d5b0173d9229ad9de4bcc297f44c75cde8c60a252a43275e1b40a15a8bc2835dbd7cb331317ea55df895fe", 0xe9) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000740)={0x80000001, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000780)={r7, 0x8}) 7.358648334s ago: executing program 8 (id=859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3801000010000100feffffff000100006401010200000000000000000000000000000000000000000000000000000000000100064e2300270a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff0180ff000000000000000000000001000000000000000092010000000000000600000000000000ffff0000004000001d250800000000000180000000000000fbffffffffffffff0000000000000000070000000000000006000000000000001f00000000000000020000000000000001000000fcffffff000000002abd700004350000020000002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) 7.354978136s ago: executing program 8 (id=860): mkdir(&(0x7f0000000c40)='dir0\x00', 0x2ba) (async, rerun: 32) mount(0x0, &(0x7f0000000c80)='dir0\x00', &(0x7f0000000cc0)='tracefs\x00', 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x42, 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000e40)='./tracing\x00', &(0x7f0000000e80)='tracefs\x00', 0x0, 0x0) (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./tracing/uprobe_events\x00', 0x401, 0x0) (rerun: 64) write(r0, &(0x7f0000000f00)='p:s/p ./file0:0', 0xf) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='dir0/tracing_on\x00', 0x1, 0x0) write(r1, &(0x7f0000000d40)='0', 0x1) (async, rerun: 32) write$binfmt_format(r1, &(0x7f0000000d80)='1\x00', 0x2) (async, rerun: 32) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000f40), 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000f80)={&(0x7f0000000fc0)="e76732", 0x3}) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x85c, 0x30, 0x12f, 0x0, 0x3, {}, [{0x848, 0x1, [@m_police={0x844, 0x1, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x85c}}, 0x0) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000c00)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r5, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r7 = openat$kvm(0x0, &(0x7f0000000140), 0xa600, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x1}) (async) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0xdb35, 0x1005}}]}) 4.285174052s ago: executing program 9 (id=868): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x2603) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x9e, 0x1000, 0x0, 0x0}], 0x1}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x4480) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x2603) (async) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x9e, 0x1000, 0x0, 0x0}], 0x1}) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x4480) (async) 4.06024375s ago: executing program 9 (id=872): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000580), 0x3af4701e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x28012, r2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f00000005c0)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@deltaction={0x50, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x36}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x410e}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f00000003c0)={'wlan1\x00', @random="cd79f2886bad"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x60, 0x7, 0xc, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x20, 0x0, 0x101}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="537b08de923b6c695187d4c41b0238fefb50627b8df4ad955aafb2375408b2830902581e806b6912", @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB="877953a746e38ed556061139d586da41f11d02f6e0cfd4e01c748dc54f8ae564cfd070adc1de3cae21dab73edd0bcacbf31e141f150aea0de7635def2f15629eabd7335067c9f1dca45c6426327817ecbfcae6a64be2376e09a2e0b1f18cb3754e51b797c7847357b70d84388a15440c1a0fe4a3037fc1676ca12e8654314d80e74e6f013eaab7f852e54abaadb80fbbf6e7f3ffead8d5d19aaee465ff1347a3b031488d4d81245b9442b4f5964eecf75c5b95543d3ad849a53e4bbc1f1698b8b05904ab93ebf55e7e0eaf3dc3b4f031531520a08c603d52adea36c3cda05e6c54a7554d5e010471e3e39265de6b6b0d5ae3c1ecf8403d", @ANYRES8, @ANYBLOB="9608922d5eb2466484b8cf6c97293b137c11920b246a39549f1a6a67ceac41f1530cd6fd9b5218db64dc0f38caaa3a323fbbf14dcceac19e55ae006b2ac3ddf1a9784ab86d77f76f37e4bc55e88864ee5c1a39630c5becc752dfa4f4061605d4ea415c2f52833e30a962662baafad129b85b945999fc4116e7979e61b16e3cf8624bb2a120d678221e48c005bb0c54dae63ed47827746ab74a50b6f72e2ff65a1117620923e4ac80ba64dd5895795f4224ff9dc6e4524f545fa61b9a9411f1ec1d97a52153882ed5cdf05f0668129a5a097f9886cc862461b1de181b71a2bcb5903d7ecf76ca9e10681708482631a00ac79a94d9d5f2", @ANYBLOB="e3426a829658abe661fc25f4d6a951832b7d48a98aea14a611df4031076f45e71317c827e1c163ebc6675464bb4cc8ac8bd4a3fff6ffbdfa329e116a04a49faf28f81270c9a58a95ba48e5fa614471508c03091dadccdf4ac8f8b6227fb6454dad6ecf85ea7feb67afc180469b3042cd6419797ae157f7f1ed383dfe27635aa53727b5b6905fa0fa29085637d5aa62f09fd67b6c7c3a2f17776bc8ab0ae360857b37f01a1eaa00b11a8f3b4119510f14af77e86f451cb624f7beaeec5a52b6229a15cfe548efad93db9665"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r7, @fallback=0x1c}, 0x94) read(r8, &(0x7f0000000080)=""/253, 0xfd) 3.759161053s ago: executing program 9 (id=876): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000400)={0x0, 0x1, 0xffffffffffffffff}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000440)={0x8001, 0x9, 0xe}) r1 = syz_usb_connect(0x2, 0x1147, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x55, 0xd7, 0x58, 0x8, 0xbb4, 0xa94, 0xf456, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1135, 0x4, 0xaf, 0x4, 0x30, 0x8, "", [{{0x9, 0x4, 0x3a, 0xe, 0xe, 0xb0, 0x5a, 0xe8, 0x6, [@generic={0x100, 0x3, "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"}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'g'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x28}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5, 0x24, 0x15, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x81, 0x58}]}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0xb, 0x40, 0x3, [@generic={0x9e, 0xd, "1180fbecc8d862693822ef3a98b863317a4ac06d9e5d89c833c0ae9bfc3339945c9f3ea491377fee7f8f0fff66d0c6d37d41a3a1b65541ea18b0d67d2288087c165b83d19be4bf9129d43c992204f74259108605d47d2f082fe381097f32f18355bc15abaf2af04ad4b42bd829a6b42889f126e07364442b2a69aedd84d3c81416b4fd8fbb3984801012d0a9b5586c7ab9c5a7e1c0a147a3d6af9320"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x95, 0x2e, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x4, 0x33, 0x2, [@generic={0x56, 0x6, "2bf7307e819c0eb902868d7d6b8d772375723db618f0e0e7c9baa13f02db2e9b962d1646d0abe71ec0142147cf24680672aba51563ea5a53709d8a097cba4c3e40682486bbfbeb2a26f3fba2f142d7483da9a8b8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x6}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x3, 0xbd, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x3}]}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x1, 0xb, 0x0, [@generic={0x4, 0x10, "eda0"}, @generic={0x9b, 0xa, "1d475aabf4acc60808bae9d9f35e42dc4fcb5f33cd50931262b4743f4f6b2bc7ceaad9b6c865555d8a1236617658096d4a5f42a14254c32b994b4678c76cee7f538803e1ae34e71d4a18585479f6599cf17bfaad1732e2ff2e3c7abd8237a41a5f8c12836a33f65af856a9fbdd82ec61a3abf312c500aaa7a6729b3ab10a7927e4cab19172ba1c9ab65ea48851359cca6a3c314d0f15359279"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x0, 0x3, 0x1, [@generic={0xc0, 0x21, "aa5cd7bafb56ca68de095ca065766c4e42cfd7b4a51b2c5f3f49a2258a4d2e48a4e6adc759ae2c5995706a5360fdce78f080ee39cedbcdc2423f15529dde82d48d07c64e28e364251a905d4c66e5e3ede0264d976e64544c2bdcb473dfb78b5d77ff84a3883327247f8a0bf7f7483aeca59a20c3cf70f2f91487944c391e71a1c633f032928ded5b72134bf8ad30a65311ee5a870e362229389701ad33d5ba79b24cba9e3fe673528572a81f73c96009107f51e4341bb88f242e029852c8"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x40, 0x9, 0x94, [@generic={0xcb, 0x31, "79039eca7b6089a992320b676a38def00325bcee97285287daeaac225d4f28bd6b2d93117aea40a2c47a07bed9bc6bebafad2dc4a7d8221263a6b9310815b8b769bb04ee64cab553cf5fe199f180a127fc86b2429c9ea677318141f77c753e1bbb404a902a0a07e3be802abbaf589f7e46233e718739ddf257f66edffb9ae4ee535332c80ecbbb3367ac21b3e06338878f6c1b42f1f2f717382813b9a679025b91449c6a52f750f597797714048dd4411f9b7439984100459ad4de8fd32b7d7dd52c43c8b53b8fa452"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x4, 0x62, 0x9c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x4}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x0, 0xc, 0x1, [@generic={0x79, 0x22, "6e59b2498f7ffb82b76d988400fa1ccf312d3eb9205cdcdc768580e6bd861c7d22674a5e5d37c79ab4db56fc7352ea0479d03a81ddde66c1291017f153065c5673fa6422e5c2783274f7c86598a169d39f1e9ea3b688b23f953a261279c17e87a2c3a3e8f4881fc12fab14fb28fa2338f578bc153c1460"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x88, 0x3, 0x0, [@generic={0x81, 0x31, "efd27de8da1e7c2fe16ce76b4cf42778a8598aa0227f419906a4d7483330a2b3315c914aba856cc1236f6924b9ee9efcda19da39cd76677ea1b025ce5f4f5223272d284bfd615bced96d7bb4625377b0fe7468930c6795ca79790dc7c4f612305cc578b1a84a29b4ad83b9f99fcb3a5ae91f7506ab7b9064a4703bafeaee5b"}]}}, {{0x9, 0x5, 0x0, 0x1c, 0x3ff, 0x5, 0x80, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x6, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf3, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0xe, 0xf4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x1}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x0, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7}, @generic={0x32, 0x15, "8cc4c75c161b2839d2ed239342c2a262e43e62a169ad4c0b878dd1f4852ab7304847f73a1c1e240a4254a7e4b6af88b5"}]}}]}}, {{0x9, 0x4, 0x61, 0x0, 0x5, 0xed, 0x73, 0xb6, 0x5, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "fc14b2a37518"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x95, 0xa, 0xf3, 0xfd}, [@network_terminal={0x7, 0x24, 0xa, 0x1f, 0x8, 0x7, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x48df}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "243ec5"}, {0x5, 0x24, 0x0, 0xff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x6, 0x48}, {0x6, 0x24, 0x1a, 0x9, 0x3a}, [@obex={0x5, 0x24, 0x15, 0xf}]}], [{{0x9, 0x5, 0x0, 0x3, 0x400, 0x6c, 0x8, 0x1, [@generic={0xfc, 0x5, "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"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x7, 0x7, 0xfc, [@generic={0xe4, 0xb, "3cf06b0e8bcd79b70dfb33b5cef53e8ebd8ccf67b97b6e7634dc1919037f8e59bfc8219a2476ae1a917dcff51ce9188080d9c5d176da6279c8ebffe3b1a47f91efa3104a76b91c35efb7d43a38f08afd5a153e2e8b9ac09c450bbf1e13e7f8e08c6ffa188d45a28da3336dc1092b722c0a4e0b75acc9427fee1a8ba657fdc618f4ff4c8f93f793f14a3535a8f3ffde2445db1b40d494fb7a10984a1ff01e27196d09eda97b2ad0695ee2cf6f979f6baeab0997bdcbf5c730c1b859d4a90354ad110b5c23a5afab2ff3497e305bd09cb28f7832b582bc643b02a9429cd092bfc40ccc"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8}]}}, {{0x9, 0x5, 0xb, 0x84d05d359048636f, 0x20, 0x7, 0xee, 0xd, [@generic={0xb, 0x0, "ee01df12389cccbb4b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x7b7, 0x10, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x5}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x8, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x8}]}}]}}, {{0x9, 0x4, 0xc7, 0x9, 0xb, 0x1a, 0x13, 0xb9, 0xee, [@hid_hid={0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x18f}}], [{{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x6, 0xeb, [@generic={0x2e, 0x24, "9e2f11d7da73e5012e7612e20143a577885a22c7d54d253b9dea7d53406dcd0f7b9a074aea4d8ca892c09f47"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd0, 0x8}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x0, 0x7c, 0x40, [@generic={0x4a, 0x22, "2c65bceae69a7512d00c310350d2b6bf2a18eeb49721506ef23dc7a6d7875354a1bd0794642ba3444ca0e13e34e8f16cde0ab2ca0e1a5144a50e464e46f3c22a8515c459929a2381"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xfa, 0x14, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x2}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x81, 0x4, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x1ff}, @generic={0xba, 0x9, "532dfe0c873f825088767b5bf87e67048945037b09f8cbedfa05bd22ed4235afa533f21d8dc4063869f990ff8bc7f6f0585ac795a8dc60f5d605464018f5e0fc293b378766d8cd3c9e414b2966aea50cb926ab5eab2c8c40dcda82a58702831a7d5c7bca9a3e2f5f4f1ca5c0092a275164dc9be6d1cdfea2020cd18339beb3343d06b5a621b3742a58b356376599aca3f3861a888041ce21f324f431a1061f40e8de5f4b627b771326c98031fdb6c99b9f00fa7665db3599"}]}}, {{0x9, 0x5, 0x9, 0x5a370a1d76523e37, 0x10, 0x0, 0xff, 0x6, [@generic={0xde, 0x7, "e64f6e3e564837b9689e081d2a30bc1e5a6ccecc8549fd636ffe02b9318b37c5de83ee8dc06ec39e5e9422e91e8d30f9e4e3c75094a783fe42e8fc534135cba0dd198a095542776f4732f21cdacc319f7d467c0f090afdca6f8f070b1746a637080b999311e13ee4035955482393cdf3c975bff3f460e82b66536407b514c4b0bb9935999b3781bcfeeea6dcc256fb5585280aa4e8f200ce2f4e89383976f95c2665da187bd39a60413d89f1803ade5e71bb3ab369780b2f58374fd250ac694bb236e847b46c0814e24fdae641d0abae5059ed8becbab6fbae6b7d65"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x3, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x4, 0x9b, 0x38, [@generic={0x51, 0x21, "5b648ebe3e6a9a81fc36670ad6e9d62fa55a5b2f0fbafdf2d51181ec3f1ba9a4617f16d5da90ee7960ad1a0c41313064a03dc3b94885dd40eec750f9f9b8f997d66db23bf072e7e7f5cc3bc779387b"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x3}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x67, 0x7, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x8, 0x2, 0x10, [@generic={0xf9, 0x7, "6670a6fdc34702b2c887f4c3053caeb5c9be6f8c1dff15bfbdc3892a968c69b732f7b94730b98a792c75537ee6aaf32968c55989033308b9cfcb05348b28efdf70334968af6c0e5d5c23bcabc591fd256fdfb0e69e87a106c61920d55a3c0b71339b131b6a611a0845d5b02d93b18e1438c1e05db8b6f652c5a9cf3981cb6e7fd8a3f2ab0c73104d5c68b7fc5107f8e901cef5d674b63afe66d8cc9d2dc76f0e2bda4990380d8e5546d1cf3440d41d23de675996be6dde1595c4b62923c13efb5cd9fff382744951589482f3c82ad617da7895f5453eb248b831bc4b333e7cb44a099b5e7ea67c98bf1a961bc6c530d39ea94eaab280c6"}]}}]}}, {{0x9, 0x4, 0x62, 0x0, 0xb, 0xff, 0xff, 0xff, 0x51, [@hid_hid={0x9, 0x21, 0x10, 0x5, 0x1, {0x22, 0xfc2}}, @hid_hid={0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x22d}}], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0xff, 0xb, 0x3, [@generic={0xa7, 0xc, "fa6a4e5cfab8784eea11c23ffcc7203eafeacffc3914babbacf415322002f00875d3447a8cfec9f4603c20bef42689a7610c97b980163a712197439c951fcacf3993a2521360dfc637549b4ff20cdcc110e83c0772f889f67ec829cd1ea1b9facd71f07530b357aaf8b4cde1b943d9792046c5285767e77a87803a19edbad36d430a522c59607a66c689c15f8bc180062c803475652c1070721a13f0144650ee0a7ff7072a"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x7, 0xf7, 0x9, [@generic={0x8e, 0x10, "49d33e02521f1348ff09f4df679cdcb6b2b3c52bc5ef1b2b64a5d40bf50bd6278778fe1330e253b847ff9c40958b4526cd2b917cb8ba5a04f27bc5e12f6073d82a6a618fb01cb11f825f126137662d17a8804e5cfcdcdffb7374fa93c67d72eea4ad5c62d98d6a34ea27c36036f2f35c2596aac1282f43762d11cc45a90519e255e1ab4c012d272b5d504e18"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x1, 0x5, [@generic={0x5c, 0x21, "3a2c3fca15ffaa22d666522b73e62661cb20caabc24f7d61596468957f97d442fc7f6c044dd1a32c9b1e9c4d64a42922d4a634dc4e2b48ff2042e2226c411dd225653a07108cbc49c92e57f3d9de2735e7232b1d1c18cabeb509"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x18, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40, 0x3}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x3, 0x4c, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x92}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xa80}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x3, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xbbd}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x9}]}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x8, 0x2e, 0xf9, [@generic={0x59, 0xa, "e472a4b0030c67a90bbfca2c221ae7c51b8346e31ca11725527ede9fa918f6af032685f64c45ac003067f3a3c351af920dc799faa32a2d7e49767945257b93216b6989044730e700ef2081388e576b3ab1615894c04d06"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x9, 0x47, 0x9, [@generic={0x62, 0x27, "f5174ef07dfe9f6174e67a43025026d7eed3e581cd9ab767f7dfefebb4ccd95ff7a7c196790b1ae074b946c4c711f4ea49a7b1fae2fb78aaf18d1b816dbe0af19746b2fd26eeb4d14151b908a48e59549d9baed5d493bd1cbc487de50fc633c7"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x8, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x4}, @generic={0x6c, 0xb, "0302a55b443a435b60200b8dd18bdb9d96bf228b0fc200da8ac90a167c22783328641a6dd6f0cdc7d7d3aa8d1013b93fac8684b43434d2924d1d572aa5cfdfda832c3af52954fc9624e4fcb7045e614d0d8e677342216d9eba6d67d0616180231c0e02c0c118d117c55f"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8e, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xb, 0x92, 0x9, [@generic={0xe9, 0x6, "f5042d27ee87f5d4f48b00cc11700598a092490d1c6deac66f60822dde0a675adbdcbd6e2a075e635ba9d61b4fc2a86d567855fdbecfe2a4b061e35db2e38ad87f188b81c0517d8c343ae061e9602f36c3b39149142cc0ad5b5b61935816be1fc109ac432a7d235869cfdad4c57d24fe636391f5855ef0af92eb5e40f49cbf6f373fefc05326bd9fce521a7bd3db35cefcf3660884e64359d41474728960427dbe17626f28191ebf38303e0b8f4b5debdad6cd5eb1112c8b73e5ae7c95a47ed4802126d6545fefe07f0baa3382fa3b204bd3e526e87a86b2b396fae3c1b41fe6ade8272d6aa894"}]}}]}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x200, 0x9, 0x6, 0x4, 0x20}, 0x11c, &(0x7f0000001640)={0x5, 0xf, 0x11c, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x1, 0xf, 0x100, [0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "51f628dfce6ff66a8af33f82c5ad273c"}, @generic={0xc7, 0x10, 0xb, "0fe9ef5734b13ab5cbd495ec408b865b0b2117c871b1843ac95c1aae626be7bc6c03fa14572862fb128d5dd733fc405bce7f42a51aa566e4e4d6744d142a4c943b39dba2507e392d0e200cd2661e0879ebea879d5d97b040a81a800ee2c1d6fe25f106b0d88c2ad5a960a7c9a6df38d74f324673f609ee25f5b867817b2286b70f49a85186b696d817ef29c820487e02f098452431b5b40f66cab105603c6fb3b9f9fdcf83e5566df7e2682d053b2d4b247a048686e8daa98dad93c62a3c8657a2830ba5"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x5, 0x1e0f, 0xf0e, [0x3f0f, 0x3f, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x40, 0xff0f, 0x4, [0x3f, 0xff0000]}]}, 0x1, [{0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x38db}}]}) syz_usb_disconnect(r1) r2 = timerfd_create(0x6, 0x0) timerfd_gettime(r2, &(0x7f0000001800)) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000001880)={0x6, 0x18, '\x00', 0x1, &(0x7f0000001840)=[0x0, 0x0, 0x0]}) close_range(r2, r0, 0x2) io_setup(0x100, &(0x7f00000018c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001a00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_cancel(r3, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f0000001900)="4e495650bc2999bde260558435bd90d98f4e5cbe646461182b646268258701304b627e0c389b71a3716e48e510e96e7ed0edb43a69ba99edf6fefb78d5b70a33a69fcd3b01c4dba83c147c720195965c47bd84c1da409fc1cb7c04c9d0ef4a1160081403b4f7771e2bda05beb7d80f12a466c394636d6c5bfac626e13d41d4beb99e39e11073137ef01ef687fa25290f4db99cdd7c6ee488523dca86536cbeb5701d5971a32eaf930454442dfcd44ae72d9b581d8d0424674bd5c5bcc9cafb3e30d7980a005eb3dd9dcf26157dc08d", 0xcf, 0x400, 0x0, 0x2, r4}, &(0x7f0000001a80)) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001b00)={0x2, &(0x7f0000001ac0)=[{}, {}]}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r4, 0xc040564b, &(0x7f0000001b40)={0x80000000, 0x0, 0x3002, 0x5, 0x9378, {0x10001, 0x3}}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000001b80)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000001bc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000001c40)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r4, 0xc0386447, &(0x7f0000001c80)={{0x8, 0x6, &(0x7f0000001c00)=[{0xc, 0x0, 0x8}, {0x5}, {0xf8, 0x0, 0xc}, {0xff, 0x0, 0x6}, {0x5}, {0x8}]}, 0x9, 0x1, 0x9, 0x2, 0x0, 0x8, 0x302, 0x7fffffffffffffff, r5}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001d00), r4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xb0}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}]}, 0x34}}, 0x90) syz_usb_connect(0x5, 0x4c1, &(0x7f0000001e00)={{0x12, 0x1, 0x200, 0xb7, 0x3, 0x35, 0x20, 0xaf0, 0x8300, 0x6dfe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4af, 0x2, 0xb, 0x95, 0x0, 0x81, "", [{{0x9, 0x4, 0xc5, 0x5c, 0xa, 0xc7, 0xb4, 0xb7, 0x5, [], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0xbc, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xd}, @generic={0xb2, 0xe, "7c5ef9208cbe5008e6d166dd81b857d33e2517316ac77135a531ad62015535c539ffa68a1ceb5d970cf19df847c610ce558b55dba4ff72d459e6cadc8f19b0f3c2690ba326b39890d38dfc0d96545233e474a5788a0bc562617f13b071792f5cc33452c877bb2cbb7895dc28d806afc3c6c77168e1d896ee293b2d587e7be8ed2013b2758afee393be1c897d3d0dff49c722de59f46e2005a0bedfdc3b2158f2ce02a59e2cc41d801cef242a790cea7d"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x40, 0xb1, 0x7f, [@generic={0xdc, 0x21, "96224219f651a601917490129913506b005541271097ace4a2ffffdeb77601e2c56405b7dff582f1d88ce324381555b070c793384a8311ef93c0f3a46d7c4ed3dddcf4843c89e0604297e3ebc4e6b4fa307026309ef36e7176852e6c14c6667c4607606f3322ab861eed7455f627ff0570cbb577910f14c8bae67d3a93bded87cc8562289f0c23de5729fdcc673f52e115ed6391f285322e0269108bb6ab8f544b755763e19f724da52d40031d277d5a52eda8394b28d53735ad4364393a5e47d8ba25380068bedfd9940122ba7acfa4e326091030644c73edce"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xfc, 0xb, 0xd}}, {{0x9, 0x5, 0xe383dd76ca1926cc, 0x0, 0x200, 0x1, 0x1, 0x14, [@generic={0x57, 0x0, "2d071604505638ba0a6ec10f558c4a5e8afa22c4b54baec64aa59e897e7473491f8e9599b49ac05aae9e6b7c417f34e7d3fb28dd74a94da8fd2439dc901a10ac3208abb633cecbd841515ff6c21d5ab6cf34d1cfed"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x7f, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xbc5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x1, 0x9, 0x5, [@generic={0xac, 0xc, "eb3f43d9d3f7fdc90deb43e550798a334c3385511e0ce71ddc4eb79397833f8d2781c5b5469bf9d1e12905abc722d4a9a568d21830983085c63adaf26a35906fab600c897b991bc7ee930c932e2d213aa55820eb630adc2070ec077b4ba4fdf352b4f368b7850cba4af73a2eca6322376fb29f32c240b752c94f84782e4916f4f84b91cac7d5cf3e88f6e6ad9ec82ff1cb9b78597e988c6aa3914a1f8ea09e4ffeb5ae6ca3b324fc9d09"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x4b, 0xfb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2}, @generic={0x4d, 0xd, "a460d38de0d97358abf29714f4b6a88eac352a36b702f99bc14ecbfe8853b3f0401f3513eb17d6c86776f6f12fdba60ed0fe08a625c01367b4eb50da70a60ef086ae11a35d821e864b3aff"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x0, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfb, 0x5}, @generic={0xaf, 0x4, "2e95e01a7eec210e1e85abc45312118b7b084a673f83d335ceefa1e2cde55652b042c3991f005fcc5adcb6ff633b3f20b0d4644f0c3d2c02fb0545c09ee706cf8fa565335e0b14169968ba9341a1cec58f24519dc8406f5bdde02c13a159573115e9d1473549ea3fff5fcbd977af81826ba2b9ccc0b785d72a66ee58cb55fffd2e28b3aef560b2ea66b3b3014df6452fd73fc89ab01efae9208bb49d4e48c38280cffd9520f9d45daf6af6209a"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0x80, 0x5}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x1, 0x35, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x34, 0x1e, 0x2, 0x3a, 0x6d, 0x50, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "cc"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x4, 0xf6e, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xc, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xba5c, 0x5, 0x40, 0x1, 0xa}, @country_functional={0x8, 0x24, 0x7, 0x80, 0x89a, [0x0]}, @mdlm={0x15, 0x24, 0x12, 0x8d30}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x7f, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0x86, 0x8}]}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x81, 0x3, 0x36, 0xbb, "b966ee36"}]}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x81, 0x8, 0xfb}}, {{0x9, 0x5, 0x9, 0x1c, 0x8, 0x2, 0x1, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x3}]}}]}}]}}]}}, &(0x7f0000002480)={0xa, &(0x7f0000002300)={0xa, 0x6, 0x300, 0x5, 0xe4, 0x8, 0x18, 0x80}, 0x3c, &(0x7f0000002340)={0x5, 0xf, 0x3c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x8, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0xf6, 0x101, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x3, 0x8, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x9, 0x6}]}, 0x4, [{0x4, &(0x7f0000002380)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x415}}, {0xe, &(0x7f0000002440)=@string={0xe, 0x3, "9f4cc64b7285c87163a66b4c"}}]}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000002500), 0x20102, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r7, 0x40085875) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000002540)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000002580)={0x7fff, 0x4, 0x10, 0x1}) r8 = add_key$keyring(&(0x7f00000026c0), &(0x7f0000002700)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000025c0), &(0x7f0000002600)={'fscrypt:', @auto=[0x33, 0x36, 0x61, 0x33, 0x31, 0x37, 0x39, 0x61, 0x34, 0x36, 0x31, 0x64, 0x34, 0x65, 0x34, 0x31]}, &(0x7f0000002640)={0x0, "81f055bca0e23882acc42d54721eaf36aed2033f80d7ddff648b513118ad997e6eaaa293da1ec7957bf01f79ed6213ef35f75a4a67d8f0f98c95b22077cce15c", 0x27}, 0x48, r8) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000002840)={r0, &(0x7f0000002740)='l2tp\x00', 0x40000, &(0x7f0000002780)={@align=0x3, {0x5, 0x8, 0x3, 0x2}}, 0x80000001, &(0x7f00000027c0)={@_ha_fsid}, &(0x7f0000002800)=0xa}) syz_usb_connect(0x4, 0x481, &(0x7f0000002880)={{0x12, 0x1, 0x110, 0x81, 0x81, 0x3d, 0x10, 0xdb0, 0x3820, 0x2d01, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46f, 0x2, 0x6, 0xa, 0x30, 0xa, "", [{{0x9, 0x4, 0xaf, 0x4, 0x2, 0xe0, 0xc, 0x65, 0x8, [], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0xb, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0xffff}, @generic={0x60, 0xe, "64e6a7a989f72de21808291ac91176e7a06e1bc4304a260c8b50431a0d8cb078feaa61cc80b4d807c25980fc537e7bfd51c110dfa622138203877a7919d661a769d1715e6ed521adf470da97e9271b9adaf17d5108b18ed5e40fcae89ef2"}]}}, {{0x9, 0x5, 0x6, 0x13, 0x10, 0x2, 0x2, 0xf3, [@generic={0xa7, 0x878090a5c4a0e12, "b94968691b31a7edf3eb99cb697926f9ab0495289c49a83454673f3579b29d14cdeff3b71daec2461e058eadc8f4efaeadb3dc99e2068d2fe349bf14221d42093d922a410c76b7f8f1bb99679f694f56ba644c18797f94f0c5494764e3475f455265e8aae5a4871268ddeb9d6f676c54fffe65c87325395c15c9708c66b63197f388a01a39ef924219142ea7ad986e9cd47ce327d3d3c4df6aa123f0069c4c925f6c809bb7"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xaad}]}}]}}, {{0x9, 0x4, 0xb5, 0xd, 0x7, 0x78, 0x6a, 0xef, 0x4, [], [{{0x9, 0x5, 0xd, 0x0, 0x40, 0x4, 0x2, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x3, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x7, 0x8c, 0x23, [@generic={0x62, 0xe, "c0bbac311411abacd4f72252ed01c2352f31e6e2ce3ce87f33d55a3459a26ea25285e8e1c8dcf986081a937c4a0ca37557813516820fa2cc46c67bd7b025c5de7de2e46095ff9aa33c55d19ae442a4b326e1b8686a185bb861d9c387d511a1f9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x61b}]}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x8, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x8}, @generic={0xd8, 0x31, "7de4da17cacd208f8969e476e71f4d67811cd00e4beb6ff9e62a2cb247f75302650bdd45f89d4f8932804a7cd8bbc2a2715451b84f611cefb1fd356511ac04d615920688da8fd545d9192e2e0a4f52c57808076e7df0a437ee75903ffe9c162f6bcd26a605514f86192309271fe3e42925c762bbff9e986ec38bcb14fb6e39c459832b76703ce7730ad4e6f6b73b92453c06908b23188b96c85c713aba5028331b181d103e851506db9df5f22e0271a823f1d74cf78c5ed5bd700334985e1873f932e8ff082102a83ea6ce3557f45f130c9a004f8428"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x2, 0x40, 0x7f, [@generic={0xaf, 0x7, "c479a7de012c1e38bf1827ff9b19fa3edf346efbaedc588eae36b9aa1312534dfb953bf6093c6dd70cb2d45e36421d2b7e79fd2639e1e0bfeb2c9220050745d28c48f0c042ce308d952d064b24aac71c307884cce6109942d5d185502ab0c090ef644170daee5c554acb5be1292f90c39edaa416011da939e86de0290fd0d7e7722c89edf3df86ad0636e5b8f1a06a4ce1df09720bec4c87845f71ee6d2621b5919aad856aea39eaf40844fe09"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0xb, 0x80, 0xf4, [@generic={0xe2, 0x23, "f65cdc97493cd7a97948f5d577fad58c42e51297210ce0b83a7757eaf4352432da79543cd75ea4ab6b42ea91060b3a8a8d11d57d5cc74cce3df3752f9203966206e1bf952ac9f9c67baf9ba7a62d6e588bfe91ac4372eeeeb0c5ba1925392c153bb9baa0486a331f23eaac84841c5145d24c4a16371ade2fa4eca6a66ab23d579d43194736c0d9e2ed44000b8f4e9a07a022abba486c6f781741adc0728c5b4ae7437f767da3d97c31f5cf7c1f9db350a7dbb933eab8e4d272483bc3e4d94e0fcf37aa3b9bf764f67680dfe768e302e03226a1b38e7c3ec0eb9abd99082b760f"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x4c, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xe}]}}]}}]}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002d40)={0xa, 0x6, 0x110, 0x9, 0x6a, 0x1, 0x10, 0x7}, 0x10f, &(0x7f0000002d80)={0x5, 0xf, 0x10f, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x25}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x0, 0xf679}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x10, 0x80, 0xeb}, @generic={0xef, 0x10, 0x8, "e8b67bc9c821f3f554d4b4e5f6a8b06ecda2587f941092084c53efbf2aa4fe912b8427a77f9d6465b187bfa12c12a7f863b34ef49b2208f82603b82cfe51dbfefe09e219d2646bf4bb6671712ae3867853de77ff3aaf281b1839cfa8da5a8a106e2ae6e1a83e407df2acb10ea0f06ec98af349cd59ed3460a2b2fb269a1f814ffc0acb844c4a18138681db9590ea8c256cb320ec4f4d404ed169bdf41e332dc63645d6ca1c1a87f5f39f1bbdb66397fe962dadd71bf5e7dbd2cba22b36a1cf5ec196cbb698a500703607f85d65a786019e83964327a4e70442b10a2360d492b0f628565ce2a255e9c234fcae"}]}, 0x1, [{0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x441}}]}) 2.734602303s ago: executing program 38 (id=821): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x370, 0x2e8, 0x2e8, 0x370, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev={0xac, 0x14, 0x14, 0x8}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x2}, [0xffffffff], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001580)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x40, 0x19, 0xfe, r2}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000001340), 0x1ff, 0x0) (async, rerun: 32) r6 = syz_open_dev$dri(&(0x7f0000001380), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f00000013c0)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000001400)={&(0x7f0000001440)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000001480)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000014c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000001500)={0x0, 0x0, r9, r8, 0x0, 0x3, 0x0, 0x7fe, {0x5, 0x2, 0x8, 0x206a, 0x200, 0x2, 0x2, 0x5, 0x4cac, 0xe156, 0x2, 0x0, 0xfffffff7, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (async, rerun: 32) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000200)=0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000001200), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) (async) write$nci(r10, &(0x7f0000001300)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3, {0xfe, 0x0, 0x1}}, 0x6) (async, rerun: 64) r14 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r14, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r16, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x8000080, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x4, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x1, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x7, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x4, 0x2, 0x6, 0x6, 0xaa, 0xffffffff, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0x80e, 0x10001, 0x8, 0xa, 0x4, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x3, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x4, 0x74db, 0x400000, 0x9, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x4, 0x5, 0x7, 0x4, 0x3, 0x400, 0x7, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x82, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x9, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x806, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x200004, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0xaf, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0xc, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x2, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x8000004, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0xd, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) (async) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000001140)={0x2, 0xaff}, &(0x7f0000001180)=0x8) setsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r14, 0x84, 0x82, &(0x7f00000011c0)={r17}, 0x8) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (rerun: 64) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 32) 714.663801ms ago: executing program 9 (id=884): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffff9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r1], 0xb8}}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0xd, 0x1000, &(0x7f0000000fc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x19c00, 0x0, 0xfd7c, 0x10, &(0x7f0000001fc0)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) 650.527393ms ago: executing program 9 (id=885): r0 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000340)={0x0, 0x30b8, 0x8, 0x2, 0x158}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000480)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000540)=0x0) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = userfaultfd(0x80001) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004e014) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000a00)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000a40)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r7, 0x8010aa02, &(0x7f0000000ac0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x14, r8, 0x321, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048964}, 0x4000000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r5, &(0x7f0000000580)={0x0, 0xb7df, 0x10, 0x5, 0x255}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd33, 0x800, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x7, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000880)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x204, 0x63, 0x0, 0x0}}, 0x0) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8}]}]}}, 0x0, 0x2e}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r11, r12, 0x7, 0x0, @val=@tcx={@void, @value=r11}}, 0x1c) close(r13) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r13, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 509.677594ms ago: executing program 9 (id=886): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000500)={0x4000004}, 0x10) write(r1, &(0x7f0000000540)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)) unshare(0x2c020400) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) read(r2, &(0x7f0000000080)=""/209, 0xd1) (async) read(r2, &(0x7f0000000080)=""/209, 0xd1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000000)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) fsmount(r3, 0x1, 0x0) (async) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f0000000400)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/crypto\x00', 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/crypto\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) pread64(r7, &(0x7f0000000480)=""/128, 0x80, 0x9) r8 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0x0, 0x0, 0x0}) 320.254914ms ago: executing program 3 (id=878): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffff, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x9, 0x5f}) 270.022355ms ago: executing program 6 (id=890): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = syz_open_dev$dvb_demux(&(0x7f0000000480), 0x0, 0x1080) r3 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x1, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r4, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000b80)={{0xd, @broadcast, 0x4e21, 0x0, 'fo\x00', 0x17, 0xef6c, 0x76}, {@empty, 0x4e22, 0x0, 0x8, 0xe40f, 0x3}}, 0x44) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000800)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) readv(r3, &(0x7f0000000a80)=[{&(0x7f0000000ac0)=""/116, 0x74}, {0x0}], 0x2) ioctl$DVB_DEMUX_DMX_STOP(r2, 0x6f2a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000440)=ANY=[], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r7, &(0x7f0000000740)={0x2, 0x0, @loopback}, &(0x7f0000000780)=0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r8 = landlock_create_ruleset(&(0x7f0000000700)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r11, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) r12 = syz_open_dev$video(&(0x7f0000000180), 0x7f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000000000000000000100000085200000eabc020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_CROPCAP(r12, 0xc02c563a, &(0x7f0000000240)={0x1, {0x7, 0xfff, 0x200000e7, 0x1}, {0x0, 0x2, 0xffffffff, 0xeb}, {0xfdfb, 0x3}}) ioctl$VIDIOC_G_PRIORITY(r12, 0x80045643, 0x1) 269.30905ms ago: executing program 6 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000800) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000001050500000000000000000a00000599ebf62d4e00c5f2b58ebc469ca2c7"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 200.376886ms ago: executing program 6 (id=892): capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000007000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 200.101606ms ago: executing program 6 (id=893): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1ec) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x180) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000200)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x0) getdents(r1, 0x0, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x18d042, 0x15) (async) getdents64(r1, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x1, 0x7, 0xbf21, 0x10000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000, 0x4, 0x0, 0x0, @void, @value, @value=r0}, 0x50) (rerun: 64) 135.132804ms ago: executing program 3 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0), 0x800, 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x10) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000002c0)={{&(0x7f00005e3000/0x3000)=nil, 0x3000}, 0x1}) (async) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x101a41, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) 133.604714ms ago: executing program 6 (id=895): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="bfa2e9ffffffffff06020000f0ffffffb70375ce655dca46949f07d94328972d2600000c000000b7040000ffffffffb70500f30000000085000000550000001500020000000000000000000000000085007807560000009500000000001400"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$phonet_pipe(0x23, 0x805, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x88800, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000640)={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x4, 0x1, 0xfff8, 0x800, 0x4, 0x41320110}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x82, 0x2, r5, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000004c0)={0x28, 0x6, r5, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000580)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000600)={0x8, r6}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000140), &(0x7f0000000340)=r8}, 0x20) r9 = userfaultfd(0x80001) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) sendto$phonet(r1, 0x0, 0x0, 0x80, 0x0, 0x0) 588.644µs ago: executing program 6 (id=896): mkdir(&(0x7f0000000000)='./bus\x00', 0x40) setxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [{0x8, 0x4}], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00', &(0x7f00000002c0)=""/245, 0x71) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001d00000000000000100000001000000051618f86de1f81000100000000000000050000ec"], 0x0, 0x2a, 0x0, 0x1}, 0x28) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) 0s ago: executing program 3 (id=897): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') write$P9_RLCREATE(r0, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f00000001c0)='./file0\x00') mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1008000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1d7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000640)={0x0, 0x13, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file1/file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2241, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x1, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0xfb}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0xffff, @private1}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x5005}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r2, &(0x7f0000000500)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x8, 0x28, 0x67, 0x0, 0xf, 0x6, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfff8, 0x0, 0x9}}}}, 0x32) mount$bind(&(0x7f00000006c0)='.\x00', &(0x7f0000000840)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000880)='./bus\x00', &(0x7f00000008c0), 0x40, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000940)='./bus\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x60400) kernel console output (not intermixed with test programs): no=21149 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.060934][ T7980] erspan0: entered promiscuous mode [ 89.060944][ T7980] erspan0: entered allmulticast mode [ 89.065232][ T7980] netlink: 64 bytes leftover after parsing attributes in process `syz.4.500'. [ 89.095180][ T7988] netlink: 'syz.1.503': attribute type 11 has an invalid length. [ 89.095372][ T7987] netlink: 'syz.1.503': attribute type 11 has an invalid length. [ 89.096852][ T43] audit: type=1400 audit(1791969505.039:644): avc: denied { listen } for pid=7986 comm="syz.1.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.204539][ T8001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.252895][ T8005] xt_hashlimit: size too large, truncated to 1048576 [ 89.309658][ T43] audit: type=1400 audit(1791969505.259:645): avc: denied { read } for pid=8010 comm="syz.4.511" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.309877][ T43] audit: type=1400 audit(1791969505.259:646): avc: denied { open } for pid=8010 comm="syz.4.511" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.311189][ T43] audit: type=1400 audit(1791969505.259:647): avc: denied { ioctl } for pid=8010 comm="syz.4.511" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.477276][ T8014] netlink: 'syz.4.512': attribute type 2 has an invalid length. [ 89.492331][ T8014] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 89.492350][ T8014] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 89.493058][ T8014] i2c-slave-eeprom 0-0001: probe with driver i2c-slave-eeprom failed with error -22 [ 89.493776][ T8014] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 89.545634][ T8018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'. [ 89.551266][ T8016] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 89.599622][ T8020] xt_IDLETIMER: timeout value is zero [ 89.606528][ T8016] bond4: (slave veth3): Enslaving as an active interface with a down link [ 89.609186][ T8016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 89.715128][ T8026] netlink: 32 bytes leftover after parsing attributes in process `syz.4.517'. [ 89.715138][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 89.758432][ T8028] net_ratelimit: 88 callbacks suppressed [ 89.806942][ T8030] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 89.806961][ T8030] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 89.806984][ T8030] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 89.813710][ T8030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.819630][ T8030] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.866246][ T8031] smbdirect: ib_dev[s`z1] renamed to [s] [ 90.249600][ T8056] Can't find a SQUASHFS superblock on nullb0 [ 90.280256][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.716125][ T5816] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.876577][ T5816] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 90.877368][ T5816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.879110][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.879119][ T5816] usb 6-1: Product: syz [ 90.879127][ T5816] usb 6-1: Manufacturer: syz [ 90.879135][ T5816] usb 6-1: SerialNumber: syz [ 90.882468][ T8077] netlink: 'syz.4.536': attribute type 10 has an invalid length. [ 90.883332][ T5816] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 90.883425][ T5816] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 90.884084][ T5816] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 90.884124][ T5816] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 90.884163][ T5816] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 90.884202][ T5816] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 90.884263][ T5816] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 90.884306][ T5816] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 90.885289][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.886575][ T8077] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 90.887910][ T5816] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 90.901090][ T8077] bond0: (slave batadv0): Releasing backup interface [ 90.908685][ T8077] bridge_slave_0: left allmulticast mode [ 90.908696][ T8077] bridge_slave_0: left promiscuous mode [ 90.909584][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.913928][ T8077] bridge_slave_1: left allmulticast mode [ 90.913938][ T8077] bridge_slave_1: left promiscuous mode [ 90.914030][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.927822][ T8077] bond0: (slave bond_slave_0): Releasing backup interface [ 90.943015][ T8077] bond0: (slave bond_slave_1): Releasing backup interface [ 90.953493][ T8077] team0: Port device team_slave_0 removed [ 90.961112][ T8077] team0: Port device team_slave_1 removed [ 90.961576][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.961586][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.963210][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.963219][ T8077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.089325][ T8068] 0x000000000003-0x000000010001 : "" [ 91.089639][ T8068] FAULT_INJECTION: forcing a failure. [ 91.089639][ T8068] name failslab, interval 1, probability 0, space 0, times 0 [ 91.089665][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.1.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.089691][ T8068] Tainted: [L]=SOFTLOCKUP [ 91.089698][ T8068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.089711][ T8068] Call Trace: [ 91.089718][ T8068] [ 91.089727][ T8068] dump_stack_lvl+0x100/0x190 [ 91.089763][ T8068] should_fail_ex.cold+0x5/0xa [ 91.089792][ T8068] should_failslab+0xc2/0x120 [ 91.089832][ T8068] kmem_cache_alloc_noprof+0x92/0x6a0 [ 91.089860][ T8068] ? __kernfs_new_node+0xd2/0xa10 [ 91.089889][ T8068] __kernfs_new_node+0xd2/0xa10 [ 91.089912][ T8068] ? kernfs_add_one+0x611/0xaa0 [ 91.089936][ T8068] ? __pfx___kernfs_new_node+0x10/0x10 [ 91.089962][ T8068] ? lock_acquire+0x1d1/0x380 [ 91.090007][ T8068] ? kernfs_root+0x23/0x2a0 [ 91.090028][ T8068] ? find_held_lock+0x2b/0x80 [ 91.090055][ T8068] ? kernfs_root+0xee/0x2a0 [ 91.090072][ T8068] ? kernfs_root+0xee/0x2a0 [ 91.090097][ T8068] kernfs_new_node+0x117/0x150 [ 91.090123][ T8068] __kernfs_create_file+0x53/0x350 [ 91.090153][ T8068] sysfs_add_file_mode_ns+0x207/0x3c0 [ 91.090189][ T8068] sysfs_create_file_ns+0x145/0x1e0 [ 91.090219][ T8068] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 91.090248][ T8068] ? __pfx___up_read+0x10/0x10 [ 91.090272][ T8068] ? acpi_device_notify+0x464/0x500 [ 91.090299][ T8068] device_create_file+0xf2/0x1d0 [ 91.090326][ T8068] device_add+0x2cb/0x1970 [ 91.090348][ T8068] ? lockdep_init_map_type+0x5c/0x250 [ 91.090372][ T8068] ? __pfx_device_add+0x10/0x10 [ 91.090391][ T8068] ? lockdep_init_map_type+0x5c/0x250 [ 91.090415][ T8068] ? __init_waitqueue_head+0xca/0x150 [ 91.090455][ T8068] add_mtd_device+0x92b/0x1820 [ 91.090481][ T8068] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 91.090510][ T8068] ? __pfx_add_mtd_device+0x10/0x10 [ 91.090537][ T8068] mtd_add_partition+0x376/0x6a0 [ 91.090563][ T8068] ? __pfx_mtd_add_partition+0x10/0x10 [ 91.090584][ T8068] ? __might_fault+0xc5/0x140 [ 91.090603][ T8068] ? __might_fault+0xc5/0x140 [ 91.090633][ T8068] mtdchar_blkpg_ioctl+0x207/0x250 [ 91.090658][ T8068] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 91.090704][ T8068] mtdchar_ioctl+0x1670/0x1fd0 [ 91.090732][ T8068] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 91.090758][ T8068] ? lock_acquire+0x1d1/0x380 [ 91.090779][ T8068] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 91.090810][ T8068] ? rcu_is_watching+0x13/0xc0 [ 91.090838][ T8068] ? trace_contention_end+0x126/0x160 [ 91.090866][ T8068] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 91.090891][ T8068] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 91.090913][ T8068] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 91.090942][ T8068] ? __pfx___mutex_lock+0x10/0x10 [ 91.090971][ T8068] ? __fget_files+0x34/0x3d0 [ 91.091015][ T8068] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 91.091039][ T8068] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 91.091065][ T8068] __x64_sys_ioctl+0x18e/0x210 [ 91.091089][ T8068] do_syscall_64+0x123/0x790 [ 91.091118][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.091138][ T8068] RIP: 0033:0x7fc3a9d9e2d9 [ 91.091154][ T8068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.091172][ T8068] RSP: 002b:00007fc3aacf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.091191][ T8068] RAX: ffffffffffffffda RBX: 00007fc3aa025fa0 RCX: 00007fc3a9d9e2d9 [ 91.091205][ T8068] RDX: 00002000000001c0 RSI: 0000000000001269 RDI: 0000000000000009 [ 91.091217][ T8068] RBP: 00007fc3a9e35888 R08: 0000000000000000 R09: 0000000000000000 [ 91.091230][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.091241][ T8068] R13: 00007fc3aa026038 R14: 00007fc3aa025fa0 R15: 00007ffed733fb48 [ 91.091269][ T8068] [ 91.129029][ T8093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.302301][ T10] usb 6-1: USB disconnect, device number 5 [ 91.304757][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 91.307629][ T10] keyspan 6-1:1.0: device disconnected [ 91.677378][ T8099] syzkaller0: entered promiscuous mode [ 91.677393][ T8099] syzkaller0: entered allmulticast mode [ 91.834677][ T8105] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 91.834684][ T8105] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 91.834830][ T8105] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.854231][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 91.900910][ T5086] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 92.455093][ T8118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.872657][ T8122] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 92.873712][ T8122] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 92.925051][ T8124] FAULT_INJECTION: forcing a failure. [ 92.925051][ T8124] name failslab, interval 1, probability 0, space 0, times 0 [ 92.925077][ T8124] CPU: 2 UID: 0 PID: 8124 Comm: syz.1.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.925106][ T8124] Tainted: [L]=SOFTLOCKUP [ 92.925113][ T8124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.925126][ T8124] Call Trace: [ 92.925139][ T8124] [ 92.925148][ T8124] dump_stack_lvl+0x100/0x190 [ 92.925179][ T8124] should_fail_ex.cold+0x5/0xa [ 92.925209][ T8124] should_failslab+0xc2/0x120 [ 92.925266][ T8124] kmem_cache_alloc_noprof+0x92/0x6a0 [ 92.925294][ T8124] ? __lock_acquire+0x5c0/0x1f40 [ 92.925318][ T8124] ? __kernfs_new_node+0xd2/0xa10 [ 92.925347][ T8124] __kernfs_new_node+0xd2/0xa10 [ 92.925370][ T8124] ? lock_acquire+0x1d1/0x380 [ 92.925396][ T8124] ? __pfx___kernfs_new_node+0x10/0x10 [ 92.925421][ T8124] ? lock_acquire+0x1d1/0x380 [ 92.925442][ T8124] ? kernfs_root+0x23/0x2a0 [ 92.925461][ T8124] ? find_held_lock+0x2b/0x80 [ 92.925489][ T8124] ? kernfs_root+0xee/0x2a0 [ 92.925506][ T8124] ? kernfs_root+0xee/0x2a0 [ 92.925532][ T8124] kernfs_create_dir_ns+0xa6/0x2b0 [ 92.925560][ T8124] sysfs_create_dir_ns+0x13a/0x2b0 [ 92.925592][ T8124] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 92.925622][ T8124] ? find_held_lock+0x2b/0x80 [ 92.925649][ T8124] ? kobject_add_internal+0x25f/0x930 [ 92.925670][ T8124] ? kobject_add_internal+0x25f/0x930 [ 92.925697][ T8124] kobject_add_internal+0x2c8/0x930 [ 92.925723][ T8124] kobject_init_and_add+0x121/0x180 [ 92.925745][ T8124] ? __pfx_kobject_init_and_add+0x10/0x10 [ 92.925770][ T8124] ? __kasan_kmalloc+0xaa/0xb0 [ 92.925805][ T8124] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 92.925829][ T8124] ? nfs_netns_sysfs_setup+0x55/0x200 [ 92.925858][ T8124] nfs_netns_sysfs_setup+0x12a/0x200 [ 92.925882][ T8124] nfs_net_init+0x10a/0x340 [ 92.925905][ T8124] ? __pfx_nfs_net_init+0x10/0x10 [ 92.925926][ T8124] ops_init+0x1e2/0x5f0 [ 92.925951][ T8124] setup_net+0x118/0x3a0 [ 92.925972][ T8124] ? __pfx_setup_net+0x10/0x10 [ 92.926017][ T8124] copy_net_ns+0x345/0x7a0 [ 92.926044][ T8124] create_new_namespaces+0x3ea/0xac0 [ 92.926079][ T8124] unshare_nsproxy_namespaces+0xf2/0x220 [ 92.926105][ T8124] ksys_unshare+0x4a2/0xb30 [ 92.926130][ T8124] ? __pfx_ksys_unshare+0x10/0x10 [ 92.926166][ T8124] __x64_sys_unshare+0x31/0x40 [ 92.926190][ T8124] do_syscall_64+0x123/0x790 [ 92.926223][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.926243][ T8124] RIP: 0033:0x7fc3a9d9e2d9 [ 92.926261][ T8124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.926278][ T8124] RSP: 002b:00007fc3aacf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 92.926298][ T8124] RAX: ffffffffffffffda RBX: 00007fc3aa025fa0 RCX: 00007fc3a9d9e2d9 [ 92.926312][ T8124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 92.926325][ T8124] RBP: 00007fc3a9e35888 R08: 0000000000000000 R09: 0000000000000000 [ 92.926338][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.926350][ T8124] R13: 00007fc3aa026038 R14: 00007fc3aa025fa0 R15: 00007ffed733fb48 [ 92.926379][ T8124] [ 92.927960][ T8124] kobject: kobject_add_internal failed for nfs_client (error: -12 parent: net) [ 93.180862][ T43] audit: type=1400 audit(1791969509.119:648): avc: denied { connect } for pid=8140 comm="syz.1.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.221826][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 93.262343][ T8152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.358158][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 93.358186][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 93.829480][ T8187] veth1_macvtap: left promiscuous mode [ 94.381816][ T5737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.387959][ T5737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.388833][ T5737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.389775][ T5737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.390372][ T5737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.537982][ T8213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.766119][ C3] net_ratelimit: 173 callbacks suppressed [ 94.992173][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.992214][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.992290][ T8193] bridge_slave_0: entered allmulticast mode [ 94.993107][ T8193] bridge_slave_0: entered promiscuous mode [ 94.995671][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.995781][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.996240][ T8193] bridge_slave_1: entered allmulticast mode [ 94.997822][ T8193] bridge_slave_1: entered promiscuous mode [ 95.034016][ T8193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.035840][ T8193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.248091][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.356694][ T8193] team0: Port device team_slave_0 added [ 95.358715][ T8193] team0: Port device team_slave_1 added [ 95.393076][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.393083][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.393095][ T8193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.398394][ T8193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.398404][ T8193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.398425][ T8193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.440173][ T8193] hsr_slave_0: entered promiscuous mode [ 95.441067][ T8193] hsr_slave_1: entered promiscuous mode [ 95.441511][ T8193] debugfs: 'hsr0' already exists in 'hsr' [ 95.441521][ T8193] Cannot create hsr debugfs directory [ 95.495514][ T43] audit: type=1400 audit(1791969511.439:649): avc: denied { remount } for pid=8235 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 95.553840][ T8243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.554130][ T8243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.554372][ T43] audit: type=1400 audit(1791969511.499:650): avc: denied { mounton } for pid=8246 comm="syz.4.581" path="/152/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 95.604157][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.655425][ T8193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.659920][ T8193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.660456][ T8193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 95.665396][ T8193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.665886][ T8193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 95.672709][ T8193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.673441][ T8193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.680455][ T8193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.692779][ T8193] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.692825][ T8193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.692962][ T8193] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.693005][ T8193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.732499][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.739418][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.739929][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.743762][ T8193] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.751091][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.751145][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.754384][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.754423][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.017139][ T8193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.192847][ T8273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.356210][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.356334][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.356434][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.361453][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.447970][ T5086] Bluetooth: hci4: command tx timeout [ 96.474034][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 96.501723][ T8193] veth0_vlan: entered promiscuous mode [ 96.505545][ T8193] veth1_vlan: entered promiscuous mode [ 96.519933][ T8193] veth0_macvtap: entered promiscuous mode [ 96.522200][ T8193] veth1_macvtap: entered promiscuous mode [ 96.546766][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.550760][ T8193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.614442][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.614456][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.649825][ T6554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.649839][ T6554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.666742][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.666778][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.666805][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.666831][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.687244][ T8299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.899289][ T43] audit: type=1400 audit(1791969512.849:651): avc: denied { getopt } for pid=8314 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.961764][ T43] audit: type=1400 audit(1791969512.909:652): avc: denied { write } for pid=8323 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.014271][ T8328] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 97.014279][ T8328] overlayfs: missing 'lowerdir' [ 97.233573][ T43] audit: type=1400 audit(1791969513.179:653): avc: denied { accept } for pid=8338 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.250082][ T8341] netlink: 'syz.5.604': attribute type 28 has an invalid length. [ 97.250095][ T8341] netlink: 'syz.5.604': attribute type 3 has an invalid length. [ 97.250102][ T8341] netlink: 132 bytes leftover after parsing attributes in process `syz.5.604'. [ 97.322435][ T8350] FAULT_INJECTION: forcing a failure. [ 97.322435][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 97.322462][ T8350] CPU: 2 UID: 0 PID: 8350 Comm: syz.5.607 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.322481][ T8350] Tainted: [L]=SOFTLOCKUP [ 97.322486][ T8350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.322492][ T8350] Call Trace: [ 97.322497][ T8350] [ 97.322502][ T8350] dump_stack_lvl+0x100/0x190 [ 97.322522][ T8350] should_fail_ex.cold+0x5/0xa [ 97.322539][ T8350] should_failslab+0xc2/0x120 [ 97.322556][ T8350] kmem_cache_alloc_noprof+0x92/0x6a0 [ 97.322571][ T8350] ? kvm_arch_vcpu_create+0x491/0xab0 [ 97.322588][ T8350] kvm_arch_vcpu_create+0x491/0xab0 [ 97.322604][ T8350] kvm_vm_ioctl+0x1c2d/0x4170 [ 97.322624][ T8350] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 97.322646][ T8350] ? kasan_quarantine_put+0x104/0x240 [ 97.322660][ T8350] ? lockdep_hardirqs_on+0x7d/0x110 [ 97.322677][ T8350] ? find_held_lock+0x2b/0x80 [ 97.322694][ T8350] ? tomoyo_path_number_perm+0x28f/0x580 [ 97.322709][ T8350] ? tomoyo_path_number_perm+0x28f/0x580 [ 97.322727][ T8350] ? tomoyo_path_number_perm+0x188/0x580 [ 97.322742][ T8350] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.322759][ T8350] ? __pfx_futex_wait+0x10/0x10 [ 97.322773][ T8350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.322789][ T8350] ? do_vfs_ioctl+0x226/0x13e0 [ 97.322802][ T8350] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 97.322815][ T8350] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 97.322833][ T8350] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 97.322854][ T8350] ? __fget_files+0x34/0x3d0 [ 97.322876][ T8350] ? selinux_file_ioctl+0x13b/0x290 [ 97.322891][ T8350] ? selinux_file_ioctl+0xb6/0x290 [ 97.322908][ T8350] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 97.322935][ T8350] __x64_sys_ioctl+0x18e/0x210 [ 97.322950][ T8350] do_syscall_64+0x123/0x790 [ 97.322968][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.322980][ T8350] RIP: 0033:0x7fd87179e2d9 [ 97.322990][ T8350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.323001][ T8350] RSP: 002b:00007fd8725a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.323012][ T8350] RAX: ffffffffffffffda RBX: 00007fd871a26090 RCX: 00007fd87179e2d9 [ 97.323019][ T8350] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 97.323026][ T8350] RBP: 00007fd871835888 R08: 0000000000000000 R09: 0000000000000000 [ 97.323033][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.323040][ T8350] R13: 00007fd871a26128 R14: 00007fd871a26090 R15: 00007fffc8808ed8 [ 97.323054][ T8350] [ 97.324004][ T8350] kvm: failed to allocate vcpu's emulator [ 97.332205][ T43] audit: type=1400 audit(1791969513.279:654): avc: denied { create } for pid=8348 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 97.631895][ T43] audit: type=1400 audit(1791969513.579:655): avc: denied { mounton } for pid=8367 comm="syz.4.610" path="/syzcgroup/cpu/syz4/memory.limit_in_bytes" dev="cgroup" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 97.636761][ T1349] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 97.798587][ T1349] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.801319][ T1349] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.804304][ T1349] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.804314][ T1349] usb 10-1: Product: syz [ 97.804322][ T1349] usb 10-1: Manufacturer: syz [ 97.804329][ T1349] usb 10-1: SerialNumber: syz [ 97.851377][ T8381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.015610][ T1349] cdc_ether 10-1:1.0: skipping garbage [ 98.017994][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.020972][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.024348][ T1349] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 98.032326][ T1349] usb 10-1: USB disconnect, device number 2 [ 98.365125][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.366968][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.393041][ T43] audit: type=1400 audit(1791969514.339:656): avc: denied { mounton } for pid=8396 comm="syz.1.612" path="/172/file0" dev="tmpfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 98.393124][ T8397] fuse: Bad value for 'rootmode' [ 98.434615][ T8400] xt_l2tp: v2 tid > 0xffff: 4294967294 [ 98.444734][ T43] audit: type=1400 audit(1791969514.389:657): avc: denied { write } for pid=8402 comm="syz.1.614" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 98.446175][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 98.446356][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 98.446519][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 98.446668][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 98.446825][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 98.446982][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 98.447314][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 98.447562][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 98.453800][ T43] audit: type=1400 audit(1791969514.399:658): avc: denied { mount } for pid=8402 comm="syz.1.614" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 98.526207][ T5086] Bluetooth: hci4: command tx timeout [ 98.576444][ T1349] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 98.584426][ T8409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.664973][ T8415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.358056][ T43] audit: type=1400 audit(1791969515.309:659): avc: denied { read append } for pid=8440 comm="syz.2.628" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.358094][ T43] audit: type=1400 audit(1791969515.309:660): avc: denied { open } for pid=8440 comm="syz.2.628" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 99.368282][ T8447] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 99.369950][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.371754][ T8447] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.378995][ T8451] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 99.409129][ T8441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.409386][ T8441] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.409616][ T8441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.409844][ T8441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.409933][ T8441] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.419661][ T8441] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 99.521264][ T43] audit: type=1400 audit(1791969515.469:661): avc: denied { write } for pid=8456 comm="syz.1.632" name="/" dev="9p" ino=71827675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.521309][ T43] audit: type=1400 audit(1791969515.469:662): avc: denied { create } for pid=8456 comm="syz.1.632" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.529473][ T43] audit: type=1400 audit(1791969515.479:663): avc: denied { write } for pid=8456 comm="syz.1.632" name="/" dev="9p" ino=71827675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.529678][ T43] audit: type=1400 audit(1791969515.479:664): avc: denied { write } for pid=8456 comm="syz.1.632" name="/" dev="9p" ino=71827675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.529914][ T43] audit: type=1400 audit(1791969515.479:665): avc: denied { rename } for pid=8456 comm="syz.1.632" name="file7" dev="9p" ino=71827921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.550134][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.806112][ C1] net_ratelimit: 304 callbacks suppressed [ 99.891479][ T6554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.081850][ T8462] overlay: Bad value for 'upperdir' [ 100.151012][ T8441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.201358][ T8468] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 100.202574][ T8468] netlink: 'syz.2.635': attribute type 2 has an invalid length. [ 100.203114][ T8468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=8468 comm=syz.2.635 [ 100.462069][ T8493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.462780][ T8492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.464727][ T8490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.597992][ T8503] batman_adv: batadv0: Adding interface: syzkaller0 [ 100.597999][ T8503] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.598016][ T8503] batman_adv: batadv0: Interface activated: syzkaller0 [ 100.600607][ T8506] netlink: 'syz.1.648': attribute type 1 has an invalid length. [ 100.632863][ T8506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.645106][ T8506] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 101.106307][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.106331][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.106349][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.106367][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.407337][ T8502] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 101.434470][ T8502] batman_adv: batadv0: Removing interface: syzkaller0 [ 101.486180][ T5729] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.486227][ T5729] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.486259][ T5729] Bluetooth: hci4: command 0x0419 tx timeout [ 101.489526][ T5737] Bluetooth: hci0: command 0x0405 tx timeout [ 101.489628][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.543519][ T8538] __nla_validate_parse: 28 callbacks suppressed [ 101.543537][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 103.566163][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.566161][ T5729] Bluetooth: hci4: command 0x0419 tx timeout [ 104.183072][ T8530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.278429][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 104.278439][ T43] audit: type=1400 audit(1791969520.229:680): avc: denied { mounton } for pid=8564 comm="syz.2.666" path="/159/proc" dev="tmpfs" ino=896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 104.402316][ T8570] Format for adding new port is "id [perm_addr]" (uint MAC). [ 104.425604][ T8573] netlink: 112 bytes leftover after parsing attributes in process `syz.5.664'. [ 104.595213][ T8588] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.600801][ T43] audit: type=1400 audit(1791969520.549:681): avc: denied { connect } for pid=8587 comm="syz.5.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.616363][ T8591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 104.651721][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.664790][ T43] audit: type=1400 audit(1791969520.609:682): avc: denied { mount } for pid=8597 comm="syz.2.674" name="/" dev="autofs" ino=25881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 104.677183][ T8598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.674'. [ 104.702558][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 104.702570][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 105.016203][ C1] net_ratelimit: 138 callbacks suppressed [ 105.016932][ T6544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.017570][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.400635][ T8610] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 105.400841][ T8610] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 105.401143][ T8610] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 105.410684][ T8611] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 105.412574][ T43] audit: type=1400 audit(1791969521.359:683): avc: denied { bind } for pid=8612 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.414330][ T43] audit: type=1400 audit(1791969521.359:684): avc: denied { listen } for pid=8612 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.438258][ T43] audit: type=1400 audit(1791969521.389:685): avc: denied { accept } for pid=8619 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.438303][ T43] audit: type=1400 audit(1791969521.389:686): avc: denied { write } for pid=8619 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.467065][ T8623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.526525][ T8625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'. [ 105.646148][ T5729] Bluetooth: hci4: command 0x0419 tx timeout [ 106.003940][ T8632] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 106.015026][ T8633] netlink: 56 bytes leftover after parsing attributes in process `syz.2.687'. [ 106.019843][ T8633] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.076607][ T43] audit: type=1400 audit(1791969522.019:687): avc: denied { write } for pid=8638 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 106.240729][ T43] audit: type=1400 audit(1791969522.189:688): avc: denied { setopt } for pid=8649 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.296953][ T43] audit: type=1400 audit(1791969522.239:689): avc: denied { mounton } for pid=8653 comm="syz.5.692" path="/27/config" dev="configfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.644084][ T8675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.007773][ T8686] nvme nvme0: rdma_resolve_addr failed (-19). [ 107.149817][ T8698] tmpfs: Unknown parameter 'usrquota_' [ 107.301105][ T8707] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 107.301123][ T8707] CPU: 3 UID: 0 PID: 8707 Comm: syz.2.706 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.301152][ T8707] Tainted: [L]=SOFTLOCKUP [ 107.301159][ T8707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.301206][ T8707] Call Trace: [ 107.301214][ T8707] [ 107.301224][ T8707] dump_stack_lvl+0x100/0x190 [ 107.301270][ T8707] sysfs_warn_dup.cold+0x1c/0x28 [ 107.301303][ T8707] sysfs_create_dir_ns+0x24b/0x2b0 [ 107.301339][ T8707] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.301374][ T8707] ? find_held_lock+0x2b/0x80 [ 107.301404][ T8707] ? kobject_add_internal+0x25f/0x930 [ 107.301430][ T8707] ? kobject_add_internal+0x25f/0x930 [ 107.301453][ T8707] ? class_dir_child_ns_type+0xd/0x60 [ 107.301478][ T8707] kobject_add_internal+0x2c8/0x930 [ 107.301505][ T8707] kobject_add+0x16a/0x1e0 [ 107.301525][ T8707] ? __pfx_kobject_add+0x10/0x10 [ 107.301546][ T8707] ? get_device_parent+0x1b3/0x4c0 [ 107.301578][ T8707] ? kobject_put+0xb9/0x640 [ 107.301604][ T8707] device_add+0x294/0x1970 [ 107.301626][ T8707] ? lockdep_init_map_type+0x5c/0x250 [ 107.301649][ T8707] ? __pfx_device_add+0x10/0x10 [ 107.301668][ T8707] ? lockdep_init_map_type+0x5c/0x250 [ 107.301692][ T8707] ? __init_waitqueue_head+0xca/0x150 [ 107.301724][ T8707] tty_register_device_attr+0x388/0x810 [ 107.301756][ T8707] ? lockdep_init_map_type+0x5c/0x250 [ 107.301780][ T8707] ? __pfx_tty_register_device_attr+0x10/0x10 [ 107.301816][ T8707] ? tty_port_init+0x156/0x1c0 [ 107.301848][ T8707] gsm_activate_mux+0x155/0x2a0 [ 107.301879][ T8707] gsmld_ioctl+0xbbc/0x15c0 [ 107.301906][ T8707] ? kasan_quarantine_put+0x104/0x240 [ 107.301932][ T8707] ? __pfx_gsmld_ioctl+0x10/0x10 [ 107.301974][ T8707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.301999][ T8707] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 107.302028][ T8707] ? __pfx_gsmld_ioctl+0x10/0x10 [ 107.302048][ T8707] tty_ioctl+0x12f0/0x1800 [ 107.302078][ T8707] ? __pfx_tty_ioctl+0x10/0x10 [ 107.302105][ T8707] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 107.302136][ T8707] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 107.302168][ T8707] ? __fget_files+0x34/0x3d0 [ 107.302208][ T8707] ? selinux_file_ioctl+0x13b/0x290 [ 107.302234][ T8707] ? selinux_file_ioctl+0xb6/0x290 [ 107.302263][ T8707] ? __pfx_tty_ioctl+0x10/0x10 [ 107.302293][ T8707] __x64_sys_ioctl+0x18e/0x210 [ 107.302319][ T8707] do_syscall_64+0x123/0x790 [ 107.302354][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.302376][ T8707] RIP: 0033:0x7f3be259e2d9 [ 107.302394][ T8707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.302413][ T8707] RSP: 002b:00007f3be3463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.302434][ T8707] RAX: ffffffffffffffda RBX: 00007f3be2826090 RCX: 00007f3be259e2d9 [ 107.302447][ T8707] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 107.302459][ T8707] RBP: 00007f3be2635888 R08: 0000000000000000 R09: 0000000000000000 [ 107.302471][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.302482][ T8707] R13: 00007f3be2826128 R14: 00007f3be2826090 R15: 00007ffffc64ac78 [ 107.302509][ T8707] [ 107.302657][ T8707] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.726142][ T5729] Bluetooth: hci4: command 0x0419 tx timeout [ 107.909323][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 107.964025][ T8717] netlink: 68 bytes leftover after parsing attributes in process `syz.1.708'. [ 107.978281][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978305][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978318][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978330][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978343][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978355][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978367][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978379][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978392][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.978404][ T72] logitech-hidpp-device 0003:046D:C082.0003: unknown main item tag 0x0 [ 107.980091][ T72] logitech-hidpp-device 0003:046D:C082.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 108.047458][ T8718] fido_id[8718]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.187104][ T8716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.708'. [ 109.300317][ T8735] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 109.324949][ T8738] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 109.351326][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 109.351336][ T43] audit: type=1400 audit(1791969525.299:704): avc: denied { create } for pid=8742 comm="syz.5.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.351877][ T43] audit: type=1400 audit(1791969525.299:705): avc: denied { getopt } for pid=8742 comm="syz.5.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.388249][ T8745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.126300][ C2] net_ratelimit: 114 callbacks suppressed [ 110.127065][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.216270][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.226100][ T5816] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 110.397127][ T5816] usb 10-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 110.398313][ T5816] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 110.398326][ T5816] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.400703][ T5816] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.400713][ T5816] usb 10-1: Product: syz [ 110.400721][ T5816] usb 10-1: Manufacturer: syz [ 110.400729][ T5816] usb 10-1: SerialNumber: syz [ 110.652578][ T5816] usb 10-1: unit 5 not found! [ 110.687474][ T5816] usb 10-1: USB disconnect, device number 4 [ 110.728142][ T6575] udevd[6575]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.735334][ T8766] syz.2.721: attempt to access beyond end of device [ 110.735334][ T8766] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 110.735383][ T8766] gfs2: error -5 reading superblock [ 110.877088][ T8770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.418645][ T43] audit: type=1400 audit(1791969527.369:706): avc: denied { accept } for pid=8783 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.116788][ T8787] gfs2: gfs2 mount does not exist [ 112.123008][ T8787] qrtr: Invalid version 2 [ 112.283891][ T8790] netlink: 'syz.2.729': attribute type 14 has an invalid length. [ 112.410765][ T43] audit: type=1400 audit(1791969528.359:707): avc: denied { search } for pid=5439 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.410929][ T43] audit: type=1400 audit(1791969528.359:708): avc: denied { search } for pid=5439 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.411126][ T43] audit: type=1400 audit(1791969528.359:709): avc: denied { search } for pid=5439 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.440259][ T43] audit: type=1400 audit(1791969528.389:710): avc: denied { ioctl } for pid=8793 comm="syz.2.730" path="socket:[25389]" dev="sockfs" ino=25389 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.473576][ T43] audit: type=1400 audit(1791969528.419:711): avc: denied { read } for pid=8796 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.473811][ T43] audit: type=1400 audit(1791969528.419:712): avc: denied { read open } for pid=8796 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.474017][ T43] audit: type=1400 audit(1791969528.419:713): avc: denied { getattr } for pid=8796 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.569192][ T5439] veth0_vlan: left promiscuous mode [ 112.575965][ T10] veth0_vlan: entered promiscuous mode [ 114.016953][ T8832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.601655][ T8845] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 114.643278][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 114.643286][ T43] audit: type=1400 audit(1791969530.589:729): avc: denied { mount } for pid=8854 comm="syz.5.740" name="/" dev="pstore" ino=6069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 114.675356][ T8860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.742'. [ 114.730098][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.742'. [ 114.841052][ T43] audit: type=1400 audit(1791969530.789:730): avc: denied { getopt } for pid=8870 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 114.842615][ T8869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.852904][ T43] audit: type=1400 audit(1791969530.799:731): avc: denied { mounton } for pid=8870 comm="syz.2.744" path="/190/sys/module/hid_steam/parameters/lizard_mode" dev="sysfs" ino=65315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 115.416044][ C2] net_ratelimit: 87 callbacks suppressed [ 115.418720][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.430527][ T43] audit: type=1400 audit(1791969531.379:732): avc: denied { write } for pid=8884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.486355][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.507616][ T43] audit: type=1400 audit(1791969531.459:733): avc: denied { write } for pid=8889 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.572822][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.753'. [ 116.572906][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.753'. [ 116.609400][ T8906] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 116.817917][ T43] audit: type=1400 audit(1791969532.769:734): avc: denied { write } for pid=8919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.904876][ T43] audit: type=1400 audit(1791969532.849:735): avc: denied { write } for pid=8922 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.743220][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.044956][ T6303] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 118.047343][ T6303] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 118.287468][ T8940] netlink: 'syz.5.759': attribute type 20 has an invalid length. [ 118.308725][ T6303] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 118.829250][ T6303] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 119.096947][ T8935] ceph: No mds server is up or the cluster is laggy [ 119.670441][ T8950] netlink: 'syz.2.761': attribute type 7 has an invalid length. [ 119.670900][ T43] audit: type=1400 audit(1791969535.619:736): avc: denied { mounton } for pid=8947 comm="syz.2.761" path=2F3139352FE91F7189591E9233614B dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 119.698104][ T8954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.763'. [ 119.944539][ T43] audit: type=1400 audit(1791969535.889:737): avc: denied { write } for pid=8951 comm="syz.5.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.944895][ T43] audit: type=1400 audit(1791969535.889:738): avc: denied { bind } for pid=8951 comm="syz.5.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.946663][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.762'. [ 120.160250][ T8967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.526130][ C2] net_ratelimit: 68 callbacks suppressed [ 120.686532][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.736297][ T8969] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 120.784371][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 120.788831][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 120.791361][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 120.792906][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 120.793578][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 120.850486][ T43] audit: type=1400 audit(1791969536.799:739): avc: denied { unmount } for pid=8193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 120.874368][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.874386][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.948380][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.948409][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.969267][ T8988] syzkaller0: entered promiscuous mode [ 120.969276][ T8988] syzkaller0: entered allmulticast mode [ 120.984444][ T8990] netlink: 104 bytes leftover after parsing attributes in process `syz.5.770'. [ 121.000184][ T8988] tipc: Started in network mode [ 121.000197][ T8988] tipc: Node identity bad8b252ffa5, cluster identity 4711 [ 121.000358][ T8988] tipc: Enabled bearer , priority 0 [ 121.022380][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.022399][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.037629][ T8979] tipc: Resetting bearer [ 121.044415][ T8979] tipc: Disabling bearer [ 121.090734][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.090751][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.158829][ T43] audit: type=1400 audit(1791969537.109:740): avc: denied { write } for pid=8992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.195924][ T43] audit: type=1400 audit(1791969537.139:741): avc: denied { write } for pid=8996 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.260671][ T43] audit: type=1400 audit(1791969537.209:742): avc: denied { write } for pid=8998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.293908][ T43] audit: type=1400 audit(1791969537.239:743): avc: denied { mount } for pid=9003 comm="syz.5.771" name="/" dev="hugetlbfs" ino=24492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 121.310878][ T9004] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 121.311266][ T43] audit: type=1400 audit(1791969537.259:744): avc: denied { mounton } for pid=9003 comm="syz.5.771" path="/mnt" dev="hugetlbfs" ino=27749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 121.311392][ T9004] Could not find key with description: [syz] [ 121.311398][ T9004] process_request_key_err: No key [ 121.311402][ T9004] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 121.311408][ T9004] One or more global auth toks could not properly register; rc = [-2] [ 121.311424][ T9004] Error validating options; rc = [-2] [ 121.312891][ T43] audit: type=1400 audit(1791969537.259:745): avc: denied { write } for pid=9006 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.429227][ T13] bond0 (unregistering): Released all slaves [ 121.432889][ T13] bond1 (unregistering): Released all slaves [ 121.441808][ T13] bond2 (unregistering): Released all slaves [ 121.451261][ T13] bond3 (unregistering): Released all slaves [ 121.463594][ T13] bond4 (unregistering): (slave veth3): Releasing active interface [ 121.464769][ T13] bond4 (unregistering): Released all slaves [ 121.530981][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 121.530991][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.772'. [ 121.531006][ T9013] netlink: 'syz.5.772': attribute type 19 has an invalid length. [ 121.649597][ T5439] 8021q: adding VLAN 0 to HW filter on device eth6 [ 121.694858][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.694932][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.695017][ T8974] bridge_slave_0: entered allmulticast mode [ 121.695841][ T8974] bridge_slave_0: entered promiscuous mode [ 121.698728][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.698854][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.698927][ T8974] bridge_slave_1: entered allmulticast mode [ 121.699774][ T8974] bridge_slave_1: entered promiscuous mode [ 121.734187][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.775'. [ 121.734211][ T9027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.775'. [ 121.739554][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.741083][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.757405][ T9027] erspan0: entered promiscuous mode [ 121.758099][ T9027] gretap0: entered promiscuous mode [ 121.780687][ T8974] team0: Port device team_slave_0 added [ 121.790233][ T8974] team0: Port device team_slave_1 added [ 121.807780][ T9030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.834751][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.834757][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.834770][ T8974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.836450][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.836456][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.836469][ T8974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.872005][ T8974] hsr_slave_0: entered promiscuous mode [ 121.872533][ T8974] hsr_slave_1: entered promiscuous mode [ 121.872889][ T8974] debugfs: 'hsr0' already exists in 'hsr' [ 121.872898][ T8974] Cannot create hsr debugfs directory [ 121.917689][ T13] hsr_slave_0: left promiscuous mode [ 121.918188][ T13] hsr_slave_1: left promiscuous mode [ 121.922722][ T13] veth1_macvtap: left promiscuous mode [ 121.922740][ T13] veth0_macvtap: left promiscuous mode [ 121.922783][ T13] veth1_vlan: left promiscuous mode [ 121.922822][ T13] veth0_vlan: left promiscuous mode [ 122.213878][ T5439] 8021q: adding VLAN 0 to HW filter on device eth7 [ 122.353178][ T9040] FAULT_INJECTION: forcing a failure. [ 122.353178][ T9040] name failslab, interval 1, probability 0, space 0, times 0 [ 122.353196][ T9040] CPU: 2 UID: 0 PID: 9040 Comm: syz.5.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 122.353212][ T9040] Tainted: [L]=SOFTLOCKUP [ 122.353217][ T9040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.353224][ T9040] Call Trace: [ 122.353228][ T9040] [ 122.353233][ T9040] dump_stack_lvl+0x100/0x190 [ 122.353253][ T9040] should_fail_ex.cold+0x5/0xa [ 122.353269][ T9040] should_failslab+0xc2/0x120 [ 122.353286][ T9040] __kmalloc_noprof+0xfc/0x840 [ 122.353301][ T9040] ? __memcg_list_lru_alloc+0x418/0x680 [ 122.353315][ T9040] __memcg_list_lru_alloc+0x418/0x680 [ 122.353326][ T9040] ? xa_load+0x149/0x2c0 [ 122.353340][ T9040] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 122.353354][ T9040] ? rcu_read_unlock+0x17/0x60 [ 122.353369][ T9040] memcg_list_lru_alloc+0xd3/0x100 [ 122.353382][ T9040] __memcg_slab_post_alloc_hook+0x280/0x10c0 [ 122.353399][ T9040] ? kasan_save_track+0x14/0x30 [ 122.353415][ T9040] kmem_cache_alloc_lru_noprof+0x4f6/0x6a0 [ 122.353430][ T9040] ? ilookup5+0x19f/0x230 [ 122.353442][ T9040] ? fuse_alloc_inode+0x2c/0x1a0 [ 122.353460][ T9040] ? __pfx_fuse_inode_eq+0x10/0x10 [ 122.353476][ T9040] ? __pfx_fuse_inode_set+0x10/0x10 [ 122.353491][ T9040] fuse_alloc_inode+0x2c/0x1a0 [ 122.353506][ T9040] ? lockdep_init_map_type+0x5c/0x250 [ 122.353520][ T9040] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 122.353536][ T9040] alloc_inode+0x68/0x250 [ 122.353549][ T9040] iget5_locked+0x5f/0xa0 [ 122.353562][ T9040] fuse_iget+0x165/0x910 [ 122.353575][ T9040] ? __pfx_fuse_iget+0x10/0x10 [ 122.353601][ T9040] ? __local_bh_enable_ip+0xa5/0x120 [ 122.353614][ T9040] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.353630][ T9040] ? bdi_set_max_ratio+0x106/0x150 [ 122.353642][ T9040] ? __local_bh_enable_ip+0xa5/0x120 [ 122.353670][ T9040] fuse_fill_super_common+0x9a7/0xfe0 [ 122.353683][ T9040] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 122.353699][ T9040] ? lockdep_init_map_type+0x5c/0x250 [ 122.353713][ T9040] ? __raw_spin_lock_init+0x3a/0x110 [ 122.353729][ T9040] ? __pfx_fuse_fill_super+0x10/0x10 [ 122.353740][ T9040] fuse_fill_super+0x100/0x1a0 [ 122.353751][ T9040] get_tree_nodev+0xdd/0x190 [ 122.353766][ T9040] fuse_get_tree+0x30e/0x490 [ 122.353778][ T9040] vfs_get_tree+0x92/0x320 [ 122.353791][ T9040] path_mount+0x7d0/0x2850 [ 122.353806][ T9040] ? __pfx_path_mount+0x10/0x10 [ 122.353817][ T9040] ? lockdep_hardirqs_on+0x7d/0x110 [ 122.353833][ T9040] ? putname+0xb1/0x110 [ 122.353842][ T9040] ? kmem_cache_free+0x127/0x6c0 [ 122.353859][ T9040] ? __x64_sys_mount+0x293/0x310 [ 122.353870][ T9040] __x64_sys_mount+0x293/0x310 [ 122.353882][ T9040] ? __pfx___x64_sys_mount+0x10/0x10 [ 122.353898][ T9040] do_syscall_64+0x123/0x790 [ 122.353916][ T9040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.353927][ T9040] RIP: 0033:0x7fd87179e2d9 [ 122.353937][ T9040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.353948][ T9040] RSP: 002b:00007fd8725c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.353959][ T9040] RAX: ffffffffffffffda RBX: 00007fd871a25fa0 RCX: 00007fd87179e2d9 [ 122.353966][ T9040] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 122.353973][ T9040] RBP: 00007fd871835888 R08: 0000200000000280 R09: 0000000000000000 [ 122.353979][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.353986][ T9040] R13: 00007fd871a26038 R14: 00007fd871a25fa0 R15: 00007fffc8808ed8 [ 122.354001][ T9040] [ 122.425736][ T8974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.447173][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.447811][ T8974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 122.457449][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.458379][ T5439] 8021q: adding VLAN 0 to HW filter on device eth8 [ 122.459252][ T8974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 122.468484][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.471158][ T8974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 122.481831][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.548218][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.555131][ T8974] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.558919][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.558961][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.562830][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.562910][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.670451][ T5439] 8021q: adding VLAN 0 to HW filter on device eth9 [ 122.774736][ T8974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.846160][ T5729] Bluetooth: hci5: command tx timeout [ 122.931269][ T8974] veth0_vlan: entered promiscuous mode [ 122.943541][ T8974] veth1_vlan: entered promiscuous mode [ 122.964857][ T8974] veth0_macvtap: entered promiscuous mode [ 122.967111][ T8974] veth1_macvtap: entered promiscuous mode [ 122.973638][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.980693][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.996488][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.996688][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.996707][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.996724][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.045707][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.050194][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.053646][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.061311][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.066084][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.083679][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.083688][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.109348][ T6533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.109357][ T6533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.158966][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 123.273230][ T9106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.466921][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.467022][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.467099][ T9083] bridge_slave_0: entered allmulticast mode [ 123.467914][ T9083] bridge_slave_0: entered promiscuous mode [ 123.469984][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.470042][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.470209][ T9083] bridge_slave_1: entered allmulticast mode [ 123.470969][ T9083] bridge_slave_1: entered promiscuous mode [ 123.495323][ T9083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.497606][ T9083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.522827][ T9083] team0: Port device team_slave_0 added [ 123.524229][ T9083] team0: Port device team_slave_1 added [ 123.547870][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.547876][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.547888][ T9083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.548896][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.548903][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.548915][ T9083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.584881][ T9083] hsr_slave_0: entered promiscuous mode [ 123.585399][ T9083] hsr_slave_1: entered promiscuous mode [ 123.585749][ T9083] debugfs: 'hsr0' already exists in 'hsr' [ 123.585758][ T9083] Cannot create hsr debugfs directory [ 123.756682][ T9083] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.764042][ T9083] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.764692][ T9083] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.769667][ T9083] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.770433][ T9083] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.775272][ T9083] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.775948][ T9083] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 123.784990][ T9083] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.804790][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.804831][ T9083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.804966][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.805009][ T9083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.821592][ T9125] netlink: 36 bytes leftover after parsing attributes in process `syz.6.785'. [ 123.846610][ T9083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.856429][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.856964][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.867706][ T9083] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.871290][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.871337][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.904519][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.904638][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state ƶÿ[ 124.100088][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.2.787'. [ 124.129168][ T9151] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 124.146749][ T9151] bond2: entered promiscuous mode [ 124.147003][ T9151] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.154792][ T9083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.177172][ T9158] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 124.189908][ T9160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.256247][ T2361] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 124.282297][ T9083] veth0_vlan: entered promiscuous mode [ 124.285912][ T9083] veth1_vlan: entered promiscuous mode [ 124.304285][ T9083] veth0_macvtap: entered promiscuous mode [ 124.306786][ T9083] veth1_macvtap: entered promiscuous mode [ 124.313505][ T9083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.319763][ T9083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.369399][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.369670][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.369699][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.399290][ T6544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.399298][ T6544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.416275][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.418537][ T2361] usb 11-1: unable to get BOS descriptor or descriptor too short [ 124.418560][ T2361] usb 11-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 124.419452][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.419460][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.420644][ T2361] usb 11-1: config 142 has an invalid interface number: 251 but max is 0 [ 124.420663][ T2361] usb 11-1: config 142 has no interface number 0 [ 124.420693][ T2361] usb 11-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 124.420714][ T2361] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 124.420733][ T2361] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 124.420751][ T2361] usb 11-1: config 142 interface 251 has no altsetting 0 [ 124.426150][ T2361] usb 11-1: string descriptor 0 read error: -22 [ 124.426233][ T2361] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.438043][ T9136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 124.438181][ T9136] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 124.439805][ T2361] cypress_m8 11-1:142.251: HID->COM RS232 Adapter converter detected [ 124.456463][ T2361] usb 11-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 124.463360][ T9178] netlink: 'syz.7.779': attribute type 10 has an invalid length. [ 124.470429][ T9178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.472103][ T9178] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 124.499648][ T9183] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 124.502634][ T9183] 8021q: VLANs not supported on ip_vti0 [ 124.769202][ T9192] 9pnet_virtio: no channels available for device syz [ 124.779082][ T9193] 9pnet_virtio: no channels available for device syz [ 124.926206][ T5729] Bluetooth: hci5: command tx timeout [ 125.017032][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 125.017042][ T43] audit: type=1400 audit(1791969540.969:770): avc: denied { accept } for pid=9200 comm="syz.7.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.018053][ T43] audit: type=1400 audit(1791969540.969:771): avc: denied { execmod } for pid=9200 comm="syz.7.799" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 125.018511][ T5729] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 125.018528][ T5729] CPU: 3 UID: 0 PID: 5729 Comm: kworker/u34:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.018552][ T5729] Tainted: [L]=SOFTLOCKUP [ 125.018559][ T5729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 125.018571][ T5729] Workqueue: hci0 hci_rx_work [ 125.018593][ T5729] Call Trace: [ 125.018599][ T5729] [ 125.018607][ T5729] dump_stack_lvl+0x100/0x190 [ 125.018636][ T5729] sysfs_warn_dup.cold+0x1c/0x28 [ 125.018662][ T5729] sysfs_create_dir_ns+0x24b/0x2b0 [ 125.018688][ T5729] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 125.018715][ T5729] ? find_held_lock+0x2b/0x80 [ 125.018739][ T5729] ? kobject_add_internal+0x25f/0x930 [ 125.018757][ T5729] ? kobject_add_internal+0x25f/0x930 [ 125.018780][ T5729] kobject_add_internal+0x2c8/0x930 [ 125.018802][ T5729] kobject_add+0x16a/0x1e0 [ 125.018819][ T5729] ? __pfx_kobject_add+0x10/0x10 [ 125.018844][ T5729] ? class_to_subsys+0x10f/0x150 [ 125.018867][ T5729] ? kobject_put+0xb9/0x640 [ 125.018882][ T5729] ? _raw_spin_unlock+0x28/0x50 [ 125.018908][ T5729] device_add+0x294/0x1970 [ 125.018926][ T5729] ? __pfx_dev_set_name+0x10/0x10 [ 125.018947][ T5729] ? __pfx_device_add+0x10/0x10 [ 125.018965][ T5729] ? mgmt_send_event_skb+0x2fb/0x460 [ 125.018992][ T5729] hci_conn_add_sysfs+0x1a3/0x260 [ 125.019015][ T5729] le_conn_complete_evt+0x122f/0x2130 [ 125.019041][ T5729] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 125.019068][ T5729] hci_le_conn_complete_evt+0x23c/0x3a0 [ 125.019088][ T5729] ? skb_pull_data+0x15f/0x1e0 [ 125.019112][ T5729] hci_le_meta_evt+0x34a/0x5f0 [ 125.019154][ T5729] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 125.019180][ T5729] hci_event_packet+0x51c/0xcd0 [ 125.019199][ T5729] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 125.019219][ T5729] ? __pfx_hci_event_packet+0x10/0x10 [ 125.019242][ T5729] ? lockdep_hardirqs_on+0x7d/0x110 [ 125.019269][ T5729] hci_rx_work+0x451/0xfc0 [ 125.019292][ T5729] process_one_work+0xac7/0x1b10 [ 125.019328][ T5729] ? __pfx_process_one_work+0x10/0x10 [ 125.019354][ T5729] ? lock_acquire+0x1d1/0x380 [ 125.019381][ T5729] ? __pfx_hci_rx_work+0x10/0x10 [ 125.019401][ T5729] worker_thread+0x5ef/0xe50 [ 125.019426][ T5729] ? kthread+0x13a/0x450 [ 125.019448][ T5729] ? __pfx_worker_thread+0x10/0x10 [ 125.019461][ T5729] kthread+0x373/0x450 [ 125.019483][ T5729] ? __pfx_kthread+0x10/0x10 [ 125.019613][ T5729] ret_from_fork+0x730/0xd60 [ 125.019637][ T5729] ? __pfx_ret_from_fork+0x10/0x10 [ 125.019658][ T5729] ? rcu_is_watching+0x13/0xc0 [ 125.019682][ T5729] ? __switch_to+0x800/0x10f0 [ 125.019706][ T5729] ? __pfx_kthread+0x10/0x10 [ 125.019730][ T5729] ret_from_fork_asm+0x1a/0x30 [ 125.019761][ T5729] [ 125.019829][ T5729] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 125.019857][ T5729] Bluetooth: hci0: failed to register connection device [ 125.062284][ T9211] syzkaller1: entered promiscuous mode [ 125.062293][ T9211] syzkaller1: entered allmulticast mode [ 125.176251][ T5729] Bluetooth: hci0: command tx timeout [ 125.349081][ C1] usb 11-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 125.349109][ C1] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 125.349140][ C1] usb 11-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 125.585313][ T9217] 9pnet_virtio: no channels available for device syz [ 125.646069][ C2] net_ratelimit: 449 callbacks suppressed [ 125.646848][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.760578][ T9219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.827635][ T6304] usb 11-1: USB disconnect, device number 2 [ 125.836153][ T6304] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 125.836488][ T6304] cypress_m8 11-1:142.251: device disconnected [ 126.361163][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.807'. [ 126.361176][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.807'. [ 126.387003][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.387041][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.387071][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.387100][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.656165][ T1349] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 126.826668][ T1349] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 126.827562][ T1349] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 126.827576][ T1349] usb 11-1: config 0 has no interface number 0 [ 126.827593][ T1349] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.827604][ T1349] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 126.827617][ T1349] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 126.827630][ T1349] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 126.827642][ T1349] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 126.827655][ T1349] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.827690][ T1349] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.829246][ T1349] usb 11-1: config 0 descriptor?? [ 126.830524][ T9230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 126.830611][ T9230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 126.835614][ T1349] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 127.016150][ T5729] Bluetooth: hci5: command tx timeout [ 127.042493][ T9230] ldusb 11-1:0.55: Write buffer overflow, 1 bytes dropped [ 127.044759][ T6133] usb 11-1: USB disconnect, device number 3 [ 127.050995][ T6133] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 127.150882][ T9225] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.222141][ T43] audit: type=1400 audit(1791969543.169:772): avc: denied { ioctl } for pid=9233 comm="syz.7.810" path="socket:[33530]" dev="sockfs" ino=33530 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.225407][ T43] audit: type=1400 audit(1791969543.169:773): avc: denied { setattr } for pid=9233 comm="syz.7.810" name="NETLINK" dev="sockfs" ino=33532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.276737][ T9237] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.278414][ T9237] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.293041][ T9237] netlink: 'syz.7.811': attribute type 16 has an invalid length. [ 127.293051][ T9237] netlink: 'syz.7.811': attribute type 17 has an invalid length. [ 127.307387][ T9237] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.307436][ T9237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.308756][ T9237] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.308798][ T9237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.344720][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9239 comm=syz.7.811 [ 127.374676][ T9241] syzkaller0: entered promiscuous mode [ 127.374684][ T9241] syzkaller0: entered allmulticast mode [ 127.570126][ T43] audit: type=1400 audit(1791969543.519:774): avc: denied { write } for pid=9245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.572993][ T9248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.615040][ T43] audit: type=1400 audit(1791969543.559:775): avc: denied { write } for pid=9250 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.070163][ T43] audit: type=1400 audit(1791969544.019:776): avc: denied { write } for pid=9264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.131569][ T43] audit: type=1400 audit(1791969544.079:777): avc: denied { write } for pid=9269 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.209946][ T43] audit: type=1400 audit(1791969544.159:778): avc: denied { write } for pid=9271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.250101][ T43] audit: type=1400 audit(1791969544.199:779): avc: denied { write } for pid=9274 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.346730][ T5872] usb 11-1: new low-speed USB device number 4 using dummy_hcd [ 128.508267][ T5872] usb 11-1: unable to get BOS descriptor or descriptor too short [ 128.508293][ T5872] usb 11-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 128.509209][ T5872] usb 11-1: config 142 has an invalid interface number: 251 but max is 0 [ 128.509222][ T5872] usb 11-1: config 142 has no interface number 0 [ 128.509240][ T5872] usb 11-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 128.509253][ T5872] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 128.509265][ T5872] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 128.509276][ T5872] usb 11-1: config 142 interface 251 has no altsetting 0 [ 128.511623][ T5872] usb 11-1: string descriptor 0 read error: -22 [ 128.511689][ T5872] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.516138][ T9268] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 128.516232][ T9268] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 128.522164][ T5872] cypress_m8 11-1:142.251: HID->COM RS232 Adapter converter detected [ 128.528487][ T5872] usb 11-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 129.087059][ T5729] Bluetooth: hci5: command tx timeout [ 129.426829][ C0] usb 11-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 129.426848][ C0] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 129.427546][ C0] usb 11-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 129.565137][ T9320] 9pnet_virtio: no channels available for device syz [ 129.630609][ T9322] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 129.889601][ T9396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.898862][ T5816] usb 11-1: USB disconnect, device number 4 [ 129.910119][ T5816] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 129.910491][ T5816] cypress_m8 11-1:142.251: device disconnected [ 130.435481][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 130.435491][ T43] audit: type=1400 audit(1791969546.379:790): avc: denied { append } for pid=9437 comm="syz.6.825" name="usbmon6" dev="devtmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.484998][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.487417][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.494146][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.500047][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.503892][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.504212][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.505797][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.507714][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.511413][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.512531][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.514977][ T9443] overlay: filesystem on ./bus not supported as upperdir [ 130.518113][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518188][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518260][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518329][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518397][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518466][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518533][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518600][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518673][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.518743][ T9440] overlayfs: failed lookup in lower (newroot/83, name='bus', err=-40): overlapping layers [ 130.671933][ T5439] net_ratelimit: 224 callbacks suppressed [ 130.736899][ T853] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 130.867233][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 130.872415][ T1131] ata1.00: configured for UDMA/100 [ 130.897008][ T853] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 130.897029][ T853] usb 11-1: too many configurations: 102, using maximum allowed: 8 [ 130.897809][ T853] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 130.897822][ T853] usb 11-1: config 1 has no interface number 0 [ 130.898658][ T853] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 130.898670][ T853] usb 11-1: config 1 has no interface number 0 [ 130.899403][ T853] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 130.899415][ T853] usb 11-1: config 1 has no interface number 0 [ 130.900126][ T853] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 130.900137][ T853] usb 11-1: config 1 has no interface number 0 [ 130.900857][ T853] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 130.900869][ T853] usb 11-1: config 1 has no interface number 0 [ 130.901586][ T853] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 130.901598][ T853] usb 11-1: config 1 has no interface number 0 [ 130.902310][ T853] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 130.902322][ T853] usb 11-1: config 1 has no interface number 0 [ 130.903032][ T853] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 130.903043][ T853] usb 11-1: config 1 has no interface number 0 [ 130.904618][ T853] usb 11-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 130.904628][ T853] usb 11-1: Product: syz [ 130.904636][ T853] usb 11-1: Manufacturer: syz [ 130.904643][ T853] usb 11-1: SerialNumber: syz [ 130.910853][ T853] usb 11-1: 3:0 : does not exist [ 130.910861][ T853] usb 11-1: 3:0 : does not exist [ 131.087467][ T5816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.197214][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 131.198136][ T1131] ata1.00: configured for UDMA/100 [ 131.541406][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 131.542275][ T1131] ata1.00: configured for UDMA/100 [ 131.707342][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.707371][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.825795][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.825812][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.853155][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.853997][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.854708][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.855801][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.859566][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.881239][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 131.890016][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.890033][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.895318][ T1131] ata1.00: configured for UDMA/100 [ 131.952109][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.952125][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.165198][ T12] bridge_slave_1: left allmulticast mode [ 132.165209][ T12] bridge_slave_1: left promiscuous mode [ 132.166532][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.171460][ T12] bridge_slave_0: left allmulticast mode [ 132.171475][ T12] bridge_slave_0: left promiscuous mode [ 132.172052][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.198810][ T43] audit: type=1400 audit(1791969548.149:791): avc: denied { write } for pid=9525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.227026][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 132.229693][ T1131] ata1.00: configured for UDMA/100 [ 132.239626][ T43] audit: type=1400 audit(1791969548.189:792): avc: denied { write } for pid=9528 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.257643][ T12] erspan0 (unregistering): left promiscuous mode [ 132.265676][ T12] gretap0 (unregistering): left promiscuous mode [ 132.300093][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.302001][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.303035][ T12] bond0 (unregistering): Released all slaves [ 132.319876][ T5439] 8021q: adding VLAN 0 to HW filter on device eth10 [ 132.370201][ T12] tipc: Left network mode [ 132.393633][ T43] audit: type=1400 audit(1791969548.339:793): avc: denied { write } for pid=9531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.435600][ T43] audit: type=1400 audit(1791969548.379:794): avc: denied { write } for pid=9535 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.472987][ T5439] 8021q: adding VLAN 0 to HW filter on device eth11 [ 132.527402][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.527429][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.544356][ T43] audit: type=1400 audit(1791969548.489:795): avc: denied { write } for pid=9541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.559525][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 132.560309][ T1131] ata1.00: configured for UDMA/100 [ 132.584591][ T12] hsr_slave_0: left promiscuous mode [ 132.585418][ T12] hsr_slave_1: left promiscuous mode [ 132.587266][ T43] audit: type=1400 audit(1791969548.529:796): avc: denied { write } for pid=9544 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.596220][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.596230][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.598615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.598624][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.605439][ T12] veth1_macvtap: left promiscuous mode [ 132.605459][ T12] veth0_macvtap: left promiscuous mode [ 132.605503][ T12] veth1_vlan: left promiscuous mode [ 132.605542][ T12] veth0_vlan: left promiscuous mode [ 132.768502][ T12] team0 (unregistering): Port device team_slave_1 removed [ 132.787132][ T12] team0 (unregistering): Port device team_slave_0 removed [ 132.876443][ T5439] 8021q: adding VLAN 0 to HW filter on device eth12 [ 132.878512][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 132.882874][ T1131] ata1.00: configured for UDMA/100 [ 132.931540][ T9513] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.931620][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.931694][ T9513] bridge_slave_0: entered allmulticast mode [ 132.932482][ T9513] bridge_slave_0: entered promiscuous mode [ 132.933878][ T9513] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.933943][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.934015][ T9513] bridge_slave_1: entered allmulticast mode [ 132.934769][ T9513] bridge_slave_1: entered promiscuous mode [ 132.970979][ T9513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.972596][ T9513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.004594][ T43] audit: type=1400 audit(1791969548.959:797): avc: denied { write } for pid=9551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.013443][ T9513] team0: Port device team_slave_0 added [ 133.015973][ T9513] team0: Port device team_slave_1 added [ 133.048683][ T43] audit: type=1400 audit(1791969548.999:798): avc: denied { write } for pid=9554 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.049771][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.049782][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.049801][ T9513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.050722][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.050733][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.050751][ T9513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.105350][ T9513] hsr_slave_0: entered promiscuous mode [ 133.105908][ T9513] hsr_slave_1: entered promiscuous mode [ 133.106441][ T9513] debugfs: 'hsr0' already exists in 'hsr' [ 133.106452][ T9513] Cannot create hsr debugfs directory [ 133.107791][ T5439] 8021q: adding VLAN 0 to HW filter on device eth13 [ 133.206742][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 133.207532][ T1131] ata1.00: configured for UDMA/100 [ 133.330621][ T9513] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 133.335342][ T9513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.335837][ T9513] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 133.340151][ T9513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.340647][ T9513] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 133.347163][ T9513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.347596][ T9513] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 133.354228][ T9513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.374039][ T9513] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.374113][ T9513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.374349][ T9513] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.374482][ T9513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.425266][ T9513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.430627][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.431142][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.435704][ T9513] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.442799][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.442842][ T6512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.447064][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.447105][ T6512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.519481][ T43] audit: type=1400 audit(1791969549.469:799): avc: denied { write } for pid=9567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.541486][ T1131] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 133.542408][ T1131] ata1.00: configured for UDMA/100 [ 133.568420][ T9507] usb 11-1: USB disconnect, device number 5 [ 133.676811][ T9582] 9pnet_virtio: no channels available for device syz [ 133.691760][ T9513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.827704][ T9598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.848491][ T9513] veth0_vlan: entered promiscuous mode [ 133.852860][ T9513] veth1_vlan: entered promiscuous mode [ 133.870888][ T9513] veth0_macvtap: entered promiscuous mode [ 133.873091][ T9513] veth1_macvtap: entered promiscuous mode [ 133.882229][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.885612][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.896224][ T5729] Bluetooth: hci4: command tx timeout [ 133.908930][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.909142][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.909163][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.909181][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.929735][ T6548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.929744][ T6548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.960955][ T6537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.960965][ T6537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.352003][ T9615] 9pnet_virtio: no channels available for device syz [ 134.358852][ T6303] usb 13-1: new low-speed USB device number 2 using dummy_hcd [ 134.508178][ T6303] usb 13-1: unable to get BOS descriptor or descriptor too short [ 134.508219][ T6303] usb 13-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 134.509348][ T6303] usb 13-1: config 142 has an invalid interface number: 251 but max is 0 [ 134.509369][ T6303] usb 13-1: config 142 has no interface number 0 [ 134.509398][ T6303] usb 13-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 134.509420][ T6303] usb 13-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 134.509439][ T6303] usb 13-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 134.509457][ T6303] usb 13-1: config 142 interface 251 altsetting 11 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.509476][ T6303] usb 13-1: config 142 interface 251 has no altsetting 0 [ 134.512566][ T6303] usb 13-1: string descriptor 0 read error: -22 [ 134.512696][ T6303] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.516306][ T9611] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 134.519074][ T6303] cypress_m8 13-1:142.251: HID->COM RS232 Adapter converter detected [ 134.520007][ T6303] cyphidcom ttyUSB0: probe with driver cyphidcom failed with error -22 [ 134.917604][ T9623] syzkaller0: entered promiscuous mode [ 134.917618][ T9623] syzkaller0: entered allmulticast mode [ 135.059975][ T9632] 9pnet_virtio: no channels available for device syz [ 135.316801][ T9646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.727953][ T6548] net_ratelimit: 258 callbacks suppressed [ 135.877035][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 135.877075][ T43] audit: type=1400 audit(1791969551.829:809): avc: denied { map } for pid=9648 comm="syz.6.844" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.877236][ T43] audit: type=1400 audit(1791969551.829:810): avc: denied { execute } for pid=9648 comm="syz.6.844" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 135.945253][ T9654] Device name cannot be null; rc = [-22] [ 135.966250][ T5729] Bluetooth: hci4: command tx timeout [ 137.108865][ T9671] netlink: 'syz.6.851': attribute type 12 has an invalid length. [ 137.134969][ T35] usb 13-1: USB disconnect, device number 2 [ 137.139057][ T35] cypress_m8 13-1:142.251: device disconnected [ 137.155482][ T9673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.705462][ T9680] netlink: 40 bytes leftover after parsing attributes in process `syz.6.854'. [ 138.046173][ T5729] Bluetooth: hci4: command tx timeout [ 139.913052][ T5086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.918647][ T5086] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.922159][ T5086] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.930320][ T5086] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.933090][ T5086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.969928][ T43] audit: type=1400 audit(1791969555.919:811): avc: denied { getopt } for pid=9686 comm="syz.6.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.054083][ T43] audit: type=1400 audit(1791969555.999:812): avc: denied { mounton } for pid=9699 comm="syz.8.860" path="/5/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 140.136504][ T5729] Bluetooth: hci4: command tx timeout [ 140.336067][ T1349] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 140.467707][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.467820][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.467930][ T9688] bridge_slave_0: entered allmulticast mode [ 140.469262][ T9688] bridge_slave_0: entered promiscuous mode [ 140.473085][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.473150][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.473264][ T9688] bridge_slave_1: entered allmulticast mode [ 140.474642][ T9688] bridge_slave_1: entered promiscuous mode [ 140.508851][ T1349] usb 11-1: unable to get BOS descriptor or descriptor too short [ 140.508874][ T1349] usb 11-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 140.509679][ T1349] usb 11-1: config 142 has an invalid interface number: 251 but max is 0 [ 140.509692][ T1349] usb 11-1: config 142 has no interface number 0 [ 140.509709][ T1349] usb 11-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 140.509722][ T1349] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 140.509734][ T1349] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 140.509745][ T1349] usb 11-1: config 142 interface 251 altsetting 11 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.509817][ T1349] usb 11-1: config 142 interface 251 has no altsetting 0 [ 140.511160][ T9688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.512197][ T1349] usb 11-1: string descriptor 0 read error: -22 [ 140.512260][ T1349] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.513661][ T9688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.514459][ T9711] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 140.520465][ T1349] cypress_m8 11-1:142.251: HID->COM RS232 Adapter converter detected [ 140.521081][ T1349] cyphidcom ttyUSB0: probe with driver cyphidcom failed with error -22 [ 140.552273][ T9688] team0: Port device team_slave_0 added [ 140.553765][ T9688] team0: Port device team_slave_1 added [ 140.583653][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.583663][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.583683][ T9688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.585301][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.585310][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.585331][ T9688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.624983][ T9688] hsr_slave_0: entered promiscuous mode [ 140.625518][ T9688] hsr_slave_1: entered promiscuous mode [ 140.625976][ T9688] debugfs: 'hsr0' already exists in 'hsr' [ 140.626057][ T9688] Cannot create hsr debugfs directory [ 140.766238][ T56] net_ratelimit: 175 callbacks suppressed [ 140.800798][ T9688] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 140.805978][ T9688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.806565][ T9688] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 140.812715][ T9688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.813222][ T9688] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 140.818362][ T9688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.820755][ T9688] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 140.824946][ T9688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.843162][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.843204][ T9688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.843338][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.843383][ T9688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.846292][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.895001][ T9688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.904134][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.904658][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.917992][ T9688] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.922955][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.922999][ T6515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.926888][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.926929][ T6515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.168522][ T9688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.335663][ T9688] veth0_vlan: entered promiscuous mode [ 141.341376][ T9688] veth1_vlan: entered promiscuous mode [ 141.356363][ T9688] veth0_macvtap: entered promiscuous mode [ 141.359428][ T9688] veth1_macvtap: entered promiscuous mode [ 141.367137][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.372276][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.397642][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.397678][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.397705][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.409103][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.432443][ T6527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.432453][ T6527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.465333][ T6527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.465345][ T6527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.677286][ T43] audit: type=1400 audit(1791969557.629:813): avc: denied { setopt } for pid=9755 comm="syz.9.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.677676][ T43] audit: type=1326 audit(1791969557.629:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.9.862" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f919779e2d9 code=0x0 [ 141.692194][ T9758] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 141.966236][ T5729] Bluetooth: hci6: command tx timeout [ 143.103138][ T6133] usb 11-1: USB disconnect, device number 6 [ 143.112978][ T6133] cypress_m8 11-1:142.251: device disconnected [ 143.155978][ T43] audit: type=1400 audit(1791969559.099:815): avc: denied { read append } for pid=9780 comm="syz.9.868" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 143.156476][ T43] audit: type=1400 audit(1791969559.109:816): avc: denied { open } for pid=9780 comm="syz.9.868" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 143.233803][ T43] audit: type=1400 audit(1791969559.179:817): avc: denied { write } for pid=9793 comm="syz.6.870" name="functions" dev="configfs" ino=23407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.245102][ T43] audit: type=1400 audit(1791969559.189:818): avc: denied { write } for pid=9793 comm="syz.6.870" name="c.1" dev="configfs" ino=25400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.250261][ T43] audit: type=1400 audit(1791969559.199:819): avc: denied { write } for pid=9793 comm="syz.6.870" name="c.1" dev="configfs" ino=25400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 143.436987][ T9812] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.607573][ T9817] netlink: 'syz.6.875': attribute type 9 has an invalid length. [ 143.656190][ T9821] bond0: (slave macsec0): Error: Device can not be enslaved while up [ 143.659558][ T43] audit: type=1400 audit(1791969559.609:820): avc: denied { write } for pid=9820 comm="syz.6.877" name="sched" dev="tracefs" ino=21069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 143.659740][ T43] audit: type=1400 audit(1791969559.609:821): avc: denied { add_name } for pid=9820 comm="syz.6.877" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 143.660069][ T43] audit: type=1400 audit(1791969559.609:822): avc: denied { create } for pid=9820 comm="syz.6.877" name="filter" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 143.686422][ T9821] syzkaller0: entered promiscuous mode [ 143.686436][ T9821] syzkaller0: entered allmulticast mode [ 143.886274][ T30] usb 14-1: new full-speed USB device number 2 using dummy_hcd [ 144.046193][ T5729] Bluetooth: hci6: command tx timeout [ 144.048412][ T30] usb 14-1: not running at top speed; connect to a high speed hub [ 144.048429][ T30] usb 14-1: New USB device found, idVendor=0bb4, idProduct=0a94, bcdDevice=f4.56 [ 144.049546][ T30] usb 14-1: config index 0 descriptor too short (asked for 9, got 0) [ 144.049569][ T30] usb 14-1: can't read configurations, error -22 [ 144.197824][ T30] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 144.359522][ T30] usb 14-1: not running at top speed; connect to a high speed hub [ 144.359549][ T30] usb 14-1: New USB device found, idVendor=0bb4, idProduct=0a94, bcdDevice=f4.56 [ 144.360895][ T30] usb 14-1: config index 0 descriptor too short (asked for 9, got 0) [ 144.360923][ T30] usb 14-1: can't read configurations, error -22 [ 144.363956][ T30] usb usb14-port1: attempt power cycle [ 144.696515][ T30] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 144.718485][ T30] usb 14-1: not running at top speed; connect to a high speed hub [ 144.718501][ T30] usb 14-1: New USB device found, idVendor=0bb4, idProduct=0a94, bcdDevice=f4.56 [ 144.719658][ T30] usb 14-1: config index 0 descriptor too short (asked for 9, got 0) [ 144.719675][ T30] usb 14-1: can't read configurations, error -22 [ 144.767028][ T5086] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.774933][ T5086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.788785][ T5086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.797936][ T5086] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.803345][ T5086] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.861076][ T30] usb 14-1: new full-speed USB device number 5 using dummy_hcd [ 144.884368][ T30] usb 14-1: not running at top speed; connect to a high speed hub [ 144.884384][ T30] usb 14-1: New USB device found, idVendor=0bb4, idProduct=0a94, bcdDevice=f4.56 [ 144.885463][ T30] usb 14-1: config index 0 descriptor too short (asked for 9, got 0) [ 144.885480][ T30] usb 14-1: can't read configurations, error -22 [ 144.885686][ T30] usb usb14-port1: unable to enumerate USB device [ 145.475533][ T9823] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.475646][ T9823] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.475776][ T9823] bridge_slave_0: entered allmulticast mode [ 145.477419][ T9823] bridge_slave_0: entered promiscuous mode [ 145.479857][ T9823] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.480020][ T9823] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.480147][ T9823] bridge_slave_1: entered allmulticast mode [ 145.481630][ T9823] bridge_slave_1: entered promiscuous mode [ 145.529246][ T9823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.532259][ T9823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.574648][ T9823] team0: Port device team_slave_0 added [ 145.577549][ T9823] team0: Port device team_slave_1 added [ 145.616792][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.616802][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.616823][ T9823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.618426][ T9823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.618436][ T9823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.618456][ T9823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.679511][ T9823] hsr_slave_0: entered promiscuous mode [ 145.680527][ T9823] hsr_slave_1: entered promiscuous mode [ 145.681193][ T9823] debugfs: 'hsr0' already exists in 'hsr' [ 145.681208][ T9823] Cannot create hsr debugfs directory [ 145.966525][ C3] net_ratelimit: 291 callbacks suppressed [ 146.126506][ T5729] Bluetooth: hci6: command tx timeout [ 146.338574][ T9823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 146.352214][ T9823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.353088][ T9823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 146.366484][ T9823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.367174][ T9823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 146.371852][ T9823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.372324][ T9823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 146.376759][ T9823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.444752][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.452660][ T9823] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.455479][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.455521][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.459833][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.459874][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.719352][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 146.719371][ T43] audit: type=1400 audit(1791969562.669:844): avc: denied { write } for pid=9925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.743778][ T9823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.783388][ T43] audit: type=1400 audit(1791969562.729:845): avc: denied { write } for pid=9933 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.811417][ T9823] veth0_vlan: entered promiscuous mode [ 146.822905][ T9823] veth1_vlan: entered promiscuous mode [ 146.849579][ T9823] veth0_macvtap: entered promiscuous mode [ 146.854882][ T9823] veth1_macvtap: entered promiscuous mode [ 146.857151][ T5729] Bluetooth: hci7: command tx timeout [ 146.870290][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.875897][ T9823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.899447][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.900337][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.902685][ T43] audit: type=1400 audit(1791969562.849:846): avc: denied { write } for pid=9937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.937514][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.937625][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.993380][ T6548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.993390][ T6548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.021760][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.021770][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.038280][ T43] audit: type=1400 audit(1791969562.989:847): avc: denied { write } for pid=9950 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.080780][ T43] audit: type=1400 audit(1791969563.029:848): avc: denied { create } for pid=9952 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 147.145970][ T43] audit: type=1400 audit(1791969563.089:849): avc: denied { write } for pid=9955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.211623][ T43] audit: type=1400 audit(1791969563.159:850): avc: denied { write } for pid=9967 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.242653][ T9969] ovl_lookup_single: 65 callbacks suppressed [ 147.242665][ T9969] overlayfs: failed lookup in lower (newroot/53, name='bus', err=-40): overlapping layers [ 147.245164][ T43] audit: type=1800 audit(1791969563.189:851): pid=9970 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.893" name="file2" dev="overlay" ino=319 res=0 errno=0 [ 147.253685][ T9975] 9pnet_virtio: no channels available for device syz [ 147.318839][ T9981] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 147.335648][ T43] audit: type=1400 audit(1791969563.279:852): avc: denied { write } for pid=9980 comm="syz.6.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.350715][ T43] audit: type=1400 audit(1791969563.299:853): avc: denied { write } for pid=9979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.406324][ T12] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 147.407704][ T9987] udc usbip-vudc.0: binding gadget driver [g1] [ 147.407789][ T9987] configfs-gadget.g1 gadget.32: adding 'uac1_func'/ffff88803aff7000 to config 'c'/ffff88804c761920 [ 147.408111][ T9987] ================================================================== [ 147.408120][ T9987] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 147.408147][ T9987] Read of size 64 at addr ffffffff9ccca6e0 by task syz.6.896/9987 [ 147.408162][ T9987] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.408173][ T9987] CPU: 3 UID: 0 PID: 9987 Comm: syz.6.896 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.408198][ T9987] Tainted: [L]=SOFTLOCKUP [ 147.408205][ T9987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.408215][ T9987] Call Trace: [ 147.408222][ T9987] [ 147.408230][ T9987] dump_stack_lvl+0x100/0x190 [ 147.408255][ T9987] print_report+0x13d/0x4b0 [ 147.408281][ T9987] ? __virt_addr_valid+0x239/0x430 [ 147.408302][ T9987] ? usb_copy_descriptors+0x18d/0x320 [ 147.408319][ T9987] kasan_report+0xdf/0x1c0 [ 147.408359][ T9987] ? usb_copy_descriptors+0x18d/0x320 [ 147.408383][ T9987] kasan_check_range+0x10f/0x1e0 [ 147.408402][ T9987] __asan_memcpy+0x23/0x60 [ 147.408421][ T9987] usb_copy_descriptors+0x18d/0x320 [ 147.408442][ T9987] usb_assign_descriptors+0xd2/0x470 [ 147.408461][ T9987] f_audio_bind+0x243a/0x3950 [ 147.408488][ T9987] ? __pfx_f_audio_bind+0x10/0x10 [ 147.408509][ T9987] usb_add_function+0x219/0x890 [ 147.408529][ T9987] ? composite_dev_prepare+0x211/0x420 [ 147.408553][ T9987] configfs_composite_bind+0xd83/0x1960 [ 147.408575][ T9987] ? kernfs_create_link+0x1bd/0x240 [ 147.408625][ T9987] gadget_bind_driver+0x28c/0xbf0 [ 147.408651][ T9987] ? __pfx_gadget_bind_driver+0x10/0x10 [ 147.408677][ T9987] really_probe+0x241/0xa60 [ 147.408703][ T9987] __driver_probe_device+0x210/0x460 [ 147.408726][ T9987] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.408751][ T9987] driver_probe_device+0x4a/0x140 [ 147.408776][ T9987] __driver_attach+0x21f/0x5b0 [ 147.408800][ T9987] ? __pfx___driver_attach+0x10/0x10 [ 147.408826][ T9987] bus_for_each_dev+0x13e/0x1d0 [ 147.408846][ T9987] ? __pfx_bus_for_each_dev+0x10/0x10 [ 147.408868][ T9987] ? bus_add_driver+0x2b5/0x5b0 [ 147.408893][ T9987] bus_add_driver+0x305/0x5b0 [ 147.408915][ T9987] driver_register+0x1e2/0x360 [ 147.408934][ T9987] usb_gadget_register_driver_owner+0x132/0x210 [ 147.408960][ T9987] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 147.408979][ T9987] configfs_write_iter+0x302/0x4e0 [ 147.409024][ T9987] vfs_write+0x6af/0x1050 [ 147.409046][ T9987] ? __pfx_configfs_write_iter+0x10/0x10 [ 147.409067][ T9987] ? __pfx_vfs_write+0x10/0x10 [ 147.409092][ T9987] ? find_held_lock+0x2b/0x80 [ 147.409126][ T9987] ksys_write+0x12a/0x250 [ 147.409146][ T9987] ? __pfx_ksys_write+0x10/0x10 [ 147.409169][ T9987] do_syscall_64+0x123/0x790 [ 147.409194][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.409212][ T9987] RIP: 0033:0x7fb2c279e2d9 [ 147.409226][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.409242][ T9987] RSP: 002b:00007fb2c36f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.409260][ T9987] RAX: ffffffffffffffda RBX: 00007fb2c2a25fa0 RCX: 00007fb2c279e2d9 [ 147.409273][ T9987] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 147.409286][ T9987] RBP: 00007fb2c2835888 R08: 0000000000000000 R09: 0000000000000000 [ 147.409297][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.409307][ T9987] R13: 00007fb2c2a26038 R14: 00007fb2c2a25fa0 R15: 00007ffc8e87ea98 [ 147.409324][ T9987] [ 147.409331][ T9987] [ 147.409335][ T9987] The buggy address belongs to the variable: [ 147.409340][ T9987] ac_header_desc+0x0/0x40 [ 147.409362][ T9987] [ 147.409366][ T9987] The buggy address belongs to the physical page: [ 147.409373][ T9987] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccca [ 147.409388][ T9987] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 147.409410][ T9987] raw: 00fff00000002000 ffffea0000733288 ffffea0000733288 0000000000000000 [ 147.409426][ T9987] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 147.409436][ T9987] page dumped because: kasan: bad access detected [ 147.409444][ T9987] page_owner info is not present (never set?) [ 147.409450][ T9987] [ 147.409454][ T9987] Memory state around the buggy address: [ 147.409463][ T9987] ffffffff9ccca580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 147.409474][ T9987] ffffffff9ccca600: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 147.409486][ T9987] >ffffffff9ccca680: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 147.409495][ T9987] ^ [ 147.409505][ T9987] ffffffff9ccca700: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 147.409516][ T9987] ffffffff9ccca780: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 147.409526][ T9987] ================================================================== [ 147.413858][ T9990] kcov: kcov_start: t = ffff88813c54cb00, size = 524288, area = ffffc90038213000 [ 147.416061][ T9987] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.617220][ T9987] CPU: 3 UID: 0 PID: 9987 Comm: syz.6.896 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.621545][ T9987] Tainted: [L]=SOFTLOCKUP [ 147.623349][ T9987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.627094][ T9987] Call Trace: [ 147.628432][ T9987] [ 147.629676][ T9987] dump_stack_lvl+0x100/0x190 [ 147.631642][ T9987] vpanic+0x553/0x970 [ 147.633314][ T9987] ? __pfx_vpanic+0x10/0x10 [ 147.635195][ T9987] ? mark_held_locks+0x40/0x70 [ 147.637192][ T9987] ? usb_copy_descriptors+0x18d/0x320 [ 147.638950][ T9987] panic+0xd1/0xe0 [ 147.640507][ T9987] ? __pfx_panic+0x10/0x10 [ 147.642354][ T9987] ? usb_copy_descriptors+0x18d/0x320 [ 147.644544][ T9987] ? preempt_schedule_common+0x3c/0xb0 [ 147.646781][ T9987] check_panic_on_warn.cold+0x19/0x34 [ 147.648909][ T9987] end_report.part.0+0x3a/0x90 [ 147.650560][ T9987] kasan_report.cold+0xe/0x18 [ 147.652513][ T9987] ? usb_copy_descriptors+0x18d/0x320 [ 147.654764][ T9987] kasan_check_range+0x10f/0x1e0 [ 147.656834][ T9987] __asan_memcpy+0x23/0x60 [ 147.658677][ T9987] usb_copy_descriptors+0x18d/0x320 [ 147.660816][ T9987] usb_assign_descriptors+0xd2/0x470 [ 147.662651][ T9987] f_audio_bind+0x243a/0x3950 [ 147.664523][ T9987] ? __pfx_f_audio_bind+0x10/0x10 [ 147.666602][ T9987] usb_add_function+0x219/0x890 [ 147.668627][ T9987] ? composite_dev_prepare+0x211/0x420 [ 147.670868][ T9987] configfs_composite_bind+0xd83/0x1960 [ 147.673120][ T9987] ? kernfs_create_link+0x1bd/0x240 [ 147.675245][ T9987] gadget_bind_driver+0x28c/0xbf0 [ 147.677330][ T9987] ? __pfx_gadget_bind_driver+0x10/0x10 [ 147.679586][ T9987] really_probe+0x241/0xa60 [ 147.681464][ T9987] __driver_probe_device+0x210/0x460 [ 147.683624][ T9987] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 147.685999][ T9987] driver_probe_device+0x4a/0x140 [ 147.687686][ T9987] __driver_attach+0x21f/0x5b0 [ 147.689690][ T9987] ? __pfx___driver_attach+0x10/0x10 [ 147.691860][ T9987] bus_for_each_dev+0x13e/0x1d0 [ 147.693774][ T9987] ? __pfx_bus_for_each_dev+0x10/0x10 [ 147.695671][ T9987] ? bus_add_driver+0x2b5/0x5b0 [ 147.697723][ T9987] bus_add_driver+0x305/0x5b0 [ 147.699655][ T9987] driver_register+0x1e2/0x360 [ 147.701626][ T9987] usb_gadget_register_driver_owner+0x132/0x210 [ 147.704168][ T9987] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 147.706457][ T9987] configfs_write_iter+0x302/0x4e0 [ 147.708531][ T9987] vfs_write+0x6af/0x1050 [ 147.709905][ T9987] ? __pfx_configfs_write_iter+0x10/0x10 [ 147.712211][ T9987] ? __pfx_vfs_write+0x10/0x10 [ 147.714167][ T9987] ? find_held_lock+0x2b/0x80 [ 147.716038][ T9987] ksys_write+0x12a/0x250 [ 147.717788][ T9987] ? __pfx_ksys_write+0x10/0x10 [ 147.719475][ T9987] do_syscall_64+0x123/0x790 [ 147.721149][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.723500][ T9987] RIP: 0033:0x7fb2c279e2d9 [ 147.725344][ T9987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.732720][ T9987] RSP: 002b:00007fb2c36f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.736079][ T9987] RAX: ffffffffffffffda RBX: 00007fb2c2a25fa0 RCX: 00007fb2c279e2d9 [ 147.739178][ T9987] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 147.742244][ T9987] RBP: 00007fb2c2835888 R08: 0000000000000000 R09: 0000000000000000 [ 147.745365][ T9987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.748407][ T9987] R13: 00007fb2c2a26038 R14: 00007fb2c2a25fa0 R15: 00007ffc8e87ea98 [ 147.751507][ T9987] [ 147.753533][ T9987] Kernel Offset: disabled [ 147.755299][ T9987] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:19:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000167edd RBX=ffffffff8fa91580 RCX=ffffffff8bd48235 RDX=0000000000000001 RSI=ffffffff8e3e346f RDI=ffffffff8c625580 RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0 R8 =0000000000000001 R9 =ffffed100d4467bd R10=ffff88806a233deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000 RIP=ffffffff8bd4676f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005618ed762da8 CR3=000000000fb96000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcc0c002 Opmask01=0000000000000010 Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100008781 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000662d 00005618ed754d70 00005618ed754d90 6368642f6374005b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 828183873a3d0015 16170b3637303f3e 3d3c3b3a2d2a2928 2726242221200a09 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005618ed7590b8 0000000000000000 000000000000000f 00005618ed00873d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005618ed753918 0000000000000000 000000000000000f 0000000000875d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000017d931 RBX=ffff88802069cb00 RCX=ffffffff8bd48235 RDX=0000000000000001 RSI=ffffffff8e3e346f RDI=ffffffff8c625580 RBP=ffffed10040d3960 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4667bd R10=ffff88806a333deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bd4676f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4a46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1454526e9c CR3=000000005f72c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f919855d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd833061c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd833061c6 00007ffd833061cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9197835e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9197835eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f919783600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9197835e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91979f4600 00007f91979f45e0 00007f91979f45e8 00007f91979f4618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91979f45f8 00007f91979f45c8 00007f91979f4600 00007f91979f45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000150 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888026ad8000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900032d7ae0 RSP=ffffc900032d7890 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc900032d7b00 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bd756e4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f87cbb3a780 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8b22757e20 CR3=000000003f26c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000003401003 Opmask01=000000000000000f Opmask02=000000003f27002f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dee79c3920 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f87cbd0eb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055dee7860a50 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9919fea900000002 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f3670695f732500 7325207373657264 6461732520676e69 646461203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f13554c5f560000 5600055656405741 4144560005424b4c 414144051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 39773b3a3633211c 1a0f0c060379010e 3701013563538263 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0101910101740050 b13ddc79514a1d05 62320100010092cd ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 422fff133dd00502 39773b3a3633211c 1a0f0c060379010e 3701013563538263 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2034390036652065 6165620a64655f36 200a206465625f20 20333900360a6465 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2caa5 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc9000552ef40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000038393954 R12=0000000000000000 R13=0000000000000037 R14=0000000000000005 R15=ffffc9000552f258 RIP=ffffffff85b2cacf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb2c36f36c0 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000129e84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8e87ef86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc8e87ef86 00007ffc8e87ef8c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2c2835e6b ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2c2835eab ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2c283600f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2c2835e9d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb2c29f45f8 00007fb2c29f45c8 00007fb2c29f4600 00007fb2c29f45e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000