last executing test programs: 46m1.528514374s ago: executing program 32 (id=207): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r0, 0xffffffffffffffff, 0x400000000000000) unshare(0x2c060000) unshare(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='*:,+,\x00', &(0x7f0000000340)='/dev/sg#\x00', 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x3a, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @loopback, 0xb6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 40m51.422336805s ago: executing program 33 (id=698): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x102, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, &(0x7f0000010180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r3, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000c00), &(0x7f0000002000)=0x4) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='pim6reg\x00', 0x10) 40m51.248380178s ago: executing program 34 (id=704): close(0xffffffffffffffff) r0 = syz_open_dev$loop(0x0, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x8001) accept4(r4, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x28, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options, @mon_options]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040080) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 40m51.094178057s ago: executing program 35 (id=705): r0 = socket(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000473000/0x2000)=nil) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0xf0, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x70, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x54, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x38, r6, 0x101, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040c1}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(r9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x1}, {0x28, 0x0, 0x0, 0xff7ff038}, {0x6, 0x4}]}, 0x10) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) sendmmsg$unix(r7, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x1, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300"], 0x1ac}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0) 40m50.928892665s ago: executing program 36 (id=702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1300000010000000020000000000000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000000003001c470665a5310000000000000000000000000000000000000001dc0a0000fae16a0124fcc7c1dfe29f305224bcce9e9554f90c03d67c06c7fa9f39333879c21d114415649b6765cb"], 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0xc02, 0x0) r8 = mmap$binder(&(0x7f0000537000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000780)=[@acquire], 0x0, 0x0, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r8], 0x7c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x4c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x4c}}, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000440)="97"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 40m50.743887178s ago: executing program 37 (id=701): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfffffe94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0xe8, 0x0, 0xe8, 0x1d0, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0x40000002, 0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = io_uring_setup(0x2004bea, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4840}, 0x2) 35m18.153485745s ago: executing program 38 (id=1346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0904000000000000000c537a044fe25d7d431b580567290002000003240004800c000180080001006c6f6700140001800c000100636f756e74657200040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r2, 0x2f, 0x4608, @void}, 0x10) syz_io_uring_setup(0x27c, &(0x7f0000001440)={0x0, 0x4673, 0x40, 0x1, 0x297, 0x0, r2}, &(0x7f00000000c0), &(0x7f00000014c0)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r3, r2, 0x2f, 0x4608, @val=@iter={0x0, 0x2}}, 0x40) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)={0x64, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x5, {0x8001, 0x6, 0x0, 0x4, 0x0, 0x0, 0xfffc, 0xfffd, 0x2004, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) syz_usb_connect(0x0, 0xbfd, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xab, 0xf0, 0xdf, 0x20, 0x419, 0xaaf6, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbeb, 0x3, 0x2, 0xfb, 0xa0, 0x8, [{{0x9, 0x4, 0xfc, 0xdb, 0x7, 0xf5, 0x2a, 0x86, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x1}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0xe25b, 0x4}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x5, 0x4, [0x4, 0x1, 0x3, 0x6]}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x3, "822a16"}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x0, 0xfe}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x400, 0x1, "40cd"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x283, 0x2, 0x6, 0x7}]}, @generic={0xb7, 0x22, "c7c8bd384b0532a6a68f439f94f9b60952668efef0565afde2a9127741915599a50d6ad5aa36d8afc7d61fb87873d94076690b577ca4f166a02dd419cd34dd25907cc358faea34b9346758a3286c7b7652e6bca9a2003e17da1ee92e60be8039048b4f5d5d8b4c5f6c0f22827676c25bf14d726b8e9fd2fb4577cd9907165834d1f3e02ebe34a11dc7708013c0502f177e83335bb4e0a4c5928f315569556602000936545cbe4195ab70a9d41f28469e551baeeb87"}], [{{0x9, 0x5, 0xa, 0x4, 0x20, 0x6, 0x5, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x7f, 0xc0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x8, 0xa6, 0x2, [@generic={0x22, 0x21, "2c84bb97ee0ec7262d93f7671c02db0d5977cc9635f5b01efbc7a294da23906b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x7, 0x7, 0x42, [@generic={0x5, 0x2c, "a41354"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xdb, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x6, 0x4, 0x3, [@generic={0xce, 0xc, "30b8ff49522586340d861d992bd41bb11e51b538d32979a58c01ff85cd447c31c3d3b0a624cf6a469d597347ec317ec69548d50565977887f2f8ea9c1b1b7c31ba6dc277b116498fcd72502d2f5cab469a1878c571341291ed658a483751379b05f7ce89df10aec58007ff724feac32298c2ede000a3ee7c04977d5e493948cac15e5b5d75f98c938af6a54b738a406e7f1c709b9e735d525675ae49d1a1e6611155bf514a632b5992a1973489d737617ff3ee1eb58fd429e80e5a4bf55d298cd3bee189f1a0bb46624bfe78"}, @generic={0x4a, 0x0, "c7610540887445a19821968a0b72e9b1ce29bec3a90d21f5d0bbb93087e6a956af55370e97223140c5be9ecd8118717c8b28c5856a619756c4606f33e5a39343794f7969a4096768"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x80, 0xf7, 0xe7, [@generic={0xb7, 0xc, "89ede3c0e637d4c3774f12a7861000129d0840b4de7061372ecefdb75cff66d4fc75cdf3083c00ba647a0917f99cd9fec980055791344749c84604e30e287111f76b672202103a403db66b4d7cd7658898be1b520398353c4e9d88353829bcb38a04bf945d85fac4140ba961c88dcd6a1da944ce187190be51fabd9a0f9730af2e1629e4ced38b9bcc7ce97edc6023b8240fca464ebc6c79a0a78ce212e547417c4db9316cf108ff3238173d254e8ae9f1a9a799af"}, @generic={0x62, 0x5, "4491c35c5332feb3f8eb4e00d944bb46fdcb262bc69007538f245e64252816f1a985134288cc438607f39cff88c1ae2e91f0ea194eb245af20a8c1f60c4e2fd99ee9c425b90ea57ec282fabc1254b1c16ec18fa49b5a355a53eefdcaa31d28c5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xfb, 0x80, 0x4}}]}}, {{0x9, 0x4, 0xd8, 0x93, 0x2, 0xbc, 0x24, 0x29, 0x2, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "0759cc71"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x96, 0x2, 0x3ff, 0x1}, {0x6, 0x24, 0x1a, 0xd5, 0x4}, [@acm={0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}]}, @hid_hid={0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0xe69}}], [{{0x9, 0x5, 0x4, 0xc, 0x200, 0x8, 0x10, 0x2}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x9d, 0x2, 0x7f, [@generic={0x8e, 0x6, "a9629e2f21b54a30e509ead2840f7c383e98aa58383a04d99be8787008592dc9b6c6c808606185931ad40f46b315e5b43a81d0f27e4386330c30c320bbc5b586538e038d5caa5eb87444ecccfc7e6d0cd8f74aa518f22395f9e1bc4c774705be6d1922c6394c63a936c35314ed4b816e6d82c15b0ec1ac78f53d8d57048e3e0e7d4bcfd997690ca728360f14"}]}}]}}, {{0x9, 0x4, 0x41, 0x9, 0xe, 0x47, 0x9, 0x15, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "c92b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x373, 0x9, 0xb432, 0x6}, {0x6, 0x24, 0x1a, 0x5, 0x14}, [@mbim={0xc, 0x24, 0x1b, 0x3f2, 0x8000, 0x5, 0x9, 0x7, 0x78}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x16, 0x0, 0x7}, @acm={0x4}, @mdlm_detail={0x97, 0x24, 0x13, 0x6, "9f3e1488762e3644b01568f7c77d9f3b57c48d0faf7156d5cfa6c323f5824281277af4ce27e75cbef44cf124e1e64cd3c33e9e64e58d7f3d17ef4a69b2fa9c3717afe02319ab7ca5f436e1bea041418773d4ef1b6d9499a5783709dc3ce3ab276c6d1f09fbcbbc49fb65231088624469d1d770463e80c13482c9d05150144f72e8abf28b09b19a739493bc99d7447bc9e978e2"}, @country_functional={0xe, 0x24, 0x7, 0x4, 0x6106, [0x800, 0xa, 0x400, 0x2]}, @obex={0x5, 0x24, 0x15, 0x938e}]}], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0x5, 0x3, 0x2, [@generic={0x53, 0x21, "f487b9f7befff64a9f7fd7b978a75ed99b9e6005e6e0b13480c986ef1e08b7fc0aa857362c799025c421402d1bed927a8f0af8bc2135b103683055b467f8e02108ec848ff33fb4da565f62a77d347d03de"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x90, 0xc, 0x10, [@generic={0xc7, 0xa, "0b82502859053ff1deb33be278255b1b2fc59ae8bfc194c4a95ceab62b5d718a1ce7bd2480c051b4b3c650035d80d8702dad6078df97b527cf3ef1740e1b3147c668e6ee1238ecdeedd4c3fd76c1dac7b15b590ec4010128455e26f46193c0907eb641407935fd42ca0ab59df37a0bfdaa87b3de6d808371bd685dbb65d82ded3e053f56487293856704c8034d6bd668bd16e270e9edae0b7d834891d33ffc3bfe85ea9bf62b396215a81830fd602e17417af997eef5cd8483aed288c373fe8cc507912e9e"}, @generic={0xdb, 0xa94a764ca2706424, "fb7337aed681b06157a4d23eb5615024a5e62690980b9d93ecb8e69b528e6cc629ba5d98ee7a6f4dc40819b35293b02797fb12e95df3aefc9503c1fac02fa1478f43e583d79991ff99afdb0e98a2d63165bba683962493c2d01c8089109b81cc9d773035c8bb4ba3b200fd68a3fe2f02fdfab7ef200dd17a245b3daa5eb1fd91b54fa3a41bb6835483acde6515f6b100e121e94634d16454da804afc8d686faf57a5fc9267effc80c13a6a800c9a5c05b243ecf3a99d13bc9008f3180479023500e0a21766214080f880477524cf81a821c8a5eabc0c6cca4f"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x3, 0x0, 0x8, [@generic={0x5c, 0x9, "1bccd698eb75a69c743948c57e586bfca0445cf65cdb2791c28365cb096a5915a3c88854e028dd1d8d846a33a9fe98d29898d0d357f2b648c21595f823c783f081aad917b4f155b3e9a463ecfea6b9b73872fd295ff7fcf63cc6"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x5b, 0x7, 0x9, [@generic={0x53, 0x3, "0ce365b854f01de77cc247189615a6759ef66e070355dfc3a03be163af276cdedc5ac39ebc1851d929253d3d180cceba23166f45f459771f9a0cc930197924137d4012ee1e465c9dba868ab31aa10916f3"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x0, 0xf8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7f}, @generic={0x64, 0x7fd45f1fa72c8b7c, "9acfb9a2b0ae3ff0d8aecff7d8343453504ed48ab23f871bc6caff81084925faaa47fef97f99483bf2570720204cd1e6b467d9598c0a54cea029d234ae41e8035552e45f04908f8f11bd51750558aba07864533fafacf51b9c97f103974e06705b6a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0x8, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x6, 0x10, 0x9f, [@generic={0x4d, 0x5, "fae8ae195343c429a96af6b2164d01a68ea315b5a851473e19bed2453d552b4be9268addbcac4b4dc1fb81e0a2e7fc5236695331f0ebf0d37f0814471174a6d8cbcd1c73ede8b68c06138a"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x40, 0x7, 0x1}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x9, 0x75, 0x3}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x7f, 0x5d}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x6, 0x9, 0x44, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x65, 0x5}, @generic={0xe0, 0x2, "a6da592c373db2bdcf7f2102d1ab2b36936baf03f321e3cdd48e7a9d107aa95695456e38f5c485c3a4fdb0fddffb569d5363c505240deb566c4f93e3cd8165f70aa779c529afdee5c1cb6c5297fee4345b9c88e9a4ac1491d74d5563b44fc710653ef34047bb855a586a3de3d2c0f9a646bd8ea5c2381803442ecca837dedab28ee7e3a70a96a5e2875e936da5c47b9dc1e1c0c1820e6b9b09ba2a07d36caa90b0537ff0946f1b9f8bcc0f8ff117861b40808588552896e7ac5053194317a3127f7625e086caca1e398e318a794b738b773d5ed24a93646fdefeb3204275"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xfd, 0x2, 0x0, [@generic={0xd6, 0x6, "f43908495a955d1f6c5258497039e4432823f44d954157dc7097f5e6a843417b0cf4826bf514435e521ca8b232111ec83c958bd9e5eafdedb51c756b3128d3b253484408d9ac2aa9ef246d0d195d4e9982bd823cecdddf96903418143c5fc67812e88458eb8e6500c0d99e03e0b89fda927be3a6b05b9e776ddf77d256441b71b87753db8b5bc76dd8379ee9f527b4347686bcbf3ef62ac677513feb01d0c90ccbe64b60cb18e7567b2688b40e918d028ae944c65f06905e4c17a33929fac2184b53a4c8157f9d395666a381676b0169710fc589"}, @generic={0xc5, 0x21, "5cc82b60259c8443ec705bf4f971fbdb4d69a43843be092bd07bf9854fd705be398526ff234dfada850efa117e20fa9de9872418875629cdf7de7319f88ff3af136cafb23869a303270266e80c2890d97d503564189f8eb5ce6ea9a7e6bc796b8c5c77105a2ab9d6faccf419bb85187be6f6e2f9137da367ddc9f4737e083101f6bf37a7c6b9fa35fabc5c009962df444acfcb767b050a6826bf1ddf9dd054475a76fd0d12873f696954584e754cdbce6fa9a8e076dc853f31f8aa5a50a5b804e1ffce"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x50, 0x81, 0x5e, 0xd5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x7, 0xf7, 0x5, 0x40, 0x6}, 0x15c, &(0x7f0000000dc0)={0x5, 0xf, 0x15c, 0x4, [@generic={0x93, 0x10, 0xe, "1850d2272e977c26df9333250bbdc731fed4e373488210c52efb55776610754b06acd7331cc6fdfd3be961c5d752a13bda0360cbba078f765198cc988f4888888c4bd76bfe71007c6a1e6ffc46828659793e39a39e61245467410e6beab80df6425cfb29bbe55fec5ca19a7ebeb3d2612f9951eb7ddc2378849652ca32238c83e6d57f3a7ac87eee57a3261658345708"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe6, 0x25, 0x7, 0x0, 0x6}, @generic={0xaf, 0x10, 0x1, "2a76d26d097608c64ca6ac8581ec37f901460d6e9e8d2b5aba9420b97b19859c9250ff2b418c115f6bb5b3cf439f09b1d16f59be9723ff60c796c8d568373065eccfab09c6e877cef9fa8a052bea44d8519391315967f72065e30b2acaf64c57fdf8306d23081fbf4079757204f9fd6f1f342d5deabddb7054e1f0b986660deb8d3cc96ebe2e92dc3aa5f42868c6d8bdf06477fab33f6e2511052c75b10fe2d08a99645c745cf14881fd9383"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0xa, 0x9}]}, 0x9, [{0xe8, &(0x7f0000000f40)=@string={0xe8, 0x3, "a08fcd057362ea3b90e2a97d0ea52c888760d88adc574c4d511c0fc2ee192b5a85593a74172468a169dfe4232d6af0a767d945e9ae20e565cdfb196e0306d622d5476107794418b138bf469d28fcb3f9575c883dec505f8ae80de7bfc94d44f84d78955c95e2ebff2904ae6867cb65af81fc55db510d7756f9a6dda154f6c768aa96e901fc7b6cbf5624c33f297b25fab5a47052038571a7ffe53a7e0c6c3bad10b461fbb917424e51d6ee4815f853cb21c1f1b6f911bfc576313393f644f492049cdf299018920e77da1f02593611e93de30db7b3fde2e76d398bec9df963a4f9b1a6b0b06f"}}, {0xbc, &(0x7f0000001040)=@string={0xbc, 0x3, "124294f7f651fb8495f9a31b1175282877a11dbefd32fefaa726c84ff5445f585d7b338779f0f9080b3f16004b5fe44aea8c7990e5957ea33586051332ac3e78b15c6cd7de2ce689d4c502a244c4e1637a76f89c1334ebbf1a68e99baee4bb52bc951a5f0b79ddacb169756b90055e7e767cd6b6a427385769adb56249a2ffa1af456bcebc32f361bf2500b025e38a9bff49bf0f1f98fe597f51237a80cc016c2948007b4955e190eb4709ea0b4c827f7ed34a35a0133b4002a3"}}, {0x29, &(0x7f0000000040)=@string={0x29, 0x3, "45a534c03b7f4d1a65336b12d6d9725137b5dedecebb035126dd85a41a85aeeeff2d8d81491f7c"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x812}}, {0x54, &(0x7f0000001140)=@string={0x54, 0x3, "3b0bafe46b05ef8cf9cb66136b679df620c5e5decd76fda59052f4324e7e5c5ee711d2c311d9400705631c964627c30bbceb0b9ec20335b3856a63a7a93988d3c993a5a47375a8512dcbe820fdf6849958e0"}}, {0x86, &(0x7f00000011c0)=@string={0x86, 0x3, "d51e47d2001c9888be806134d0e8541ba4b6e8a92ba21281903a1c6bed2e7e9c23c689fd8c84ff9a46e3201354b0fb72afdc8c1ba85e3e0500c334c1fa02b465b1c28fc870c553156d6879e48ea21904c8aec869396776f9dee808a03689477be67070301e235091b6e9092f5fbb23ca921fa77b86438cfc9c782d53028d99c01bcf0ef3"}}, {0x6, &(0x7f0000001280)=@string={0x6, 0x3, "76fb1656"}}, {0x10, &(0x7f00000012c0)=@string={0x10, 0x3, "9e81438e4fb7582c77ebfdfa142b"}}]}) 31m39.230690696s ago: executing program 7 (id=1809): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x62001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x1b) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) 31m36.842380704s ago: executing program 7 (id=1813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000240)={0x5, 0x0, 0x6}, 0x8) 31m35.824653521s ago: executing program 7 (id=1816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfffc}, {0x8, 0xf}, {0x0, 0xffe0}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000002100010027bd7000fbdbdf25ff011bba000000000000000000000001fe8000000000001100000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a86b6e00b300000050001100fc00000000000000000000000000000100000000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c010000000000000a0002000c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf25040000000800040002000000080002005066000008000300bc9100000800040000040000050006000000000008000300060000000800"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x23, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) pwrite64(r1, &(0x7f00000011c0), 0x0, 0x7) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 31m35.015373201s ago: executing program 7 (id=1819): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xb9c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x3, 0xb) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x7, @private2, 0x2}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000300)="f7874952da3cae0d04f864c7fe4c9a0a4c029162c85d905260e17764f4f384199396395c10f7d8e08c1c0a871f6e411b6378c33ab227fcbbe536497dc366d69b31c5de27a01afc51361b37052d3aa846aef62a21157acbb3dda6b4f15116d3f32dba6d6bddf0c8a9f27ffd7aece6db8b1184c9d8aa006fde84e2e14f461fe4c5e9", 0x81}, {&(0x7f00000003c0)="f519bbcd8e7092c97742b2236172129c147094af9b744a6548f7c4becfba06adf157d83428111211386f36a0607eca8df9f0b089d18c533c6e9d4b13e52bf1a8fd875839e2b776fdc3c6c33322b74b15c1cdbe62766ebcafc965fba7ec79b8b206b7c74678bf1f17b2aad26e93117ba6f23c3544828442f5bdaa9f12aff922fd2bcb58d25b994a7476eb379ef66dd04a858b831bd47b5f1643dbcc0a76743c42b93622057132389d4d2299f9a50e", 0xae}, {&(0x7f00000001c0)}, {&(0x7f0000000280)="e373444db48cc4874924bc678f49e04f09342ebbe3430fb5", 0x18}, {&(0x7f0000001300)="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", 0x169}, {&(0x7f00000011c0)="dfe0d9bb3be56c34eaa8e4ddc0851b035b3395f1c8a67d7638321a8b21f63780fa287630c297e7ddf526510ae0e5f9f760679a60f5f72ff1eaa671046e7cee774d8263fd35782333c8dfe5a2a9327c6c6f686185bd8f9da1c5063d7bfd8b899904eaeac738427a5ad21e2bf47606983476aa80a36707066f666e42d8e04effc450b557a24f4e158d092a8e16c1cf0d908b3939c36a7d4ea6ec2daf915f4d9863aa035300805bd05b77d48c57433c860a19ef86bbc80919cadf", 0xb9}], 0x6}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYBLOB="217891fd50f884d4d91b9e7a2ef745ebcc0d2575ab", @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="e6b4cc6b6a9db5bf14d9581ad8c7827ee39d831213bdd0752a7f95640aad82b469bbe19b7956f1588a3667772c7709f4a46a04f6461bc9a5292025f98fefcc014500ad5b947df340a668d8f59e4d2edfd9091b0acae83881856a83ca525b0163d293e3bdad5e18ca9ec4def0269d49e73daa8930da1951b820a4fb28900757051c7d3566ceb79bfd7d43936d1d3302b0f55c7876a1ae0e8d92ee34a64383c57b89b93d3be29c4e81842df71a487dd388894d83f196a4f78d55e956d0772323ee37b415c86ea0089d8b3d297ef84acfe612a8b0a12a7c3ea3bae8316508f0edafe3ffdccfc2bb09dc23b42234d7c8384b82061af484", @ANYBLOB="c529e99f73bdf9746ab525d0d3d45b6d084d0555df67a9fc92f172cf122ab138cf685f40d595a4284aaf7d0d0b432ab0566f02f0ec1cff45dc182067ddf24aed2e7b978316ab043660191b93bac2976405e3c14adb9a54c49c587e80c1ba1d388e49113825b5ad2ddf80223fda7e468f61f070d8d76abcb308b3c46e8878995c349ca2bb4661733005921540464ed98aadb91fe3409164920ac1100fa2d44de7d1269361dbac526182e1b406dbfd90f73973338ddd9055174d9ee702ad2fab60a33ebde3547615b5b7dbf73d69397ae3de8fceacf3d400810f642192ff8b50bf59b142b1e54108d3"], 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000000)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa15, 0xf, 0x4) exit(0x7) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) 31m33.802395441s ago: executing program 7 (id=1823): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xf0f041, 0x0, '\x00', @value64}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000200)={[{@nr_inodes={'nr_inodes', 0x3d, [0x38]}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a300000060005000100070000000800094000000001140008"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x208000, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) read$FUSE(r4, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1f, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f608779744"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x9c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0x2, 0x0, 0x932, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 31m31.608843044s ago: executing program 7 (id=1826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) socket(0x2, 0x80805, 0x0) r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 31m15.588386371s ago: executing program 39 (id=1826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) socket(0x2, 0x80805, 0x0) r4 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) 27m40.847301621s ago: executing program 5 (id=2261): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b881}, 0x3000c81c) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) finit_module(r4, 0x0, 0x100000000000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)={0x14, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 27m40.766885316s ago: executing program 5 (id=2262): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x7, 0x3}) r1 = socket(0xa, 0x5, 0x0) listen(r1, 0x100) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x890, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x7323, 0x0, 0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0xc0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 27m38.117500078s ago: executing program 9 (id=2265): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x9, 0xc}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0x7, 0x2, 0x0, 0x6, 0x800009, 0x1}}, {0x6, 0x2, [0xffff]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4002001}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 1) 27m37.52262329s ago: executing program 5 (id=2267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, 0x0, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0x0) 27m37.062128416s ago: executing program 9 (id=2270): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1], 0x1000000}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0xa, 0x2, {}, 0x58603}) close_range(r3, 0xffffffffffffffff, 0x0) 27m35.789608891s ago: executing program 5 (id=2271): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001940)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x9d}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private, 0x6}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = io_uring_setup(0x12c, &(0x7f0000000180)={0x0, 0x1347, 0x8, 0x3, 0x1cb}) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x319e, 0x80, 0x1, 0x21f, 0x0, r1}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20441, 0x0) ioctl$BLKDISCARD(r5, 0x125f, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x40, 0x0, @fd=r2, 0x8, 0x40, 0xffffffff, 0x2, 0x0, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 27m35.536293793s ago: executing program 5 (id=2274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9}}) (async) 27m34.906169161s ago: executing program 5 (id=2275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfffc}, {0x8, 0xf}, {0x0, 0xffe0}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000002100010027bd7000fbdbdf25ff011bba000000000000000000000001fe8000000000001100000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a86b6e00b300000050001100fc00000000000000000000000000000100000000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c010000000000000a0002000c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf25040000000800040002000000080002005066000008000300bc9100000800040000040000050006000000000008000300060000000800"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x23, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) pwrite64(r1, &(0x7f00000011c0), 0x0, 0x7) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 27m33.527684068s ago: executing program 9 (id=2278): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000004c0)={0x2, 0x0, 0xd, 0x1f, 0x64, &(0x7f0000000b40)="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"}) r2 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 27m30.937952896s ago: executing program 9 (id=2280): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) madvise(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video4linux(&(0x7f00000001c0), 0x2, 0x40080) 27m29.262966547s ago: executing program 9 (id=2284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev, @local}, &(0x7f0000000240)=0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, r0, 0x4, 0x2, 0x8}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x18, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x14}, @ldst={0x3, 0x0, 0x0, 0xb, 0xb, 0x30, 0xfffffffffffffffc}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x9d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @printk={@llx}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x4, &(0x7f0000000100)=""/4, 0x40f00, 0xb, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x40, 0xfffffff9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0xffffffffffffffff, r2, r0, r3, r4, r0, r0, r0, r0, r0], &(0x7f0000000580)=[{0x1, 0x2, 0xb, 0x6}, {0x3, 0x1, 0x6}, {0x1, 0x1, 0x4, 0x6}, {0x0, 0x1, 0xd}, {0x5, 0x3, 0x9, 0x9}, {0x3, 0x5, 0x3, 0xa}], 0x10, 0x200}, 0x94) pread64(r0, &(0x7f00000013c0)=""/208, 0x31, 0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000006c0)={0xb, @raw_data="d2eb2965d64ccdf935d2b581841a61f962e8318959f3f6fc096686fe2077329b32ccc6c76e41cf32bed38a5bd306faf3176241a0a0086f163916922510019dfa6b8f90d0d63bf6f5f8efe4f17b92cef9e1df3b6f686fbe23bbd81c577662c93ebc056124ac2fd144f638bba498843352792531d4e147ad9341b27744f876a19a84fc9dbd8b7d9b54bba85342cc830fd45e415612036c2f9fff818fb012cb71583f5b654565aa2234e56c1ccde53fdf01a6dcd92c0f78039a782c74594da3b490ce879da243964cc9"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r7, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 27m26.395235591s ago: executing program 9 (id=2289): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x2064, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 27m19.789594674s ago: executing program 40 (id=2275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfffc}, {0x8, 0xf}, {0x0, 0xffe0}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000002100010027bd7000fbdbdf25ff011bba000000000000000000000001fe8000000000001100000000000000bb4e2100004e219ffd070080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a86b6e00b300000050001100fc00000000000000000000000000000100000000000000000000000000000001ffffffff000000000000000000000000000000000000000000000000000000006c010000000000000a0002000c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf25040000000800040002000000080002005066000008000300bc9100000800040000040000050006000000000008000300060000000800"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x23, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) pwrite64(r1, &(0x7f00000011c0), 0x0, 0x7) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 27m9.645432424s ago: executing program 41 (id=2289): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040), 0x2064, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 24m4.980002179s ago: executing program 0 (id=2729): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bind$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x100000}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x7, 0x5, 0x77}, {@private=0xa010101, 0x4e23, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x1000) socket(0x2, 0x80805, 0x0) r5 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) 24m3.594383552s ago: executing program 0 (id=2733): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000580)={0x5, 0x840, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x1, 0x0, 0x1}, 0x38, 0x2, 0x0, 0x0, "0246edc82ce55b5f1b2de2bb15fb359e891ecedc8a19d9e2a6b06697f2f60a1a9eb36af20b85adb38ffbb7bcd880081ffe6a5a6f86fb13cee7f8529f2552182e"}}, 0x80}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f00000003c0)=r3}, 0x20) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 24m0.649645856s ago: executing program 0 (id=2750): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4b8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r6 = dup2(r5, r5) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r2, @ANYBLOB=',rootmod', @ANYRESDEC=0x0, @ANYBLOB="684f43e03af6ea8f5429350a8be3f8948cc3a2325756335e3e519c787e28f8639e9741574ea3b293f830651e825d8b05b3b045b11bd4e9589d34bba5f06a09a0bdbc1f6d01b4f3b7d6b5762580cf5b9007a5d9a612ef06f014884cdad2a16b57735165a2404817502413b804cc75592bda03c9ab49ba6b75f3b0", @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r7, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x8956, 0x2}, 0x80, &(0x7f00000002c0)}, 0x48800) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0xfffffffb, 0x0, {0x0, 0x7fff, 0x400006, 0xffff, 0x4, 0x0, 0x0, 0x2, 0x0, 0x8000, 0x0, 0x0, 0xee01, 0xfffffffd}}}}, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@remote, @in6=@remote, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x32, 0x0, r7}, {0xffffffff997b8130, 0x46, 0x4, 0x2, 0x100000000, 0x2, 0x4, 0x1000}, {0x12c, 0x2, 0x4828, 0x280a}, 0xfffffffd, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x4d5, 0x32}, 0x2, @in=@broadcast, 0x34ff, 0x1, 0x0, 0xf9, 0x6fa, 0x5, 0x3}}, 0xe4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 23m55.774230817s ago: executing program 0 (id=2765): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xb9c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x3, 0xb) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x7, @private2, 0x2}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000300)="f7874952da3cae0d04f864c7fe4c9a0a4c029162c85d905260e17764f4f384199396395c10f7d8e08c1c0a871f6e411b6378c33ab227fcbbe536497dc366d69b31c5de27a01afc51361b37052d3aa846aef62a21157acbb3dda6b4f15116d3f32dba6d6bddf0c8a9f27ffd7aece6db8b1184c9d8aa006fde84e2e14f461fe4c5e9", 0x81}, {&(0x7f00000003c0)="f519bbcd8e7092c97742b2236172129c147094af9b744a6548f7c4becfba06adf157d83428111211386f36a0", 0x2c}, {0x0}, {&(0x7f0000000280)="e373444db48cc4874924bc678f49e04f09342ebbe3430fb5", 0x18}, {&(0x7f0000001300)="4debf7e5f26370442dc0c8d22963133d3aa424499f2c031312ea4cdaab9e843e07eb6f283a97c800004ceec71552861ce594cf530279edbae8d051fce9b238ac7e6758cd38c87b2d96b23126962c21270c3e6612e006d6b803f6ec433f1e88c7bd50cfe5ebc0f04de0bdd89cb17081a0c03e294bbc109bb3e4a5e5a8033457805320d69f615233fbb0ef20d4c7aceb2c2a8f09532bfc081f21f101eb3464af586c7c77b48b483189b039fc4e71e97c302a40ffa38abbe6eca4989b1c35f974d963681f66669cd08e2ab07c749fe6909442746118219958863b298663d1d0d11b595dd4ce42d43c04bb24122b69f65903faacf1688af55cbe34def11c122fc2296955b806b685fdd88aa15f95592237003dcb214a196ab77da6e6cbd4ac8364694e876c41b6843a5aa79f7a41d99920688c3730b1628096dba7b2784adee1c396ea787cd75afd24c9adc3845c94b54c614fa4833125ba90b333a87bf0cce5b3c4910410affb23bf72c5", 0x169}, {&(0x7f00000011c0)="dfe0d9bb3be56c34eaa8e4ddc0851b035b3395f1c8a67d7638321a8b21f63780fa287630c297e7ddf526510ae0e5f9f760679a60f5f72ff1eaa671046e7cee774d8263fd35782333c8dfe5a2a9327c6c6f686185bd8f9da1c5063d7bfd8b899904eaeac738427a5ad21e2bf47606983476aa80a36707066f666e42d8e04effc450b557a24f4e158d092a8e16c1cf0d908b3939c36a7d4ea6ec2daf915f4d9863aa035300805bd05b77d48c57433c860a19ef86bbc80919cadf71", 0xba}], 0x6}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYBLOB="217891fd50f884d4d91b9e7a2ef745ebcc0d2575ab", @ANYRES32=r0, @ANYRES16=r3, @ANYBLOB="e6b4cc6b6a9db5bf14d9581ad8c7827ee39d831213bdd0752a7f95640aad82b469bbe19b7956f1588a3667772c7709f4a46a04f6461bc9a5292025f98fefcc014500ad5b947df340a668d8f59e4d2edfd9091b0acae83881856a83ca525b0163d293e3bdad5e18ca9ec4def0269d49e73daa8930da1951b820a4fb28900757051c7d3566ceb79bfd7d43936d1d3302b0f55c7876a1ae0e8d92ee34a64383c57b89b93d3be29c4e81842df71a487dd388894d83f196a4f78d55e956d0772323ee37b415c86ea0089d8b3d297ef84acfe612a8b0a12a7c3ea3bae8316508f0edafe3ffdccfc2bb09dc23b42234d7c8384b82061af484", @ANYBLOB="c529e99f73bdf9746ab525d0d3d45b6d084d0555df67a9fc92f172cf122ab138cf685f40d595a4284aaf7d0d0b432ab0566f02f0ec1cff45dc182067ddf24aed2e7b978316ab043660191b93bac2976405e3c14adb9a54c49c587e80c1ba1d388e49113825b5ad2ddf80223fda7e468f61f070d8d76abcb308b3c46e8878995c349ca2bb4661733005921540464ed98aadb91fe3409164920ac1100fa2d44de7d1269361dbac526182e1b406dbfd90f73973338ddd9055174d9ee702ad2fab60a33ebde3547615b5b7dbf73d69397ae3de8fceacf3d400810f642192ff8b50bf59b142b1e54108d3"], 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000000)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa15, 0xf, 0x4) exit(0x7) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) 23m54.676493439s ago: executing program 0 (id=2768): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_dev$video(0x0, 0x9, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000240)={0x8, 0x8f}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0xa) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x7fffe, 0x0) read$msr(0xffffffffffffffff, &(0x7f000000c300)=""/102390, 0x17b4b) mount$9p_unix(0x0, 0x0, 0x0, 0x802ca2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000006580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000030a01040000000000000000020000050900010073797a3000000000040008900900030073797a3200"], 0x58}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="921f8eec274658a2c8cc571efde686d767d295a0805bda4c20b8c66e9a8ff1374fe6309954000bb37552d4b0cd77c781119a166d84a4a1eb801275cc4c89", 0x0, 0x40488c4, 0x0, 0xffad) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) socket$inet(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) connect$packet(0xffffffffffffffff, 0x0, 0x0) gettid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg(r3, 0x0, 0x101) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 23m54.474857645s ago: executing program 0 (id=2770): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f000001b100)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f000001b080)=ANY=[@ANYBLOB="5800f9ca000069c2000000", @ANYRES64=r4, @ANYBLOB="0300000000000000060000000000000009000000800000002f6465762f7372300000000000000000010000000000000018e0000000000000010000006f0000002400000000000000"], 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9d}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24048845) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f000001b040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000001b000)={&(0x7f0000000100)={0x68, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x399}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5cd}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x28}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffff, 0x7}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x5, 0x1}, {0x16, 0x1}, {0x24}, {0x18}, {0x4}, {0x12, 0x1}, {0x36, 0x1}, {0xc}, {0x5}, {0x9}, {0x5}, {0x60, 0x1}, {0x24, 0x1}, {0x18}, {0xc}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0xa, 0x2, {}, 0x58603}) close_range(r7, 0xffffffffffffffff, 0x0) 23m39.27244323s ago: executing program 42 (id=2770): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f000001b100)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f000001b080)=ANY=[@ANYBLOB="5800f9ca000069c2000000", @ANYRES64=r4, @ANYBLOB="0300000000000000060000000000000009000000800000002f6465762f7372300000000000000000010000000000000018e0000000000000010000006f0000002400000000000000"], 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9d}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24048845) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f000001b040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000001b000)={&(0x7f0000000100)={0x68, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x399}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5cd}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x28}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffff, 0x7}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x5, 0x1}, {0x16, 0x1}, {0x24}, {0x18}, {0x4}, {0x12, 0x1}, {0x36, 0x1}, {0xc}, {0x5}, {0x9}, {0x5}, {0x60, 0x1}, {0x24, 0x1}, {0x18}, {0xc}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0xa, 0x2, {}, 0x58603}) close_range(r7, 0xffffffffffffffff, 0x0) 18m35.230811414s ago: executing program 3 (id=3537): syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040), &(0x7f0000000140)) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) 18m35.157395268s ago: executing program 3 (id=3538): openat$adsp1(0xffffffffffffff9c, 0x0, 0x2c0800, 0x0) syz_emit_vhci(&(0x7f0000002480)=ANY=[@ANYBLOB="04"], 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x2, 0xd59f80, 0x4, 0x5, 0xb, 0x5, 0x5, 0x720, 0xe72, 0x7, 0x5, 0x0, 0x13, {0x0, 0x7}, 0x3, 0xec}}) futex(0x0, 0xb, 0x2, 0x0, 0x0, 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x67) connect$x25(r3, &(0x7f0000000a80), 0x12) timer_create(0x0, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe9, 0x0, &(0x7f0000000800)="63eced8e46da3fc1f133c9f7b98650458ae58aae192e63f15f35b24efbfbac3966f67095d1a28f8911a9075e27ea24975204c5a9b23460fdc20c4f4af743db12342adcda03c5c2ec5b95ae0c99c1689fa0efb918f31f6debe45f6b212e4e29997004819a4acad27d517b3e3d8d6ad8f7fcd27f0cafac2372668ece2f326612a00ce3feb62e69a7000d3163f7fd9b86e8925c6112a47a15000060b800000000447c91a4064192dbe919254c492ebc144f28a9c1ff4959aafa464fe79c84cb2744f89d1da6fc26e3038c5f164b4b0e98a08e3c7d494b1663300be350ef022ea796000002ae90490a2105", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x22000004) 18m35.000438067s ago: executing program 3 (id=3540): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0xa, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x2f8, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x2e8, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x23c, 0x64, 0x0, 0x1, [@nested={0xd9, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r1}, @nested={0x4d, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f"]}]}, @nested={0x159, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r1}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebdd"]}]}, 0x2f8}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x1, "b3bba036"}]}}, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0xa, 0x30, 0xfe, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x81, {{0x6, 0x24, 0x6, 0x0, 0x0, "fc"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x9b26, 0x1a}, [@country_functional={0x8, 0x24, 0x7, 0x2, 0x8, [0x2]}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0x6, 0xb, 0x0, 0x9, 0x10}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x29, 0x5, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0xda}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb0, 0x7}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x0, 0x84, 0x81, 0x20, 0x6}, 0x25e, &(0x7f00000001c0)={0x5, 0xf, 0x25e, 0x6, [@generic={0xf0, 0x10, 0xa, "cc231e3592cc10cc5aff6290a425317553396f44f1457e058fac65da89e8145b98b4017446d50e983785a7d61e541aba15addf6abf49c31d61ee8cdaccc61ecc36eb144c78e6d49aeb5e90df464367ddf58ad0055fa060fcd4fc6e8416f243ba6086bd404006b82c4bf1d4b73f2022fdaf582f0befb2710212ed35e71f9fdc6cca4c05847c9ff3699c1ecc886244d0e6d7a351c6ae1d87f6515479a6776e189e028a1e68f597391bf0f3018435c631ec75842f1a56d15481c6bcb5eb795b2cc637d37761b82544eebc119d5aed060ec5675796f9ca6e6bd7054255f34047692d3e9b57abd8c4e82f2af9ceace7"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0xeb, 0xecd0}, @generic={0x95, 0x10, 0x4, "07e9a3e1b206310d3e7629262b01c7f00cf451124341caa728fa3d8d9695898fd6b5b28e716352cf8c21ce44b726e1b9a259350d281a7da049d278e0123a9671e567bf73e944cc5cc065adaa9a3f8192f149eaf74aeeb9a7f11bb6ddf1ed0b703f58fee65adf6e638755a32534eabd37329825e2dbd90d76b023d69898cf8c60b5f4c3f9f02429124ad3c369f07f2a743c3a"}, @generic={0xb3, 0x10, 0x4, "debedb923f9a0506878e12943808416013c3cc4e6c61028cb947debfedb4b171552e5fc10b49df32cd31622f99b43e8a50f027c74230ceb5a51d82b555ac933953e2dabc80b0ed48323beab259ce1f736acce8d4246e1e6657c7907cfb922bcd85b7aac7bf2352ae88cbe256278bc75e402ca739557a5079eeb2e32673d8be8e3115fed0875c1663806c447faf72ea6507e24b3cb96b2142178f856e1ec06d5bf89f5cf371eb6a92c2fcecc5bff9e821"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x73, 0x2, 0x10001, 0xf00f, 0xfffb, [0xc00f, 0x1e]}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x653}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x414}}, {0xd9, &(0x7f0000000500)=@string={0xd9, 0x3, "4761831172247d7850b4fdbc59cbf4d5d3504ec1f9acc690c67e2637ce80fb2116835a36c8cb1808deec3d9c6ed62ffb240251f1e564dbe8a685814e2cddb3de04e5a456426d033ec4efbbd88d4d32e60c87f94bee7d3f20dc78f27687f3f48178ce6c0594fed04e45bee4c6b7257b671906f85f539a283234db4caf963e4d5c5a8b35fcdce169e0faf181ec66f6eef6c5dfa1e0e21d6874ae3a7918792672f110f2e578fb44ac60b5a7932a91fff6e5d32a0cc323c5c5bbb9d5490b31519e7b8e6f68c6a7ff35c53569a3d8fa71af1366512027831c9b"}}, {0x63, &(0x7f0000000600)=@string={0x63, 0x3, "5dc16aafbbbb5755dd65f6c940980fb2a2b2ab756e0538d6e0e00d4279bfd3e5ab0e61e50c91d4a8872ad28fd8d8f319934868ef45eb87b7fb305bb0117696d9956742a5f9aae9e790850d7c848978165bf79246f5d9ed4bb6f23f54439f6dfb21"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1401}}]}) 18m31.173908334s ago: executing program 3 (id=3553): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route(r2, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r6 = getpid() syz_pidfd_open(r6, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x154) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 18m24.410563958s ago: executing program 3 (id=3558): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="b9800000c00f3235000800000f300f06f30faee9c462fd31e166ba6100ecf20f45610048b8cc8e0000000000000f23c00f21f83502000e000f23f8363ed0542c6dc4827d32720026430f01c4", 0x4c}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18m13.025174974s ago: executing program 3 (id=3570): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000000208000, 0xc04c2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_pts(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x40, 0xd, 0x9d}]}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) syz_emit_ethernet(0x160, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYBLOB, @ANYRES32=0x0, @ANYRES64], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bind$inet(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x1f) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 17m57.514415724s ago: executing program 43 (id=3570): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000000208000, 0xc04c2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) syz_open_pts(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x40, 0xd, 0x9d}]}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) syz_emit_ethernet(0x160, &(0x7f0000000700)=ANY=[@ANYRES32=0x41424344, @ANYBLOB, @ANYRES32=0x0, @ANYRES64], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bind$inet(r4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x1f) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 15.838517336s ago: executing program 2 (id=7124): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000006c0)={0x2, 0x1, 0x1c, 0x14, 0x43, 0x0}) 14.649918266s ago: executing program 2 (id=7130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800040000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x1, &(0x7f0000001840)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f00000018c0)='syzkaller\x00', 0x6, 0x9f, &(0x7f0000001900)=""/159}, 0x80) 14.439424322s ago: executing program 2 (id=7132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @local}, 0x2}}, 0x2e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) 13.400500597s ago: executing program 2 (id=7133): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x8000000000}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x39) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 12.779676892s ago: executing program 1 (id=7135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 12.678725888s ago: executing program 1 (id=7136): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='jfs\x00', 0x2208004, 0x0) 11.876792566s ago: executing program 1 (id=7140): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, &(0x7f0000002b80)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40048c4, 0x0, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) 11.727013032s ago: executing program 2 (id=7142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @local}, 0x2}}, 0x2e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) 9.581738666s ago: executing program 4 (id=7144): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414"], 0x30}, 0x40880) 8.952016442s ago: executing program 4 (id=7145): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 8.747340314s ago: executing program 2 (id=7148): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0xffffffffffffffff) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000180)={'b', ' *:* ', 'r\x00'}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 8.592167337s ago: executing program 1 (id=7149): fsopen(0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x0, 0x14, 0x4, "1df73cc1"}, 0x0, 0x0, 0x0, 0x0}) 7.961294236s ago: executing program 4 (id=7152): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 5.84108792s ago: executing program 4 (id=7155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x2, 0x8, 0x5, 0x7f, 0xb2c, 0x4, 0xffff, 0x710}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000200)) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd4", 0xaf}, {&(0x7f0000000380)="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", 0x90a}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)}}], 0x3, 0x0) 5.662487343s ago: executing program 8 (id=7157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000f80)=[@uexit={0x0, 0x18, 0x2}, @code={0x1, 0x79, {"c74424006724072dc744240200000000c7442406000000000f011c2426660f38820f48b803000000000000000f23d80f21f835c00000800f23f866baf80cb86c39178eef66bafc0ced460f01c226410f01c3410f01c20f01c56766450fc7b006000000c4218ddbd1"}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0xffffffff80000001}, @code={0x1, 0x56, {"f30f09450fc71c3d0d000000f344af2e26430f01d466b831018ec866baf80cb890f1bc8fef66bafc0cb800000100efc4023d3674780f0f01d5410f01c2650f789b81e00000"}}, @code={0x1, 0x71, {"b9800000c00f3235010000000f30c4437d04dc0f6565f30f090f20e035040000000f22e0b9800000c00f3235000800000f30c42225b85d46c4237d06c4cf66b8d3008ed066baf80cb8f9b11986ef66bafc0cecb805000000b96c813b740f01c1"}}, @code={0x1, 0x86, {"b93d030000b800000100ba000000000f3066b8bb000f00d80f3548b8ac530000000000000f23d00f21f835000000050f23f8440f20c03504000000440f22c03e0f01f8c744240015010000c744240256000000ff1c24b9050100400f32440f20c0350a000000440f22c026652e4403b4b900800000"}}], 0x226}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0xc, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0xffffffffffffffff, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000c8f000/0x4000)=nil, 0x4000) munmap(&(0x7f0000d83000/0x4000)=nil, 0x4000) munmap(&(0x7f0000f2e000/0x4000)=nil, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, r4, 0x100000e, 0x8a031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f0000e76000/0x12000)=nil, 0x12000) munmap(&(0x7f0000d96000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000fed000/0x3000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000f11000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) 5.398419585s ago: executing program 6 (id=7158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0xa8202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @local}, 0x2}}, 0x2e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) 5.331283236s ago: executing program 4 (id=7159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, &(0x7f0000002b80)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40048c4, 0x0, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) 4.391545142s ago: executing program 6 (id=7160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000074d564b"]) 3.770497915s ago: executing program 4 (id=7161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 3.657334753s ago: executing program 8 (id=7162): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) 3.597322335s ago: executing program 6 (id=7163): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) writev(r0, &(0x7f0000003e80), 0x0) 3.511662775s ago: executing program 8 (id=7164): r0 = syz_open_dev$loop(&(0x7f0000000940), 0x7, 0x80000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='contention_end\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f000000000000000bdf000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x7, 0x0, 0x0, 0x410fe, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa3}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x635, 0x1000, 0x2, 0x8000000000000001}) 3.465809873s ago: executing program 1 (id=7165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x4, 0x1000, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x10001, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0xa, 0x5, 0x10, 0x2b0c4, 0x7df, 0x1, 0x400007, 0x1]}) 3.378667941s ago: executing program 6 (id=7166): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 2.900788144s ago: executing program 8 (id=7167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x145142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, &(0x7f00000001c0)=0x1c) 1.962277615s ago: executing program 6 (id=7168): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414"], 0x30}, 0x40880) 1.738263619s ago: executing program 1 (id=7169): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x44004, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.163120705s ago: executing program 6 (id=7170): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.010637444s ago: executing program 8 (id=7171): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, &(0x7f0000002b80)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x40048c4, 0x0, 0x0) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) 0s ago: executing program 8 (id=7172): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000009afb56203c43750000004f0000000000000036400f3067640f21c9b8010000000f01d9b805000000b9000000000f01d9f245c1c10066420f21"], 0x4f}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x46, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x10000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r1, 0x300000b, 0x8012, r4, 0x0) kernel console output (not intermixed with test programs): 635679][T21290] Bluetooth: hci0: Malformed HCI Event [ 2564.124846][T26415] netlink: 'syz.8.5971': attribute type 21 has an invalid length. [ 2564.133140][T26415] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5971'. [ 2564.143195][T26415] netlink: 'syz.8.5971': attribute type 4 has an invalid length. [ 2564.151069][T26415] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5971'. [ 2564.934182][ T8512] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2565.017167][T26421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5974'. [ 2565.485041][ T8512] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.491403][T26421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2565.497327][ T8512] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2565.582495][ T8512] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2565.615907][ T8512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.138080][ T8512] usb 2-1: config 0 descriptor?? [ 2566.376075][T20802] usb 2-1: USB disconnect, device number 7 [ 2567.449123][T20802] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2567.955065][T20802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2569.509865][T20802] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2569.520848][T20802] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2569.531536][T20802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.541562][T20802] usb 2-1: config 0 descriptor?? [ 2569.643429][T20802] usb 2-1: can't set config #0, error -71 [ 2570.649127][T20802] usb 2-1: USB disconnect, device number 8 [ 2571.140935][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5987'. [ 2571.895615][T26465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2572.229743][T26465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2572.248445][T26477] fuse: Bad value for 'fd' [ 2573.434262][ T5980] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2579.709058][ T5980] usb 2-1: device descriptor read/all, error -71 [ 2581.282000][T26512] syzkaller0: entered promiscuous mode [ 2581.287590][T26512] syzkaller0: entered allmulticast mode [ 2582.628144][T26534] netlink: 'syz.6.6010': attribute type 21 has an invalid length. [ 2582.636106][T26534] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6010'. [ 2586.352141][T26550] netlink: 'syz.2.6015': attribute type 4 has an invalid length. [ 2587.601088][T14403] Bluetooth: hci4: command 0x0406 tx timeout [ 2588.969451][T26534] netlink: 'syz.6.6010': attribute type 4 has an invalid length. [ 2588.977299][T26534] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6010'. [ 2589.583977][T20802] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2590.595234][T20802] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2590.649566][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.678562][T20802] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2590.740936][T20802] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2590.789376][T20802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2590.854047][T20802] usb 9-1: SerialNumber: syz [ 2591.178469][T20802] usb 9-1: 0:2 : does not exist [ 2591.839129][T20802] usb 9-1: unit 255 not found! [ 2591.848468][T20802] usb 9-1: 5:0: cannot get min/max values for control 1 (id 5) [ 2591.869489][T20802] usb 9-1: USB disconnect, device number 93 [ 2592.393689][T26607] netlink: 'syz.2.6033': attribute type 21 has an invalid length. [ 2592.401872][T26607] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6033'. [ 2592.411544][T26607] netlink: 'syz.2.6033': attribute type 4 has an invalid length. [ 2592.419543][T26607] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6033'. [ 2593.050203][T26608] netlink: 'syz.8.6034': attribute type 4 has an invalid length. [ 2594.659065][T20802] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2594.845123][T20802] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2594.879314][T20802] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2594.936683][T20802] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2594.978832][T20802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2595.014920][T20802] usb 2-1: SerialNumber: syz [ 2595.366714][T20802] usb 2-1: 0:2 : does not exist [ 2595.404783][T20802] usb 2-1: unit 255 not found! [ 2595.427140][T20802] usb 2-1: 5:0: cannot get min/max values for control 1 (id 5) [ 2595.469302][T14767] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2595.497870][T20802] usb 2-1: USB disconnect, device number 11 [ 2595.821008][T14767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2595.861602][T14767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2596.555369][T14767] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2596.566625][T14767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.599914][T14767] usb 3-1: config 0 descriptor?? [ 2597.905687][T14767] usbhid 3-1:0.0: can't add hid device: -71 [ 2597.912375][T14767] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2597.931696][T14767] usb 3-1: USB disconnect, device number 109 [ 2598.629143][ T6431] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2598.789416][ T6431] usb 5-1: Using ep0 maxpacket: 32 [ 2598.805855][ T6431] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2598.822340][ T6431] usb 5-1: config 0 has no interface number 0 [ 2598.839267][ T6431] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2598.884007][ T6431] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2598.921413][ T6431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.961563][ T6431] usb 5-1: Product: syz [ 2598.981808][ T6431] usb 5-1: Manufacturer: syz [ 2599.029683][ T6431] usb 5-1: SerialNumber: syz [ 2599.054271][ T6431] usb 5-1: config 0 descriptor?? [ 2599.074950][ T6431] smsc75xx v1.0.0 [ 2599.085073][ T6431] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2599.107293][ T6431] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 2599.516933][T26683] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.6060'. [ 2601.411605][T14767] usb 5-1: USB disconnect, device number 100 [ 2601.593122][T26718] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.6072'. [ 2603.049239][T20802] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2603.876594][T20802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2603.907360][T20802] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2603.928235][T20802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.941385][T20802] usb 3-1: config 0 descriptor?? [ 2603.970534][T20802] pwc: Askey VC010 type 2 USB webcam detected. [ 2604.429990][T20802] pwc: send_video_command error -71 [ 2604.445397][T20802] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2605.034223][T20802] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 2605.045636][T20802] usb 3-1: USB disconnect, device number 110 [ 2605.596251][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6087'. [ 2606.829053][T14767] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2607.245240][ T30] audit: type=1400 audit(1752767815.596:373): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=26777 comm="syz.1.6093" daddr=::ffff:0.0.0.0 dest=20002 [ 2607.341137][T26776] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2607.539001][T14767] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2607.549802][T14767] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2607.596444][T14767] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2607.605799][T14767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2607.633953][T14767] usb 5-1: SerialNumber: syz [ 2607.929153][T14767] usb 5-1: 0:2 : does not exist [ 2607.935049][T14767] usb 5-1: unit 255 not found! [ 2607.950018][T14767] usb 5-1: USB disconnect, device number 101 [ 2609.338604][T18566] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2609.463339][ T8512] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2609.615200][T18566] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2609.826961][T18566] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2609.849615][ T8512] usb 2-1: no configurations [ 2609.854297][ T8512] usb 2-1: can't read configurations, error -22 [ 2609.871277][T18566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.009197][ T8512] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2610.131974][T18566] usb 3-1: config 0 descriptor?? [ 2610.153272][T18566] pwc: Askey VC010 type 2 USB webcam detected. [ 2610.173112][ T8512] usb 2-1: no configurations [ 2610.955597][T18566] pwc: send_video_command error -71 [ 2610.961067][ T8512] usb 2-1: can't read configurations, error -22 [ 2610.967429][T18566] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2610.975672][ T8512] usb usb2-port1: attempt power cycle [ 2610.981565][T18566] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 2610.997167][T18566] usb 3-1: USB disconnect, device number 111 [ 2612.312127][ T8512] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2612.355836][ T8512] usb 2-1: device descriptor read/8, error -71 [ 2612.479542][T18566] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2617.347201][T26893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6132'. [ 2623.073471][ T30] audit: type=1400 audit(1752767831.426:374): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=26940 comm="syz.1.6151" dest=2 [ 2625.705412][T26982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6162'. [ 2625.807990][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6163'. [ 2625.862445][T26988] netlink: 'syz.2.6162': attribute type 10 has an invalid length. [ 2626.035863][T26988] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2626.765476][T27003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2626.789976][T27003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2626.830187][T27003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2626.837679][T27003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2628.540586][ T6431] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 2628.713667][ T6431] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2628.751678][ T6431] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2628.786129][ T6431] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2628.796163][ T6431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2628.805264][ T6431] usb 7-1: SerialNumber: syz [ 2629.588839][ T6431] usb 7-1: 0:2 : does not exist [ 2629.593959][ T6431] usb 7-1: unit 255 not found! [ 2629.598787][ T6431] usb 7-1: unit 13 not found! [ 2629.612633][ T6431] usb 7-1: USB disconnect, device number 114 [ 2629.706254][T20802] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2629.849026][T20802] usb 9-1: device descriptor read/64, error -71 [ 2630.019086][ T5980] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2630.039379][T15487] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2630.089739][T20802] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 2630.201078][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2630.214930][ T5980] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2630.224157][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.243910][T15487] usb 2-1: Using ep0 maxpacket: 8 [ 2630.249781][T20802] usb 9-1: device descriptor read/64, error -71 [ 2630.374793][T15487] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2630.395518][ T5980] usb 5-1: config 0 descriptor?? [ 2630.450426][T20802] usb usb9-port1: attempt power cycle [ 2630.524183][T15487] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2630.546410][ T5980] pwc: Askey VC010 type 2 USB webcam detected. [ 2630.580071][T15487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2630.621018][T15487] usb 2-1: Product: syz [ 2630.664091][T15487] usb 2-1: Manufacturer: syz [ 2630.671197][ T5980] pwc: send_video_command error -71 [ 2630.676482][T15487] usb 2-1: SerialNumber: syz [ 2630.683265][ T5980] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2630.695547][T15487] usb 2-1: config 0 descriptor?? [ 2630.700935][ T5980] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2630.718767][T15487] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2630.736287][ T5980] usb 5-1: USB disconnect, device number 102 [ 2630.938543][T20802] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2631.005990][T20802] usb 9-1: device descriptor read/8, error -71 [ 2633.179405][ T5980] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2633.740375][T18566] usb 2-1: USB disconnect, device number 16 [ 2634.279956][ T5980] usb 5-1: device descriptor read/64, error -71 [ 2635.786915][ T5980] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2635.979501][ T5980] usb 5-1: device descriptor read/64, error -71 [ 2636.028820][T27090] syzkaller0: entered promiscuous mode [ 2636.074465][T27090] syzkaller0: entered allmulticast mode [ 2636.089672][ T5980] usb usb5-port1: attempt power cycle [ 2636.739124][ T5980] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2638.224577][ T5980] usb 5-1: device descriptor read/8, error -71 [ 2638.693717][T20802] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2638.940854][T20802] usb 2-1: Using ep0 maxpacket: 8 [ 2639.136806][T20802] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2639.147919][T20802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2639.158834][T20802] usb 2-1: config 0 descriptor?? [ 2639.281351][T27123] netlink: 'syz.4.6202': attribute type 21 has an invalid length. [ 2639.289515][T27123] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6202'. [ 2640.520118][T20802] usb 2-1: USB disconnect, device number 17 [ 2640.999248][T27127] binder: 27124:27127 ioctl c0306201 0 returned -14 [ 2642.165329][T27111] bridge2: entered promiscuous mode [ 2642.170747][T27111] bridge2: entered allmulticast mode [ 2642.212705][T27111] team0: Port device bridge2 added [ 2642.227103][T27123] netlink: 'syz.4.6202': attribute type 4 has an invalid length. [ 2642.236054][T27123] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6202'. [ 2644.980131][ T30] audit: type=1400 audit(1752767853.236:375): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=27146 comm="syz.4.6210" dest=2 [ 2646.179878][T27167] bridge1: entered promiscuous mode [ 2646.185248][T27167] bridge1: entered allmulticast mode [ 2646.220541][T27167] team0: Port device bridge1 added [ 2646.701651][T27169] netlink: 'syz.4.6215': attribute type 21 has an invalid length. [ 2646.709654][T27169] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6215'. [ 2646.718777][T27169] netlink: 'syz.4.6215': attribute type 4 has an invalid length. [ 2646.726655][T27169] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6215'. [ 2646.805096][ T30] audit: type=1326 audit(1752767855.156:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27170 comm="syz.1.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2646.826713][ C1] vkms_vblank_simulate: vblank timer overrun [ 2646.901131][ T30] audit: type=1326 audit(1752767855.156:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27170 comm="syz.1.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2646.995726][ T30] audit: type=1326 audit(1752767855.156:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27170 comm="syz.1.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2647.090152][ T30] audit: type=1326 audit(1752767855.156:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27170 comm="syz.1.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2647.114802][ T30] audit: type=1326 audit(1752767855.216:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27170 comm="syz.1.6217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2649.329141][ T5900] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2649.614642][T27198] netlink: 'syz.1.6226': attribute type 4 has an invalid length. [ 2650.136929][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6227'. [ 2650.779128][ T5900] usb 9-1: Using ep0 maxpacket: 32 [ 2650.797440][ T5900] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 2650.836055][ T5900] usb 9-1: config 0 has no interface number 0 [ 2650.856838][ T5900] usb 9-1: config 0 interface 184 has no altsetting 0 [ 2650.888071][ T5900] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2650.929019][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2650.968990][ T5900] usb 9-1: Product: syz [ 2650.978747][ T5900] usb 9-1: Manufacturer: syz [ 2651.005566][ T5900] usb 9-1: SerialNumber: syz [ 2651.043996][ T5900] usb 9-1: config 0 descriptor?? [ 2652.086213][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.107745][ T5900] usb 9-1: can't set config #0, error -71 [ 2652.122135][ T5900] usb 9-1: USB disconnect, device number 98 [ 2652.327302][ T6431] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2652.534370][ T6431] usb 5-1: config index 0 descriptor too short (expected 30768, got 36) [ 2652.543179][ T6431] usb 5-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 2652.552569][ T6431] usb 5-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 2652.564055][ T6431] usb 5-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 2652.573770][ T6431] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2652.585035][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.824419][ T6431] usb 5-1: string descriptor 0 read error: -71 [ 2652.832573][ T6431] usb 5-1: USB disconnect, device number 107 [ 2655.388055][T27210] bridge2: entered promiscuous mode [ 2655.393460][T27210] bridge2: entered allmulticast mode [ 2655.405262][T27210] team0: Port device bridge2 added [ 2657.019013][T27240] netlink: 'syz.2.6239': attribute type 4 has an invalid length. [ 2657.531813][T27252] veth0_vlan: entered allmulticast mode [ 2657.732067][T27252] veth0_vlan: left promiscuous mode [ 2657.753263][T27252] veth0_vlan: entered promiscuous mode [ 2658.328549][T18566] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2658.934401][T18566] usb 3-1: Using ep0 maxpacket: 32 [ 2658.960734][T18566] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2658.976954][T18566] usb 3-1: config 0 has no interface number 0 [ 2659.011477][T18566] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2659.057272][T18566] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2659.075502][T18566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2659.285427][T18566] usb 3-1: Product: syz [ 2659.289842][T18566] usb 3-1: Manufacturer: syz [ 2659.294840][T18566] usb 3-1: SerialNumber: syz [ 2659.303655][T18566] usb 3-1: config 0 descriptor?? [ 2659.317560][T18566] smsc75xx v1.0.0 [ 2660.011945][T27265] bridge2: entered promiscuous mode [ 2660.017309][T27265] bridge2: entered allmulticast mode [ 2660.043224][T27265] team0: Port device bridge2 added [ 2660.486048][T18566] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2660.597879][T18566] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2660.616245][T18566] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2660.643817][T18566] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 2662.009537][T18566] usb 3-1: USB disconnect, device number 113 [ 2662.168258][T27280] bridge_slave_0: left allmulticast mode [ 2662.195751][T27280] bridge_slave_0: left promiscuous mode [ 2662.214828][T27280] bridge0: port 1(bridge_slave_0) entered disabled state [ 2662.534092][T27280] bridge_slave_1: left allmulticast mode [ 2662.549368][T27280] bridge_slave_1: left promiscuous mode [ 2662.557139][T27280] bridge0: port 2(bridge_slave_1) entered disabled state [ 2662.594587][T20802] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2663.249539][T27280] bond0: (slave bond_slave_0): Releasing backup interface [ 2663.276487][T27280] bond0: (slave bond_slave_1): Releasing backup interface [ 2663.521594][T20802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2663.538921][T20802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2663.559962][T20802] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2663.580102][T20802] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 2663.591183][T20802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2663.623609][T20802] usb 5-1: config 0 descriptor?? [ 2663.632854][T27280] team0: Port device team_slave_0 removed [ 2663.683244][T27280] team0: Port device team_slave_1 removed [ 2663.726745][T27280] bond0: (slave wlan1): Releasing backup interface [ 2663.775813][T27280] team0: Port device bridge1 removed [ 2664.687291][T20802] chicony 0003:04F2:1236.0047: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.4-1/input0 [ 2664.821758][T20802] usb 5-1: USB disconnect, device number 108 [ 2664.952092][T27311] tipc: Enabled bearer , priority 0 [ 2665.132475][T27311] syzkaller0: entered promiscuous mode [ 2665.138127][T27311] syzkaller0: entered allmulticast mode [ 2665.145017][T27311] tipc: Resetting bearer [ 2665.191008][T27310] tipc: Resetting bearer [ 2665.829141][T18566] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2665.991273][T18566] usb 3-1: Using ep0 maxpacket: 32 [ 2666.162947][T18566] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2666.188742][T18566] usb 3-1: config 0 has no interface number 0 [ 2666.209409][T18566] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2666.339063][T18566] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2666.411631][T18566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.539583][T18566] usb 3-1: Product: syz [ 2666.550429][T18566] usb 3-1: Manufacturer: syz [ 2666.706468][T18566] usb 3-1: SerialNumber: syz [ 2666.743119][T18566] usb 3-1: config 0 descriptor?? [ 2666.751803][T18566] smsc75xx v1.0.0 [ 2667.425312][T18566] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2667.455020][T18566] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2667.467227][T18566] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2667.483513][T18566] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 2668.479208][T20802] usb 3-1: USB disconnect, device number 114 [ 2668.579903][ T6431] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2668.598280][T27339] overlayfs: missing 'lowerdir' [ 2668.749377][ T6431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2668.764739][ T6431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2668.784802][ T6431] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2668.812202][ T6431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.829309][ T6431] usb 2-1: config 0 descriptor?? [ 2669.278020][ T6431] usbhid 2-1:0.0: can't add hid device: -71 [ 2669.292889][ T6431] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2669.304076][ T6431] usb 2-1: USB disconnect, device number 18 [ 2671.226658][T27310] tipc: Disabling bearer [ 2671.455507][T27344] bridge_slave_0: left allmulticast mode [ 2671.479225][T27344] bridge_slave_0: left promiscuous mode [ 2671.485062][T27344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.546223][T27344] bridge_slave_1: left allmulticast mode [ 2671.554741][T27344] bridge_slave_1: left promiscuous mode [ 2671.577096][T27344] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.598253][T27344] bond0: (slave bond_slave_0): Releasing backup interface [ 2671.633901][T27344] bond0: (slave bond_slave_1): Releasing backup interface [ 2671.715139][T27344] team0: Port device team_slave_0 removed [ 2672.260629][T27344] team0: Port device team_slave_1 removed [ 2672.392170][T27344] team0: Port device bridge1 removed [ 2672.433486][T27344] team0: Port device bridge2 removed [ 2673.451048][ T5900] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 2673.629206][ T5900] usb 9-1: Using ep0 maxpacket: 32 [ 2673.646662][ T5900] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 2673.666884][ T5900] usb 9-1: config 0 has no interface number 0 [ 2673.680606][ T5900] usb 9-1: config 0 interface 184 has no altsetting 0 [ 2673.726652][ T5900] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2673.763496][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.812749][ T5900] usb 9-1: Product: syz [ 2673.817177][ T5900] usb 9-1: Manufacturer: syz [ 2673.823192][ T5900] usb 9-1: SerialNumber: syz [ 2673.830382][ T5900] usb 9-1: config 0 descriptor?? [ 2673.843177][ T5900] smsc75xx v1.0.0 [ 2674.771704][ T5900] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2674.835638][ T5900] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2674.845607][ T5900] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2674.860999][ T5900] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32 [ 2674.979043][T18566] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2675.341308][T18566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2675.358068][T18566] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2675.391927][T18566] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2675.423025][T18566] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 2675.440344][T18566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.521997][T18566] usb 3-1: config 0 descriptor?? [ 2676.739331][T18566] chicony 0003:04F2:1236.0048: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.2-1/input0 [ 2677.035104][ T6431] usb 9-1: USB disconnect, device number 99 [ 2678.143067][T18566] usb 3-1: USB disconnect, device number 115 [ 2678.749119][T14767] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 2678.914622][T14767] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2678.938251][T14767] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2678.974021][T14767] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2678.999364][T14767] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2679.023732][T14767] usb 9-1: SerialNumber: syz [ 2679.261687][T14767] usb 9-1: 0:2 : does not exist [ 2679.280739][T14767] usb 9-1: unit 14 not found! [ 2679.359533][T14767] usb 9-1: USB disconnect, device number 100 [ 2680.397630][T18566] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2680.880376][T18566] usb 7-1: Using ep0 maxpacket: 32 [ 2680.931703][T18566] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 2680.948181][T18566] usb 7-1: config 0 has no interface number 0 [ 2680.961274][T18566] usb 7-1: config 0 interface 184 has no altsetting 0 [ 2680.974938][T27455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2680.983306][T27455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2682.058453][T18566] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2682.071677][T18566] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.172529][T18566] usb 7-1: Product: syz [ 2682.178157][T18566] usb 7-1: Manufacturer: syz [ 2682.184744][T18566] usb 7-1: SerialNumber: syz [ 2682.196228][T18566] usb 7-1: config 0 descriptor?? [ 2682.236365][T18566] smsc75xx v1.0.0 [ 2682.555654][T27469] block nbd4: shutting down sockets [ 2683.592204][T18566] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2683.624921][T18566] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2683.655760][T18566] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2683.671197][T18566] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 2683.749664][T27063] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2684.125462][T27063] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2684.746679][T27063] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2684.769168][ T5900] usb 7-1: USB disconnect, device number 115 [ 2684.779648][T27063] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2684.793553][T27063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2684.817408][T27063] usb 2-1: SerialNumber: syz [ 2685.538940][ C1] hrtimer: interrupt took 80330 ns [ 2686.192247][T27063] usb 2-1: 0:2 : does not exist [ 2686.197722][T27063] usb 2-1: unit 5: unexpected type 0x09 [ 2686.233891][T27063] usb 2-1: USB disconnect, device number 19 [ 2686.899402][T21290] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2687.491252][T20802] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2687.669362][T20802] usb 3-1: Using ep0 maxpacket: 32 [ 2687.679450][T20802] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2687.687927][T20802] usb 3-1: config 0 has no interface number 0 [ 2687.707845][T20802] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2687.729424][T20802] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2687.742438][T20802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2687.750836][T20802] usb 3-1: Product: syz [ 2687.760525][T20802] usb 3-1: Manufacturer: syz [ 2687.779910][T20802] usb 3-1: SerialNumber: syz [ 2687.799372][T20802] usb 3-1: config 0 descriptor?? [ 2687.814230][T20802] smsc75xx v1.0.0 [ 2688.216837][T20802] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2688.234167][T20802] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 2688.253063][T20802] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2688.267065][T20802] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 2688.569053][T27063] usb 9-1: new full-speed USB device number 101 using dummy_hcd [ 2688.645611][T27542] bridge1: entered promiscuous mode [ 2688.651226][T27542] bridge1: entered allmulticast mode [ 2688.777870][T27542] team0: Port device bridge1 added [ 2688.890462][T27063] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2689.026259][T27063] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2689.124217][T27063] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2689.261547][T27063] usb 9-1: Product: syz [ 2689.301610][T27063] usb 9-1: Manufacturer: syz [ 2689.361079][T27063] usb 9-1: SerialNumber: syz [ 2689.510870][T27063] usb 9-1: config 0 descriptor?? [ 2690.507856][T27063] usb 3-1: USB disconnect, device number 116 [ 2690.839399][T15487] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 2691.260665][T15487] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2691.271389][T15487] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2691.281589][T15487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2691.296140][T15487] usb 7-1: config 0 descriptor?? [ 2691.307920][T15487] pwc: Askey VC010 type 2 USB webcam detected. [ 2691.605908][T15487] pwc: send_video_command error -71 [ 2691.628973][T15487] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2691.671507][T15487] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 2691.703869][T18566] usb 9-1: USB disconnect, device number 101 [ 2691.750073][T15487] usb 7-1: USB disconnect, device number 116 [ 2692.739117][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6344'. [ 2693.416906][T27597] input: syz1 as /devices/virtual/input/input107 [ 2694.079066][T15487] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2695.068497][T27611] loop2: detected capacity change from 0 to 7 [ 2695.077845][T27611] Dev loop2: unable to read RDB block 7 [ 2695.084551][T27611] loop2: unable to read partition table [ 2695.089024][T27063] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2695.091088][T27611] loop2: partition table beyond EOD, truncated [ 2695.105487][T27611] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2695.252782][T27063] usb 2-1: Using ep0 maxpacket: 32 [ 2695.306466][T27063] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2695.317009][T27063] usb 2-1: config 0 has no interface number 0 [ 2695.337507][T27063] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2695.363811][T27063] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2695.383708][T27063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.402936][T27063] usb 2-1: Product: syz [ 2695.409721][T27063] usb 2-1: Manufacturer: syz [ 2695.424686][T27063] usb 2-1: SerialNumber: syz [ 2695.442429][T27063] usb 2-1: config 0 descriptor?? [ 2695.457612][T27063] smsc75xx v1.0.0 [ 2695.839034][ T6431] usb 7-1: new full-speed USB device number 118 using dummy_hcd [ 2695.863781][T18566] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2695.870166][T27063] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2695.882735][T27063] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2695.895023][T27063] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 2696.241833][T27063] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 2696.378426][ T6431] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2696.569152][ T6431] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2696.595035][ T6431] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2696.613732][ T6431] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2696.625732][ T6431] usb 7-1: Product: syz [ 2696.635902][ T6431] usb 7-1: Manufacturer: syz [ 2696.641426][ T6431] usb 7-1: SerialNumber: syz [ 2696.649474][ T6431] usb 7-1: config 0 descriptor?? [ 2696.658546][ T6431] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 2696.672115][ T6431] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 2696.684097][ T6431] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2696.751676][T18566] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2696.763118][T18566] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2696.775317][T18566] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2696.788121][T18566] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2696.800783][T18566] usb 9-1: config 0 descriptor?? [ 2697.019464][T27063] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2697.783417][ T5900] usb 2-1: USB disconnect, device number 20 [ 2697.993804][T27063] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2698.035324][T27063] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2698.061322][T27063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.077992][T27063] usb 5-1: config 0 descriptor?? [ 2698.109609][T27063] pwc: Askey VC010 type 2 USB webcam detected. [ 2698.265264][T18566] usbhid 9-1:0.0: can't add hid device: -71 [ 2698.271639][T18566] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2698.282794][T18566] usb 9-1: USB disconnect, device number 102 [ 2698.295212][T27063] pwc: send_video_command error -71 [ 2698.301054][T27063] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2698.308661][T27063] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2698.319867][T27063] usb 5-1: USB disconnect, device number 109 [ 2698.329022][T15487] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2698.480692][T15487] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 2698.492039][T15487] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2698.508034][T15487] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2698.520455][T15487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2698.531561][T15487] usb 3-1: config 0 descriptor?? [ 2698.542712][T18566] usb 7-1: USB disconnect, device number 118 [ 2698.798020][T15487] ath6kl: Failed to submit usb control message: -71 [ 2698.812467][T15487] ath6kl: unable to send the bmi data to the device: -71 [ 2698.820236][T15487] ath6kl: Unable to send get target info: -71 [ 2698.839185][T15487] ath6kl: Failed to init ath6kl core: -71 [ 2698.846755][T15487] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2698.874999][T15487] usb 3-1: USB disconnect, device number 117 [ 2698.904987][ T30] audit: type=1326 audit(1752767907.256:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27650 comm="syz.8.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2698.927277][ T30] audit: type=1326 audit(1752767907.286:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27650 comm="syz.8.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2698.949653][ T6431] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2698.961481][ T30] audit: type=1326 audit(1752767907.316:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27650 comm="syz.8.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2699.027508][ T30] audit: type=1326 audit(1752767907.316:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27650 comm="syz.8.6365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2699.095555][T27658] pim6reg1: entered promiscuous mode [ 2699.101444][T27658] pim6reg1: entered allmulticast mode [ 2699.240830][ T6431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2699.251886][ T6431] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2699.261123][ T6431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2699.273300][ T6431] usb 5-1: config 0 descriptor?? [ 2699.281344][ T6431] pwc: Askey VC010 type 2 USB webcam detected. [ 2700.098203][ T6431] pwc: send_video_command error -71 [ 2700.106395][ T6431] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2700.115418][ T6431] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2700.127394][ T6431] usb 5-1: USB disconnect, device number 110 [ 2702.958227][T27697] input: syz1 as /devices/virtual/input/input109 [ 2705.299113][T18566] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2705.462121][T18566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2705.485882][T18566] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2705.495583][T18566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2705.509908][T18566] usb 5-1: config 0 descriptor?? [ 2705.524500][T18566] pwc: Askey VC010 type 2 USB webcam detected. [ 2705.732922][T18566] pwc: send_video_command error -71 [ 2705.739917][T18566] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2705.747620][T18566] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 2705.762836][T18566] usb 5-1: USB disconnect, device number 111 [ 2707.124291][T18566] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2707.173799][T27734] bridge3: entered promiscuous mode [ 2707.179327][T27734] bridge3: entered allmulticast mode [ 2707.188158][T27734] team0: Port device bridge3 added [ 2707.617994][ T30] audit: type=1326 audit(1752767915.966:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2707.716834][ T30] audit: type=1326 audit(1752767915.966:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2707.794940][ T30] audit: type=1326 audit(1752767915.966:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2707.822935][ T30] audit: type=1326 audit(1752767915.966:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2707.862649][ T30] audit: type=1326 audit(1752767915.966:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2707.909175][ T30] audit: type=1326 audit(1752767915.966:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2707.930789][ C1] vkms_vblank_simulate: vblank timer overrun [ 2707.937038][ T30] audit: type=1326 audit(1752767915.966:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27736 comm="syz.1.6390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7178e929 code=0x7ffc0000 [ 2707.991688][T18566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2708.010432][T18566] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2708.027806][T18566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2708.173545][T18566] usb 5-1: config 0 descriptor?? [ 2708.203025][T18566] usb 5-1: can't set config #0, error -71 [ 2708.299938][T27750] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2708.311829][T27750] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2708.984867][T18566] usb 5-1: USB disconnect, device number 112 [ 2711.417947][T18566] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2711.575761][T18566] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2711.596596][T18566] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2711.616517][T18566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2711.640460][ T6431] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2711.704383][T18566] usb 7-1: config 0 descriptor?? [ 2711.713223][T18566] pwc: Askey VC010 type 2 USB webcam detected. [ 2711.916758][T18566] pwc: send_video_command error -71 [ 2712.106608][ T30] audit: type=1400 audit(1752767920.456:392): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=27790 comm="syz.4.6409" dest=2 [ 2712.209242][ T6431] usb 9-1: Using ep0 maxpacket: 8 [ 2712.580535][ T6431] usb 9-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2712.711749][ T6431] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2712.722382][T18566] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2712.730273][T18566] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 2712.741434][T18566] usb 7-1: USB disconnect, device number 119 [ 2712.762039][ T6431] usb 9-1: config 0 descriptor?? [ 2713.523274][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.785471][T18566] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2713.793380][T14767] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2714.103151][ T8512] usb 9-1: USB disconnect, device number 103 [ 2714.133138][T14767] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2714.143711][T14767] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2714.160314][T14767] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2714.169845][T14767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2714.177889][T14767] usb 3-1: SerialNumber: syz [ 2714.429621][T14767] usb 3-1: 0:2 : does not exist [ 2714.449941][T14767] usb 3-1: unit 5 not found! [ 2714.511226][T14767] usb 3-1: USB disconnect, device number 118 [ 2715.840927][T27827] netlink: 'syz.6.6417': attribute type 21 has an invalid length. [ 2715.888351][T27827] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6417'. [ 2715.939826][T27827] netlink: 'syz.6.6417': attribute type 4 has an invalid length. [ 2715.949845][T27827] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6417'. [ 2716.401612][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6424'. [ 2720.305521][T20802] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2720.419224][ T6431] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2720.469357][T20802] usb 3-1: device descriptor read/64, error -71 [ 2720.660967][ T6431] usb 7-1: Using ep0 maxpacket: 8 [ 2720.669968][ T6431] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2720.688534][ T6431] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2720.697869][ T6431] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2720.706132][ T6431] usb 7-1: Product: syz [ 2720.710602][ T6431] usb 7-1: Manufacturer: syz [ 2720.715237][ T6431] usb 7-1: SerialNumber: syz [ 2720.723180][ T6431] usb 7-1: config 0 descriptor?? [ 2720.731363][ T6431] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2720.849410][T18566] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2721.106235][T20802] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2721.661904][ T8512] usb 7-1: USB disconnect, device number 121 [ 2721.718996][T20802] usb 3-1: device descriptor read/64, error -71 [ 2721.866017][T18566] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 2721.876663][T18566] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2721.877888][T20802] usb usb3-port1: attempt power cycle [ 2721.888132][T18566] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2721.888186][T18566] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 2721.888211][T18566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2721.891407][T18566] usb 2-1: config 0 descriptor?? [ 2722.142219][T18566] ath6kl: Failed to submit usb control message: -71 [ 2722.152207][T18566] ath6kl: unable to send the bmi data to the device: -71 [ 2722.160924][T18566] ath6kl: Unable to send get target info: -71 [ 2722.181993][T18566] ath6kl: Failed to init ath6kl core: -71 [ 2722.188306][T18566] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2722.203218][T18566] usb 2-1: USB disconnect, device number 21 [ 2722.399060][T20802] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2722.435167][T20802] usb 3-1: device descriptor read/8, error -71 [ 2722.986675][T27908] binder: 27903:27908 ioctl c0306201 0 returned -14 [ 2724.011163][T27914] netlink: 'syz.1.6449': attribute type 21 has an invalid length. [ 2724.019514][T27914] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6449'. [ 2724.029202][T27914] netlink: 'syz.1.6449': attribute type 4 has an invalid length. [ 2724.037082][T27914] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6449'. [ 2727.339051][ T8512] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2727.599701][T20802] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2727.843455][T20802] usb 7-1: Using ep0 maxpacket: 8 [ 2727.913671][T20802] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2728.010530][T20802] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2728.028065][T20802] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2728.178972][ T8512] usb 3-1: device descriptor read/64, error -71 [ 2728.182610][T20802] usb 7-1: Product: syz [ 2728.190138][T20802] usb 7-1: Manufacturer: syz [ 2728.194788][T20802] usb 7-1: SerialNumber: syz [ 2728.211996][T20802] usb 7-1: config 0 descriptor?? [ 2728.227599][T20802] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2729.209738][T20802] usb 7-1: USB disconnect, device number 122 [ 2729.248943][ T8512] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2730.356385][T27947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6459'. [ 2731.247635][ T8512] usb 3-1: device descriptor read/64, error -71 [ 2731.527379][ T8512] usb usb3-port1: attempt power cycle [ 2731.774280][T27962] netlink: 'syz.8.6462': attribute type 21 has an invalid length. [ 2731.782553][T27962] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6462'. [ 2731.793473][T27962] netlink: 'syz.8.6462': attribute type 4 has an invalid length. [ 2731.801684][T27962] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6462'. [ 2733.542929][T14767] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2734.113614][T14767] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2734.149483][T14767] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2734.158616][T14767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2734.179408][T14767] usb 2-1: config 0 descriptor?? [ 2734.188692][T14767] pwc: Askey VC010 type 2 USB webcam detected. [ 2734.439236][T20802] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2734.456512][T14767] pwc: send_video_command error -71 [ 2734.472715][T14767] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2734.480412][T14767] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2734.491745][T14767] usb 2-1: USB disconnect, device number 22 [ 2735.009370][T28001] netlink: 'syz.4.6476': attribute type 21 has an invalid length. [ 2735.017254][T28001] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6476'. [ 2735.026360][T28001] netlink: 'syz.4.6476': attribute type 4 has an invalid length. [ 2735.034153][T28001] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6476'. [ 2735.509046][T20802] usb 3-1: Using ep0 maxpacket: 8 [ 2736.918303][T20802] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2737.012581][T20802] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2737.292281][T20802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2737.989691][T14767] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2738.029750][T20802] usb 3-1: Product: syz [ 2738.042012][T20802] usb 3-1: Manufacturer: syz [ 2738.280892][T20802] usb 3-1: SerialNumber: syz [ 2738.302195][T20802] usb 3-1: config 0 descriptor?? [ 2738.316106][T20802] usb 3-1: can't set config #0, error -71 [ 2738.572152][T20802] usb 3-1: USB disconnect, device number 126 [ 2738.637768][T28036] tipc: Started in network mode [ 2738.643732][T28036] tipc: Node identity 7365725f69643d3, cluster identity 4711 [ 2738.651228][T28036] tipc: Enabling of bearer rejected, failed to enable media [ 2738.680437][T18566] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 2738.959055][T18566] usb 7-1: Using ep0 maxpacket: 16 [ 2740.059683][T18566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2740.338937][T18566] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2740.369287][T18566] usb 7-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.00 [ 2740.378407][T18566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2740.470825][T18566] usb 7-1: config 0 descriptor?? [ 2740.752713][T28056] netlink: 'syz.2.6490': attribute type 21 has an invalid length. [ 2740.760709][T28056] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6490'. [ 2741.344490][T18566] usb 7-1: USB disconnect, device number 123 [ 2741.407546][T28056] netlink: 'syz.2.6490': attribute type 4 has an invalid length. [ 2741.415471][T28056] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6490'. [ 2743.199074][T20999] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2743.378999][T20999] usb 9-1: Using ep0 maxpacket: 8 [ 2743.417223][T20999] usb 9-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2743.449723][T20999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2743.467072][T20999] usb 9-1: config 0 descriptor?? [ 2744.949417][T20999] usb 9-1: USB disconnect, device number 104 [ 2746.871409][T28114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6509'. [ 2751.539992][T28160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6523'. [ 2751.826759][T28163] bridge2: entered promiscuous mode [ 2751.832165][T28163] bridge2: entered allmulticast mode [ 2751.843097][T28163] team0: Port device bridge2 added [ 2754.458971][ T30] audit: type=1400 audit(1752767962.806:393): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=28183 comm="syz.2.6529" dest=2 [ 2754.698300][T28193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6531'. [ 2756.280010][T18566] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2756.475883][T18566] usb 7-1: Using ep0 maxpacket: 32 [ 2756.560723][T18566] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2756.571425][T18566] usb 7-1: config 0 has no interface number 0 [ 2756.577593][T18566] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2756.589159][T18566] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2756.599326][T18566] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2756.608407][T18566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2756.619942][T18566] usb 7-1: config 0 descriptor?? [ 2756.954523][ T6431] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2757.249164][T18566] uclogic 0003:28BD:0094.0049: pen parameters not found [ 2757.360941][T18566] uclogic 0003:28BD:0094.0049: interface is invalid, ignoring [ 2757.628988][ T6431] usb 3-1: device descriptor read/64, error -71 [ 2757.645758][T18566] usb 7-1: USB disconnect, device number 124 [ 2757.886884][T15487] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2758.029949][ T6431] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2758.068930][T15487] usb 5-1: Using ep0 maxpacket: 8 [ 2758.081514][T15487] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2758.138406][T15487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2758.165551][T15487] usb 5-1: config 0 descriptor?? [ 2758.188952][ T6431] usb 3-1: device descriptor read/64, error -71 [ 2758.302272][T28242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6543'. [ 2758.320589][ T6431] usb usb3-port1: attempt power cycle [ 2758.392154][T20999] usb 5-1: USB disconnect, device number 113 [ 2758.699043][ T6431] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2758.739713][ T6431] usb 3-1: device descriptor read/8, error -71 [ 2759.119266][ T6431] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2759.217989][ T6431] usb 3-1: device descriptor read/8, error -71 [ 2759.481513][ T6431] usb usb3-port1: unable to enumerate USB device [ 2762.340747][T28273] netlink: 83 bytes leftover after parsing attributes in process `syz.2.6553'. [ 2762.466163][T28280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6554'. [ 2767.442709][T28335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6569'. [ 2771.100393][ T30] audit: type=1400 audit(1752767978.986:394): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=28373 comm="syz.6.6582" dest=2 [ 2773.761220][ T5980] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 2773.953365][ T5980] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2773.964631][ T5980] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2773.978988][ T5980] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2774.014810][ T5980] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2774.030842][ T5980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2774.048893][ T5980] usb 7-1: Product: syz [ 2774.073761][ T5980] usb 7-1: Manufacturer: syz [ 2774.078408][ T5980] usb 7-1: SerialNumber: syz [ 2774.337942][ T5980] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 125 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2774.522577][T18566] usb 7-1: USB disconnect, device number 125 [ 2774.531807][T18566] usblp0: removed [ 2774.965687][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.355650][T28419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6594'. [ 2777.842665][T28410] bridge2: entered promiscuous mode [ 2777.847964][T28410] bridge2: entered allmulticast mode [ 2777.857588][T28410] team0: Port device bridge2 added [ 2778.008714][ T30] audit: type=1326 audit(1752767986.356:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.080425][ T30] audit: type=1326 audit(1752767986.356:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.147062][ T30] audit: type=1326 audit(1752767986.396:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.209905][ T30] audit: type=1326 audit(1752767986.396:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.301982][ T30] audit: type=1326 audit(1752767986.396:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.386709][ T30] audit: type=1326 audit(1752767986.396:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.414512][ T30] audit: type=1326 audit(1752767986.396:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.436151][ C1] vkms_vblank_simulate: vblank timer overrun [ 2778.443790][ T30] audit: type=1326 audit(1752767986.406:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.506673][ T30] audit: type=1326 audit(1752767986.406:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2778.595884][T28452] vlan1: entered promiscuous mode [ 2778.602450][T28452] vlan1: entered allmulticast mode [ 2779.103162][ T30] audit: type=1326 audit(1752767986.406:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28443 comm="syz.8.6602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f07bb78e929 code=0x7ffc0000 [ 2779.483022][ T5980] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 2779.681001][ T5980] usb 9-1: Using ep0 maxpacket: 8 [ 2779.688743][ T5980] usb 9-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2779.698392][ T5980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.733478][ T5980] usb 9-1: config 0 descriptor?? [ 2779.955038][T18566] usb 9-1: USB disconnect, device number 105 [ 2781.054905][T28481] netlink: 'syz.2.6613': attribute type 10 has an invalid length. [ 2781.094660][T28481] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2781.458491][T28489] bridge4: entered promiscuous mode [ 2781.516617][T28489] bridge4: entered allmulticast mode [ 2781.620262][T28489] team0: Port device bridge4 added [ 2784.195319][T28508] pim6reg1: entered promiscuous mode [ 2784.208961][T28508] pim6reg1: entered allmulticast mode [ 2784.539274][ T5980] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 2784.989257][ T5980] usb 9-1: Using ep0 maxpacket: 8 [ 2785.032909][ T5980] usb 9-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2785.070756][ T5980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2785.470007][ T5980] usb 9-1: config 0 descriptor?? [ 2785.554524][T28523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6625'. [ 2785.669840][T28523] netlink: 'syz.2.6625': attribute type 10 has an invalid length. [ 2786.260670][T20999] usb 9-1: USB disconnect, device number 106 [ 2789.942246][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6644'. [ 2790.519249][T18566] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2790.689843][T18566] usb 2-1: Using ep0 maxpacket: 8 [ 2790.695878][T18566] usb 2-1: no configurations [ 2790.700732][T18566] usb 2-1: can't read configurations, error -22 [ 2790.839028][T18566] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2791.068952][T18566] usb 2-1: Using ep0 maxpacket: 8 [ 2791.081647][T18566] usb 2-1: no configurations [ 2791.086338][T18566] usb 2-1: can't read configurations, error -22 [ 2791.122522][T18566] usb usb2-port1: attempt power cycle [ 2791.494553][T18566] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2791.524413][T18566] usb 2-1: Using ep0 maxpacket: 8 [ 2791.531375][T18566] usb 2-1: no configurations [ 2791.537513][T18566] usb 2-1: can't read configurations, error -22 [ 2791.689031][T18566] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2791.725565][T18566] usb 2-1: Using ep0 maxpacket: 8 [ 2791.732956][T18566] usb 2-1: no configurations [ 2791.737715][T18566] usb 2-1: can't read configurations, error -22 [ 2791.752645][T18566] usb usb2-port1: unable to enumerate USB device [ 2796.319061][ T5980] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2796.500186][ T5980] usb 2-1: Using ep0 maxpacket: 8 [ 2796.534712][ T5980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2796.546152][ T5980] usb 2-1: config 0 has no interfaces? [ 2796.569207][ T5980] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2796.590622][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2796.599144][ T5980] usb 2-1: Product: syz [ 2796.603784][ T5980] usb 2-1: Manufacturer: syz [ 2796.620628][ T5980] usb 2-1: SerialNumber: syz [ 2796.641792][ T5980] usb 2-1: config 0 descriptor?? [ 2800.170054][ T8512] usb 2-1: USB disconnect, device number 28 [ 2802.343325][T28715] pim6reg1: entered promiscuous mode [ 2802.348722][T28715] pim6reg1: entered allmulticast mode [ 2803.378933][ T5980] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2803.627413][T28719] bond0: (slave bridge0): Releasing backup interface [ 2804.117598][T28719] bridge_slave_0: left allmulticast mode [ 2804.163192][T28719] bridge_slave_0: left promiscuous mode [ 2804.170352][T28719] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.199446][ T5980] usb 2-1: Using ep0 maxpacket: 8 [ 2804.218471][ T5980] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2804.258784][ T5980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.191016][ T5980] usb 2-1: config 0 descriptor?? [ 2805.305702][T20999] usb 2-1: USB disconnect, device number 29 [ 2806.182731][T28719] bridge_slave_1: left allmulticast mode [ 2806.209558][T28719] bridge_slave_1: left promiscuous mode [ 2806.215424][T28719] bridge0: port 2(bridge_slave_1) entered disabled state [ 2806.297717][T28719] bond0: (slave bond_slave_0): Releasing backup interface [ 2806.322941][T28719] bond0: (slave bond_slave_1): Releasing backup interface [ 2806.371341][T28719] team0: Port device team_slave_0 removed [ 2806.392804][T28719] team0: Port device team_slave_1 removed [ 2806.401681][T28719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2806.410960][T28719] batman_adv: batadv0: Removing interface: wlan0 [ 2806.453004][T28719] team0: Port device bridge1 removed [ 2806.463391][T28719] bond1: (slave geneve2): Releasing active interface [ 2806.492352][T28719] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.502836][T28719] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.596183][T28719] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.606093][T28719] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2806.644892][T28719] team0: Port device bridge2 removed [ 2806.664644][T28719] team0: Port device bridge3 removed [ 2806.680260][T28719] team0: Port device bridge4 removed [ 2807.659222][T15487] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 2807.951689][T15487] usb 7-1: Using ep0 maxpacket: 8 [ 2808.111798][T15487] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 2808.343380][T15487] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2808.357914][T15487] usb 7-1: config 0 descriptor?? [ 2808.641235][T15487] usb 7-1: USB disconnect, device number 126 [ 2809.780758][T28793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2810.931412][T28806] pim6reg1: entered promiscuous mode [ 2810.978944][T28806] pim6reg1: entered allmulticast mode [ 2813.793196][T28840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2819.964937][T28890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2822.375799][T28908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6748'. [ 2822.984609][T28891] pim6reg1: entered promiscuous mode [ 2822.994359][T28891] pim6reg1: entered allmulticast mode [ 2825.307763][T28942] fuse: Unknown parameter '0x0000000000000003' [ 2825.348947][ T8512] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2825.501738][ T8512] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2825.545203][T28952] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6765'. [ 2825.784119][ T8512] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2825.858607][ T8512] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2825.980161][ T8512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2825.988600][ T8512] usb 3-1: SerialNumber: syz [ 2826.153923][T28963] netlink: 'syz.4.6769': attribute type 4 has an invalid length. [ 2826.217261][ T8512] usb 3-1: 0:2 : does not exist [ 2826.222290][ T8512] usb 3-1: unit 5 not found! [ 2826.284104][T28966] netlink: 'syz.4.6769': attribute type 4 has an invalid length. [ 2826.500310][ T8512] usb 3-1: USB disconnect, device number 5 [ 2828.193797][T28991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2828.256916][T28993] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6780'. [ 2828.849835][T21290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2828.862326][T21290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2828.872392][T21290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2828.883384][T21290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2828.893013][T21290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2829.121695][T29007] netlink: 'syz.6.6783': attribute type 4 has an invalid length. [ 2829.201168][T29007] netlink: 'syz.6.6783': attribute type 4 has an invalid length. [ 2829.469585][T29019] bridge_slave_0: left allmulticast mode [ 2829.475327][T29019] bridge_slave_0: left promiscuous mode [ 2829.496070][T29019] bridge0: port 1(bridge_slave_0) entered disabled state [ 2829.512747][T29019] bridge_slave_1: left allmulticast mode [ 2829.522265][T29019] bridge_slave_1: left promiscuous mode [ 2829.532726][T29019] bridge0: port 2(bridge_slave_1) entered disabled state [ 2829.550416][T29019] bond0: (slave bond_slave_0): Releasing backup interface [ 2829.580549][T29019] bond0: (slave bond_slave_1): Releasing backup interface [ 2829.612391][T29019] team0: Port device team_slave_0 removed [ 2829.632882][T29019] team0: Port device team_slave_1 removed [ 2829.662108][T29019] team0: Port device bridge1 removed [ 2829.694781][T29019] team0: Port device bridge2 removed [ 2829.917986][T29002] chnl_net:caif_netlink_parms(): no params data found [ 2830.265393][T29002] bridge0: port 1(bridge_slave_0) entered blocking state [ 2830.274191][T29002] bridge0: port 1(bridge_slave_0) entered disabled state [ 2830.283796][T29002] bridge_slave_0: entered allmulticast mode [ 2830.295025][T29002] bridge_slave_0: entered promiscuous mode [ 2830.358972][ T6431] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 2830.379142][ T8512] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2830.497151][T29002] bridge0: port 2(bridge_slave_1) entered blocking state [ 2830.504850][T18566] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 2830.549113][ T8512] usb 3-1: Using ep0 maxpacket: 32 [ 2830.566926][T29002] bridge0: port 2(bridge_slave_1) entered disabled state [ 2830.585335][ T8512] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2830.604102][T29002] bridge_slave_1: entered allmulticast mode [ 2830.615387][ T8512] usb 3-1: config 0 has no interface number 0 [ 2830.636658][ T8512] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2830.677439][T29002] bridge_slave_1: entered promiscuous mode [ 2830.702892][ T8512] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2830.761991][T18566] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2830.800629][ T8512] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2830.837769][T18566] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2830.857233][ T8512] usb 3-1: Product: syz [ 2830.888310][ T8512] usb 3-1: Manufacturer: syz [ 2830.933614][ T8512] usb 3-1: SerialNumber: syz [ 2830.945753][T18566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2830.960766][T21290] Bluetooth: hci5: command tx timeout [ 2831.044087][T18566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2831.059274][ T8512] usb 3-1: config 0 descriptor?? [ 2831.140298][T18566] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2831.166526][ T8512] smsc75xx v1.0.0 [ 2831.188437][T18566] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2831.221602][T18566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2831.227145][T29002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2831.331843][ T6431] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2831.371703][ T6431] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2831.379345][T18566] usb 2-1: Product: syz [ 2831.382716][ T6431] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2831.384797][T18566] usb 2-1: Manufacturer: syz [ 2831.402194][ T6431] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2831.414760][T18566] usb 2-1: SerialNumber: syz [ 2831.422347][ T6431] usb 7-1: SerialNumber: syz [ 2831.427598][T18566] usb 2-1: config 0 descriptor?? [ 2831.689408][T18566] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2831.701431][T18566] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2831.793972][ T6431] usb 7-1: invalid UAC_HEADER (v1) [ 2831.818189][ T6431] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2831.829424][ T6431] usb 7-1: USB disconnect, device number 127 [ 2832.593724][T18566] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2832.603657][ T8512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2832.614665][T18566] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 2832.625071][ T8512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2832.634654][T18566] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 2832.650211][ T8512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 2832.666034][ T8512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 2832.676220][ T8512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2832.687541][ T8512] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2832.698643][ T8512] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 2832.714050][T18566] usb 2-1: USB disconnect, device number 30 [ 2833.041373][T21290] Bluetooth: hci5: command tx timeout [ 2833.166488][T18148] bond0 (unregistering): Released all slaves [ 2833.334931][T18148] bond1 (unregistering): Released all slaves [ 2833.352166][T29002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2833.457018][T18148] : left promiscuous mode [ 2833.587930][T29002] team0: Port device team_slave_0 added [ 2833.596836][T18148] tipc: Disabling bearer [ 2833.649366][T18148] tipc: Left network mode [ 2833.661877][T29002] team0: Port device team_slave_1 added [ 2833.791627][T18148] IPVS: stopping backup sync thread 21017 ... [ 2834.298671][ T8512] usb 3-1: USB disconnect, device number 6 [ 2834.574553][T29002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2834.609749][T29002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2834.676817][T29002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2834.750849][T29002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2834.757945][T29002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2834.899032][ T8512] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2835.361245][T21290] Bluetooth: hci5: command tx timeout [ 2835.388958][ T8512] usb 5-1: Using ep0 maxpacket: 8 [ 2835.391769][T29002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2835.396477][ T8512] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2835.416792][ T8512] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2835.426194][ T8512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2835.434414][ T8512] usb 5-1: Product: syz [ 2835.501051][ T8512] usb 5-1: Manufacturer: syz [ 2835.505780][ T8512] usb 5-1: SerialNumber: syz [ 2835.614318][ T8512] usb 5-1: config 0 descriptor?? [ 2835.993715][T29002] hsr_slave_0: entered promiscuous mode [ 2836.001461][T29002] hsr_slave_1: entered promiscuous mode [ 2836.007687][T29002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2836.015754][T29002] Cannot create hsr debugfs directory [ 2836.405466][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2837.459001][T21290] Bluetooth: hci5: command tx timeout [ 2837.790801][ T5980] usb 5-1: USB disconnect, device number 114 [ 2841.026680][T29142] netlink: 'syz.2.6823': attribute type 4 has an invalid length. [ 2841.088551][T29143] netlink: 'syz.2.6823': attribute type 4 has an invalid length. [ 2842.712368][T18148] IPVS: stop unused estimator thread 0... [ 2843.049540][ T5980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2843.621022][ T5980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2843.669159][ T5980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2843.728329][ T5980] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2843.827870][ T5980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2843.939240][ T5980] usb 3-1: SerialNumber: syz [ 2844.575233][T29002] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2844.617150][ T5980] usb 3-1: 0:2 : does not exist [ 2844.629019][ T5980] usb 3-1: unit 5 not found! [ 2844.713679][T29002] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2844.715499][ T5980] usb 3-1: USB disconnect, device number 7 [ 2844.776101][T29002] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2844.816753][T29002] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2845.041719][T29180] netlink: 'syz.6.6833': attribute type 4 has an invalid length. [ 2845.093970][T29180] netlink: 'syz.6.6833': attribute type 4 has an invalid length. [ 2845.821140][T29002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2845.873282][T29002] 8021q: adding VLAN 0 to HW filter on device team0 [ 2845.958741][T29186] syzkaller0: entered promiscuous mode [ 2846.110633][T29186] syzkaller0: entered allmulticast mode [ 2846.224734][ T8512] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2846.408590][ T8512] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2846.428844][ T8512] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2846.463307][ T8512] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2846.472656][ T8512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2846.491585][ T8512] usb 2-1: SerialNumber: syz [ 2846.739227][ T8512] usb 2-1: 0:2 : does not exist [ 2846.782272][ T8512] usb 2-1: USB disconnect, device number 31 [ 2848.220102][T29218] netlink: 'syz.6.6846': attribute type 4 has an invalid length. [ 2848.879416][T29223] netlink: 'syz.6.6846': attribute type 4 has an invalid length. [ 2850.880679][T18148] bridge0: port 1(bridge_slave_0) entered blocking state [ 2850.887918][T18148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2851.014613][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 2851.021837][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2851.129243][ T6431] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2851.308940][ T6431] usb 3-1: Using ep0 maxpacket: 8 [ 2852.047906][ T6431] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2852.059618][ T6431] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2852.069486][ T6431] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2852.079698][ T6431] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2852.090094][ T6431] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2852.103275][ T6431] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2852.118994][ T6431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2852.132437][ T6431] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 2852.428963][ T8512] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2852.535390][T29002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2852.592532][ T8512] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2852.603692][ T8512] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2852.615889][ T8512] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2852.625485][ T8512] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2852.636118][ T8512] usb 7-1: SerialNumber: syz [ 2852.855876][ T8512] usb 7-1: 0:2 : does not exist [ 2852.874553][ T8512] usb 7-1: unit 5: unexpected type 0x09 [ 2852.913200][ T8512] usb 7-1: USB disconnect, device number 2 [ 2852.985071][T29002] veth0_vlan: entered promiscuous mode [ 2853.036820][T29269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2853.063502][T29002] veth1_vlan: entered promiscuous mode [ 2853.122507][T29002] veth0_macvtap: entered promiscuous mode [ 2853.140407][T29002] veth1_macvtap: entered promiscuous mode [ 2853.166922][T29002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2853.183063][T29002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2853.198595][T29002] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.208740][T29002] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.230612][T29002] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.242099][T29002] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2853.271057][T29271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6859'. [ 2853.377776][T26764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2853.388652][T26764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2853.435507][T13863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2853.462177][T13863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2853.640662][T29279] pim6reg1: entered promiscuous mode [ 2853.656527][T29279] pim6reg1: entered allmulticast mode [ 2853.679158][T29283] fuse: Unknown parameter '0x0000000000000003' [ 2853.859749][T15487] usb 3-1: USB disconnect, device number 8 [ 2854.258998][T14767] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2854.279780][T29289] bond0: (slave wlan1): Releasing backup interface [ 2854.483457][T14767] usb 7-1: Using ep0 maxpacket: 8 [ 2854.501670][T14767] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2854.523263][T14767] usb 7-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2854.675534][T29289] team0: Port device bridge2 removed [ 2854.687587][T14767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2854.706134][T14767] usb 7-1: Product: syz [ 2854.725121][T14767] usb 7-1: Manufacturer: syz [ 2854.739783][T14767] usb 7-1: SerialNumber: syz [ 2854.755147][T14767] usb 7-1: config 0 descriptor?? [ 2854.772997][T14767] cdc_phonet 7-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2855.832101][T18566] usb 7-1: USB disconnect, device number 3 [ 2855.895161][T29312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6869'. [ 2856.530225][T29326] fuse: Unknown parameter '0x0000000000000003' [ 2856.563816][T29328] netlink: 'syz.2.6874': attribute type 4 has an invalid length. [ 2856.599045][T29328] netlink: 'syz.2.6874': attribute type 4 has an invalid length. [ 2856.788326][T29331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2857.287279][T29333] pim6reg1: entered promiscuous mode [ 2857.317123][T29333] pim6reg1: entered allmulticast mode [ 2857.786295][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2857.786316][ T30] audit: type=1326 audit(1752768066.136:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2857.959201][ T30] audit: type=1326 audit(1752768066.136:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2858.000622][ T30] audit: type=1326 audit(1752768066.136:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2858.287229][ T30] audit: type=1326 audit(1752768066.136:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2859.048941][ T30] audit: type=1326 audit(1752768066.136:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2859.165581][ T30] audit: type=1326 audit(1752768066.136:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2859.422042][ T30] audit: type=1326 audit(1752768066.136:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2859.445855][ T30] audit: type=1326 audit(1752768066.136:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2860.150055][ T30] audit: type=1326 audit(1752768066.266:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2860.424882][ T30] audit: type=1326 audit(1752768066.276:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29334 comm="syz.2.6878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44118e929 code=0x7ffc0000 [ 2860.759160][T18566] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2860.879139][T14767] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2861.019730][T18566] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2861.138313][T18566] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 2861.231461][T14767] usb 5-1: Using ep0 maxpacket: 8 [ 2861.256249][T18566] usb 2-1: config 6 has no interface number 0 [ 2861.350225][T18566] usb 2-1: config 6 interface 200 altsetting 43 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2861.373767][T14767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2861.389727][T18566] usb 2-1: config 6 interface 200 has no altsetting 0 [ 2861.463226][T18566] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 2861.473259][T14767] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2861.485015][T18566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2861.493341][T14767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2861.507468][T14767] usb 5-1: Product: syz [ 2861.511875][T18566] usb 2-1: Product: syz [ 2861.516083][T18566] usb 2-1: Manufacturer: syz [ 2861.525567][T14767] usb 5-1: Manufacturer: syz [ 2861.539187][T14767] usb 5-1: SerialNumber: syz [ 2861.545622][T18566] usb 2-1: SerialNumber: syz [ 2861.560329][T14767] usb 5-1: config 0 descriptor?? [ 2861.569643][T14767] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2861.587440][T29369] netlink: 'syz.6.6888': attribute type 4 has an invalid length. [ 2861.628420][T29369] netlink: 'syz.6.6888': attribute type 4 has an invalid length. [ 2863.984530][ T5980] usb 5-1: USB disconnect, device number 115 [ 2864.076813][T18566] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 2864.098854][ T30] audit: type=1326 audit(1752768072.446:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2864.128929][T18566] dvb-usb: bulk message failed: -71 (3/0) [ 2864.160327][T18566] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2864.180363][T18566] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 2864.208974][ T30] audit: type=1326 audit(1752768072.446:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2864.230751][T18566] usb 2-1: media controller created [ 2864.271285][ T30] audit: type=1326 audit(1752768072.476:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2864.315839][T18566] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2864.358953][ T30] audit: type=1326 audit(1752768072.476:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2864.396187][T18566] dvb-usb: bulk message failed: -71 (6/0) [ 2864.410713][T18566] dvb-usb: bulk message failed: -71 (6/0) [ 2864.416611][T18566] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 2864.434097][ T30] audit: type=1326 audit(1752768072.476:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2864.939617][T18566] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input112 [ 2864.950994][ T30] audit: type=1326 audit(1752768072.476:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2865.111101][T18566] dvb-usb: schedule remote query interval to 150 msecs. [ 2865.145475][T18566] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 2865.194440][ T30] audit: type=1326 audit(1752768072.476:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2865.227773][T29406] netlink: 'syz.6.6897': attribute type 21 has an invalid length. [ 2865.235767][T29406] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6897'. [ 2865.245170][T29406] netlink: 'syz.6.6897': attribute type 4 has an invalid length. [ 2865.253061][T29406] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6897'. [ 2865.301678][T18566] usb 2-1: USB disconnect, device number 32 [ 2865.400452][T14767] dvb-usb: bulk message failed: -19 (1/0) [ 2865.406411][T14767] dvb-usb: error while querying for an remote control event. [ 2865.439750][ T30] audit: type=1326 audit(1752768072.476:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2865.759503][ T30] audit: type=1326 audit(1752768072.476:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2865.874392][ T30] audit: type=1326 audit(1752768072.476:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29389 comm="syz.6.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd12b38e929 code=0x7ffc0000 [ 2866.274081][T18566] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 2866.368226][T29417] syzkaller0: entered promiscuous mode [ 2866.407430][T29417] syzkaller0: entered allmulticast mode [ 2866.414529][T29420] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 2867.703149][T29432] kvm: pic: single mode not supported [ 2867.703292][T29432] kvm: pic: single mode not supported [ 2869.598932][T18566] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2869.709355][T20802] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2869.772142][T29456] netlink: 'syz.4.6912': attribute type 21 has an invalid length. [ 2869.780348][T29456] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6912'. [ 2870.285483][T18566] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2870.304045][T18566] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2870.319734][T18566] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 2870.330912][T18566] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2870.377670][T18566] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2870.392521][T18566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2870.401679][T18566] usb 3-1: SerialNumber: syz [ 2870.428971][T20802] usb 2-1: Using ep0 maxpacket: 8 [ 2870.436327][T20802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2870.490370][T20802] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2870.518974][T20802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2870.564135][T20802] usb 2-1: Product: syz [ 2870.583585][T20802] usb 2-1: Manufacturer: syz [ 2870.598867][T20802] usb 2-1: SerialNumber: syz [ 2870.616722][T20802] usb 2-1: config 0 descriptor?? [ 2870.624309][T20802] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2870.631049][T18566] usb 3-1: 0:2 : does not exist [ 2870.637876][T18566] usb 3-1: unit 5 not found! [ 2870.654327][T18566] usb 3-1: USB disconnect, device number 9 [ 2872.103855][T29275] usb 2-1: USB disconnect, device number 33 [ 2872.489835][T29469] fuse: Bad value for 'fd' [ 2877.865316][T29456] netlink: 'syz.4.6912': attribute type 4 has an invalid length. [ 2877.873317][T29456] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6912'. [ 2877.896901][T29481] wg2: entered promiscuous mode [ 2877.901974][T29481] wg2: entered allmulticast mode [ 2878.957743][T29506] xt_CT: No such helper "pptp" [ 2879.111616][T29502] pim6reg1: entered promiscuous mode [ 2879.116997][T29502] pim6reg1: entered allmulticast mode [ 2880.812613][T29516] random: crng reseeded on system resumption [ 2881.493256][T29535] block device autoloading is deprecated and will be removed. [ 2882.407395][T29550] xt_CT: No such helper "pptp" [ 2882.409973][T18566] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2882.525276][T29554] netlink: 'syz.6.6937': attribute type 21 has an invalid length. [ 2882.533414][T29554] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6937'. [ 2882.542554][T29554] netlink: 'syz.6.6937': attribute type 4 has an invalid length. [ 2882.550400][T29554] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6937'. [ 2882.560496][T18566] usb 3-1: device descriptor read/64, error -71 [ 2882.859321][T18566] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2882.891318][T29559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2883.510978][T29560] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2883.548914][T18566] usb 3-1: device descriptor read/64, error -71 [ 2883.669465][T18566] usb usb3-port1: attempt power cycle [ 2884.261726][T18566] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2884.800742][T18566] usb 3-1: device descriptor read/8, error -71 [ 2885.018914][T14767] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2885.738939][T14767] usb 2-1: Using ep0 maxpacket: 8 [ 2885.747657][T14767] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2885.759438][T14767] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2885.769411][T14767] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2885.779965][T14767] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2885.793161][T14767] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2885.802291][T14767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2886.104066][T14767] usb 2-1: usb_control_msg returned -32 [ 2886.114203][T29600] kvm: pic: non byte write [ 2886.122208][T14767] usbtmc 2-1:16.0: can't read capabilities [ 2886.199068][T14767] usb 2-1: USB disconnect, device number 34 [ 2888.243925][T29619] serio: Serial port ptm0 [ 2888.368219][T29624] netlink: 'syz.8.6958': attribute type 21 has an invalid length. [ 2888.376315][T29624] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6958'. [ 2888.386004][T29624] netlink: 'syz.8.6958': attribute type 4 has an invalid length. [ 2888.393943][T29624] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6958'. [ 2889.349542][T29639] bridge_slave_1: entered promiscuous mode [ 2889.429697][T29637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6962'. [ 2890.118920][T14767] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2890.271814][T14767] usb 7-1: device descriptor read/64, error -71 [ 2890.848839][T29638] tipc: Started in network mode [ 2890.854266][T29638] tipc: Node identity ac14140f, cluster identity 4711 [ 2890.901558][T29638] tipc: New replicast peer: 255.255.255.255 [ 2890.932361][T29638] tipc: Enabled bearer , priority 10 [ 2891.153989][T29650] bridge3: entered promiscuous mode [ 2891.159449][T29650] bridge3: entered allmulticast mode [ 2891.173463][T29650] team0: Port device bridge3 added [ 2891.491776][ T5900] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 2891.499612][T14767] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2891.640692][T14767] usb 7-1: device descriptor read/64, error -71 [ 2891.668470][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 2891.676409][ T5900] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2891.688319][ T5900] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2891.700745][ T5900] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2891.711107][ T5900] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2891.725502][ T5900] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2891.734643][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2891.754024][T14767] usb usb7-port1: attempt power cycle [ 2892.621578][T29275] tipc: Node number set to 2886997007 [ 2892.636143][ T5900] usb 9-1: usb_control_msg returned -32 [ 2892.651900][ T5900] usbtmc 9-1:16.0: can't read capabilities [ 2892.664389][ T5900] usb 9-1: USB disconnect, device number 107 [ 2892.679151][T14767] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2892.901782][T14767] usb 7-1: device not accepting address 6, error -71 [ 2894.345163][T27481] Bluetooth: hci1: command 0x1003 tx timeout [ 2894.351861][T21290] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2895.140358][T29674] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6975'. [ 2895.916692][T29682] vlan1: entered promiscuous mode [ 2895.930330][T29682] vlan1: entered allmulticast mode [ 2896.018736][T29682] veth0_vlan: entered allmulticast mode [ 2897.872236][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.708580][T29696] syzkaller0: entered promiscuous mode [ 2898.733511][T29696] syzkaller0: entered allmulticast mode [ 2899.538933][T14767] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 2899.753683][T14767] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2901.116593][T14767] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2901.126424][T14767] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 2901.147899][T14767] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2901.162486][T14767] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2901.190197][T14767] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2901.198279][T14767] usb 9-1: SerialNumber: syz [ 2901.380442][T14767] usb 9-1: can't set config #1, error -71 [ 2901.392257][T14767] usb 9-1: USB disconnect, device number 108 [ 2901.475850][T15487] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2901.640846][T15487] usb 5-1: Using ep0 maxpacket: 8 [ 2901.657873][T15487] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2901.669287][T15487] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2901.680246][T15487] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2901.704210][T15487] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2901.720157][T15487] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2901.735830][T15487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2901.969410][T15487] usb 5-1: usb_control_msg returned -32 [ 2901.975214][T15487] usbtmc 5-1:16.0: can't read capabilities [ 2901.988580][T15487] usb 5-1: USB disconnect, device number 116 [ 2904.478929][T14767] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 2904.907847][T15487] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2904.908904][T14767] usb 9-1: device descriptor read/64, error -71 [ 2905.069908][T15487] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2905.081253][T15487] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2905.091336][T15487] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2905.118954][T15487] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2905.125642][T15487] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2905.134818][T15487] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2905.157731][T15487] usb 5-1: config 0 descriptor?? [ 2905.171056][T15487] usbhid 5-1:0.0: can't add hid device: -22 [ 2905.177173][T15487] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 2905.200169][T14767] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 2905.348993][T14767] usb 9-1: device descriptor read/64, error -71 [ 2905.387000][T15487] usb 5-1: USB disconnect, device number 117 [ 2905.469224][T14767] usb usb9-port1: attempt power cycle [ 2905.821533][T14767] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 2905.880598][T14767] usb 9-1: device descriptor read/8, error -71 [ 2906.129004][T14767] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 2906.167405][T14767] usb 9-1: device descriptor read/8, error -71 [ 2906.280213][T14767] usb usb9-port1: unable to enumerate USB device [ 2906.573137][T29742] block nbd4: shutting down sockets [ 2907.104494][T29734] syz_tun: left allmulticast mode [ 2907.110084][T29734] syz_tun: left promiscuous mode [ 2907.115330][T29734] bridge0: port 3(syz_tun) entered disabled state [ 2907.147223][T29734] bridge_slave_1: left allmulticast mode [ 2907.153073][T29734] bridge_slave_1: left promiscuous mode [ 2907.159029][T29734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2907.171401][T29734] bridge_slave_0: left allmulticast mode [ 2907.177166][T29734] bridge_slave_0: left promiscuous mode [ 2907.183187][T29734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2908.784095][T15487] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2908.907808][T29768] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7000'. [ 2909.102540][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 2909.103592][ T30] audit: type=1400 audit(1752768117.246:495): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=29757 comm="syz.6.7000" dest=2 [ 2910.350928][T15487] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2910.370355][T15487] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2910.520218][T15487] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 2910.533723][T15487] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2910.550495][T15487] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2910.562415][T15487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2910.578954][T15487] usb 3-1: SerialNumber: syz [ 2913.257920][T15487] usb 3-1: 0:2 : does not exist [ 2913.271598][T20802] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2914.602840][T15487] usb 3-1: unit 5 not found! [ 2914.844619][T15487] usb 3-1: USB disconnect, device number 14 [ 2917.134125][T14767] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2917.311458][T14767] usb 2-1: Using ep0 maxpacket: 8 [ 2918.267046][ T30] audit: type=1400 audit(1752768126.196:496): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=29811 comm="syz.8.7017" dest=20000 [ 2918.507209][T14767] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2918.520491][T14767] usb 2-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2918.529782][T14767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2918.537812][T14767] usb 2-1: Product: syz [ 2918.542059][T14767] usb 2-1: Manufacturer: syz [ 2918.546690][T14767] usb 2-1: SerialNumber: syz [ 2918.749930][T14767] usb 2-1: config 0 descriptor?? [ 2918.757309][T14767] cdc_phonet 2-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2918.879756][T15487] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 2918.924028][T29831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7020'. [ 2919.088956][T15487] usb 9-1: Using ep0 maxpacket: 32 [ 2919.156856][T15487] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 2919.249958][T15487] usb 9-1: config 0 has no interface number 0 [ 2919.372671][T15487] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2919.435302][T15487] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2919.486960][T15487] usb 9-1: Product: syz [ 2919.516242][T15487] usb 9-1: Manufacturer: syz [ 2919.549314][T15487] usb 9-1: SerialNumber: syz [ 2919.588580][T15487] usb 9-1: config 0 descriptor?? [ 2919.612841][ T5900] usb 2-1: USB disconnect, device number 35 [ 2919.639492][T15487] smsc95xx v2.0.0 [ 2920.667554][T15487] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2921.188884][T15487] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2922.606808][ T30] audit: type=1400 audit(1752768130.706:497): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=29845 comm="syz.2.7025" dest=20000 [ 2924.689108][T21290] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2924.701614][T21290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2924.711690][T21290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2924.727473][T21290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2924.735838][T21290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2924.843547][T29879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7033'. [ 2925.557457][T18148] Bluetooth: hci3: Frame reassembly failed (-84) [ 2925.887843][T21880] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.108888][T18566] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2926.168962][T29872] chnl_net:caif_netlink_parms(): no params data found [ 2926.320871][T15487] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 2926.336200][T15487] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -110 [ 2926.389877][T21880] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.398481][T14767] usb 9-1: USB disconnect, device number 113 [ 2926.406418][T18566] usb 3-1: Using ep0 maxpacket: 8 [ 2926.423136][T18566] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2926.446248][T18566] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2926.456223][T18566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2926.464436][T18566] usb 3-1: Product: syz [ 2926.471617][T18566] usb 3-1: Manufacturer: syz [ 2926.476375][T18566] usb 3-1: SerialNumber: syz [ 2926.485322][T18566] usb 3-1: config 0 descriptor?? [ 2926.503485][T18566] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2926.572962][T21880] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.640763][T29903] proc: Bad value for 'gid' [ 2926.702762][T21880] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.874261][T29872] bridge0: port 1(bridge_slave_0) entered blocking state [ 2926.884730][T27481] Bluetooth: hci1: command tx timeout [ 2926.943570][T29872] bridge0: port 1(bridge_slave_0) entered disabled state [ 2926.956140][T29872] bridge_slave_0: entered allmulticast mode [ 2926.984693][T29872] bridge_slave_0: entered promiscuous mode [ 2927.050424][T29908] bridge4: entered promiscuous mode [ 2927.078624][T29908] bridge4: entered allmulticast mode [ 2927.140912][T29908] team0: Port device bridge4 added [ 2927.181522][T29872] bridge0: port 2(bridge_slave_1) entered blocking state [ 2927.189090][T29872] bridge0: port 2(bridge_slave_1) entered disabled state [ 2927.232680][T29872] bridge_slave_1: entered allmulticast mode [ 2927.265251][T29872] bridge_slave_1: entered promiscuous mode [ 2927.278989][T21290] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2928.202612][T29872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2928.227924][T29872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2928.587409][T29872] team0: Port device team_slave_0 added [ 2928.598260][T29872] team0: Port device team_slave_1 added [ 2928.728307][T29872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2928.905110][T29872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2928.960570][T27481] Bluetooth: hci1: command tx timeout [ 2929.145645][T29925] random: crng reseeded on system resumption [ 2929.599241][T29872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2929.678871][T29872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2929.698084][T29872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2929.757811][T29872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2931.609067][T27481] Bluetooth: hci1: command tx timeout [ 2932.606002][T21880] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2932.632327][ T5980] usb 3-1: USB disconnect, device number 15 [ 2933.552382][T21880] team0: Port device bridge2 removed [ 2933.683152][T27481] Bluetooth: hci1: command tx timeout [ 2934.021553][T21880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2934.047997][T21880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2934.072629][T21880] bond0 (unregistering): Released all slaves [ 2934.121368][T21880] bond1 (unregistering): Released all slaves [ 2934.227270][T29963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2939.315936][T21880] tipc: Disabling bearer [ 2939.322089][T21880] tipc: Disabling bearer [ 2939.418524][T21880] tipc: Left network mode [ 2939.478901][T29994] ÿÿÿÿÿÿ: renamed from vlan1 [ 2939.708980][T14767] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 2939.734359][T29872] hsr_slave_0: entered promiscuous mode [ 2939.750064][T21880] IPVS: stopping backup sync thread 21275 ... [ 2939.767041][T29872] hsr_slave_1: entered promiscuous mode [ 2940.239281][T29483] Bluetooth: hci3: Frame reassembly failed (-84) [ 2940.437225][T29275] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2940.459808][T14767] usb 9-1: Using ep0 maxpacket: 8 [ 2940.473442][T14767] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2940.514736][T14767] usb 9-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 2940.528120][T14767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2940.536456][T14767] usb 9-1: Product: syz [ 2940.541108][T14767] usb 9-1: Manufacturer: syz [ 2940.545755][T14767] usb 9-1: SerialNumber: syz [ 2940.562938][T14767] usb 9-1: config 0 descriptor?? [ 2940.572036][T14767] cdc_phonet 9-1:0.0: probe with driver cdc_phonet failed with error -22 [ 2940.600719][T29275] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 2940.618875][T29275] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2940.639184][T29275] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2940.648321][T29275] usb 2-1: config 1 has no interface number 1 [ 2940.657598][T29275] usb 2-1: config 1 interface 5 has no altsetting 0 [ 2940.679197][T29275] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2940.693450][T29275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2940.702961][T29275] usb 2-1: SerialNumber: syz [ 2940.715542][T21880] hsr_slave_0: left promiscuous mode [ 2940.721882][T21880] hsr_slave_1: left promiscuous mode [ 2940.746708][T21880] veth1_macvtap: left promiscuous mode [ 2940.752344][T21880] veth0_macvtap: left promiscuous mode [ 2940.757982][T21880] veth1_vlan: left promiscuous mode [ 2940.763547][T21880] veth0_vlan: left promiscuous mode [ 2940.960143][T29275] usb 2-1: 0:2 : does not exist [ 2940.968440][T29275] usb 2-1: unit 5 not found! [ 2941.012659][T29275] usb 2-1: USB disconnect, device number 36 [ 2941.713745][T30014] netlink: 'syz.1.7072': attribute type 39 has an invalid length. [ 2941.930304][T21880] team0 (unregistering): Port device team_slave_1 removed [ 2942.168939][T21290] Bluetooth: hci3: command 0x1003 tx timeout [ 2942.175519][T27481] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2942.345870][T21880] team0 (unregistering): Port device team_slave_0 removed [ 2945.222521][T30014] veth0_macvtap: left promiscuous mode [ 2945.867808][T30043] netlink: 'syz.2.7082': attribute type 39 has an invalid length. [ 2945.891996][T30043] veth0_macvtap: left promiscuous mode [ 2946.165548][T20802] usb 9-1: USB disconnect, device number 114 [ 2949.108829][T29872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2949.160417][T29872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2949.185352][T29872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2949.387718][T29872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2949.718034][T29872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2949.771237][T29872] 8021q: adding VLAN 0 to HW filter on device team0 [ 2949.798320][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 2949.805637][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2950.598313][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 2950.605528][T16361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2951.176590][T20802] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2951.184551][T21290] Bluetooth: hci5: command 0x0406 tx timeout [ 2951.521436][T20802] usb 2-1: Using ep0 maxpacket: 32 [ 2951.559298][T20802] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2951.693212][T20802] usb 2-1: config 0 has no interface number 0 [ 2951.707870][T20802] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2951.719907][T20802] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2951.729153][T20802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.737188][T20802] usb 2-1: Product: syz [ 2951.743932][T20802] usb 2-1: Manufacturer: syz [ 2951.748613][T20802] usb 2-1: SerialNumber: syz [ 2951.765541][T20802] usb 2-1: config 0 descriptor?? [ 2951.783611][T20802] smsc75xx v1.0.0 [ 2952.831582][T20802] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2952.862658][T20802] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2953.077400][T20802] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 2953.098984][T20802] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 2953.118001][T20802] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 2953.140706][T20802] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 2954.512968][ T5980] usb 2-1: USB disconnect, device number 37 [ 2957.174202][T29872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2957.303130][T30177] Mount JFS Failure: -22 [ 2957.778975][T18566] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2958.014497][T18566] usb 5-1: Using ep0 maxpacket: 32 [ 2958.023923][T18566] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2958.036836][T30197] bridge3: entered promiscuous mode [ 2958.042104][T30197] bridge3: entered allmulticast mode [ 2958.049974][T30197] team0: Port device bridge3 added [ 2958.307367][T18566] usb 5-1: config 0 has no interface number 0 [ 2958.373068][T18566] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2958.554418][T18566] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2958.563392][T29872] veth0_vlan: entered promiscuous mode [ 2958.568859][T18566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2958.584051][T18566] usb 5-1: Product: syz [ 2958.588292][T18566] usb 5-1: Manufacturer: syz [ 2958.619181][T18566] usb 5-1: SerialNumber: syz [ 2958.625084][T29872] veth1_vlan: entered promiscuous mode [ 2958.642364][T18566] usb 5-1: config 0 descriptor?? [ 2958.670708][T18566] smsc75xx v1.0.0 [ 2958.716715][T29872] veth0_macvtap: entered promiscuous mode [ 2958.742875][T29872] veth1_macvtap: entered promiscuous mode [ 2958.795472][T29872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2958.953765][T29872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2959.011305][T29872] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.076150][T29872] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.126480][T29872] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.273004][T29872] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2959.290573][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.360994][T18566] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2959.513710][T18566] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2959.705763][T18566] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 2959.768915][T18566] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 2959.843005][T18566] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2959.901199][T18566] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 2959.966031][T26764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2959.997352][T26764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2960.052254][T13863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2960.062650][T13863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2960.604533][T30224] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2960.616418][T30224] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2961.198312][T30223] Mount JFS Failure: -22 [ 2961.288383][T18566] usb 5-1: USB disconnect, device number 118 [ 2962.577272][T30237] kthread_run failed with err -4 [ 2965.052322][T30275] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2965.064336][T30275] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2965.568886][T29275] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2965.928911][T29275] usb 2-1: Using ep0 maxpacket: 32 [ 2965.937342][T29275] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 2965.946668][T29275] usb 2-1: config 0 has no interface number 0 [ 2965.981081][T29275] usb 2-1: config 0 interface 184 has no altsetting 0 [ 2965.994950][T29275] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2965.995211][T29275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2965.995505][T29275] usb 2-1: Product: syz [ 2965.995766][T29275] usb 2-1: Manufacturer: syz [ 2965.996116][T29275] usb 2-1: SerialNumber: syz [ 2966.971190][T29275] usb 2-1: config 0 descriptor?? [ 2967.001042][T29275] smsc75xx v1.0.0 [ 2967.862018][T29275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2967.894471][T29275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2968.108960][T29275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 2968.120043][T29275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 2968.146938][T29275] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 2968.873219][T29275] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 2969.723558][T18566] usb 2-1: USB disconnect, device number 38 [ 2972.051452][T30336] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7170'. [ 2972.061223][T30336] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7170'. [ 2972.310138][T29275] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2972.518962][T29275] usb 2-1: Using ep0 maxpacket: 8 [ 2972.601682][T29275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2972.629611][T29275] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2972.638738][T29275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2972.969592][T29275] usb 2-1: config 0 descriptor?? [ 2973.261925][T29275] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2973.389012][T30341] ------------[ cut here ]------------ [ 2973.394870][T30341] WARNING: CPU: 0 PID: 30341 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 2973.405249][T30341] Modules linked in: [ 2973.409875][T30341] CPU: 0 UID: 0 PID: 30341 Comm: syz.8.7172 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 2973.422096][T30341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2973.432433][T30341] RIP: 0010:folio_memcg+0x1a8/0x310 [ 2973.437659][T30341] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 99 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 2973.457576][T30341] RSP: 0018:ffffc9000b8cf250 EFLAGS: 00010287 [ 2973.463726][T30341] RAX: ffffffff82044487 RBX: 0000000000000000 RCX: 0000000000080000 [ 2973.471743][T30341] RDX: ffffc90015e9c000 RSI: 0000000000075795 RDI: 0000000000075796 [ 2973.479852][T30341] RBP: 0000000000000000 R08: ffffea0001e479c7 R09: 1ffffd40003c8f38 [ 2973.487837][T30341] R10: dffffc0000000000 R11: fffff940003c8f39 R12: ffffea0001e479f0 [ 2973.495855][T30341] R13: dffffc0000000000 R14: ffff88803468fe80 R15: 0000000000000002 [ 2973.504400][T30341] FS: 00007f6a22f716c0(0000) GS:ffff888125c5a000(0000) knlGS:0000000000000000 [ 2973.513656][T30341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2973.520637][T30341] CR2: ffffffffdfa50000 CR3: 000000004adfc000 CR4: 00000000003526f0 [ 2973.528632][T30341] DR0: 0000000000000000 DR1: 00000000e88e0008 DR2: 0000000000000000 [ 2973.536764][T30341] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2973.544807][T30341] Call Trace: [ 2973.548098][T30341] [ 2973.551082][T30341] workingset_activation+0x5f/0x4a0 [ 2973.556306][T30341] ? folio_mark_accessed+0x381/0x4a0 [ 2973.561661][T30341] folio_mark_accessed+0x3b5/0x4a0 [ 2973.566804][T30341] kvm_release_page_clean+0x9a/0xe0 [ 2973.572052][T30341] kvm_tdp_page_fault+0x2dd/0x370 [ 2973.577097][T30341] kvm_mmu_do_page_fault+0x2c5/0x640 [ 2973.582442][T30341] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 2973.588280][T30341] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 2973.593859][T30341] ? __pfx_current_save_fsgs+0x10/0x10 [ 2973.599393][T30341] kvm_mmu_page_fault+0x22f/0xb70 [ 2973.604863][T30341] ? __pfx_handle_ept_violation+0x10/0x10 [ 2973.610917][T30341] vmx_handle_exit+0x1090/0x18a0 [ 2973.615878][T30341] ? vcpu_run+0x361c/0x6f70 [ 2973.620432][T30341] vcpu_run+0x432e/0x6f70 [ 2973.624800][T30341] ? vcpu_run+0x361c/0x6f70 [ 2973.629401][T30341] ? __pfx_vcpu_run+0x10/0x10 [ 2973.634103][T30341] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2973.639892][T30341] ? rcu_is_watching+0x15/0xb0 [ 2973.644675][T30341] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 2973.650280][T30341] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2973.656016][T30341] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2973.662046][T30341] ? rcu_is_watching+0x15/0xb0 [ 2973.666822][T30341] ? look_up_lock_class+0x74/0x170 [ 2973.671968][T30341] ? register_lock_class+0x51/0x320 [ 2973.677193][T30341] ? __lock_acquire+0xab9/0xd20 [ 2973.682121][T30341] kvm_vcpu_ioctl+0x95c/0xe90 [ 2973.686834][T30341] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2973.692087][T30341] ? __lock_acquire+0xab9/0xd20 [ 2973.696955][T30341] ? __asan_memset+0x22/0x50 [ 2973.701587][T30341] ? smack_file_ioctl+0x302/0x340 [ 2973.707062][T30341] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2973.712742][T30341] ? __fget_files+0x2a/0x420 [ 2973.717363][T30341] ? __fget_files+0x3a0/0x420 [ 2973.722116][T30341] ? __fget_files+0x2a/0x420 [ 2973.726724][T30341] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2973.731788][T30341] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2973.737008][T30341] __se_sys_ioctl+0xfc/0x170 [ 2973.741654][T30341] do_syscall_64+0xfa/0x3b0 [ 2973.746176][T30341] ? lockdep_hardirqs_on+0x9c/0x150 [ 2973.751404][T30341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2973.757481][T30341] ? clear_bhb_loop+0x60/0xb0 [ 2973.762356][T30341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2973.768266][T30341] RIP: 0033:0x7f6a2218e929 [ 2973.772731][T30341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2973.792434][T30341] RSP: 002b:00007f6a22f71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2973.800899][T30341] RAX: ffffffffffffffda RBX: 00007f6a223b5fa0 RCX: 00007f6a2218e929 [ 2973.809516][T30341] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 2973.817516][T30341] RBP: 00007f6a22210ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2973.825763][T30341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2973.833824][T30341] R13: 0000000000000000 R14: 00007f6a223b5fa0 R15: 00007fffa802d6b8 [ 2973.841873][T30341] [ 2973.844920][T30341] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2973.852208][T30341] CPU: 0 UID: 0 PID: 30341 Comm: syz.8.7172 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 2973.864274][T30341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2973.874342][T30341] Call Trace: [ 2973.877626][T30341] [ 2973.880566][T30341] dump_stack_lvl+0x99/0x250 [ 2973.885173][T30341] ? __asan_memcpy+0x40/0x70 [ 2973.889783][T30341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2973.894997][T30341] ? __pfx__printk+0x10/0x10 [ 2973.899616][T30341] panic+0x2db/0x790 [ 2973.903527][T30341] ? __pfx_panic+0x10/0x10 [ 2973.907988][T30341] __warn+0x31b/0x4b0 [ 2973.912016][T30341] ? folio_memcg+0x1a8/0x310 [ 2973.916652][T30341] ? folio_memcg+0x1a8/0x310 [ 2973.921273][T30341] report_bug+0x2be/0x4f0 [ 2973.925623][T30341] ? folio_memcg+0x1a8/0x310 [ 2973.930231][T30341] ? folio_memcg+0x1a8/0x310 [ 2973.934841][T30341] ? folio_memcg+0x1aa/0x310 [ 2973.939450][T30341] handle_bug+0x84/0x160 [ 2973.943712][T30341] exc_invalid_op+0x1a/0x50 [ 2973.948231][T30341] asm_exc_invalid_op+0x1a/0x20 [ 2973.953090][T30341] RIP: 0010:folio_memcg+0x1a8/0x310 [ 2973.958304][T30341] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 99 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 2973.977922][T30341] RSP: 0018:ffffc9000b8cf250 EFLAGS: 00010287 [ 2973.984022][T30341] RAX: ffffffff82044487 RBX: 0000000000000000 RCX: 0000000000080000 [ 2973.992007][T30341] RDX: ffffc90015e9c000 RSI: 0000000000075795 RDI: 0000000000075796 [ 2973.999997][T30341] RBP: 0000000000000000 R08: ffffea0001e479c7 R09: 1ffffd40003c8f38 [ 2974.007995][T30341] R10: dffffc0000000000 R11: fffff940003c8f39 R12: ffffea0001e479f0 [ 2974.015995][T30341] R13: dffffc0000000000 R14: ffff88803468fe80 R15: 0000000000000002 [ 2974.023997][T30341] ? folio_memcg+0x1a7/0x310 [ 2974.028626][T30341] workingset_activation+0x5f/0x4a0 [ 2974.033847][T30341] ? folio_mark_accessed+0x381/0x4a0 [ 2974.039176][T30341] folio_mark_accessed+0x3b5/0x4a0 [ 2974.044402][T30341] kvm_release_page_clean+0x9a/0xe0 [ 2974.049620][T30341] kvm_tdp_page_fault+0x2dd/0x370 [ 2974.054668][T30341] kvm_mmu_do_page_fault+0x2c5/0x640 [ 2974.059979][T30341] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 2974.065820][T30341] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 2974.071395][T30341] ? __pfx_current_save_fsgs+0x10/0x10 [ 2974.076876][T30341] kvm_mmu_page_fault+0x22f/0xb70 [ 2974.081926][T30341] ? __pfx_handle_ept_violation+0x10/0x10 [ 2974.087670][T30341] vmx_handle_exit+0x1090/0x18a0 [ 2974.092628][T30341] ? vcpu_run+0x361c/0x6f70 [ 2974.097161][T30341] vcpu_run+0x432e/0x6f70 [ 2974.101525][T30341] ? vcpu_run+0x361c/0x6f70 [ 2974.106085][T30341] ? __pfx_vcpu_run+0x10/0x10 [ 2974.110784][T30341] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2974.116528][T30341] ? rcu_is_watching+0x15/0xb0 [ 2974.121317][T30341] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 2974.126894][T30341] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 2974.132634][T30341] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2974.138634][T30341] ? rcu_is_watching+0x15/0xb0 [ 2974.143411][T30341] ? look_up_lock_class+0x74/0x170 [ 2974.148537][T30341] ? register_lock_class+0x51/0x320 [ 2974.153762][T30341] ? __lock_acquire+0xab9/0xd20 [ 2974.158670][T30341] kvm_vcpu_ioctl+0x95c/0xe90 [ 2974.163402][T30341] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2974.168629][T30341] ? __lock_acquire+0xab9/0xd20 [ 2974.173501][T30341] ? __asan_memset+0x22/0x50 [ 2974.178116][T30341] ? smack_file_ioctl+0x302/0x340 [ 2974.183165][T30341] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2974.188568][T30341] ? __fget_files+0x2a/0x420 [ 2974.193172][T30341] ? __fget_files+0x3a0/0x420 [ 2974.197859][T30341] ? __fget_files+0x2a/0x420 [ 2974.202468][T30341] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2974.207420][T30341] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2974.212642][T30341] __se_sys_ioctl+0xfc/0x170 [ 2974.217253][T30341] do_syscall_64+0xfa/0x3b0 [ 2974.221783][T30341] ? lockdep_hardirqs_on+0x9c/0x150 [ 2974.227004][T30341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2974.233081][T30341] ? clear_bhb_loop+0x60/0xb0 [ 2974.237770][T30341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2974.243674][T30341] RIP: 0033:0x7f6a2218e929 [ 2974.248101][T30341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2974.267722][T30341] RSP: 002b:00007f6a22f71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2974.276153][T30341] RAX: ffffffffffffffda RBX: 00007f6a223b5fa0 RCX: 00007f6a2218e929 [ 2974.284136][T30341] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 2974.292137][T30341] RBP: 00007f6a22210ca1 R08: 0000000000000000 R09: 0000000000000000 [ 2974.300136][T30341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2974.308130][T30341] R13: 0000000000000000 R14: 00007f6a223b5fa0 R15: 00007fffa802d6b8 [ 2974.316133][T30341] [ 2974.319541][T30341] Kernel Offset: disabled [ 2974.323881][T30341] Rebooting in 86400 seconds..