last executing test programs: 5m5.443281057s ago: executing program 32 (id=2475): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) memfd_create(&(0x7f0000000140)='\vem\xda\x99[R@M\xfc\xfe\x9b#*\xff', 0x0) (async) r1 = memfd_create(&(0x7f0000000140)='\vem\xda\x99[R@M\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) (async) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[], 0xe) (async) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./bus\x00') (async) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./bus\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000780)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xcew\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\x9b\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l\xb7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\x00R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x04\x00\x00\x00\x00\x00\x00\x00\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd821\x9e\v4Q\xc6{\xa0\xf7\xcd\x82 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xcd\xefx\x0f\xf5\x85M\x14\xbb\xab1)\x8e%\xb7\x89\x17/') write$binfmt_script(0xffffffffffffffff, &(0x7f000000c600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000d4c000/0x2000)=nil, 0x2000, &(0x7f0000000040)='%pK \x00') mremap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 5m2.024270231s ago: executing program 33 (id=2485): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x197, &(0x7f0000000100)={0x0, 0xd462, 0x0, 0xfffffffc, 0x3aa}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24040800}, 0x800) 4m41.706175646s ago: executing program 34 (id=2541): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000500)="14088eb406397b78089e5ad87f63f5c9241e6379219aa32fb19fbe2d4f0346a7a9c152b1222bff7e0b62c18a6e9ad18de4a35a", 0x33, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) pread64(r0, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 4m21.390042795s ago: executing program 35 (id=2588): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) 4m17.174043478s ago: executing program 36 (id=2598): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000020303000000000000000000010000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) io_uring_enter(r0, 0x15f1, 0xff98, 0x69, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x6543, &(0x7f00000001c0)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 4m12.185603803s ago: executing program 37 (id=2603): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$TCSBRKP(r1, 0x5425, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 4m3.487062195s ago: executing program 38 (id=2595): r0 = syz_io_uring_setup(0x106, &(0x7f00000003c0)={0x0, 0x7496, 0x1000, 0x3, 0x1f7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xa00) 3m41.129409714s ago: executing program 1 (id=2655): r0 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, &(0x7f0000000000), 0x4) close(r0) 3m40.62688126s ago: executing program 1 (id=2657): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xbc, 0xb7, 0xf6, 0x20, 0xfe9, 0xd501, 0x2350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x0, 0x7b, 0xe3, 0x79}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x211}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfec0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x8080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010005, 0x0, 0x1}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x32314742}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x58, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) 3m35.071457256s ago: executing program 1 (id=2671): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500000000000000000000000000000000000000000000000020000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x4800) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x4, 0xe, {0x401, 0x2, 0x9, 0xc36, 0x9, 0xaf9c, 0xf, 0x800, 0x3552, 0x1, 0x5, 0x3, 0xf, 0x9, "5775ee89a207e16268b709d6f0195905f22efe96d3b07281f1ffb04f78fec4f9"}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x6040) syz_genetlink_get_family_id$nl80211(0x0, r6) 3m31.716232094s ago: executing program 1 (id=2677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 3m29.748248155s ago: executing program 1 (id=2681): setxattr$security_ima(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 3m27.899057297s ago: executing program 1 (id=2688): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x2}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000ac0353dbcaf00deaf0ba9bfc697d65dccd5bcf90bab305f313ddaa07748be35ec85303943c71ba8cdbc82cd1b434d751b0199ba0732778e75d4296477c6fcf02a9174721a15537d32645dfed014836a58d850bb8362088b242c3d87b3a63bd429188da2af941c1a6850a77566a8b076db9a3253e97777cbb9175780105aae64649f1fd7e85addebd7e0e82cf3876626bb4dbecfa195f84e486564c7af1cfa134beab1ce65085e24d942a37a59feae5c3ee3b7342c19ff62a0518c31b05bffff6d91fbf8f8357496c416f8e7e3be9b67c572d01333d052bf883722b", @ANYRES16=0x0, @ANYBLOB="15060000000000000000010000003000018014000400ff020000000000000000000000000001060005004e220000060001000a0000000800060001000000"], 0x44}, 0x5}, 0x0) 3m27.891203075s ago: executing program 0 (id=2689): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) (fail_nth: 1) 3m26.900542302s ago: executing program 39 (id=2688): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x2}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000ac0353dbcaf00deaf0ba9bfc697d65dccd5bcf90bab305f313ddaa07748be35ec85303943c71ba8cdbc82cd1b434d751b0199ba0732778e75d4296477c6fcf02a9174721a15537d32645dfed014836a58d850bb8362088b242c3d87b3a63bd429188da2af941c1a6850a77566a8b076db9a3253e97777cbb9175780105aae64649f1fd7e85addebd7e0e82cf3876626bb4dbecfa195f84e486564c7af1cfa134beab1ce65085e24d942a37a59feae5c3ee3b7342c19ff62a0518c31b05bffff6d91fbf8f8357496c416f8e7e3be9b67c572d01333d052bf883722b", @ANYRES16=0x0, @ANYBLOB="15060000000000000000010000003000018014000400ff020000000000000000000000000001060005004e220000060001000a0000000800060001000000"], 0x44}, 0x5}, 0x0) 3m26.893600821s ago: executing program 0 (id=2693): mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) 3m26.529359775s ago: executing program 0 (id=2696): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="2c002380050011000100000008001400d2ffffff05000f00400000000500060009"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x0) (fail_nth: 1) 3m26.040261042s ago: executing program 0 (id=2697): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 3m24.139252898s ago: executing program 0 (id=2699): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x9, 0x0, 0x2000000000, 0x0, 0x0, 0x2, 0x1, 0xfffffffffffffffa}) 3m22.447043279s ago: executing program 0 (id=2705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000000243de2504000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001801400018008000100ac1414bb08000200ac1414bb0c000280040001"], 0x80}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0x32dc, 0x1, [0xfffffffffffffffa, 0x25, 0x2000000000000, 0x0, 0x2], [0x7cab, 0x1, 0x0, 0xd, 0x200000000000000, 0x2, 0x0, 0x9, 0x9, 0x800, 0xffffffff, 0x1ff, 0x5, 0x200, 0xfffffffffffffffc, 0x3, 0x2, 0x80000000, 0x40000000000, 0x6, 0xf990, 0x3526, 0x3, 0x4, 0x3, 0x606e518c, 0x9, 0x9294, 0x1, 0x7, 0x8, 0x6, 0x8, 0x5, 0x9, 0x69, 0x9, 0x59b, 0x9, 0x9, 0x1, 0x6, 0x6, 0x1, 0x14d, 0x0, 0xfffffffffffffff8, 0x6, 0x100000001, 0x0, 0x1000, 0x0, 0xf, 0x2, 0x7a13, 0x2, 0x8000000000000, 0x100000000, 0x8, 0x2, 0x8, 0x4, 0xa2b, 0x3, 0x4, 0x5, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0x1, 0x17, 0x8dc, 0x4, 0x5, 0xff, 0x0, 0x6, 0x7, 0x125, 0xfffffffffffffff8, 0x143, 0x80000001, 0x2, 0x7, 0xf, 0x8, 0x2, 0x3, 0x0, 0xe55, 0x3, 0x6, 0x7, 0x1, 0x6, 0x8000000000000001, 0x6, 0x0, 0x9, 0x260, 0x7, 0x10001, 0x4, 0x8, 0xf, 0x3, 0xf78, 0x1000, 0x4, 0xfffffffffffffa31, 0x260, 0x2, 0xa, 0x2, 0x2, 0x7000000000000, 0xfff, 0xa3, 0x3b]}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000900)={0x0, 0x0, @start={r2, 0x1, "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", "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"}, [0x8, 0x3, 0x2, 0x6, 0xc6, 0x3e, 0x50d, 0x1, 0x1, 0x7, 0x5, 0xfff, 0x80, 0x2d0000, 0x1991, 0x2dd, 0x200, 0x5, 0x6, 0x7ff, 0x5, 0x7fffffff, 0x9f21, 0x8, 0xffffffff, 0x5, 0x5, 0x4, 0x100000000, 0x80000001, 0x1, 0x5, 0x4, 0x5, 0x88da, 0x9, 0x6, 0x3, 0x1, 0x4f94, 0x2, 0x2, 0x0, 0x5, 0x40, 0x3ff, 0x5a, 0x6, 0x7, 0x3ff, 0x25e, 0x4, 0x2, 0x8000000000000000, 0x4, 0x401, 0x7, 0x8, 0x0, 0x2, 0x633e, 0x2, 0x8a2b, 0x9]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf254400000008000300", @ANYRES32, @ANYBLOB='D\x00#'], 0x60}}, 0x880) syz_io_uring_setup(0x88f, &(0x7f0000000380)={0x0, 0x9439, 0x0, 0x1, 0xbfdffff8}, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001400b59500100000000000000a780000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000005645d8a06000000000101f0ffff000000000000000014000100fe8000000000000000000000000000bb"], 0x54}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40881, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) r11 = syz_open_dev$usbfs(&(0x7f0000000e00), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r11, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x9, 0xffff, 0x0, 0x0, 0x0}) 3m21.794991222s ago: executing program 40 (id=2705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000000243de2504000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001801400018008000100ac1414bb08000200ac1414bb0c000280040001"], 0x80}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={0x0, 0x32dc, 0x1, [0xfffffffffffffffa, 0x25, 0x2000000000000, 0x0, 0x2], [0x7cab, 0x1, 0x0, 0xd, 0x200000000000000, 0x2, 0x0, 0x9, 0x9, 0x800, 0xffffffff, 0x1ff, 0x5, 0x200, 0xfffffffffffffffc, 0x3, 0x2, 0x80000000, 0x40000000000, 0x6, 0xf990, 0x3526, 0x3, 0x4, 0x3, 0x606e518c, 0x9, 0x9294, 0x1, 0x7, 0x8, 0x6, 0x8, 0x5, 0x9, 0x69, 0x9, 0x59b, 0x9, 0x9, 0x1, 0x6, 0x6, 0x1, 0x14d, 0x0, 0xfffffffffffffff8, 0x6, 0x100000001, 0x0, 0x1000, 0x0, 0xf, 0x2, 0x7a13, 0x2, 0x8000000000000, 0x100000000, 0x8, 0x2, 0x8, 0x4, 0xa2b, 0x3, 0x4, 0x5, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x6, 0x1, 0x17, 0x8dc, 0x4, 0x5, 0xff, 0x0, 0x6, 0x7, 0x125, 0xfffffffffffffff8, 0x143, 0x80000001, 0x2, 0x7, 0xf, 0x8, 0x2, 0x3, 0x0, 0xe55, 0x3, 0x6, 0x7, 0x1, 0x6, 0x8000000000000001, 0x6, 0x0, 0x9, 0x260, 0x7, 0x10001, 0x4, 0x8, 0xf, 0x3, 0xf78, 0x1000, 0x4, 0xfffffffffffffa31, 0x260, 0x2, 0xa, 0x2, 0x2, 0x7000000000000, 0xfff, 0xa3, 0x3b]}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000900)={0x0, 0x0, @start={r2, 0x1, "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", "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"}, [0x8, 0x3, 0x2, 0x6, 0xc6, 0x3e, 0x50d, 0x1, 0x1, 0x7, 0x5, 0xfff, 0x80, 0x2d0000, 0x1991, 0x2dd, 0x200, 0x5, 0x6, 0x7ff, 0x5, 0x7fffffff, 0x9f21, 0x8, 0xffffffff, 0x5, 0x5, 0x4, 0x100000000, 0x80000001, 0x1, 0x5, 0x4, 0x5, 0x88da, 0x9, 0x6, 0x3, 0x1, 0x4f94, 0x2, 0x2, 0x0, 0x5, 0x40, 0x3ff, 0x5a, 0x6, 0x7, 0x3ff, 0x25e, 0x4, 0x2, 0x8000000000000000, 0x4, 0x401, 0x7, 0x8, 0x0, 0x2, 0x633e, 0x2, 0x8a2b, 0x9]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf254400000008000300", @ANYRES32, @ANYBLOB='D\x00#'], 0x60}}, 0x880) syz_io_uring_setup(0x88f, &(0x7f0000000380)={0x0, 0x9439, 0x0, 0x1, 0xbfdffff8}, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001400b59500100000000000000a780000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000005645d8a06000000000101f0ffff000000000000000014000100fe8000000000000000000000000000bb"], 0x54}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40881, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) r11 = syz_open_dev$usbfs(&(0x7f0000000e00), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r11, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x9, 0xffff, 0x0, 0x0, 0x0}) 2m21.208379586s ago: executing program 7 (id=2827): openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x80012, r0, 0x180000000) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) syz_pidfd_open(0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x1000000, &(0x7f0000000480)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4008005) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x100008, 0x4, 0x1}) 2m19.857683168s ago: executing program 7 (id=2830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtaction={0x2580, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}, {0x2518, 0x1, [@m_tunnel_key={0x150, 0x2, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xcb, 0x6, "32dc5b9e42f06f2179a32ada6a198777a60a0d83776adfe9cdef849b1a17b253ad86717efa1c2baa47facc32940e847373f414e1d5d82f59ac596d796e32bcd6c958368b1ca207bd50a2c6c32f432a1b0d3a48a8c3ccb97caf0b1c7f8eda9bc4f3a47470fbb6e151bcb7d39b5d5fa53a82b0c9cd653d476119e4da7c08fa4e28c4eb5e7374e0a9c5330965c3581c3d4b1ba7af4bb38fc17a95ec33e2ad70d648cc3edbe26b51d7adb623b967bb13106c5e3598c85102ff0338cea448ac89eabbcb6cb8af111d3a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x5c, 0x12, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x1, 0x6}}]}, {0x18, 0x6, "8187bb31af1e89c89b430c4decf06b9443728159"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5c7343805e94e4b2, 0x1}}}}, @m_skbedit={0x158, 0x6, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x2, 0x1, 0xc2, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0xe, 0x10000000, 0x70, 0x5}}]}, {0xf9, 0x6, "3f9d4ee39548a5722cea5c320af6299e8bee5d8c386b870a06edb0bd1d8fbf476e718d973816647a4756039da47cb245fad9865da1a3e290c1f35920f01fc90bb7e77b35a2c143a206ee0d0ebcb1225007b0578c284d352a3293fcfad52893dba3b09674b157eab7e330d7d10d1646207a3df2abb88199e5d087ce4b794990cf83dc7ca67fae1c82fbad10c99b4568cd7ee52e3ec4455f585f3ef4532f6405e0e818b233ec57ceb018e29ca4c747cfed0f53b56737d4f75487c8bf85e4bfecb45df7fdc82452b65b76f53fa03b3bd3aefa9be48970aa5a1ce5cdab1cd52a8350dc8f36f9a1c20126116ea770232e74f78077e62dac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x2118, 0x1c, 0x0, 0x0, {{0x7}, {0x10f0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x0, 'filter\x00', 0x47, 0x8001, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0xfff5, 'mangle\x00', 0x4, 0xf490}}, @TCA_IPT_INDEX={0x8}]}, {0x1004, 0x6, "f3f8f0a37449480e56a829a01ffe2e5b0f2cf47482830113225f8d427cf5b122c8c6bc32838cd4e5e807c08540a9067810703e808f7e2be39c60283376c4f0ce7daa7ac3078b697f0728c945aff435041b5ae61a744f8547e896e3d8078e98ffe09326df6192688ac6d85163d7eaab1b6e81a632e4e604275f8dbb92f69b4e603ecbf1cbb181ca12f6b672dc0c91cc34bb6e1d7ee71103940b84581cbc6ef1204fa8f7c3f84e7782f8eff6821f080a2c212f9228b4b3a7e14ff89cb3ed51340fde184b117e8c32a2f18a15c6e9e83e9339407d9ebce08bc39985474518c08ecd757bfdfb9863178ea541582bdb55fb40b0853b4ac9a390701504a943d052b0ed873e0b40e58401ca02942ff7b8e6e656d3daae3255299c7e66cd86a4a54d107e8283119a222ac4e439a13f0a3fda9b121090e87257f5f55ae0f4926df0827ee8983765116d3da919a0bc1ffc217289edd5f12f184b7ec681db8a95176347d527f26bc150a1356202a132cbb91f22462b59dc2721e25561bfcc52e188959fa72d48c487071d82b3108913362fb42c27830beb277f83cffc5c1d8b5d10d9d7d7a1429a969cfc7726fb3bdd01a2474870a30365e003ebfc890e65a1ccec9e8851bad76f49d6243e6ab6a7738478c91ecf4069ee301884641e3dd62d0e169253aab7eff8fa209da063261e28a13af66ef573cdf41acf522939b41d2508f953ef6707be35d121e283e111b4b1d0079c8c7aceabcad37a9df746e556a8928aa04d28b30f326bebfe50979dd951dc861dee8fbb159e237d83b64658bfcfda4e4fdf52a7c036f9dd59dea6a27e0edbacea0167e59db4ee3d41371189102c1ac572bdbf7de5c695a462948c1d29042bb51591a3e454e6e044d3a34984612e7547afd1450ef2150eabadb63a4ac68cd822329c17b79e8645168548655071b247acf4a4faa42e86af2f0aec4e0484e6d00d050fdbf3fc29b50aec81bf0e921eb50930df48513729444296548650e7b605a3d749a4bf3c7da22ebc2966ca4462057a14187e0e0c5ab9e2994e7615f4480a1aa85f8865250c77e131a1346eab76455da8e88f441bc5b8131dc9ab31a414a727025d1c8936515d85d4896531095165be59d19b58e6f6dc5106cf99376f6b6f7c72dee162f48dd028cb8a1330222097f546abbb04361299bce19b45eb9a18fbb5a34a20032cfc80c281e94fbba62852abff9beeef24a9f4d3c14302131d4024d3ab5913925794f8eacdff12f2eab0a9d002261025686581026e98888226a139b4224ae4569eda8766a0a3111b3e58f9c9a4b084afef0497b2532f61050d90af681f7e91d0965d9efaadd06e2a8f1afd3354db37cd5ebe7956404f8460415ed8d52b760ba12d5f4b2798f71352a2c83f9a427e77ec83c385bfb07039f0dd7a92b9a63b9b8af933d93db196aa94a05159e3f27f00cb00bba97459579d6f4bac198da6198c92a9fcc9a30fa7d711d3710145af5318f3f9802782c43f400da48eca2edc29110547160e60b6250d6f657e8101cf1c95d05beead6dc82fb13159c45b8e633b1f89f951e2ece51a506311a2124fa50b51de38fd1e624663fb046d772fee3879699abaf82392ca072958bcb0cac420d40c22c5c37ff73a649cec44c736c6bf92e125c48ce304b9b4f1475201ef889475f1a48c97b8e1454745902a1905e4ca0c962264dd41d9ea65b9723227562125defb77962b01018e39ed972ebbcf13c5f8bf8bb43e024dfa89d3e58eb6a687a67185feb63c0af8ded341d9de7bea72365a351573c9d90a0815c1aaa22427865ea1e0c910a863e429009b2f7a705e5ff3cd72fdf4b5c695f618662f8e01b5496cee6bc3bcee3f5ff895f7bfc8d815d88f541254719baee4ac2b09846fa909de465b371d6001f8a8ae2c3b01b86f982a605882bbddd2cfde0ffd9e5ca89f210477f3803b4eb164ffb5914cf478b8c914acc195882f9683f3ecab940456d23689bfd4d24f90964a2a61643f99c32b2c3da3013701b095eb4b824e95bf0ddcbc7d727a9717385e48c49fffa08b5f4eb793d3b5781da10d5a39cb9403ebb87cc5057fb9fcbbcc59b1031dec78d6b356fa027b3870520b8f16cf01a12cd848d78cd23ad51e28f1354170e5820cfa86c86bc8d28ac724d83ea2ab9bf0ef8032d8448f22bb09251a0b7b2d3a6a1bce3b518d4604f0717727afa311b5982b2a4978a4b33a2a9bd1bb6e0c06e57a78a78e66d7e1c0788f99220715d7570be89a880873585607409617f65b5e54e61be7ff0163af19e2e631513a3eaa3f59c0db5312538ba96123837786472936ac6dea09c12cc71d03852938185573a78ca3206679fe7968c5b48e08561947322db83993200112b2d1da1a669ff600506fd4a417452dfc5a39d292ef5d03b47b3380ef84686a20b8910390681a4a2edfef63b12d729d5c9e2493b11bbf70a19cc6997063e86afe7ee953b6b3efeb7c0b464435867e1a1bd7885b35168b8651349d8d71a07e9e4b641cfbe3b4d43afb25d6c95ffb7650ff3dc42f53bc911fe7f2e080199a38bd0e9cb9de6e025be46593f3dc4df69273b224006707a229b1324ba33059e6188c69acfab54f10bdbc0690b860075d34ee7e53467646d52d00f4aa99e5c715737aaab28c1cb45ff10163741591be0c2788c150f9acf7dab41e68abda883b4cb17146591c5e18383e1c3d419cdcfbebbf0b98b689c7421877774d099f4c6bf97b518dce7b19262ab73bc5733cb128e29cfe486ee9ee3a1b5f47a52d8b708d14b06f8d54ddf4af65bf3c12b11990288ea56ce11339cc5242cd1affbf2ce4db6af7864a1d33adc2479eb25c4d31cbef4399712ad35139e34cfd1a4de04adf0760b2bbbd1c0e890bcb01d6099fc95d9b4d5cfb10c5fc333441fc99d9fbc66229adb20923b5b5e1d16117caea7cf5cc38955f3d3dc89975aac7b45f02510bca90a3f195eeeb95537296b9f8b2d3787b783172eac73fca22a785512ea2899cb3e7cfc8fcc0091a6a4f8577d89be4991917a05a039d66bcb137bfdb1e3ccd8fe4cd10996d8cb1c270d3a77dc6d300d605d1b4f065ac70f4ee1a87454501b8b9436a62c3a0cb114622ea4a2d4fcf58f23ad4736cd3a8940f11311c851690ac8f24b12a464c172b541a3f745a0986ffee66c49f673b19ef78606c36ace872be1e0399eaba6d8ae59963046a9740c28c634c4a556871ef0fd2c2b61960e6e589066a5e1044ac23fbad6b9f8243fe6abcb5eff64c8eae16f6eea07969ceb5523d1fb9e103b87cb4a2c98d9c4e8c2a78c95f778f9b4a0fa8484866fd90d1b867b115662f20005ebc261b4f289ab2306a489640510ebe0c6c7647cb69fd1d0a2c5061e91bf7d0be4fe33badd67cbf4d547953fcaf5d1fc83984396e27e0a55fca7c65b3b3505d699f56442ab493a440b22faaddda5f844b928d19c913fc58b011763030ebea405a11a62644fed8434cd6ba18c0a19e5041f312888df7174a22fa683db94f47ee178534b1c371221de98aa63d4d30d8b2079d11d74cf4f493c2b561882ab37611ad94364e9199ab52ea290f9b19ef58f5532413acdc7b7ce2e44a61d9ce45c6a6f63f6a29f9ec6d54265a213b2e4cfa0e8d1a0deae787ffcae92bf52d4203a7bc1b03f4eb9d0638a5e0666bcd4847876f9a90ee6f1bcf69698ceaa5ae3ae18722942ddcf50aae9c432d05987c05a9c9922b310d60ff9c26b4ff11b5289ea104ca7c287a0052966ad426aaf6aefc3778f3e0844c166fefd31599491adb7da96167437def660acf3eab90dbc0499d49138d9a3138cceef168f2a692bdfa3a81cbf4733728e08b5fcdf50a8389f2a9625ed4079adcc9cdca5007e5d5736eff8f699b114a0e7cd8126fefe6069482555aa94a8b7d42e6e9824d4159b71a8a0b5ec9463fb95f82aaf372bb67c38c665adea3dbbe1e89246818dff054a2e353057bb2f9c1656a359626a9cbb13d3c9cad42b2994e8b4e7c5a157283e5d3e945ed58934626b86f272a5ce10951e81a5cf1e26be2d50b7c5458d3b221189f856f673202f5fa7f2a51738566aa2c194df1f9904af811a4009fab240f8328b70b02da15ed75b527df790082df251ebcc7a51feb2fb3e072171b79bb64202664caaf90fff0f5a8834dd9b3be7cfd8e63a8926b18f3710f8bc556649aa0f71241f12678be497149c14d88f488a4995dee29fe4b493fd761ea7ef349897dd7225be5730ea0321d24ead68a9f498a9d5b5e286f1d5daf31d595837ca4b9b7ceba626b4735a5b712eae2c26c9a7c268df38962f8656ae215d9ccd32896a74b22ccdef3bc52441ffeed6444ce22415c2bc60fbaa4f4a4ccf4edd3eef72dad71cbc51a7bf6ebf430ca1f833d11ee7d335c0e8b103776c50b9ae4388fbb1c1fefa3beb270440f67f419770b590dee03269d4b273a9e5fc02856190d2c06ccf0684bf58ef21c37bf3640387ccdf98c197936dd4af33a4fd5247b8fc311c600ff4dc85014e90aa9c6a74bb6d45eb521b1614587923212f7176f8a8596f268a91d2808e83312e374f23b889eeb81d00400decefcaabdf7cf425175a357214c241b3da4aa1217c7a05013bc00dbead189b45ea3821809e1ab869313a170014579735f23e7753aa5187fc4f2afc4fc8d4ce26447aa7aab09904933514423aeb05e036ecc20b1849d79315f564c01ac5f88649d56a655d09c1eb1192798ca2d129872484100397eba335e3fdd3ffb50c6099c9d57d2599cd050953fbb47616926943bbf8d1329151b95400c4a5443bb3aae8fda56674a19ca22b242b237012fc125cdf47b3f2e7b401a12bae9bb8443c22c75bb1988322a9f5fea5985cb86f8280ffe9d5e09c690e093e21c4b33ffea3b23e2089eb16b70daec14a97c563229b689d3d379e50c029945f90d6a0aafe766ee0fc8542136250b73beeb4d2c9e8a2df51483068508ad980dbdb7069c82d121cf04405c6071b736b2d003f32e18f6638deed585084cc899e19b7b3b96ef4ab503f670ee878f07a5be0bf0d37d741a6028edda76899ca024c8dabb7d1391aba339039ccbbb4ab0d0e6b908c040cbf4f6e8053bbfb18bc9df3d51ce3d126f54cd5b2210a3a028a89b17e3901473c378f47fc16a57ba3ea1d17608a8299e09ce04a2bbc9b21775217b867855e517276b52e2fab1a6345b066b0f41b130177bcf520282f8ba8bfad270e5e606a7bda97b70709d4181340429159490b478090898e6a5425aabe919fd06a69e7d0084c2ba075a1386c65122af7f41e12d2188b04017bab0701ea120ab615a6e4f267736b6b356575bbee214535dcbaafe23c9fa9816466e4a61517942fc6d323846caad49d2201ccc9170497b60fc5a1cb9c88dcd1715ee335c183a5ebfb1512601d18958f3d22cfe592199727c97f9948fbfff451f6106bbd62146946f66194f5fd534ddcfbe76a746ded2115120f975099c2a9c7dab47a9bdd7bb6d7465d0656fae13b4ce40bb46f719dacec11adbd53fd96f51c5d7e40915d16648311baa5aec4c4cba2c071187ea649b129bace6cea2e6c386f4b67f5057fc05f7251c28694afb458d68c54bc4f9f409b406ce25c345a30d70850c0ef513dad0d47aabd44cfcda732f2c2265d06ed5ff359346b2e9d2433ffd68963469ed106aedd13284946422b87166e5ae2cb04d1c61c67314570babbbf9e2291271e4f00cb3b2482430caa9c222a715e4cd5328e159d6de8a7d6b45b5e96db428ba7efce1246874a6d672ecf14457ebe86819691ad3a4b9bebb30b1b8ef47039b80208f47a5e53a8247c12e4a2c3a33e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0xf8, 0x13, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x400, 0x10000008, 0x0, 0x7}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="02e3c5e43577"}]}, {0x8f, 0x6, "d6ee64229da5cce95e3a36091c01ef477765af517ca24b8253fdea06a877d1e7eb17e7e4f67abc0b9c9700f9af91df6348db9e4817d6fc13e4b5ace0f20a74e8de69b7aa208c46ac79bb14b5272b69806a93a5e819224842fd9d39d342a9c8ea7090b76d26e7ff745c8b012e00bc43803aef0ca0ab60664aa2c75f222d09fe075c070939157b2e1209e533"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2580}, 0x1, 0x500}, 0x0) r5 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="2c7ea135e4f7cd7dcaff3e2c4a9d24c0bda3e2659183bbc88c233b106464606aca6a5f49713acf85d394bd031da05988d1fd50e4cd7c0e94f9231eec3b64bdc627947b830bc532658ef3765a5af0a1b71de562ccaee2a801bd9ec00d9228892f412d3bc68b5c6d839886b345720afc20d5f0b92dcbe4e2c82f0972b6da330acc03150f8f035bd57da76b881af5138050191bbfbe6037694b8a3c3bb2a9f1c82c831d65d9dffa5e8af436e3d8", 0xac, 0xfffffffffffffffc) keyctl$setperm(0x5, r5, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r9, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) 2m13.374051958s ago: executing program 7 (id=2839): openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x80012, r0, 0x180000000) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) syz_pidfd_open(0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x1000000, &(0x7f0000000480)) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4008005) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x100008, 0x4, 0x1}) 2m11.438693019s ago: executing program 7 (id=2841): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r4, 0x12) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000000c0)=0x3, 0x4) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 2m9.756350263s ago: executing program 7 (id=2845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0xd6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r7, &(0x7f0000000840)=@x25, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a}, &(0x7f0000000040)=0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107f6, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}, r9, 0xb}}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x200, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @empty, [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xff], 'wlan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4, 0x5, {0x6}}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0xf, 0x6], 0x0, 0x2f, 0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x9, 0x8c, 0x68, 0x2, 0x53c, 0xfffffff8, 0x1]}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00', [0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff], 'ip6gretap0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0xc, 0x3, 0x8, 0x4b}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x8}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 2m6.80779882s ago: executing program 7 (id=2852): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30000091) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d05032a0000002d00072b8000000a004e200000000400000000000000000000ffffac1414aa000000000000000000"], 0x38}}, 0xc814) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1m51.72312036s ago: executing program 41 (id=2852): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30000091) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020d05032a0000002d00072b8000000a004e200000000400000000000000000000ffffac1414aa000000000000000000"], 0x38}}, 0xc814) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1m35.780577613s ago: executing program 8 (id=2905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r4, 0x12) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 1m34.723023797s ago: executing program 8 (id=2908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xd, 0xc, "41a0a18ef515814e914ddb349f24d2d4fdf2029d4ea0d5c318c72a7f44575de5928931313688f80c00e226d5f9de71854d921504681829ab9aea7bb39083bd3e", "b52d2e8698032804ba481f878cc65fac11ec880364f7acb23df30827152197f46a9f88676e0b06b603b41a00352efa0e1e53c5153c1a7cc757f3186cc14548be", "8b65cc03d13d051bee0900000006000800f15bc5104e6a8500000055b2a07060", [0x895, 0xcbd]}) r2 = io_uring_setup(0x4386, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) semget(0x1, 0x2, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000980)={0x0, 0x0}) r7 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000680)='E', 0x1}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={0x14, r9, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x44, r9, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffff652, 0x4b}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x24004010) sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000006800010028bd7000000000000a000000000000000600070005000000080008800400010008000500", @ANYBLOB="aef59cb1ba4a6bee12d385413fe03bb262"], 0x30}}, 0x44010) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) close(r2) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r9, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_KEYS={0x5c, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x24040044) syz_open_procfs$userns(r6, &(0x7f0000000140)) 1m34.489967619s ago: executing program 8 (id=2909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtaction={0x68, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x500}, 0x0) r5 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="2c7ea135e4f7cd7dcaff3e2c4a9d24c0bda3e2659183bbc88c233b106464606aca6a5f49713acf85d394bd031da05988d1fd50e4cd7c0e94f9231eec3b64bdc627947b830bc532658ef3765a5af0a1b71de562ccaee2a801bd9ec00d9228892f412d3bc68b5c6d839886b345720afc20d5f0b92dcbe4e2c82f0972b6da330acc03150f8f035bd57da76b881af5138050191bbfbe6037694b8a3c3bb2a9f1c82c831d65d9dffa5e8af436e3d8", 0xac, 0xfffffffffffffffc) keyctl$setperm(0x5, r5, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r9, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) 1m32.351761679s ago: executing program 8 (id=2910): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 1m30.944128069s ago: executing program 8 (id=2912): socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}) epoll_create1(0x80000) epoll_create1(0x80000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/133, 0x85}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x1, 0x10, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'team_slave_1\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) munmap(&(0x7f000066c000/0x2000)=nil, 0x2000) syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x100) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000000c0), 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fb", 0x1a}], 0x1}}], 0x1, 0x4046040) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) 1m29.558250563s ago: executing program 8 (id=2917): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe14}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m29.160517476s ago: executing program 42 (id=2917): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe14}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m25.359913158s ago: executing program 5 (id=2924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2508000000100004"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800b00010064796e7365740000280002800900010073797a32000000000800094000000000080003400000000008000440000000000900010073797a30000000001400000000000000000000000a"], 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000004300)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000021c0)=ANY=[@ANYBLOB="20000000020801020000000000000000020000030900010072797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4100) pipe2$watch_queue(&(0x7f0000000000), 0x80) 1m24.26302808s ago: executing program 5 (id=2925): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x13, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff}, 0x38) 1m24.023919148s ago: executing program 5 (id=2926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400}, 0x4000000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r4, &(0x7f0000000100)=@abs={0x27}, 0x6e) 1m20.901845357s ago: executing program 5 (id=2930): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 1m19.747010042s ago: executing program 5 (id=2931): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x7, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x64, 0x8, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x45adf8604846c7b, 0x5, 0x3, 0x4}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3a, 0x1c, 0x7ffd, 0x0, 0x0, 0x2, 0x0, @broadcast, @loopback}, {0x16, 0x7c, 0x0, @multicast2}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00a36d7b26c1b56ec69a1390ed215f449f9d188701ed000000004bc3065770edc93a69e589f7732db8376ffb22ef0ef673bfad73605ebc5323d03e62b5e24997298ad0ce8a05f1ba235ba426ef7ebc213c65bf441b24c37f0f5a1598c973974aa288a30074a842d78993803a3599a132aa2f0648f514562ef62b2f92f1438d159b5e765a2cc4083f50021f1abbda31b2bcff36113704074d08a946"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xcc}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x2}}) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000200)) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 1m18.916372484s ago: executing program 5 (id=2933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000004c0)={0x9, 0x159, 0xfa00, {r1, 0x9, '3Ve', "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"}}, 0x110) sendmsg$nl_route(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) rt_sigaction(0x40, &(0x7f0000000380)={&(0x7f00000001c0)="26a564dc3af240d1dc83458506c42329417d00d52e420fae7d9df30f2b693a660f3a16da06c44260f2016f", 0x2, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000005c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 1m18.416713879s ago: executing program 43 (id=2933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000004c0)={0x9, 0x159, 0xfa00, {r1, 0x9, '3Ve', "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"}}, 0x110) sendmsg$nl_route(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x20) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) rt_sigaction(0x40, &(0x7f0000000380)={&(0x7f00000001c0)="26a564dc3af240d1dc83458506c42329417d00d52e420fae7d9df30f2b693a660f3a16da06c44260f2016f", 0x2, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000005c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 15.585751992s ago: executing program 3 (id=3033): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000008c0)={0x14, 0x0, &(0x7f0000000840)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13.528348292s ago: executing program 3 (id=3039): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x600) 13.170171476s ago: executing program 3 (id=3040): syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) (async) 12.99851585s ago: executing program 6 (id=3041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x452a}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r6, 0x25, 0x4}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r8, 0x4, r4}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd720c96bc9b17a3ef54405e7064902f7d001406ff00000000000000000000007700000001fe80000000000000", @ANYBLOB="de4982438ac3c46bcd9945fe2764bf466911519c82ed6d369bc2aa6273eaf5ee424519a63455c8b7b13293096b08e83747d9dbf767aad3aa0bb76f71d226146caedec22344045bc98563b7e226970e558f36e259410f11c8756a654bdd3d7fdfd49fddb9c4ce0c199e7eb219109937fba56012450382bde352e70a97ab0452eb8c9b072b3f02c3d77c6e7b7c4fce4251511ffd462c11b44c7c2279712f7d100f6a5dd81c496e270d24a99640335805c5e1744452374297bc31f6fb2aa232ca5f3e8744f10f8e4afe0a62b6fb7a82f75b6a49bf257d853c492830c8d6c1b2", @ANYRES32=0x41424344, @ANYBLOB="5008000790780003"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000003c0)=@chain) getrlimit(0xc, &(0x7f0000000000)) keyctl$link(0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000240)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xa1a, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x2000, 0x0, 0x4}}) 12.268214379s ago: executing program 3 (id=3044): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ftruncate(r0, 0x80000001) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="200050800700f6ff0200000009000100377ce8ed950300000800030009ac0f00"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1dfa2bbd7000fbdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="0a00f500505050505050000004008700"], 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x20000010) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r9, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xfa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x2004c004) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x4001) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="a023040025bd7000fbdbdf253d0000006e98b02631162c73d62a19d3a55b421af0b77e1603863f4d6f109cf6378a00"/56], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2000c054) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r12, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000003000/0xf000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.170425261s ago: executing program 6 (id=3045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2508000000100004"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800b00010064796e7365740000280002800900010073797a32000000000800094000000000080003400000000008000440000000000900010073797a30000000001400000000000000000000000a"], 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000004300)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000021c0)=ANY=[@ANYBLOB="20000000020801020000000000000000020000030900010072797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4100) pipe2$watch_queue(&(0x7f0000000000), 0x80) 11.307230867s ago: executing program 3 (id=3048): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40102) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x40e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60142, 0x1) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000009c0)={0xf, {"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", 0x1009}}, 0x1006) 10.478687245s ago: executing program 6 (id=3050): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 9.372055457s ago: executing program 4 (id=3053): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x1}, {0x9}, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0xe1, {0xa9906aac4ac219b5, 0xc, 0x0, "", 0xd4, "49e364f245e20e54c3a585e27efa4d00c50adca931915a922587e7849f8b2427d0e2f144692c08bc8d251c20884a7f512384367f4c3f51bedc81381476af2f743c9694c64755fc4ede913ed687a86efde5c7711d79b512f402d5edc243ce671cd90e163781b27ffca8ff51c9576a24c8c963a604970a35aa06ac7c20d1568c7efe4c9f61b8ca372711e0bb51845d4826dfc6519096e3cb3e09c21cff4f76e34307bda394bafb825cecaf54fca6ed9116aab00be941cb6759a4c4beca9c1b45fde066ade552d17f8aa61c025242bea4ca2e1229c3"}}, 0xed}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) dup(r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r4, r4, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) 8.385466571s ago: executing program 4 (id=3055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000002740)={{0x2, 0x0, 0x80, {0x0, 0x0, 0x3}}, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d21b4a200"}) syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, 0x0, 0x0}, 0x20) 8.180374432s ago: executing program 9 (id=3057): mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r0, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') (fail_nth: 8) 8.04495428s ago: executing program 6 (id=3058): r0 = socket(0x18, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r1, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x3c}}, 0x4000010) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x32480, 0x0) sendto$inet(r2, &(0x7f0000000040)="479e35d699ab3ae54d54088534b57fcc2c4c280d21a8b372fdb48534d477d783b5197b40dc3bcc6e9e66b5831a6e0028bf3ca8a3966ec93484", 0x39, 0xc000, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 6.74828638s ago: executing program 9 (id=3060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) setresgid(0xee00, 0xee01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) setregid(0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) 6.630344267s ago: executing program 6 (id=3061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2508000000100004"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800b00010064796e7365740000280002800900010073797a32000000000800094000000000080003400000000008000440000000000900010073797a30000000001400000000000000000000000a"], 0xac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000004300)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000021c0)=ANY=[@ANYBLOB="20000000020801020000000000000000020000030900010072797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4100) pipe2$watch_queue(&(0x7f0000000000), 0x80) 6.599044769s ago: executing program 4 (id=3062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtaction={0x2624, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}, {0x25bc, 0x1, [@m_tunnel_key={0x150, 0x2, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0xcb, 0x6, "32dc5b9e42f06f2179a32ada6a198777a60a0d83776adfe9cdef849b1a17b253ad86717efa1c2baa47facc32940e847373f414e1d5d82f59ac596d796e32bcd6c958368b1ca207bd50a2c6c32f432a1b0d3a48a8c3ccb97caf0b1c7f8eda9bc4f3a47470fbb6e151bcb7d39b5d5fa53a82b0c9cd653d476119e4da7c08fa4e28c4eb5e7374e0a9c5330965c3581c3d4b1ba7af4bb38fc17a95ec33e2ad70d648cc3edbe26b51d7adb623b967bb13106c5e3598c85102ff0338cea448ac89eabbcb6cb8af111d3a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x5c, 0x12, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x5, 0xffffffffffffffff, 0x1, 0x6}}]}, {0x18, 0x6, "8187bb31af1e89c89b430c4decf06b9443728159"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5c7343805e94e4b2, 0x1}}}}, @m_skbedit={0x158, 0x6, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x2, 0x1, 0xc2, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0xe, 0x10000000, 0x70, 0x5}}]}, {0xf9, 0x6, "3f9d4ee39548a5722cea5c320af6299e8bee5d8c386b870a06edb0bd1d8fbf476e718d973816647a4756039da47cb245fad9865da1a3e290c1f35920f01fc90bb7e77b35a2c143a206ee0d0ebcb1225007b0578c284d352a3293fcfad52893dba3b09674b157eab7e330d7d10d1646207a3df2abb88199e5d087ce4b794990cf83dc7ca67fae1c82fbad10c99b4568cd7ee52e3ec4455f585f3ef4532f6405e0e818b233ec57ceb018e29ca4c747cfed0f53b56737d4f75487c8bf85e4bfecb45df7fdc82452b65b76f53fa03b3bd3aefa9be48970aa5a1ce5cdab1cd52a8350dc8f36f9a1c20126116ea770232e74f78077e62dac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x21bc, 0x1c, 0x0, 0x0, {{0x7}, {0x1194, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0x0, 'filter\x00', 0x47, 0x8001, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xce, 0x6, {0xfff5, 'mangle\x00', 0x4, 0xf490, "d17d492b8c02b2e315380b28033b97e3a9dcf61c6948b0aa4e1a43fc8ab70fc5238bdb16307e0b5a1018cd72e6920b333b8401cb6ac1785bbebaa2ffe4839b5a8f1bf3b15634e5007f9fd15691d59d8e7fc6a02814120b7e844ce597b93e80449ccc5d58bc281dbd42956e5d11c1e48ca6fe5ba89442cdb85e913cccfa6d005beb0eff784842aa971ca06be9941b94da96380e44a0780bad2568f5e686b1ac232de71a7d"}}, @TCA_IPT_INDEX={0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0xf8, 0x13, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x400, 0x10000008, 0x0, 0x7}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="02e3c5e43577"}]}, {0x8f, 0x6, "d6ee64229da5cce95e3a36091c01ef477765af517ca24b8253fdea06a877d1e7eb17e7e4f67abc0b9c9700f9af91df6348db9e4817d6fc13e4b5ace0f20a74e8de69b7aa208c46ac79bb14b5272b69806a93a5e819224842fd9d39d342a9c8ea7090b76d26e7ff745c8b012e00bc43803aef0ca0ab60664aa2c75f222d09fe075c070939157b2e1209e533"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2624}, 0x1, 0x500}, 0x0) r5 = add_key(&(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)="2c7ea135e4f7cd7dcaff3e2c4a9d24c0bda3e2659183bbc88c233b106464606aca6a5f49713acf85d394bd031da05988d1fd50e4cd7c0e94f9231eec3b64bdc627947b830bc532658ef3765a5af0a1b71de562ccaee2a801bd9ec00d9228892f412d3bc68b5c6d839886b345720afc20d5f0b92dcbe4e2c82f0972b6da330acc03150f8f035bd57da76b881af5138050191bbfbe6037694b8a3c3bb2a9f1c82c831d65d9dffa5e8af436e3d8", 0xac, 0xfffffffffffffffc) keyctl$setperm(0x5, r5, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r9, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) 4.765873174s ago: executing program 4 (id=3063): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0xfffffffa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) socket$isdn(0x22, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x3f58, &(0x7f0000000580)={0x0, 0xa8b6, 0x40, 0x2, 0x325}, &(0x7f0000000340), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000400)=""/255, 0x22}], 0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000240)={0x400, 0x640, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x3ffc, 0x6, 0x0, 0x0, 0x16, 0x0, 0x1, 0xb}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x6c}}, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 4.672617724s ago: executing program 2 (id=3064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r0, &(0x7f0000000800)="01", 0x1, 0x4004014, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.706503741s ago: executing program 2 (id=3065): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[]) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r2}, 0x8) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x60}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48040}, 0x4004004) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102) (async) mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) (async) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r9) (async) unlink(&(0x7f0000000140)='./cgroup\x00') r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r11}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.685784017s ago: executing program 9 (id=3066): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xd4}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) userfaultfd(0x802) sendto$inet6(r0, &(0x7f0000000000)="5f200f74409d9b3da3ddb0508fa78366a98733f853e5266531b2ba876662c786cb97f1f07a9bc1af1656de14ce77939755d6b8a078fab5837b3fe5788f9f3adce90d86ba6e1c88fb99ba2c635c2b6d2df800000000000000", 0x58, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x4, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) r1 = signalfd4(r0, &(0x7f0000000080)={[0x42]}, 0x8, 0x800) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x40, @none, 0x7}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x30, r3, 0x1, 0x70bd26, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1531848899"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}}, 0x20058040) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900"], 0x48) 3.129361645s ago: executing program 2 (id=3067): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0xb, 0xffffffffffffffff, 0x0, r0}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0xee01) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) lchown(&(0x7f00000004c0)='./file1\x00', 0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000002c0)={0x3, 0x1, 0x0, "eee98fb006178749cb4dfd9300009b6b7bd152f35ed730fc700000cb4f1891e2", 0x20493859}) 2.936041316s ago: executing program 9 (id=3068): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x19, 0x0, &(0x7f0000000080)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x2, 0x2, 0x781, 0x5f, 0x3ff, 0xe1aa0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048001) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.827376541s ago: executing program 2 (id=3069): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000580)={0x0, 0x5, 0x8000000000000000, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000980)={{r3}, r5, 0x4, @inherit={0x50, &(0x7f0000000180)={0x1, 0x1, 0x5, 0xc18, {0x8, 0x6, 0xc, 0xfffffffffffffa4b, 0x7fff}, [0x3214]}}, @devid=r6}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000880)={{}, r5, 0x14, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x8, {0x3d, 0x6, 0x4, 0x400, 0x7}, [0x6, 0x9]}}, @name="d31a7368d6d0d7cbc4a910d87176d793dac082256d2a8cb9656d405b8707eb601c397f55ef89a9d7d008b1a4af43d9e402b3aa8d178e407052df6d0fd885b34459dafe3b102fc0d51381cff455c924a486382df4a127973735c0f183f7dc8b7702ad2c24627db6deb3fd77d68304688187c9714b1405548819eab750c745a9e0fa1fb76cca8effb7b761133aabf0b69ca9bab0cf784adf93df2b1f41c361c9a2c8319682cca05fe4bbc43ebce001552a8e875b5280495bad4e7142fb594a8e53e03989130ed7c68d42fdf7387ff3e7cb6c91d180ad07428f40fde21e889d55f3474bdd216367aff8da5fadcd8668c8af2ba858485e01c331875c05d4de42ba208bfe0f69413caf9d53617f6e11cd2b175c826e00458f24dd319e0195c981e806304fdcca9ac9f16b827aef97e5ff286c47bd8d6bb9295b673cf6c5f15cb5dbdadb14135f67f18958a3a20fb7976444764c0d542d7a3a0f3adacec9684c64c5a9b3c3bc0006b4b97a13e91733a11a0ae8585ed56bc4b3c8e8d9161fd79719b7c4e0d543a1320d94378512e6e6c51afc89dc1ab4402f7078bbc0494382685cf525df65e18d116fb7f2ad8c7d2c3b36b2b19f4e46a71eab9cf537c72349f85f06fc612fedcdbde2490d626d5c8c282c0ca1091f21ee7e83aceafc1fed1f548bffba7e1acc26db4fb6abd945972f6262b375a9bd2ceb0e677bb4a490ecc1e3ad4be4ce39924468cfe8f0626c8d13bb904355d35a866d91ffb1a5c1896bba658010dae9742b1325fc661f001ecf4650731e713f3ff2881ad9e8832fb2d6b38e24ec5a73060701020d3f92ff87dd53e6aeeb932acafd3763caaef1b9b6abfa7951b51891bf762afd5106d4e4eaa63bde23f79f6935e82a2a926d1fe754459f3a8d7a2722d7b3c5f46d8a99f08bbacf1a71fdb9778b635a2f727de617f321bf6c785e5664da56c56ff0468c3c903e994b8c007c5d0c5a82b5a8a7ecb39e107408c7aeb45ecc72a924d4894ff3ae9da74e60e18dc5d37b02d3116b63f819be24d2d20c07c1c08bec7c7e3a634b105998100b28a9742ee94571bbe296d7f9865b912b047ba63f3ff98c6e4b3779e34dccc239d8da6c2a8b138dc37c3662a568e75d49e3238f5c6e9544578df3a2b9c1ebae4c4c7c6cbaf5d81a678ca61de33c57e3a56766bd1d6055f0c9d2c2e3dd7f5d1c57d41802cc4e6603c53fc6ef055cbc96a1cf769239333f74126802523825bdc7a568119affbfbbba212e3773e57f70bcc62a27ee45ff82f31bfdef99d7eb2a9f63f9c2e4b0436dee50d4c78fb57c1785f64cd9cd8aebcb4bb9cb208927aab923b0efab64b807d0ff7f2a205a05f88bfd1035b43f1a0d61366f23bad6cad1b28e13b006123437365cedbd6366128635c00524c1630874ad0f6749f075df00833ece5ce8227500ba5cf539fbad8f93c1f40530080f55bbfab428ad8f235425c29143dca4c9ede65da4286383fe9c2d452cc9353a0a5af749f5d7d1dea4be31911369ebed42b04bec18f041891290d81676ae07ca9639e1d028d11365ecb5139eba961b1023ea096ebd6b7e7653cf9f620b683ba3519510b635ecb5a1337d18174cd9f7a2d119a6c53e25b7298bbef38a3dd77f5186c613e5b820412f56422bcfe4da386a67e1cd1a5bdb9f2da2708b794f8cbd6dc9ebb2457a2ee2d44f6c0963c5718a76a3cbc24e95faaa85d73421230ad9c8806adae3052205530e0a0141d6aef5b09fea274537f3a48e0a0e1b6a0c3f093ad3dec6f92ba4e686adef20e2a0a7bdbf9b4dc663a4208c4e60e4979f6cfb9d25c1c3783b70aba281758beb28de4ef5818e1569d871a35b15602d33c92e893ff83b703b970b322e7856319c437ba50d57fb0e855ccb5a603acaf862e203631f71acadce9cc86a53538d9a6b28e8219f587cf9807e528b0a67ea5e7210a5c9be12c25063e395dc09a3f75aa09c629ce443a8cddda89d7ab12318479b64756130fd86ff3faeea1ccb195ae24ca9a2d78953eb0c7b9e2d4c44c75f13939a0f754b41f588c736bee32d9e820a21cea8d124a4c0391751b50bbaf5d2d9ab289f0495e81cafd70a3661fdfcfdbdfcf1e8c972eb63802a959d27513dc6f48971fd9dd91c9fe4eaa93853f19427e2fa46096f38cc1f832133e87b79ae16636c376797f3968c253892ae5decadd7878e50c21cea48897acb493befd5c3db7b837626ef84aac1a922cb0fe0c616eb2affe557423a460b6fa772f3f8ef92de69b7d20481c9cfbb0383336b33a351afa9f8e521d2bf089322ae88f9bda34e011c2d2d1ded51a767d2b57b337b39998a3f8434a2e8a663dbaf37c188be408ca19387e5c82bd11f4d02c5269d754c8fc7d6792c78df4c1d40374a2bc6db5e552beabb632051df53ea25ed4cc6ff60a9b314263154a5905c65e09136f42a61a4f152a984d9100cc8f6554ace86a1c15c294ff1c37578fc37b935569c495c192788bcb1872ec048c47129930f4dbe68809309205955d8d5438480b2040513f31f36976e7496952da6950a3566ae165e4efd836ccffdd821693a58e78727a90871840ca9b25a9ce56bb3635dd06c4042e3cdddbc5a251ba02394e8ee5abeb36ed12507950b24617d0d24d269d317da7f9d81ff4b5879c140651c82672753f8810435464964e1bef780cc0c5d1e339c3f19daec450c7b136fdfbdd1aa261e8f9099c7be08b3bee1e1e1d3174642f4b63797be3ed7038bd683cd2dd25e9080fdaf16872ab87c909750f9ca0ed313961a2febf09713a384c0a95c4d6ba340d8d1674b082524cbfb13b753acc8c32713fdcd59fe91ee0b20be53b596d3fde84938c5d9a3c4b46724a5768237f8e341b91575740ad565545fb81434d0edc8c15c9285c79426a32fcea119cbcb4bb770e832b1752a58661645ba3aeddfac5ceb71690b3027a9ac0bd492c13e1911621ee825a5062f80fd917bcd8748ebdef9fbf7bd7e09d8564ebaf7fe383f077e9226adb04796b41f4e9e7b5d2d9c904606514f90889600ed36b3f06c58cd8a5514168540a5598cc4970b81cc0781fa9756980e095f1b955e636bfc00bd3089df9cb906e5a57cc4c7a360f5f828ec507b8a3a3be44915007510db8454a53ed1b005cac3244e5fc0800fd94f4fa0e41b7997cdd0396830081ec53191d667112e02e6d6bb116bf28a8c5ac6b4a1769302e48a4ce553896fec8677b737f2dda0b75bf99b5d95c88caf1cf12c4671c2b6b98223aa1c176ba15fc53886a63e0cff59be3a8fc0bc3b38dbba58f7d55ffd7fac5d82ab9a49d7a2c7d3dc3f27528330422a7be38d33c53480196c2184d0ca7a746faeac7b014c2ec2e1072c51c492f9727eed47b9603e1212f8afa492cd42bcc0b982973aa0d07e2d2294e434a803c2a7c6adb468adde86196cbd338c12d5922572dc3cbf8db229653577f2a86637bbe55868c2d951ed2cf852b888869c23511977395b6d74b6ca8359d2c8c272064dbeb94fa115ba81ca144bce899dc4b9c2c038d859c3452984a609e4f19847d06cf07898cb690f53431d4e2a404401b525e2d92805664bab33b0933f19a8958349ab49267e021cea47adc489028ebabf0a7315eb7a980cab50b6679982c4976a8dc48d95bac44b035b387268bc46509a596afdfe12602808435e0086540a8cb2aa476f8495a968a2d634b6dffcfe7a0719034012c41b520c69f9348191c7fa53017358b067c1f1765703273667e566f963e63a404ad93e28d239b5277e45ac990e07782a6acaeb16fad69438d99f6e95e36f03b21f1e73de062fc67892c64d50eea48891c4616593e1aa63c7f3bf2faf2299de535f80575ac583460caf87bedc2bd0ab9de70cb50b6aead2f84e25ef0f9793c40b9e329e5082b84bffbff6f5924417d44e5d99689eb5483d1565bd9fc9ca044611a6d4c82be8a180b9264102323f047f922fea0bc76ffa54f43512d182d3c5358461624b32ebbdbda00d5733f990bb78e0af9ee76c6cd0c641e9d1647b86075c5b66f32d7c0b79fda4fa92ae61c95b51d4b924cb1a92d0b8c73af68020b58ed1bb6ae932d78f5cab6d17efdb1bbe74fcdb6f5ae3dfbb85eb61c70389b00d849702cc7e2c92d51c3caedca5f165532120ca00071577048d92acfcde432c456c8a24c5b4a28eddcdb3d35f2b229ed80debe63f52e3a85f209ce8fc6290c8c55e53340cc6ae9355c3b29019b8522822a187260cc0bf6a6dbd33eb9f7dca7a9de55343d788dc33388d7eb72cf628b2b65d4079734c11246aef767f8bd1cc88b7b7f3110deb4b9204ebbf2fbdccf55bae226c09eaf8c1f5233a590840c364544bb63edaffa4a1d64bc9cd1cb6a8181e408d14d6991ce41647378c473dd210f6bac894d1a3f4c76b1375b5b7d930a2d16bfe9f27c47647709959a43ee9fb48d344a284563a05d0fecb260fd270d079cacbffb550be87d47a8454e5aefbd2aee68fd46077747c063395231f6e255f6e17759a1951c7188188cb4885f9f52c404acf511f332a290f59d50413e6b78991ee73b5f01fcd2d5778c394adafd2da333ca1181faf01925e4ca294a12daff6b6923b1d0ebaf6fd3c05977df919757fb1b50e5de1d1004be892a322e5b2314c16d882150fbe0ec39ed60accc658569a8c0b22b9105f97e72a185430670845d822bb2d4048b872727f2d3d68b2b2efec7c17f48d76cc89425286786a470990ffa08f25f75425e6b4af0cc11ec11b41a6b7afb20599b209376c66cf92364b3e3364550d8e17f16b0c937db4508a1b7579f96cd5b21046fc8da130121913cb7feb2e87d8c334b44146cc3ff91f1b45e441524d8f008317b20ababf3742f4f3052fcb3fa107b410165ce872045c64083f89daf41ed1f67f45f4948d01c8ec7f8ba38e0aa62125d958f643a2298ecc4edc37aa467c45715b090004e7d46f02c59fadf6f2b09ef48e0ae57119d28ef5693139a6c316d220da3923901221d32cd6bf66e405d62f27e2d915c2ec1f35cfe29075785c440c3ad473b0527ca4bda02684793965190d9f50b17b908a38f018646bd6a0e7198075557f2106d5f0eff9cb6a41159eb97bb3838c49acc044ac55e7875a7a3d75783a2caec2e8e89940d5ed126a586e0df27e0cfe1a5cd7564611c11d0abc1c0c01a024ddb79f9868738047e76ad4a88f41bbfa3ebd83c46b6b22548ee440793e169d3458e31d1808c63bd2edfc5f93daa4d71c33972101f6c48932c51625850836d95804dec7fce7b9143e39e15b46f3bef8baf58c652ee7a607d67bd477d2ac2b7860de28f50fc939603c1e5502754632952fe2dd7a893cba1dfe974e9485c61116680b1019073cf1fc1ac89f501c5e3024e7f3bbab5b5aa7cc210200b1b456f663520be96e97f1331c866b2163ec11352c0802cb281511516d7300b7b6da7d38bda1e210c8331eda1ec85a2168dc05273b6c53bc279d52ea096e4b1cf723fb9b4db3ce75db50e2295e87339e32fd53843748ef4d98f3b55f982c879f767b271d5216f42932b007bd4e579a40c5e95d54ba12975de4dc011b2670346382c935060e453d9144fc2eb275b2542e746570923c84e907f0de36cae17d78a5ab12987357e154a0fdf0942c0fc7662a6b33141f284565985b7c4c72d489b7334e30f80304f44896bc7747fb7187c1a95c4f95e1dfb9a6ab68ee2fe47e447d70a29176c949483a9c9cb2cb31ad222d638d368d7b212cc4f4821d63a1"}) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r8, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15}]}]}]}, 0x30}}, 0x0) 2.744287844s ago: executing program 6 (id=3070): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x25dfdbfc, {0x7}, [@L2TP_ATTR_SESSION_ID={0x0, 0xb, 0x10000}, @L2TP_ATTR_MRU={0x0, 0x1d, 0x7ff}]}, 0x30}}, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="01006731", @ANYRES16=r6, @ANYBLOB="000826bd7000fcdbdf250000000008000a0003000000050013000d00000008001700", @ANYRES32=r7, @ANYBLOB="06000300dabf00000500220000000000"], 0x3c}}, 0x4008891) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xdc43b0f6a2621ced, 0xeeef0000, 0x2, 0x0, 0x1b}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x260003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="850000007e00000095abe6a8f524155c9dd436000000000000270957e7bb6a999a0f96a3e8e81cd4881cb16969bdffac30baea3d689b24d08d879ff575f26d9847dea3a7c558440c52adf7abf869fb54273ffb1cc156eeca938b6e1f5ddebd9514632acdd21712b118f1a28d366c8ae59fac6d1f"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = dup(r10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r10, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$P9_RSETATTR(r11, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) r12 = dup(r10) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000140)='ip6gretap0\x00', 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000840)=[{&(0x7f00000003c0)='7', 0x1}], 0x1) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0xa}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$KDGETKEYCODE(r9, 0x4b4c, &(0x7f0000000080)={0x2}) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) 1.715386841s ago: executing program 4 (id=3071): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x1, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x4e22, @empty}, @ax25={0x3, @bcast, 0x6}, @sco={0x1f, @none}, 0x101, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='netpci0\x00', 0x2, 0x4, 0xff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 1.560093268s ago: executing program 9 (id=3072): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x400, 0x70bd2a, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040001}, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x43}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x840) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) nanosleep(&(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)) io_setup(0x7, &(0x7f0000000440)=0x0) io_getevents(r6, 0x8000000000000000, 0x2, &(0x7f0000000480)=[{}, {}], &(0x7f00000004c0)={0x0, 0x3938700}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000000500)) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000540), 0x87800) ioctl$IMSETDEVNAME(r8, 0x80184947, &(0x7f0000000580)={0x800, 'syz0\x00'}) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000005c0)=""/157, &(0x7f0000000680)=0x9d) ioctl$DRM_IOCTL_IRQ_BUSID(r8, 0xc0106403, &(0x7f00000006c0)={0x0, 0xfff, 0x6, 0xa69}) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000700)={0x7b, 0x1000, 0x5, 0x7, 0x4}) ioctl$SNDCTL_SYNTH_ID(r8, 0xc08c5114, &(0x7f0000000740)={"ba0e7ac663b1b4df70033f1e952a568d0f8eb03747d5ea335e539073edb7", 0x26, 0x2, 0x1, 0xffffffff, 0x9, 0xfffffffc, 0x9, 0x4, [0x2059bf36, 0x8, 0x0, 0x0, 0x1c0, 0x6, 0x3, 0x3, 0x1c0000, 0x3, 0xee1, 0x2, 0x7, 0x7, 0x5, 0x6, 0xc, 0x4, 0x9d05]}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) chroot(&(0x7f0000000840)='./file0\x00') r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r8) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x14c, r10, 0x100, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000b00)={0x0, 0xa1}, &(0x7f0000000b40)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000b80)={r11, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x2}, 0x90) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000c40)={{0x1, 0x0, 0x80, {0x4000, 0x100000, 0x2}}, "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", "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"}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000002cc0)=""/23, &(0x7f0000002d00)=0x17) 1.373137353s ago: executing program 2 (id=3073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000000070000000180000004000000020000000000000001000000fdffffff0000000000000000000000000100"]) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 387.479763ms ago: executing program 4 (id=3074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_setup(0xd2, &(0x7f0000000340)={0x0, 0x6299, 0x80, 0x80000, 0x334}, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0xa24c0, 0xc8) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', r5, 0x1000, 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) io_setup(0xc, &(0x7f0000000140)=0x0) io_submit(r8, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r7, &(0x7f0000000100)="f4", 0x1}]) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500300}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="020029bd7000fedbdf250600000008000500ac1414aa1400060069705f76746930000000000000000000230067e1e37ba135fdb51279467374656d5f753a6f626a6563745f723a73755f657865635f743a863000002200070073797374656d5f753a6f626a6563745f723a6877646174615f743a73300000001400060074756e6c300000000000000000000000050001000100000011000300fe8000000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x60010}, 0x24040081) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8982, &(0x7f00000002c0)={0x6, 'lo\x00', {0x8}, 0x9}) 203.630011ms ago: executing program 9 (id=3075): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) futex_waitv(&(0x7f0000001a40)=[{0x9, 0x0, 0x82}, {0x6, &(0x7f0000000340)=0x100, 0x2}, {0x7, 0x0, 0x2}, {0x6, &(0x7f0000000640)=0x8000000000000000, 0x2}, {0x5, &(0x7f0000000740)=0x3}, {0x7, 0x0, 0x2}, {0xe234, &(0x7f0000000880)=0x9, 0x82}, {0x799, &(0x7f00000008c0)=0x6, 0x2}, {0x200, &(0x7f0000000940)=0x9, 0x2}, {0x7, &(0x7f0000000980)=0x5, 0x2}, {0x9, &(0x7f00000009c0)=0x1, 0x82}, {0x20000000003, &(0x7f0000000a00)=0x5, 0x82}, {0x40000000000000, &(0x7f0000000a40)=0xed, 0x82}, {0x6, 0x0, 0x2}, {0x60, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x5, &(0x7f0000001340)=0x93ac, 0x82}, {0xffffffff, 0x0, 0x2}], 0x14, 0x0, 0x0, 0x1) (fail_nth: 2) 67.352741ms ago: executing program 2 (id=3076): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) futex_waitv(&(0x7f0000001a40)=[{0x9, 0x0, 0x82}, {0x6, &(0x7f0000000340)=0x100, 0x2}, {0x7, 0x0, 0x2}, {0x6, &(0x7f0000000640)=0x8000000000000000, 0x2}, {0x5, &(0x7f0000000740)=0x3}, {0x7, 0x0, 0x2}, {0xe234, &(0x7f0000000880)=0x9, 0x82}, {0x799, &(0x7f00000008c0)=0x6, 0x2}, {0x200, &(0x7f0000000940)=0x9, 0x2}, {0x7, &(0x7f0000000980)=0x5, 0x2}, {0x9, &(0x7f00000009c0)=0x1, 0x82}, {0x20000000003, &(0x7f0000000a00)=0x5, 0x82}, {0x40000000000000, &(0x7f0000000a40)=0xed, 0x82}, {0x6, 0x0, 0x2}, {0x60, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0x5, &(0x7f0000001340)=0x93ac, 0x82}, {0xffffffff, 0x0, 0x2}], 0x14, 0x0, 0x0, 0x1) 0s ago: executing program 3 (id=3077): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1003}]}}]}, 0x40}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r3, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmmsg$inet(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 1(bridge_slave_0) entered disabled state [ 1090.225380][T21896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.940718][T20556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.593540][T20556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.608657][T19668] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1091.714737][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.722160][ T6591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.767663][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.774909][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.789379][T19668] usb 10-1: device descriptor read/64, error -71 [ 1092.048775][T19668] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1092.188606][T19668] usb 10-1: device descriptor read/64, error -71 [ 1092.370047][T19668] usb usb10-port1: attempt power cycle [ 1092.781617][T19668] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1092.863946][T19668] usb 10-1: device descriptor read/8, error -71 [ 1093.052324][T20414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.129976][T19668] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1093.144370][T20556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.169557][T19668] usb 10-1: device descriptor read/8, error -71 [ 1093.257749][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2790'. [ 1093.317506][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2790'. [ 1093.328833][T19668] usb usb10-port1: unable to enumerate USB device [ 1093.403523][T21960] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.413451][T21960] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.422572][T21960] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.431543][T21960] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.467501][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2790'. [ 1093.565844][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2790'. [ 1093.592706][ T59] gretap0: left allmulticast mode [ 1093.612993][ T59] gretap0: left promiscuous mode [ 1093.718682][ T59] bridge0: port 3(gretap0) entered disabled state [ 1093.755683][ T59] bridge_slave_1: left allmulticast mode [ 1093.767841][ T59] bridge_slave_1: left promiscuous mode [ 1093.778826][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.794355][ T59] bridge_slave_0: left allmulticast mode [ 1093.800264][ T59] bridge_slave_0: left promiscuous mode [ 1093.806139][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.826503][ T59] gretap0: left allmulticast mode [ 1093.833506][ T59] gretap0: left promiscuous mode [ 1093.845099][ T59] bridge0: port 3(gretap0) entered disabled state [ 1093.866779][ T59] bridge_slave_1: left allmulticast mode [ 1093.874827][ T59] bridge_slave_1: left promiscuous mode [ 1093.880850][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.893731][ T59] bridge_slave_0: left allmulticast mode [ 1093.900516][ T59] bridge_slave_0: left promiscuous mode [ 1093.906308][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.069025][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.080350][ T30] audit: type=1400 audit(1755076839.303:262): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=21998 comm="syz.9.2793" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1095.103165][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.113054][ T59] bond0 (unregistering): Released all slaves [ 1095.129140][ T59] bond1 (unregistering): Released all slaves [ 1095.367581][ T59] team0: Port device geneve0 removed [ 1095.608936][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.620330][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.631149][ T59] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 1095.644480][ T59] bond0 (unregistering): Released all slaves [ 1095.657499][ T59] bond1 (unregistering): Released all slaves [ 1095.844291][ T59] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1095.852464][ T59] bond3 (unregistering): left promiscuous mode [ 1095.858756][ T59] bond3 (unregistering): left allmulticast mode [ 1095.865769][ T59] bond2 (unregistering): Released all slaves [ 1096.049551][ T59] bond3 (unregistering): Released all slaves [ 1096.224525][ T59] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1096.232536][ T59] bond5 (unregistering): left promiscuous mode [ 1096.239183][ T59] bond5 (unregistering): left allmulticast mode [ 1096.246263][ T59] bond4 (unregistering): Released all slaves [ 1096.430216][ T59] bond5 (unregistering): Released all slaves [ 1096.443314][ T59] bond6 (unregistering): Released all slaves [ 1096.554039][T21997] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2792'. [ 1096.816613][T20556] veth0_vlan: entered promiscuous mode [ 1097.280727][T20556] veth1_vlan: entered promiscuous mode [ 1097.328436][T19723] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1097.598948][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 1097.802557][T19723] usb 8-1: Using ep0 maxpacket: 32 [ 1098.759098][T19723] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1098.983301][T19723] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1099.149135][T19723] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1099.181466][T20556] veth0_macvtap: entered promiscuous mode [ 1099.187734][T19723] usb 8-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1099.218198][T19723] usb 8-1: Product: syz [ 1099.225127][T19723] usb 8-1: Manufacturer: syz [ 1099.241207][T20556] veth1_macvtap: entered promiscuous mode [ 1099.258785][T19723] usb 8-1: SerialNumber: syz [ 1099.306361][T19723] usb 8-1: config 0 descriptor?? [ 1099.336942][T20556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.373987][T19723] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1099.392025][T20556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.465953][T20414] veth0_vlan: entered promiscuous mode [ 1099.495621][ T59] tipc: Disabling bearer [ 1099.551665][ T59] tipc: Left network mode [ 1099.572907][T20556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.617336][T20556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.636791][T20556] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.662167][T22020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.694369][T20556] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.729827][T22020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.786401][ T59] tipc: Disabling bearer [ 1099.811662][ T59] tipc: Left network mode [ 1099.827515][T20414] veth1_vlan: entered promiscuous mode [ 1099.903716][T15220] usb 8-1: Failed to submit usb control message: -71 [ 1099.905244][T19853] usb 8-1: USB disconnect, device number 8 [ 1099.997892][T20414] veth0_macvtap: entered promiscuous mode [ 1100.015601][T15220] usb 8-1: unable to send the bmi data to the device: -71 [ 1100.067814][T15220] usb 8-1: unable to get target info from device [ 1100.097048][T20414] veth1_macvtap: entered promiscuous mode [ 1100.152882][T15220] usb 8-1: could not get target info (-71) [ 1100.213480][T15220] usb 8-1: could not probe fw (-71) [ 1100.503395][T22057] FAULT_INJECTION: forcing a failure. [ 1100.503395][T22057] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.518361][T22057] CPU: 0 UID: 0 PID: 22057 Comm: syz.9.2797 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1100.518387][T22057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1100.518399][T22057] Call Trace: [ 1100.518407][T22057] [ 1100.518416][T22057] dump_stack_lvl+0x189/0x250 [ 1100.518443][T22057] ? __pfx____ratelimit+0x10/0x10 [ 1100.518465][T22057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1100.518485][T22057] ? __pfx__printk+0x10/0x10 [ 1100.518512][T22057] ? fs_reclaim_acquire+0x7d/0x100 [ 1100.518549][T22057] should_fail_ex+0x414/0x560 [ 1100.518574][T22057] should_failslab+0xa8/0x100 [ 1100.518596][T22057] __kmalloc_noprof+0xcb/0x4f0 [ 1100.518613][T22057] ? kfree+0x4d/0x440 [ 1100.518641][T22057] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1100.518669][T22057] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1100.518704][T22057] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1100.518725][T22057] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1100.518748][T22057] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1100.518766][T22057] ? lockdep_hardirqs_on+0x9c/0x150 [ 1100.518799][T22057] ? trace_irq_disable+0x37/0x110 [ 1100.518851][T22057] ? security_file_ioctl+0x26e/0x2d0 [ 1100.518880][T22057] security_file_ioctl+0xcb/0x2d0 [ 1100.518905][T22057] __se_sys_ioctl+0x47/0x170 [ 1100.518937][T22057] do_syscall_64+0xfa/0x3b0 [ 1100.518961][T22057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.518980][T22057] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1100.519000][T22057] ? clear_bhb_loop+0x60/0xb0 [ 1100.519025][T22057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.519045][T22057] RIP: 0033:0x7f30bcf8ebe9 [ 1100.519063][T22057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.519082][T22057] RSP: 002b:00007f30bdec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1100.519105][T22057] RAX: ffffffffffffffda RBX: 00007f30bd1b6090 RCX: 00007f30bcf8ebe9 [ 1100.519120][T22057] RDX: 0000200000000280 RSI: 0000000040186f40 RDI: 0000000000000007 [ 1100.519137][T22057] RBP: 00007f30bdec3090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.519150][T22057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.519163][T22057] R13: 00007f30bd1b6128 R14: 00007f30bd1b6090 R15: 00007ffd9495cff8 [ 1100.519197][T22057] [ 1100.520726][T22057] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1100.790059][T22057] ubi: mtd0 is already attached to ubi31 [ 1101.024705][T20414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.091296][T20547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.159321][T20547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.273212][T22084] FAULT_INJECTION: forcing a failure. [ 1101.273212][T22084] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.288944][T22084] CPU: 1 UID: 0 PID: 22084 Comm: syz.9.2800 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1101.288971][T22084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1101.288983][T22084] Call Trace: [ 1101.288991][T22084] [ 1101.289000][T22084] dump_stack_lvl+0x189/0x250 [ 1101.289025][T22084] ? __pfx____ratelimit+0x10/0x10 [ 1101.289045][T22084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1101.289066][T22084] ? __pfx__printk+0x10/0x10 [ 1101.289094][T22084] ? __pfx___might_resched+0x10/0x10 [ 1101.289112][T22084] ? fs_reclaim_acquire+0x7d/0x100 [ 1101.289140][T22084] should_fail_ex+0x414/0x560 [ 1101.289167][T22084] should_failslab+0xa8/0x100 [ 1101.289191][T22084] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1101.289211][T22084] ? getname_flags+0xb8/0x540 [ 1101.289240][T22084] getname_flags+0xb8/0x540 [ 1101.289268][T22084] do_sys_openat2+0xbc/0x1c0 [ 1101.289298][T22084] ? __pfx_do_sys_openat2+0x10/0x10 [ 1101.289324][T22084] ? ksys_write+0x22a/0x250 [ 1101.289346][T22084] ? __pfx_ksys_write+0x10/0x10 [ 1101.289369][T22084] __x64_sys_openat+0x138/0x170 [ 1101.289400][T22084] do_syscall_64+0xfa/0x3b0 [ 1101.289422][T22084] ? lockdep_hardirqs_on+0x9c/0x150 [ 1101.289443][T22084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.289472][T22084] ? clear_bhb_loop+0x60/0xb0 [ 1101.289498][T22084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.289518][T22084] RIP: 0033:0x7f30bcf8d550 [ 1101.289536][T22084] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1101.289554][T22084] RSP: 002b:00007f30bdea1f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1101.289576][T22084] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f30bcf8d550 [ 1101.289591][T22084] RDX: 0000000000000002 RSI: 00007f30bdea1fa0 RDI: 00000000ffffff9c [ 1101.289605][T22084] RBP: 00007f30bdea1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.289619][T22084] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1101.289632][T22084] R13: 00007f30bd1b6218 R14: 00007f30bd1b6180 R15: 00007ffd9495cff8 [ 1101.289665][T22084] [ 1102.064337][T20414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.103087][T20414] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.131036][T20414] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.168747][T20414] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.198337][T20414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.219361][T20547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1102.227419][T20547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.258367][ T9507] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1103.152293][ T30] audit: type=1400 audit(1755076846.963:263): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=22102 comm="syz.9.2803" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1103.198215][T22106] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2803'. [ 1103.329777][ T9507] usb 8-1: device descriptor read/64, error -71 [ 1103.535126][ T59] hsr_slave_0: left promiscuous mode [ 1103.568428][ T9507] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1103.650584][ T59] hsr_slave_1: left promiscuous mode [ 1103.819937][ T9507] usb 8-1: device descriptor read/64, error -71 [ 1103.828088][ T59] hsr_slave_0: left promiscuous mode [ 1103.848639][ T59] hsr_slave_1: left promiscuous mode [ 1104.524899][ T9507] usb usb8-port1: attempt power cycle [ 1104.539361][ T59] veth1_macvtap: left promiscuous mode [ 1104.578026][ T59] veth0_macvtap: left promiscuous mode [ 1104.625209][ T59] veth1_vlan: left promiscuous mode [ 1104.651641][T22129] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1104.661366][T22132] FAULT_INJECTION: forcing a failure. [ 1104.661366][T22132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.701929][T22132] CPU: 0 UID: 0 PID: 22132 Comm: syz.8.2806 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1104.701962][T22132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1104.701975][T22132] Call Trace: [ 1104.701983][T22132] [ 1104.701992][T22132] dump_stack_lvl+0x189/0x250 [ 1104.702021][T22132] ? __pfx____ratelimit+0x10/0x10 [ 1104.702041][T22132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1104.702072][T22132] ? __pfx__printk+0x10/0x10 [ 1104.702097][T22132] ? __might_fault+0xb0/0x130 [ 1104.702128][T22132] should_fail_ex+0x414/0x560 [ 1104.702154][T22132] _copy_from_user+0x2d/0xb0 [ 1104.702183][T22132] __sys_sendto+0x25c/0x520 [ 1104.702214][T22132] ? __pfx___sys_sendto+0x10/0x10 [ 1104.702237][T22132] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1104.702274][T22132] ? __fget_files+0x3a0/0x420 [ 1104.702307][T22132] ? ksys_write+0x22a/0x250 [ 1104.702326][T22132] ? __pfx_ksys_write+0x10/0x10 [ 1104.702342][T22132] ? rcu_is_watching+0x15/0xb0 [ 1104.702369][T22132] __x64_sys_sendto+0xde/0x100 [ 1104.702400][T22132] do_syscall_64+0xfa/0x3b0 [ 1104.702421][T22132] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.702441][T22132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.702461][T22132] ? clear_bhb_loop+0x60/0xb0 [ 1104.702484][T22132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.702504][T22132] RIP: 0033:0x7f9dde78ebe9 [ 1104.702519][T22132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.702535][T22132] RSP: 002b:00007f9ddf633038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1104.702556][T22132] RAX: ffffffffffffffda RBX: 00007f9dde9b5fa0 RCX: 00007f9dde78ebe9 [ 1104.702571][T22132] RDX: 000000000000000b RSI: 0000200000001180 RDI: 0000000000000004 [ 1104.702582][T22132] RBP: 00007f9ddf633090 R08: 00002000000001c0 R09: 000000000000001c [ 1104.702594][T22132] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 1104.702607][T22132] R13: 00007f9dde9b6038 R14: 00007f9dde9b5fa0 R15: 00007ffdd7feb408 [ 1104.702638][T22132] [ 1105.412621][T14937] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1105.581152][T14937] usb 9-1: Using ep0 maxpacket: 16 [ 1106.079181][T14937] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1106.188804][T14937] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.197928][T14937] usb 9-1: too many endpoints for config 1 interface 0 altsetting 102: 249, using maximum allowed: 30 [ 1106.209513][T14937] usb 9-1: config 1 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 249 [ 1106.224134][T14937] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1106.233724][T14937] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1106.243406][T14937] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.254857][T14937] usb 9-1: Product: syz [ 1106.267654][T14937] usb 9-1: Manufacturer: syz [ 1106.287942][T14937] usb 9-1: SerialNumber: syz [ 1106.604565][T14937] usb 9-1: USB disconnect, device number 12 [ 1106.830111][T22164] x_tables: duplicate underflow at hook 2 [ 1106.837118][T22170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2811'. [ 1106.858167][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2811'. [ 1108.797153][T22187] FAULT_INJECTION: forcing a failure. [ 1108.797153][T22187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.901973][T22187] CPU: 0 UID: 0 PID: 22187 Comm: syz.9.2815 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1108.902003][T22187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1108.902015][T22187] Call Trace: [ 1108.902023][T22187] [ 1108.902033][T22187] dump_stack_lvl+0x189/0x250 [ 1108.902061][T22187] ? __pfx____ratelimit+0x10/0x10 [ 1108.902083][T22187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.902105][T22187] ? __pfx__printk+0x10/0x10 [ 1108.902131][T22187] ? __might_fault+0xb0/0x130 [ 1108.902163][T22187] should_fail_ex+0x414/0x560 [ 1108.902190][T22187] _copy_from_user+0x2d/0xb0 [ 1108.902218][T22187] __sys_connect+0x123/0x440 [ 1108.902245][T22187] ? __fget_files+0x3a0/0x420 [ 1108.902269][T22187] ? __pfx___sys_connect+0x10/0x10 [ 1108.902309][T22187] ? __pfx_ksys_write+0x10/0x10 [ 1108.902337][T22187] __x64_sys_connect+0x7a/0x90 [ 1108.902365][T22187] do_syscall_64+0xfa/0x3b0 [ 1108.902386][T22187] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.902407][T22187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.902427][T22187] ? clear_bhb_loop+0x60/0xb0 [ 1108.902451][T22187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.902470][T22187] RIP: 0033:0x7f30bcf8ebe9 [ 1108.902489][T22187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.902507][T22187] RSP: 002b:00007f30bdec3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1108.902528][T22187] RAX: ffffffffffffffda RBX: 00007f30bd1b6090 RCX: 00007f30bcf8ebe9 [ 1108.902544][T22187] RDX: 000000000000006e RSI: 0000200000000200 RDI: 0000000000000005 [ 1108.902557][T22187] RBP: 00007f30bdec3090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.902570][T22187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.902582][T22187] R13: 00007f30bd1b6128 R14: 00007f30bd1b6090 R15: 00007ffd9495cff8 [ 1108.902615][T22187] [ 1109.465012][ T9505] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1109.622196][ T9505] usb 8-1: device descriptor read/64, error -71 [ 1109.944851][ T9505] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1110.063870][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1110.075170][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1110.086163][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1110.093439][ T9505] usb 8-1: device descriptor read/64, error -71 [ 1110.117968][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1110.140515][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1110.159117][T20800] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1110.160285][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1110.208956][ T9505] usb usb8-port1: attempt power cycle [ 1110.308417][T20800] usb 9-1: device descriptor read/64, error -71 [ 1110.331457][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1110.426389][T22219] FAULT_INJECTION: forcing a failure. [ 1110.426389][T22219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.439943][T22219] CPU: 0 UID: 0 PID: 22219 Comm: syz.9.2821 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1110.439959][T22219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1110.439967][T22219] Call Trace: [ 1110.439972][T22219] [ 1110.439977][T22219] dump_stack_lvl+0x189/0x250 [ 1110.439994][T22219] ? __pfx____ratelimit+0x10/0x10 [ 1110.440006][T22219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1110.440018][T22219] ? __pfx__printk+0x10/0x10 [ 1110.440032][T22219] ? __might_fault+0xb0/0x130 [ 1110.440048][T22219] should_fail_ex+0x414/0x560 [ 1110.440062][T22219] _copy_from_user+0x2d/0xb0 [ 1110.440078][T22219] ___sys_sendmsg+0x158/0x2a0 [ 1110.440096][T22219] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.440131][T22219] ? __fget_files+0x2a/0x420 [ 1110.440143][T22219] ? __fget_files+0x3a0/0x420 [ 1110.440160][T22219] __x64_sys_sendmsg+0x19b/0x260 [ 1110.440177][T22219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1110.440198][T22219] ? __pfx_ksys_write+0x10/0x10 [ 1110.440207][T22219] ? rcu_is_watching+0x15/0xb0 [ 1110.440222][T22219] ? do_syscall_64+0xbe/0x3b0 [ 1110.440236][T22219] do_syscall_64+0xfa/0x3b0 [ 1110.440247][T22219] ? lockdep_hardirqs_on+0x9c/0x150 [ 1110.440258][T22219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.440268][T22219] ? clear_bhb_loop+0x60/0xb0 [ 1110.440280][T22219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.440290][T22219] RIP: 0033:0x7f30bcf8ebe9 [ 1110.440302][T22219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1110.440311][T22219] RSP: 002b:00007f30bdee4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.440322][T22219] RAX: ffffffffffffffda RBX: 00007f30bd1b5fa0 RCX: 00007f30bcf8ebe9 [ 1110.440330][T22219] RDX: 0000000004000010 RSI: 0000200000001200 RDI: 0000000000000005 [ 1110.440337][T22219] RBP: 00007f30bdee4090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.440344][T22219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.440350][T22219] R13: 00007f30bd1b6038 R14: 00007f30bd1b5fa0 R15: 00007ffd9495cff8 [ 1110.440366][T22219] [ 1110.711178][ T9505] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1110.719647][T20800] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1110.764034][ T9505] usb 8-1: device descriptor read/8, error -71 [ 1110.865537][T20800] usb 9-1: device descriptor read/64, error -71 [ 1110.987157][T20800] usb usb9-port1: attempt power cycle [ 1111.012065][ T9505] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1111.040746][ T9505] usb 8-1: device descriptor read/8, error -71 [ 1111.152438][ T9505] usb usb8-port1: unable to enumerate USB device [ 1111.198499][T14937] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1111.339523][T20800] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1111.390492][T20800] usb 9-1: device descriptor read/8, error -71 [ 1111.414687][T14937] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1111.433880][T14937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.453207][T14937] usb 10-1: Product: syz [ 1111.457565][T14937] usb 10-1: Manufacturer: syz [ 1111.472902][T14937] usb 10-1: SerialNumber: syz [ 1111.484936][T14937] usb 10-1: config 0 descriptor?? [ 1111.638958][T20800] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1111.659322][T20800] usb 9-1: device descriptor read/8, error -71 [ 1111.777499][T20800] usb usb9-port1: unable to enumerate USB device [ 1111.950768][T14937] usb 10-1: Firmware: major: 217, minor: 21, hardware type: ATUSB (2) [ 1112.197859][T14937] usb 10-1: failed to fetch extended address, random address set [ 1112.244839][ T5857] Bluetooth: hci5: command tx timeout [ 1114.352346][ T5857] Bluetooth: hci5: command tx timeout [ 1114.829378][ T9503] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1115.018410][ T9503] usb 9-1: Using ep0 maxpacket: 16 [ 1115.032870][ T9503] usb 9-1: too many configurations: 26, using maximum allowed: 8 [ 1115.068514][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1115.097770][ T9503] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1115.108431][ T9503] usb 9-1: can't read configurations, error -61 [ 1115.197493][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1115.755381][ T30] audit: type=1400 audit(1755076859.673:264): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=22274 comm="syz.7.2830" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1116.010582][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.016982][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.131506][ T9503] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1116.398930][ T5857] Bluetooth: hci5: command tx timeout [ 1119.077805][ T5857] Bluetooth: hci5: command tx timeout [ 1120.092911][ T30] audit: type=1326 audit(1755076864.303:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22309 comm="syz.9.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1120.114856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.121825][ T30] audit: type=1326 audit(1755076864.313:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22309 comm="syz.9.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1120.227848][T22313] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2835'. [ 1120.287806][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2836'. [ 1120.967836][T22280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2830'. [ 1121.978602][T14937] usb 10-1: USB disconnect, device number 13 [ 1123.292659][T18048] Bluetooth: hci4: command 0x0406 tx timeout [ 1124.589306][ T5924] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1125.160477][ T5924] usb 9-1: Using ep0 maxpacket: 8 [ 1125.456872][ T5924] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1125.700021][ T5924] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1125.712221][ T5924] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1125.815216][ T5924] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1125.829641][ T5924] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1125.865273][ T5924] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1125.903962][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.173576][ T5924] usb 9-1: usb_control_msg returned -32 [ 1126.187738][ T5924] usbtmc 9-1:16.0: can't read capabilities [ 1126.306901][ T5924] usb 9-1: USB disconnect, device number 19 [ 1126.694303][T22450] FAULT_INJECTION: forcing a failure. [ 1126.694303][T22450] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.755535][T22450] CPU: 1 UID: 0 PID: 22450 Comm: syz.9.2847 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1126.755560][T22450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1126.755571][T22450] Call Trace: [ 1126.755578][T22450] [ 1126.755587][T22450] dump_stack_lvl+0x189/0x250 [ 1126.755617][T22450] ? __pfx____ratelimit+0x10/0x10 [ 1126.755638][T22450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1126.755661][T22450] ? __pfx__printk+0x10/0x10 [ 1126.755692][T22450] ? __pfx___might_resched+0x10/0x10 [ 1126.755713][T22450] ? fs_reclaim_acquire+0x7d/0x100 [ 1126.755742][T22450] should_fail_ex+0x414/0x560 [ 1126.755769][T22450] should_failslab+0xa8/0x100 [ 1126.755793][T22450] __kmalloc_noprof+0xcb/0x4f0 [ 1126.755811][T22450] ? kfree+0x4d/0x440 [ 1126.755836][T22450] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1126.755868][T22450] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1126.755907][T22450] ? tomoyo_domain+0xda/0x130 [ 1126.755939][T22450] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1126.755961][T22450] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1126.755986][T22450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1126.756026][T22450] ? __lock_acquire+0xab9/0xd20 [ 1126.756068][T22450] ? __fget_files+0x2a/0x420 [ 1126.756094][T22450] ? __fget_files+0x2a/0x420 [ 1126.756114][T22450] ? __fget_files+0x3a0/0x420 [ 1126.756134][T22450] ? __fget_files+0x2a/0x420 [ 1126.756156][T22450] security_file_ioctl+0xcb/0x2d0 [ 1126.756179][T22450] __se_sys_ioctl+0x47/0x170 [ 1126.756204][T22450] do_syscall_64+0xfa/0x3b0 [ 1126.756222][T22450] ? lockdep_hardirqs_on+0x9c/0x150 [ 1126.756238][T22450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.756254][T22450] ? clear_bhb_loop+0x60/0xb0 [ 1126.756273][T22450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.756288][T22450] RIP: 0033:0x7f30bcf8ebe9 [ 1126.756303][T22450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.756317][T22450] RSP: 002b:00007f30bdee4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1126.756334][T22450] RAX: ffffffffffffffda RBX: 00007f30bd1b5fa0 RCX: 00007f30bcf8ebe9 [ 1126.756346][T22450] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000009 [ 1126.756357][T22450] RBP: 00007f30bdee4090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.756367][T22450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.756376][T22450] R13: 00007f30bd1b6038 R14: 00007f30bd1b5fa0 R15: 00007ffd9495cff8 [ 1126.756402][T22450] [ 1126.756411][T22450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1127.404151][T22210] chnl_net:caif_netlink_parms(): no params data found [ 1131.203641][T22575] FAULT_INJECTION: forcing a failure. [ 1131.203641][T22575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1131.217063][T22575] CPU: 1 UID: 0 PID: 22575 Comm: syz.5.2853 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1131.217089][T22575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1131.217101][T22575] Call Trace: [ 1131.217110][T22575] [ 1131.217119][T22575] dump_stack_lvl+0x189/0x250 [ 1131.217146][T22575] ? __pfx____ratelimit+0x10/0x10 [ 1131.217167][T22575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1131.217189][T22575] ? __pfx__printk+0x10/0x10 [ 1131.217214][T22575] ? __might_fault+0xb0/0x130 [ 1131.217244][T22575] should_fail_ex+0x414/0x560 [ 1131.217272][T22575] _copy_from_user+0x2d/0xb0 [ 1131.217298][T22575] do_tcp_setsockopt+0x47d/0x1f10 [ 1131.217332][T22575] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1131.217369][T22575] ? __fget_files+0x2a/0x420 [ 1131.217394][T22575] ? sock_common_setsockopt+0x36/0xc0 [ 1131.217417][T22575] ? tcp_setsockopt+0x3d/0xe0 [ 1131.217438][T22575] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1131.217471][T22575] do_sock_setsockopt+0x179/0x1b0 [ 1131.217502][T22575] __x64_sys_setsockopt+0x13f/0x1b0 [ 1131.217534][T22575] do_syscall_64+0xfa/0x3b0 [ 1131.217556][T22575] ? lockdep_hardirqs_on+0x9c/0x150 [ 1131.217577][T22575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.217597][T22575] ? clear_bhb_loop+0x60/0xb0 [ 1131.217621][T22575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.217642][T22575] RIP: 0033:0x7f18df78ebe9 [ 1131.217659][T22575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.217676][T22575] RSP: 002b:00007f18e06c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1131.217698][T22575] RAX: ffffffffffffffda RBX: 00007f18df9b5fa0 RCX: 00007f18df78ebe9 [ 1131.217712][T22575] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 1131.217725][T22575] RBP: 00007f18e06c1090 R08: 0000000000000004 R09: 0000000000000000 [ 1131.217738][T22575] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1131.217752][T22575] R13: 00007f18df9b6038 R14: 00007f18df9b5fa0 R15: 00007ffe479a6478 [ 1131.217785][T22575] [ 1131.687899][T22210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.282906][T22210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.296990][T22210] bridge_slave_0: entered allmulticast mode [ 1132.692287][T22210] bridge_slave_0: entered promiscuous mode [ 1132.709797][T22597] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1133.191165][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.283101][T22598] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.361451][T22210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.372278][T22210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.388075][T22210] bridge_slave_1: entered allmulticast mode [ 1133.406017][T22210] bridge_slave_1: entered promiscuous mode [ 1133.711577][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.728705][T20800] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1134.008670][T20800] usb 9-1: Using ep0 maxpacket: 8 [ 1134.031917][T20800] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1134.082103][T20800] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1134.105942][T22210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.131816][ T9507] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1134.146448][T20800] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1134.189503][T20800] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1134.191535][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.228497][T20800] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1134.248632][T20800] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1134.258096][T20800] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.269988][T22210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.298411][ T9507] usb 6-1: device descriptor read/64, error -71 [ 1134.354552][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.518673][T20800] usb 9-1: usb_control_msg returned -32 [ 1134.529087][T20800] usbtmc 9-1:16.0: can't read capabilities [ 1134.553139][T20800] usb 9-1: USB disconnect, device number 20 [ 1134.560012][ T9507] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1134.595670][T22210] team0: Port device team_slave_0 added [ 1134.748171][T22210] team0: Port device team_slave_1 added [ 1134.768508][ T9507] usb 6-1: device descriptor read/64, error -71 [ 1134.879178][ T9507] usb usb6-port1: attempt power cycle [ 1134.942847][T22210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.959414][T22210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.990925][T22210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.029632][T22210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.039104][T22210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.071433][T22210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.239520][ T9507] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1135.280159][ T9507] usb 6-1: device descriptor read/8, error -71 [ 1135.302268][T22210] hsr_slave_0: entered promiscuous mode [ 1135.316813][T22210] hsr_slave_1: entered promiscuous mode [ 1135.386926][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.548507][ T9507] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1135.595675][ T9507] usb 6-1: device descriptor read/8, error -71 [ 1135.609867][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.729630][ T9507] usb usb6-port1: unable to enumerate USB device [ 1135.790338][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.039631][ T59] bridge_slave_1: left allmulticast mode [ 1137.052344][ T59] bridge_slave_1: left promiscuous mode [ 1137.634840][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.754934][ T59] bridge_slave_0: left allmulticast mode [ 1137.761532][ T59] bridge_slave_0: left promiscuous mode [ 1137.767528][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.841121][ T59] bridge_slave_1: left allmulticast mode [ 1137.875498][ T59] bridge_slave_1: left promiscuous mode [ 1137.900006][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.930612][ T59] bridge_slave_0: left allmulticast mode [ 1137.940592][ T59] bridge_slave_0: left promiscuous mode [ 1137.947759][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.189556][ T30] audit: type=1400 audit(1755076882.403:267): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=22871 comm="syz.8.2868" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1139.338420][ T5924] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1139.488632][ T5924] usb 10-1: Using ep0 maxpacket: 8 [ 1139.496828][ T5924] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1139.510784][ T5924] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1139.523012][ T5924] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1139.537129][ T5924] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1139.557370][ T5924] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.571062][ T5924] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1139.580364][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.651558][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.670455][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.683630][ T59] bond0 (unregistering): Released all slaves [ 1139.818160][ T5924] usb 10-1: usb_control_msg returned -32 [ 1139.834735][ T5924] usbtmc 10-1:16.0: can't read capabilities [ 1139.870212][ T5924] usb 10-1: USB disconnect, device number 14 [ 1140.218335][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.238017][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.258221][ T59] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1140.273805][ T59] bond0 (unregistering): Released all slaves [ 1140.296190][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2868'. [ 1140.341727][T22891] all: renamed from lo (while UP) [ 1140.376806][T22888] syzkaller1: entered promiscuous mode [ 1140.392698][T22888] syzkaller1: entered allmulticast mode [ 1140.644084][T22921] mmap: syz.8.2872 (22921) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1140.885364][ T59] tipc: Disabling bearer [ 1140.891365][ T59] tipc: Left network mode [ 1141.036625][T22929] random: crng reseeded on system resumption [ 1141.651953][T22930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2874'. [ 1143.348371][T17355] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1143.508386][T17355] usb 6-1: device descriptor read/64, error -71 [ 1143.555754][T22210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1143.691505][T22210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1143.771126][T22210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1143.786404][T17355] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1143.841470][ T59] hsr_slave_0: left promiscuous mode [ 1143.860438][ T59] hsr_slave_1: left promiscuous mode [ 1143.880937][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.907880][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.928044][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.939186][T17355] usb 6-1: device descriptor read/64, error -71 [ 1143.954526][T18048] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1143.960221][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.978867][T18048] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1143.988743][T18048] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1144.004419][T18048] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1144.014081][T18048] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1144.015550][T22980] Bluetooth: MGMT ver 1.23 [ 1144.059486][ T59] hsr_slave_0: left promiscuous mode [ 1144.065286][T22980] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2879'. [ 1144.074812][ T59] hsr_slave_1: left promiscuous mode [ 1144.080235][T17355] usb usb6-port1: attempt power cycle [ 1144.087740][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.096215][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.105334][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.114957][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.123996][ T59] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1144.131464][ T59] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1144.182855][ T59] veth1_macvtap: left promiscuous mode [ 1144.188741][ T59] veth0_macvtap: left promiscuous mode [ 1144.194420][ T59] veth1_vlan: left promiscuous mode [ 1144.199841][ T59] veth0_vlan: left promiscuous mode [ 1144.205965][ T59] veth1_macvtap: left promiscuous mode [ 1144.215722][ T59] veth0_macvtap: left promiscuous mode [ 1144.221853][ T59] veth1_vlan: left promiscuous mode [ 1144.496762][T17355] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1144.528682][T17355] usb 6-1: device descriptor read/8, error -71 [ 1145.503810][T17355] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1145.546643][T17355] usb 6-1: device descriptor read/8, error -71 [ 1145.644616][ T30] audit: type=1400 audit(1755076889.863:268): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=22989 comm="syz.9.2881" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1145.675238][T17355] usb usb6-port1: unable to enumerate USB device [ 1145.999564][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1146.077170][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1146.088416][T18048] Bluetooth: hci1: command tx timeout [ 1147.344897][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1147.407465][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1148.008232][T22210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1148.036076][T22991] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2881'. [ 1148.158778][T18048] Bluetooth: hci1: command tx timeout [ 1148.522030][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2884'. [ 1148.542083][ T30] audit: type=1400 audit(1755076892.753:269): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=23005 comm="syz.8.2884" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1149.623596][T23045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1150.338501][T18048] Bluetooth: hci1: command tx timeout [ 1150.387972][T22210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.692855][T22210] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.784403][T23098] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2892'. [ 1150.785322][T20547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.800858][T20547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.909287][T23071] xt_CT: No such helper "pptp" [ 1150.926611][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.933959][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.146918][T22974] chnl_net:caif_netlink_parms(): no params data found [ 1151.358800][T20800] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1151.518420][T20800] usb 6-1: Using ep0 maxpacket: 16 [ 1151.529566][T20800] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1151.555910][T20800] usb 6-1: config 1 has no interface number 0 [ 1151.567471][T20800] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1151.586294][T20800] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1151.597906][T20800] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1151.614787][T20800] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1151.626177][T20800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.634610][T20800] usb 6-1: Product: syz [ 1151.639081][T20800] usb 6-1: Manufacturer: syz [ 1151.644611][T20800] usb 6-1: SerialNumber: syz [ 1151.664681][T22974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.665104][T23161] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1151.682745][T22974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.692742][T22974] bridge_slave_0: entered allmulticast mode [ 1151.699778][T23161] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1151.710850][T22974] bridge_slave_0: entered promiscuous mode [ 1151.726476][T22974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.737234][T22974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.759276][T22974] bridge_slave_1: entered allmulticast mode [ 1151.774344][T22974] bridge_slave_1: entered promiscuous mode [ 1151.952377][ T49] dummy0: left allmulticast mode [ 1151.970957][ T49] bridge0: port 4(dummy0) entered disabled state [ 1151.991727][ T49] gretap0: left allmulticast mode [ 1151.996883][ T49] gretap0: left promiscuous mode [ 1152.003456][ T49] bridge0: port 3(gretap0) entered disabled state [ 1152.014288][ T49] bridge_slave_1: left allmulticast mode [ 1152.031118][ T49] bridge_slave_1: left promiscuous mode [ 1152.037031][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.055103][ T49] bridge_slave_0: left allmulticast mode [ 1152.061392][ T49] bridge_slave_0: left promiscuous mode [ 1152.067213][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.142334][T23161] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1152.174523][T23161] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1152.403089][T18048] Bluetooth: hci1: command tx timeout [ 1152.630277][T20800] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1152.643044][T20800] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1152.670925][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.681763][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.691671][ T49] bond0 (unregistering): Released all slaves [ 1152.861664][ T49] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1152.869957][T23161] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2894'. [ 1152.869996][ T49] bond2 (unregistering): left promiscuous mode [ 1152.885707][ T49] bond2 (unregistering): left allmulticast mode [ 1152.892856][ T49] bond1 (unregistering): Released all slaves [ 1153.065639][ T49] bond2 (unregistering): Released all slaves [ 1153.239756][ T49] bond3 (unregistering): (slave bond4): Releasing backup interface [ 1153.248006][ T49] bond4 (unregistering): left promiscuous mode [ 1153.254384][ T49] bond4 (unregistering): left allmulticast mode [ 1153.262400][ T49] bond3 (unregistering): Released all slaves [ 1153.430283][ T49] bond4 (unregistering): Released all slaves [ 1153.617224][ T49] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1153.625402][ T49] bond6 (unregistering): left promiscuous mode [ 1153.631750][ T49] bond6 (unregistering): left allmulticast mode [ 1153.639031][ T49] bond5 (unregistering): Released all slaves [ 1153.811418][ T49] bond6 (unregistering): Released all slaves [ 1154.002645][ T49] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1154.010856][ T49] bond8 (unregistering): left promiscuous mode [ 1154.017040][ T49] bond8 (unregistering): left allmulticast mode [ 1154.024247][ T49] bond7 (unregistering): Released all slaves [ 1154.191998][ T49] bond8 (unregistering): Released all slaves [ 1154.198730][T14937] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1154.378506][T14937] usb 10-1: Using ep0 maxpacket: 32 [ 1154.389477][ T49] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1154.390132][T14937] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1154.397646][ T49] bond10 (unregistering): left promiscuous mode [ 1154.410370][T14937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1154.410403][T14937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1154.419650][ T49] bond10 (unregistering): left allmulticast mode [ 1154.440582][T14937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1154.457972][T14937] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1154.458918][ T49] bond9 (unregistering): Released all slaves [ 1154.471706][T14937] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1154.491347][T14937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.499638][T14937] usb 10-1: Product: syz [ 1154.503938][T14937] usb 10-1: Manufacturer: syz [ 1154.508832][T14937] usb 10-1: SerialNumber: syz [ 1154.518195][T14937] usb 10-1: config 0 descriptor?? [ 1154.712651][ T49] bond10 (unregistering): Released all slaves [ 1154.928223][T14937] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1154.929183][ T49] bond11 (unregistering): Released all slaves [ 1154.944574][T14937] input input74: Device does not respond to id packet M [ 1155.439428][ T49] bond12 (unregistering): Released all slaves [ 1155.648247][T22974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.764526][T20800] aqc111 6-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 4a:bc:25:57:73:e4 [ 1155.835136][T22974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.836466][T14937] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1155.888397][T14937] input input74: Device does not respond to id packet P [ 1155.900807][ T5924] usb 6-1: USB disconnect, device number 11 [ 1155.910350][ T5924] aqc111 6-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1155.923319][T14937] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1155.955254][T14937] input input74: Device does not respond to id packet B [ 1155.989650][T14937] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1155.995854][T14937] input input74: Device does not respond to id packet N [ 1156.033040][T14937] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1156.056339][T14937] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1156.078535][T14937] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1156.096624][T14937] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1156.121875][T14937] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input74 [ 1156.145088][ T49] tipc: Disabling bearer [ 1156.151590][ T49] tipc: Left network mode [ 1156.189043][ T5924] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1156.203933][T14937] usb 10-1: USB disconnect, device number 15 [ 1156.229584][ T5924] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1156.583459][ T5924] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1157.203768][T22974] team0: Port device team_slave_0 added [ 1157.280619][T22210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.540969][T22974] team0: Port device team_slave_1 added [ 1157.675917][T23382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2903'. [ 1157.720218][T22974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.750858][T22974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1157.807417][T22974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.973097][T22974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.989993][T22974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.204476][T23405] syz.5.2903: attempt to access beyond end of device [ 1158.204476][T23405] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1158.218782][T23405] syz.5.2903: attempt to access beyond end of device [ 1158.218782][T23405] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1158.232455][T23405] Mount JFS Failure: -5 [ 1158.543196][T22974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.947427][T22974] hsr_slave_0: entered promiscuous mode [ 1159.956444][T22974] hsr_slave_1: entered promiscuous mode [ 1159.979179][T22974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1159.987216][T22974] Cannot create hsr debugfs directory [ 1160.313458][ T30] audit: type=1400 audit(1755076904.483:270): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=23464 comm="syz.8.2909" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1160.341519][ T49] hsr_slave_0: left promiscuous mode [ 1160.358611][ T49] hsr_slave_1: left promiscuous mode [ 1161.366465][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1161.435776][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1162.097502][T23467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2909'. [ 1164.253207][T22210] veth0_vlan: entered promiscuous mode [ 1164.305728][T22210] veth1_vlan: entered promiscuous mode [ 1164.486045][T23575] FAULT_INJECTION: forcing a failure. [ 1164.486045][T23575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.504443][T23575] CPU: 1 UID: 0 PID: 23575 Comm: syz.5.2915 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1164.504472][T23575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1164.504485][T23575] Call Trace: [ 1164.504493][T23575] [ 1164.504503][T23575] dump_stack_lvl+0x189/0x250 [ 1164.504530][T23575] ? __pfx____ratelimit+0x10/0x10 [ 1164.504552][T23575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.504575][T23575] ? __pfx__printk+0x10/0x10 [ 1164.504614][T23575] should_fail_ex+0x414/0x560 [ 1164.504641][T23575] _copy_to_user+0x31/0xb0 [ 1164.504671][T23575] bpf_test_finish+0x1ab/0x700 [ 1164.504708][T23575] ? __pfx_bpf_test_finish+0x10/0x10 [ 1164.504742][T23575] ? bpf_test_init+0x133/0x170 [ 1164.504771][T23575] bpf_prog_test_run_xdp+0x79a/0x1000 [ 1164.504817][T23575] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1164.504850][T23575] ? __fget_files+0x2a/0x420 [ 1164.504878][T23575] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1164.504907][T23575] bpf_prog_test_run+0x2c7/0x340 [ 1164.504942][T23575] __sys_bpf+0x4a4/0x860 [ 1164.504972][T23575] ? __pfx___sys_bpf+0x10/0x10 [ 1164.505014][T23575] ? ksys_write+0x22a/0x250 [ 1164.505036][T23575] ? __pfx_ksys_write+0x10/0x10 [ 1164.505052][T23575] ? rcu_is_watching+0x15/0xb0 [ 1164.505081][T23575] __x64_sys_bpf+0x7c/0x90 [ 1164.505108][T23575] do_syscall_64+0xfa/0x3b0 [ 1164.505128][T23575] ? lockdep_hardirqs_on+0x9c/0x150 [ 1164.505148][T23575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.505168][T23575] ? clear_bhb_loop+0x60/0xb0 [ 1164.505192][T23575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.505212][T23575] RIP: 0033:0x7f18df78ebe9 [ 1164.505230][T23575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.505247][T23575] RSP: 002b:00007f18e06c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1164.505266][T23575] RAX: ffffffffffffffda RBX: 00007f18df9b5fa0 RCX: 00007f18df78ebe9 [ 1164.505279][T23575] RDX: 0000000000000027 RSI: 00002000000003c0 RDI: 000000000000000a [ 1164.505289][T23575] RBP: 00007f18e06c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.505300][T23575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.505310][T23575] R13: 00007f18df9b6038 R14: 00007f18df9b5fa0 R15: 00007ffe479a6478 [ 1164.505341][T23575] [ 1165.206088][T22210] veth0_macvtap: entered promiscuous mode [ 1165.225738][T22210] veth1_macvtap: entered promiscuous mode [ 1165.667115][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.735644][T22210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.065986][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1166.077932][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.094070][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1166.114186][T22210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.125571][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1166.131352][T22210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.147275][T22210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.176165][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1166.183091][T22210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.192988][T22210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.202977][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.289073][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.483126][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.947043][T22974] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1167.217431][T22974] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1167.234592][T22974] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1167.253115][T23685] hub 9-0:1.0: USB hub found [ 1167.265565][T15220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.273851][T22974] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1167.273944][T15220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.301231][T23685] hub 9-0:1.0: 1 port detected [ 1168.340638][T18048] Bluetooth: hci0: command tx timeout [ 1168.723407][ T59] bond0 (unregistering): Released all slaves [ 1169.182363][T23626] chnl_net:caif_netlink_parms(): no params data found [ 1169.240832][T23805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2924'. [ 1169.675895][T23822] syz.5.2924: attempt to access beyond end of device [ 1169.675895][T23822] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1169.690662][T23822] syz.5.2924: attempt to access beyond end of device [ 1169.690662][T23822] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1169.704526][T23822] Mount JFS Failure: -5 [ 1170.294466][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1170.310898][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1170.321492][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1170.350090][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1170.364629][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1170.409674][T18048] Bluetooth: hci0: command tx timeout [ 1170.466942][ T59] hsr_slave_0: left promiscuous mode [ 1170.497749][ T59] hsr_slave_1: left promiscuous mode [ 1170.531155][ T59] veth1_macvtap: left promiscuous mode [ 1170.536734][ T59] veth0_macvtap: left promiscuous mode [ 1170.542975][ T59] veth1_vlan: left promiscuous mode [ 1170.549376][ T59] veth0_vlan: left promiscuous mode [ 1170.748630][T20800] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1170.911438][T20800] usb 6-1: Using ep0 maxpacket: 32 [ 1170.935838][T20800] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1170.944195][T20800] usb 6-1: config 0 has no interface number 0 [ 1170.954843][T20800] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1170.965982][T20800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.975222][T20800] usb 6-1: Product: syz [ 1170.979792][T20800] usb 6-1: Manufacturer: syz [ 1170.984432][T20800] usb 6-1: SerialNumber: syz [ 1170.997858][T20800] usb 6-1: config 0 descriptor?? [ 1171.027182][T20800] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1171.277248][T20800] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1171.332615][T20800] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1172.399155][T18048] Bluetooth: hci5: command tx timeout [ 1172.420401][T23626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.431203][T23626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.438773][T23626] bridge_slave_0: entered allmulticast mode [ 1172.446867][T23626] bridge_slave_0: entered promiscuous mode [ 1172.456905][T23626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.479670][T18048] Bluetooth: hci0: command tx timeout [ 1172.486761][T23626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.494765][T23626] bridge_slave_1: entered allmulticast mode [ 1172.504916][T23626] bridge_slave_1: entered promiscuous mode [ 1172.718032][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1172.720567][T19723] usb 6-1: USB disconnect, device number 12 [ 1172.794275][T19723] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1172.837222][T19723] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1172.860079][T23626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.911487][T19723] quatech2 6-1:0.51: device disconnected [ 1172.930365][T23626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.527266][T23626] team0: Port device team_slave_0 added [ 1173.571438][T23626] team0: Port device team_slave_1 added [ 1173.755016][T22974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.528607][T18048] Bluetooth: hci5: command tx timeout [ 1174.558723][T18048] Bluetooth: hci0: command tx timeout [ 1175.113192][T22974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.123436][T23626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.130810][T23626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.160766][T23626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.175514][T23626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.183472][T23626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.236174][T23626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.368535][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.376375][ T6591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.393172][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.400597][ T6591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.468638][ T5917] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1175.493775][T23836] chnl_net:caif_netlink_parms(): no params data found [ 1175.605080][T23626] hsr_slave_0: entered promiscuous mode [ 1175.631074][T23626] hsr_slave_1: entered promiscuous mode [ 1175.642987][ T5917] usb 10-1: Using ep0 maxpacket: 32 [ 1175.663750][T23626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1175.672160][T23626] Cannot create hsr debugfs directory [ 1175.682454][ T5917] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1175.706726][ T5917] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1175.737538][ T5917] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1175.755304][ T5917] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 1175.781782][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.800847][ T5917] usb 10-1: Product: syz [ 1175.805160][ T5917] usb 10-1: Manufacturer: syz [ 1175.832317][ T5917] usb 10-1: SerialNumber: syz [ 1175.850670][ T5917] usb 10-1: config 0 descriptor?? [ 1175.934364][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.177287][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.289322][ T5917] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1176.472394][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.568121][T18048] Bluetooth: hci5: command tx timeout [ 1176.601750][T23836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.620730][T23836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.635862][T23836] bridge_slave_0: entered allmulticast mode [ 1176.645561][T23836] bridge_slave_0: entered promiscuous mode [ 1176.742689][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1176.762145][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1176.774345][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1176.783385][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1176.792057][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1176.843010][T23836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.851674][T23836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.861125][T23836] bridge_slave_1: entered allmulticast mode [ 1176.872966][T23836] bridge_slave_1: entered promiscuous mode [ 1176.947311][T23836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.445643][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.452172][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.638664][T18048] Bluetooth: hci5: command tx timeout [ 1178.881957][T18048] Bluetooth: hci2: command tx timeout [ 1180.958595][T18048] Bluetooth: hci2: command tx timeout [ 1182.041155][T23836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.310230][T20800] usb 10-1: USB disconnect, device number 16 [ 1182.333076][T23836] team0: Port device team_slave_0 added [ 1182.352469][T23836] team0: Port device team_slave_1 added [ 1182.665244][ T30] audit: type=1326 audit(1755076926.883:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1182.691296][T23836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.698870][T23836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.742170][ T30] audit: type=1326 audit(1755076926.883:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1182.770224][T23836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.793961][T23836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.796801][ T30] audit: type=1326 audit(1755076926.923:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1182.821858][T23836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.830356][ T30] audit: type=1326 audit(1755076926.923:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1182.883388][ T30] audit: type=1326 audit(1755076926.923:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1182.911646][ T30] audit: type=1326 audit(1755076926.923:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1182.918960][T23836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.939162][ T30] audit: type=1326 audit(1755076926.923:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1182.977580][ T30] audit: type=1326 audit(1755076926.923:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1183.002919][ T30] audit: type=1326 audit(1755076926.923:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1183.030526][ T30] audit: type=1326 audit(1755076926.923:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24434 comm="syz.9.2936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30bcf8ebe9 code=0x7ffc0000 [ 1183.060028][T18048] Bluetooth: hci2: command tx timeout [ 1183.351172][T23836] hsr_slave_0: entered promiscuous mode [ 1183.362496][T23836] hsr_slave_1: entered promiscuous mode [ 1183.384743][T23836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1183.438386][T23836] Cannot create hsr debugfs directory [ 1183.681435][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.856988][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.987530][T22974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.140698][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.346006][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.120578][T18048] Bluetooth: hci2: command tx timeout [ 1185.196694][T24269] chnl_net:caif_netlink_parms(): no params data found [ 1185.345169][T23626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1185.428152][T23626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1185.527866][T23626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1185.647997][T23626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1185.821919][T24269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.844773][T24269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.865137][T24269] bridge_slave_0: entered allmulticast mode [ 1185.887288][T24269] bridge_slave_0: entered promiscuous mode [ 1185.903131][ T59] bridge_slave_1: left allmulticast mode [ 1185.917756][ T59] bridge_slave_1: left promiscuous mode [ 1185.924630][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.943396][ T59] bridge_slave_0: left allmulticast mode [ 1185.953578][ T59] bridge_slave_0: left promiscuous mode [ 1185.959809][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.976153][ T59] bridge_slave_1: left allmulticast mode [ 1185.998866][ T59] bridge_slave_1: left promiscuous mode [ 1186.005514][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.023371][ T59] bridge_slave_0: left allmulticast mode [ 1186.030571][ T59] bridge_slave_0: left promiscuous mode [ 1186.036518][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.079732][T19668] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1186.275569][T19668] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1186.297399][T19668] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.308530][T19668] usb 10-1: Product: syz [ 1186.312968][T19668] usb 10-1: Manufacturer: syz [ 1186.317779][T19668] usb 10-1: SerialNumber: syz [ 1186.334434][T19668] usb 10-1: config 0 descriptor?? [ 1186.591703][T24785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.612207][T24785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.629262][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2939'. [ 1186.922322][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.939992][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.963107][ T59] bond0 (unregistering): Released all slaves [ 1187.792791][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.817144][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.846110][ T59] bond0 (unregistering): Released all slaves [ 1187.949482][T24269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.988523][T24269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.020268][T24269] bridge_slave_1: entered allmulticast mode [ 1188.050152][T24269] bridge_slave_1: entered promiscuous mode [ 1188.223495][T24785] batadv0: entered promiscuous mode [ 1188.231469][T24785] macvtap1: entered promiscuous mode [ 1188.237319][T24785] macvtap1: entered allmulticast mode [ 1188.275063][T24785] batadv0: entered allmulticast mode [ 1188.283020][T24785] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1188.335288][T24810] batadv0: left allmulticast mode [ 1188.344543][T24810] batadv0: left promiscuous mode [ 1188.388166][T19668] cx82310_eth 10-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1188.423957][T19668] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1188.468802][T19668] usb 10-1: USB disconnect, device number 17 [ 1188.511761][T24269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.640474][T24269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.884640][T24269] team0: Port device team_slave_0 added [ 1188.913844][T22974] veth0_vlan: entered promiscuous mode [ 1189.008535][T24269] team0: Port device team_slave_1 added [ 1189.091496][T24269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.106180][T24269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.134010][T24269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.147101][T24269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.155541][T24269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.187703][T24269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.351735][T22974] veth1_vlan: entered promiscuous mode [ 1190.260361][T24269] hsr_slave_0: entered promiscuous mode [ 1190.266846][T24269] hsr_slave_1: entered promiscuous mode [ 1190.273480][T24269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1190.846006][T24269] Cannot create hsr debugfs directory [ 1191.127985][T23836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1191.147539][T23836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1191.170253][ T59] hsr_slave_0: left promiscuous mode [ 1191.178085][ T59] hsr_slave_1: left promiscuous mode [ 1191.193354][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1191.205702][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.224874][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.241255][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.256962][ T59] hsr_slave_0: left promiscuous mode [ 1191.263415][ T59] hsr_slave_1: left promiscuous mode [ 1191.269818][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1191.277331][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1191.297890][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1191.306827][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1191.574972][ T59] veth1_macvtap: left promiscuous mode [ 1191.581079][ T59] veth0_macvtap: left promiscuous mode [ 1191.587066][ T59] veth1_vlan: left promiscuous mode [ 1191.593029][ T59] veth0_vlan: left promiscuous mode [ 1191.627020][ T59] veth1_macvtap: left promiscuous mode [ 1191.633266][ T59] veth0_macvtap: left promiscuous mode [ 1191.641685][ T59] veth1_vlan: left promiscuous mode [ 1191.654701][ T59] veth0_vlan: left promiscuous mode [ 1193.176764][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1193.243391][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1193.957815][T25054] FAULT_INJECTION: forcing a failure. [ 1193.957815][T25054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.971293][T25054] CPU: 0 UID: 0 PID: 25054 Comm: syz.9.2946 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1193.971309][T25054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1193.971316][T25054] Call Trace: [ 1193.971321][T25054] [ 1193.971326][T25054] dump_stack_lvl+0x189/0x250 [ 1193.971343][T25054] ? __pfx____ratelimit+0x10/0x10 [ 1193.971354][T25054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.971366][T25054] ? __pfx__printk+0x10/0x10 [ 1193.971380][T25054] ? __might_fault+0xb0/0x130 [ 1193.971396][T25054] should_fail_ex+0x414/0x560 [ 1193.971411][T25054] _copy_from_user+0x2d/0xb0 [ 1193.971426][T25054] csum_and_copy_from_iter_full+0x4a1/0x1eb0 [ 1193.971462][T25054] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1193.971481][T25054] ? kmalloc_reserve+0xbd/0x290 [ 1193.971498][T25054] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1193.971509][T25054] ip_generic_getfrag+0x12f/0x2b0 [ 1193.971523][T25054] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1193.971536][T25054] ? skb_put+0x11b/0x210 [ 1193.971552][T25054] __ip_append_data+0x3240/0x40f0 [ 1193.971574][T25054] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1193.971596][T25054] ? __pfx___ip_append_data+0x10/0x10 [ 1193.971606][T25054] ? ipv4_mtu+0x4b2/0x5c0 [ 1193.971617][T25054] ? ip_setup_cork+0x577/0x9a0 [ 1193.971629][T25054] ip_make_skb+0x1de/0x3f0 [ 1193.971644][T25054] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1193.971655][T25054] ? __pfx_ip_make_skb+0x10/0x10 [ 1193.971676][T25054] udp_sendmsg+0x1936/0x2180 [ 1193.971698][T25054] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1193.971709][T25054] ? __pfx_udp_sendmsg+0x10/0x10 [ 1193.971741][T25054] ? css_rstat_updated+0x1a5/0xca0 [ 1193.971758][T25054] udpv6_sendmsg+0xbfc/0x24c0 [ 1193.971782][T25054] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1193.971800][T25054] ? __pfx___up_read+0x10/0x10 [ 1193.971814][T25054] ? smack_socket_sendmsg+0x1a7/0x520 [ 1193.971837][T25054] ? irqentry_exit+0x74/0x90 [ 1193.971852][T25054] ? inet_send_prepare+0x5c/0x270 [ 1193.971866][T25054] ? inet6_sendmsg+0xe4/0x120 [ 1193.971879][T25054] __sock_sendmsg+0xe5/0x270 [ 1193.971893][T25054] ____sys_sendmsg+0x52d/0x830 [ 1193.971912][T25054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1193.971932][T25054] ? import_iovec+0x74/0xa0 [ 1193.971948][T25054] ___sys_sendmsg+0x21f/0x2a0 [ 1193.971965][T25054] ? __pfx____sys_sendmsg+0x10/0x10 [ 1193.971999][T25054] ? __fget_files+0x2a/0x420 [ 1193.972011][T25054] ? __fget_files+0x3a0/0x420 [ 1193.972028][T25054] __sys_sendmmsg+0x227/0x430 [ 1193.972047][T25054] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1193.972061][T25054] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1193.972087][T25054] ? ksys_write+0x22a/0x250 [ 1193.972098][T25054] ? __pfx_ksys_write+0x10/0x10 [ 1193.972107][T25054] ? rcu_is_watching+0x15/0xb0 [ 1193.972121][T25054] __x64_sys_sendmmsg+0xa0/0xc0 [ 1193.972138][T25054] do_syscall_64+0xfa/0x3b0 [ 1193.972149][T25054] ? lockdep_hardirqs_on+0x9c/0x150 [ 1193.972160][T25054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.972170][T25054] ? clear_bhb_loop+0x60/0xb0 [ 1193.972182][T25054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.972192][T25054] RIP: 0033:0x7f30bcf8ebe9 [ 1193.972203][T25054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.972212][T25054] RSP: 002b:00007f30bdee4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1193.972224][T25054] RAX: ffffffffffffffda RBX: 00007f30bd1b5fa0 RCX: 00007f30bcf8ebe9 [ 1193.972232][T25054] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 1193.972239][T25054] RBP: 00007f30bdee4090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.972246][T25054] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000002 [ 1193.972252][T25054] R13: 00007f30bd1b6038 R14: 00007f30bd1b5fa0 R15: 00007ffd9495cff8 [ 1193.972268][T25054] [ 1195.446702][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1195.581646][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1196.759453][T23836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1196.778681][T23836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1196.994159][T22974] veth0_macvtap: entered promiscuous mode [ 1197.080387][T23626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.097641][T22974] veth1_macvtap: entered promiscuous mode [ 1197.218020][T22974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.241308][T23626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.329799][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.337093][ T6591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.377879][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.385161][ T6591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.414748][T22974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.527078][T22974] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.538461][T22974] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.547589][T22974] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.556964][T22974] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.682330][T23836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.773666][T23836] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.862137][T20954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.869517][T20954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.934770][ T4059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.942356][ T4059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.015792][T15220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.052812][T15220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.163048][T24269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1198.191489][ T4059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.217605][T24269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1198.229340][ T4059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.254349][T24269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1198.284865][T24269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1198.454244][T23626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.834267][T23626] veth0_vlan: entered promiscuous mode [ 1198.927252][T24269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.016267][T23626] veth1_vlan: entered promiscuous mode [ 1199.276147][T24269] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.309543][T23836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.350976][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.358314][ T6591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.656667][T25176] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2952'. [ 1199.672254][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2952'. [ 1199.689946][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.697138][ T6591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.736759][T23626] veth0_macvtap: entered promiscuous mode [ 1199.897443][T23626] veth1_macvtap: entered promiscuous mode [ 1200.224863][T25184] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2953'. [ 1200.866780][T23626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1200.940335][T23626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.020199][T23626] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.053356][T23626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.064334][T23626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.073765][T23626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.181103][T19853] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1201.326759][T20951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.341122][T20951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.378731][T19853] usb 10-1: Using ep0 maxpacket: 16 [ 1201.388899][T17354] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1201.407195][T19853] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1201.436230][T19853] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.455742][T14851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.465693][T19853] usb 10-1: Product: syz [ 1201.467871][T23836] veth0_vlan: entered promiscuous mode [ 1201.481459][T19853] usb 10-1: Manufacturer: syz [ 1201.482900][T14851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.495010][T19853] usb 10-1: SerialNumber: syz [ 1201.513961][T23836] veth1_vlan: entered promiscuous mode [ 1201.532481][T19853] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1201.549038][T19853] r8152-cfgselector 10-1: config 0 descriptor?? [ 1201.568475][T17354] usb 7-1: Using ep0 maxpacket: 16 [ 1201.590121][T17354] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1201.610121][T17354] usb 7-1: config 0 has no interface number 0 [ 1201.637790][T23836] veth0_macvtap: entered promiscuous mode [ 1201.651889][T17354] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1201.665556][T17354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.665630][T23836] veth1_macvtap: entered promiscuous mode [ 1201.675989][T17354] usb 7-1: Product: syz [ 1201.685257][T17354] usb 7-1: Manufacturer: syz [ 1201.691083][T17354] usb 7-1: SerialNumber: syz [ 1201.701978][T17354] usb 7-1: config 0 descriptor?? [ 1201.711449][T17354] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1201.785418][T23836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.833920][T23836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.887592][T23836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.928888][T23836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.948145][T23836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.961511][T17354] gspca_spca1528: reg_w err -71 [ 1201.978486][T19853] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1201.985356][T23836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.990432][T19853] r8152-cfgselector 10-1: bad CDC descriptors [ 1202.001282][T17354] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 1202.042818][T19853] r8152-cfgselector 10-1: USB disconnect, device number 18 [ 1202.063506][T24269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1202.087165][T17354] usb 7-1: USB disconnect, device number 2 [ 1202.267091][T25245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1202.309801][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1202.309819][ T30] audit: type=1400 audit(1755076946.533:284): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=25222 comm="syz.3.2918" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1202.395921][T24269] veth0_vlan: entered promiscuous mode [ 1202.470017][T20951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.533341][T20951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.626369][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.658634][T24269] veth1_vlan: entered promiscuous mode [ 1202.683518][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.849483][T24269] veth0_macvtap: entered promiscuous mode [ 1202.988344][T24269] veth1_macvtap: entered promiscuous mode [ 1203.604011][T24269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1203.619913][T24269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1203.707971][T24269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.721801][T25263] FAULT_INJECTION: forcing a failure. [ 1203.721801][T25263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1203.735422][T25263] CPU: 1 UID: 0 PID: 25263 Comm: syz.4.2691 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1203.735446][T25263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1203.735459][T25263] Call Trace: [ 1203.735467][T25263] [ 1203.735476][T25263] dump_stack_lvl+0x189/0x250 [ 1203.735504][T25263] ? __pfx____ratelimit+0x10/0x10 [ 1203.735527][T25263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1203.735550][T25263] ? __pfx__printk+0x10/0x10 [ 1203.735576][T25263] ? __might_fault+0xb0/0x130 [ 1203.735608][T25263] should_fail_ex+0x414/0x560 [ 1203.735636][T25263] _copy_from_user+0x2d/0xb0 [ 1203.735665][T25263] ___sys_sendmsg+0x158/0x2a0 [ 1203.735698][T25263] ? __pfx____sys_sendmsg+0x10/0x10 [ 1203.735822][T25263] ? __fget_files+0x2a/0x420 [ 1203.735845][T25263] ? __fget_files+0x3a0/0x420 [ 1203.735879][T25263] __x64_sys_sendmsg+0x19b/0x260 [ 1203.735912][T25263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1203.735952][T25263] ? __pfx_ksys_write+0x10/0x10 [ 1203.735967][T25263] ? rcu_is_watching+0x15/0xb0 [ 1203.735993][T25263] ? do_syscall_64+0xbe/0x3b0 [ 1203.736017][T25263] do_syscall_64+0xfa/0x3b0 [ 1203.736038][T25263] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.736059][T25263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.736079][T25263] ? clear_bhb_loop+0x60/0xb0 [ 1203.736104][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.736123][T25263] RIP: 0033:0x7f9bb638ebe9 [ 1203.736151][T25263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.736168][T25263] RSP: 002b:00007f9bb71df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.736190][T25263] RAX: ffffffffffffffda RBX: 00007f9bb65b5fa0 RCX: 00007f9bb638ebe9 [ 1203.736206][T25263] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 1203.736220][T25263] RBP: 00007f9bb71df090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.736233][T25263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.736245][T25263] R13: 00007f9bb65b6038 R14: 00007f9bb65b5fa0 R15: 00007ffeea72b8f8 [ 1203.736279][T25263] [ 1203.943531][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.979322][T24269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.988122][T24269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.996935][T24269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1204.367453][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1204.384822][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1204.569516][T24118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.308428][ T4059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.329895][ T4059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.683194][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.654596][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.730239][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.328791][T19668] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1207.478445][T19668] usb 7-1: device descriptor read/64, error -71 [ 1207.708405][T24118] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1207.718499][T19668] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1207.759398][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.878400][T19668] usb 7-1: device descriptor read/64, error -71 [ 1207.879064][T24118] usb 5-1: Using ep0 maxpacket: 8 [ 1207.922018][T24118] usb 5-1: config 148 has an invalid interface number: 144 but max is 0 [ 1207.940998][T24118] usb 5-1: config 148 has no interface number 0 [ 1207.947340][T24118] usb 5-1: config 148 interface 144 has no altsetting 0 [ 1207.970923][T24118] usb 5-1: New USB device found, idVendor=03f0, idProduct=311d, bcdDevice=4a.a4 [ 1207.988423][T24118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.996730][T24118] usb 5-1: Product: syz [ 1207.999262][T19668] usb usb7-port1: attempt power cycle [ 1208.008319][T24118] usb 5-1: Manufacturer: syz [ 1208.012965][T24118] usb 5-1: SerialNumber: syz [ 1208.144965][T25344] bridge0: port 3(gretap0) entered blocking state [ 1208.187113][T25344] bridge0: port 3(gretap0) entered disabled state [ 1208.234152][T25344] gretap0: entered allmulticast mode [ 1208.271386][T25344] gretap0: entered promiscuous mode [ 1208.298966][T25344] bridge0: port 3(gretap0) entered blocking state [ 1208.305757][T25344] bridge0: port 3(gretap0) entered forwarding state [ 1208.388395][T19668] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1208.439137][T19668] usb 7-1: device descriptor read/8, error -71 [ 1208.811976][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1208.848535][T19668] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1208.889712][T19668] usb 7-1: device descriptor read/8, error -71 [ 1208.977366][T24118] usb 5-1: USB disconnect, device number 103 [ 1209.034478][T19668] usb usb7-port1: unable to enumerate USB device [ 1209.440075][T19776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.451616][ T9507] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.460612][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.528376][T19668] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1209.611702][T25386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2974'. [ 1209.668410][T19668] usb 7-1: device descriptor read/64, error -71 [ 1209.888126][T24118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1209.923954][T19668] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1210.958919][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1211.136972][T25399] syz.2.2974: attempt to access beyond end of device [ 1211.136972][T25399] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1211.151074][T25399] syz.2.2974: attempt to access beyond end of device [ 1211.151074][T25399] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1211.164234][T25399] Mount JFS Failure: -5 [ 1211.298558][T19668] usb 7-1: device descriptor read/64, error -71 [ 1211.999876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.012423][T19668] usb usb7-port1: attempt power cycle [ 1212.637847][T19668] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1212.701312][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.717805][T20800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1212.878426][T19668] usb 7-1: device descriptor read/8, error -71 [ 1213.005225][T25408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2975'. [ 1213.061662][ T30] audit: type=1800 audit(1755076957.263:285): pid=25417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.9.2979" name="/udmabuf" dev="devtmpfs" ino=701 res=0 errno=0 [ 1213.248386][ T30] audit: type=1800 audit(1755076957.263:286): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.9.2979" name="/udmabuf" dev="devtmpfs" ino=701 res=0 errno=0 [ 1214.031576][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1214.437563][T25448] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.2982'. [ 1214.749339][T25448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2982'. [ 1215.038582][T24118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.759263][T19668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1215.901583][ T30] audit: type=1326 audit(1755076960.123:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25414 comm="syz.2.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19c38ebe9 code=0x7ffc0000 [ 1216.002604][ T30] audit: type=1326 audit(1755076960.123:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25414 comm="syz.2.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fc19c38ebe9 code=0x7ffc0000 [ 1216.139333][T24118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.189921][ T30] audit: type=1326 audit(1755076960.203:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25414 comm="syz.2.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19c38ebe9 code=0x7ffc0000 [ 1216.391593][T25474] bridge0: port 3(gretap0) entered blocking state [ 1216.649891][ T30] audit: type=1326 audit(1755076960.203:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25414 comm="syz.2.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19c38ebe9 code=0x7ffc0000 [ 1216.684408][ T30] audit: type=1326 audit(1755076960.223:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25414 comm="syz.2.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc19c38ebe9 code=0x7ffc0000 [ 1216.711536][T25474] bridge0: port 3(gretap0) entered disabled state [ 1216.870612][ T30] audit: type=1326 audit(1755076960.223:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25414 comm="syz.2.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19c38ebe9 code=0x7ffc0000 [ 1216.948510][ T30] audit: type=1326 audit(1755076960.223:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25414 comm="syz.2.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19c38ebe9 code=0x7ffc0000 [ 1216.977810][T25474] gretap0: entered allmulticast mode [ 1216.987619][T25474] gretap0: entered promiscuous mode [ 1217.042730][ T30] audit: type=1326 audit(1755076960.223:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25414 comm="syz.2.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc19c38ebe9 code=0x7ffc0000 [ 1217.198839][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1217.383274][T25489] syz_tun: entered allmulticast mode [ 1217.402431][T25489] FAULT_INJECTION: forcing a failure. [ 1217.402431][T25489] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.468854][T25489] CPU: 0 UID: 0 PID: 25489 Comm: syz.6.2988 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1217.468881][T25489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1217.468892][T25489] Call Trace: [ 1217.468900][T25489] [ 1217.468908][T25489] dump_stack_lvl+0x189/0x250 [ 1217.468936][T25489] ? __pfx____ratelimit+0x10/0x10 [ 1217.468957][T25489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1217.468975][T25489] ? __pfx__printk+0x10/0x10 [ 1217.469011][T25489] should_fail_ex+0x414/0x560 [ 1217.469035][T25489] should_failslab+0xa8/0x100 [ 1217.469088][T25489] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1217.469107][T25489] ? skb_clone+0x212/0x3a0 [ 1217.469132][T25489] skb_clone+0x212/0x3a0 [ 1217.469149][T25489] ? ip_mc_output+0x1de/0x590 [ 1217.469171][T25489] ip_mc_output+0x1eb/0x590 [ 1217.469193][T25489] ? ipmr_queue_xmit+0x1460/0x16f0 [ 1217.469213][T25489] ipmr_queue_xmit+0xf12/0x16f0 [ 1217.469249][T25489] ? __pfx_ipmr_queue_xmit+0x10/0x10 [ 1217.469272][T25489] ? __pfx_ipmr_forward_finish+0x10/0x10 [ 1217.469311][T25489] ipmr_mfc_add+0x1f63/0x2850 [ 1217.469345][T25489] ? ipmr_mfc_add+0x11b/0x2850 [ 1217.469385][T25489] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 1217.469412][T25489] ? __might_fault+0xb0/0x130 [ 1217.469459][T25489] ip_mroute_setsockopt+0xcf1/0xf60 [ 1217.469494][T25489] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 1217.469533][T25489] ? vfs_write+0x8d8/0xa90 [ 1217.469560][T25489] do_ip_setsockopt+0xf11/0x2d00 [ 1217.469591][T25489] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1217.469636][T25489] ? __fget_files+0x2a/0x420 [ 1217.469664][T25489] ip_setsockopt+0x66/0x110 [ 1217.469683][T25489] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1217.469710][T25489] do_sock_setsockopt+0x179/0x1b0 [ 1217.469745][T25489] __x64_sys_setsockopt+0x13f/0x1b0 [ 1217.469777][T25489] do_syscall_64+0xfa/0x3b0 [ 1217.469797][T25489] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.469817][T25489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.469836][T25489] ? clear_bhb_loop+0x60/0xb0 [ 1217.469864][T25489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.469884][T25489] RIP: 0033:0x7f924778ebe9 [ 1217.469901][T25489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.469919][T25489] RSP: 002b:00007f924861a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1217.469940][T25489] RAX: ffffffffffffffda RBX: 00007f92479b5fa0 RCX: 00007f924778ebe9 [ 1217.469955][T25489] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000003 [ 1217.469967][T25489] RBP: 00007f924861a090 R08: 000000000000003c R09: 0000000000000000 [ 1217.469979][T25489] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1217.469993][T25489] R13: 00007f92479b6038 R14: 00007f92479b5fa0 R15: 00007ffe6e0cf7f8 [ 1217.470026][T25489] [ 1217.474635][T25488] syz_tun: left allmulticast mode [ 1218.238730][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.798491][T19776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.042382][T19668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.322379][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.690486][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.938655][T19668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1220.309881][T25523] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2993'. [ 1220.414493][T24118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1221.449374][T25534] netlink: 'syz.9.2994': attribute type 10 has an invalid length. [ 1221.585273][T25534] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2994'. [ 1221.676643][T24118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.031031][T25534] batadv0: entered promiscuous mode [ 1222.200313][T25541] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1222.577887][T25534] batadv0: entered allmulticast mode [ 1222.621984][T25534] bridge0: port 4(batadv0) entered blocking state [ 1222.643594][T25534] bridge0: port 4(batadv0) entered disabled state [ 1222.731638][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.807720][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1222.821950][T25534] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1222.956864][T19668] kernel write not supported for file bpf-prog (pid: 19668 comm: kworker/0:2) [ 1223.045564][T25546] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1224.219100][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.342811][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.500712][T25592] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3004'. [ 1224.529175][T17354] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1224.551334][T25592] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1224.572986][T25598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3005'. [ 1224.578565][T25592] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1224.920109][T19668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1224.933390][T20800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.636695][T17354] usb 7-1: Using ep0 maxpacket: 8 [ 1225.646944][T17354] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1225.657276][T17354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.665749][T17354] usb 7-1: Product: syz [ 1225.677800][T25607] syz.3.3005: attempt to access beyond end of device [ 1225.677800][T25607] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1225.687518][T25596] ipvlan2: entered promiscuous mode [ 1225.691004][T25607] syz.3.3005: attempt to access beyond end of device [ 1225.691004][T25607] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1225.709304][T25607] Mount JFS Failure: -5 [ 1225.813109][T14937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.895172][T17354] usb 7-1: Manufacturer: syz [ 1225.900276][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1225.900294][ T30] audit: type=1400 audit(1755076970.053:306): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=25601 comm="syz.4.3006" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1225.925845][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.946134][T17354] usb 7-1: SerialNumber: syz [ 1225.968819][T17354] usb 7-1: config 0 descriptor?? [ 1226.046343][T25606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3006'. [ 1226.234763][T17354] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1227.419727][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1227.848662][T17354] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1227.864564][T17354] usb 7-1: USB disconnect, device number 11 [ 1228.001241][T19668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.020835][T25631] netlink: 312 bytes leftover after parsing attributes in process `syz.9.3007'. [ 1228.326181][T25643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'. [ 1228.474626][T25646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1228.493224][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.649470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1228.962580][T25666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3016'. [ 1228.990917][T25668] overlay: Unknown parameter 'fsname' [ 1229.386972][T25672] syz.6.3016: attempt to access beyond end of device [ 1229.386972][T25672] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1229.401284][T25672] syz.6.3016: attempt to access beyond end of device [ 1229.401284][T25672] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1229.414692][T25672] Mount JFS Failure: -5 [ 1229.966818][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.235938][T25682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 1231.091100][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.294976][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1231.305004][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1231.319084][ T30] audit: type=1400 audit(1755076975.533:307): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=25677 comm="syz.3.3019" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1231.880757][T25692] block device autoloading is deprecated and will be removed. [ 1231.890250][T25692] syz.6.3020: attempt to access beyond end of device [ 1231.890250][T25692] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1231.917170][T25697] syz.2.3018: attempt to access beyond end of device [ 1231.917170][T25697] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1231.930871][T25697] syz.2.3018: attempt to access beyond end of device [ 1231.930871][T25697] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1231.943982][T25697] Mount JFS Failure: -5 [ 1232.164548][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1232.823735][T25718] FAULT_INJECTION: forcing a failure. [ 1232.823735][T25718] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.855099][T25718] CPU: 1 UID: 0 PID: 25718 Comm: syz.9.3024 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1232.855128][T25718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1232.855141][T25718] Call Trace: [ 1232.855150][T25718] [ 1232.855159][T25718] dump_stack_lvl+0x189/0x250 [ 1232.855187][T25718] ? __pfx____ratelimit+0x10/0x10 [ 1232.855209][T25718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1232.855231][T25718] ? __pfx__printk+0x10/0x10 [ 1232.855262][T25718] ? __pfx___might_resched+0x10/0x10 [ 1232.855290][T25718] should_fail_ex+0x414/0x560 [ 1232.855322][T25718] should_failslab+0xa8/0x100 [ 1232.855347][T25718] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1232.855368][T25718] ? __alloc_skb+0x112/0x2d0 [ 1232.855400][T25718] __alloc_skb+0x112/0x2d0 [ 1232.855431][T25718] netlink_sendmsg+0x5c6/0xb30 [ 1232.855470][T25718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.855507][T25718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1232.855526][T25718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.855554][T25718] __sock_sendmsg+0x21c/0x270 [ 1232.855581][T25718] ____sys_sendmsg+0x505/0x830 [ 1232.855618][T25718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1232.855657][T25718] ? import_iovec+0x74/0xa0 [ 1232.855688][T25718] ___sys_sendmsg+0x21f/0x2a0 [ 1232.855720][T25718] ? __pfx____sys_sendmsg+0x10/0x10 [ 1232.855788][T25718] ? __fget_files+0x2a/0x420 [ 1232.855809][T25718] ? __fget_files+0x3a0/0x420 [ 1232.855842][T25718] __x64_sys_sendmsg+0x19b/0x260 [ 1232.855874][T25718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1232.855915][T25718] ? __pfx_ksys_write+0x10/0x10 [ 1232.855931][T25718] ? rcu_is_watching+0x15/0xb0 [ 1232.855959][T25718] ? do_syscall_64+0xbe/0x3b0 [ 1232.855985][T25718] do_syscall_64+0xfa/0x3b0 [ 1232.856006][T25718] ? lockdep_hardirqs_on+0x9c/0x150 [ 1232.856027][T25718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.856051][T25718] ? clear_bhb_loop+0x60/0xb0 [ 1232.856075][T25718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.856095][T25718] RIP: 0033:0x7f30bcf8ebe9 [ 1232.856112][T25718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.856131][T25718] RSP: 002b:00007f30bdee4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1232.856153][T25718] RAX: ffffffffffffffda RBX: 00007f30bd1b5fa0 RCX: 00007f30bcf8ebe9 [ 1232.856168][T25718] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1232.856182][T25718] RBP: 00007f30bdee4090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.856195][T25718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.856207][T25718] R13: 00007f30bd1b6038 R14: 00007f30bd1b5fa0 R15: 00007ffd9495cff8 [ 1232.856241][T25718] [ 1233.318339][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1233.535498][T25724] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3026'. [ 1233.587556][T25724] unsupported nlmsg_type 40 [ 1233.917367][T25728] netlink: 200 bytes leftover after parsing attributes in process `syz.9.3028'. [ 1234.318825][T20800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1235.039043][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.424377][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.440048][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1237.448476][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.899395][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.905838][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.908672][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1239.362783][T25769] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3032'. [ 1239.389288][ T30] audit: type=1400 audit(1755076983.603:308): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=25757 comm="syz.9.3032" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1239.918707][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.202375][T25780] ubi: mtd0 is already attached to ubi31 [ 1240.770250][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1240.801137][T25786] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3037'. [ 1240.971232][ T30] audit: type=1326 audit(1755076985.193:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25785 comm="syz.9.3037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30bcf8ebe9 code=0x0 [ 1241.001917][T25794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3038'. [ 1241.026825][T25796] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3037'. [ 1241.049035][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1241.057371][T25794] netlink: 'syz.6.3038': attribute type 7 has an invalid length. [ 1241.065964][T25794] netlink: 'syz.6.3038': attribute type 8 has an invalid length. [ 1241.074210][T25794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3038'. [ 1241.167999][T25793] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1242.140046][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1243.050904][T25840] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3045'. [ 1243.667301][T25851] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3047'. [ 1243.713197][T25852] syz.6.3045: attempt to access beyond end of device [ 1243.713197][T25852] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1243.726880][T25852] syz.6.3045: attempt to access beyond end of device [ 1243.726880][T25852] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1243.742419][T25852] Mount JFS Failure: -5 [ 1243.755703][T25849] tmpfs: Bad value for 'mpol' [ 1243.839251][T19776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.688662][T19776] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1244.738233][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.749890][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1244.988564][T25630] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1245.059049][T19776] usb 7-1: Using ep0 maxpacket: 32 [ 1245.066500][T19776] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1245.090073][T19776] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1245.116127][T19776] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1245.145522][T19776] usb 7-1: Product: syz [ 1245.165583][T19776] usb 7-1: Manufacturer: syz [ 1245.184233][T19776] usb 7-1: SerialNumber: syz [ 1245.199685][T19776] usb 7-1: config 0 descriptor?? [ 1245.218057][T25867] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1245.253387][T19776] hub 7-1:0.0: bad descriptor, ignoring hub [ 1245.258852][T25630] usb 3-1: Using ep0 maxpacket: 32 [ 1245.272908][T19776] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1245.435247][T25630] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 1245.562799][T25630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.730771][T25630] usb 3-1: Product: syz [ 1245.735010][T25630] usb 3-1: Manufacturer: syz [ 1245.784132][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1245.793325][ T24] usb 7-1: USB disconnect, device number 12 [ 1245.839017][T25630] usb 3-1: SerialNumber: syz [ 1245.904094][T25630] usb 3-1: config 0 descriptor?? [ 1246.054204][T25630] empeg 3-1:0.0: empeg converter detected [ 1246.063704][ T49] tipc: Subscription rejected, illegal request [ 1246.186794][T25630] usb 3-1: active config #0 != 1 ?? [ 1246.236939][T25630] usb 3-1: USB disconnect, device number 85 [ 1246.403596][T25925] FAULT_INJECTION: forcing a failure. [ 1246.403596][T25925] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.466093][T25925] CPU: 0 UID: 0 PID: 25925 Comm: syz.9.3057 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1246.466126][T25925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1246.466140][T25925] Call Trace: [ 1246.466149][T25925] [ 1246.466158][T25925] dump_stack_lvl+0x189/0x250 [ 1246.466185][T25925] ? __pfx____ratelimit+0x10/0x10 [ 1246.466208][T25925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1246.466230][T25925] ? __pfx__printk+0x10/0x10 [ 1246.466259][T25925] ? __pfx___might_resched+0x10/0x10 [ 1246.466282][T25925] ? fs_reclaim_acquire+0x7d/0x100 [ 1246.466311][T25925] should_fail_ex+0x414/0x560 [ 1246.466338][T25925] should_failslab+0xa8/0x100 [ 1246.466363][T25925] __kmalloc_noprof+0xcb/0x4f0 [ 1246.466382][T25925] ? tomoyo_encode+0x28b/0x550 [ 1246.466412][T25925] tomoyo_encode+0x28b/0x550 [ 1246.466443][T25925] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1246.466485][T25925] tomoyo_path2_perm+0x288/0x680 [ 1246.466507][T25925] ? tomoyo_path2_perm+0x235/0x680 [ 1246.466532][T25925] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1246.466553][T25925] ? __pfx_mntput_no_expire+0x10/0x10 [ 1246.466635][T25925] tomoyo_path_rename+0x141/0x190 [ 1246.466667][T25925] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1246.466703][T25925] ? kernfs_dop_revalidate+0x3fc/0x5d0 [ 1246.466733][T25925] security_path_rename+0x250/0x490 [ 1246.466768][T25925] do_renameat2+0x64d/0xc50 [ 1246.466812][T25925] ? __pfx_do_renameat2+0x10/0x10 [ 1246.466852][T25925] ? getname_flags+0x1e5/0x540 [ 1246.466881][T25925] __x64_sys_renameat+0xb8/0xd0 [ 1246.466905][T25925] do_syscall_64+0xfa/0x3b0 [ 1246.466926][T25925] ? lockdep_hardirqs_on+0x9c/0x150 [ 1246.466953][T25925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.466973][T25925] ? clear_bhb_loop+0x60/0xb0 [ 1246.466997][T25925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.467016][T25925] RIP: 0033:0x7f30bcf8ebe9 [ 1246.467033][T25925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.467050][T25925] RSP: 002b:00007f30bdee4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 1246.467071][T25925] RAX: ffffffffffffffda RBX: 00007f30bd1b5fa0 RCX: 00007f30bcf8ebe9 [ 1246.467086][T25925] RDX: 0000000000000003 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1246.467099][T25925] RBP: 00007f30bdee4090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.467112][T25925] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1246.467124][T25925] R13: 00007f30bd1b6038 R14: 00007f30bd1b5fa0 R15: 00007ffd9495cff8 [ 1246.467157][T25925] [ 1246.634513][T25925] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1247.594468][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1247.724936][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1248.834233][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1249.150752][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'. [ 1249.198179][ T30] audit: type=1400 audit(1755076993.413:310): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=25951 comm="syz.4.3062" path="/dev/dri/card1" dev="devtmpfs" ino=628 [ 1249.836771][T25958] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3061'. [ 1249.890804][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1250.147131][T25967] syz.6.3061: attempt to access beyond end of device [ 1250.147131][T25967] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1250.161150][T25967] syz.6.3061: attempt to access beyond end of device [ 1250.161150][T25967] nbd6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1250.174389][T25967] Mount JFS Failure: -5 [ 1250.746411][T20800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.343539][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1251.935555][T25994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1252.765712][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.900051][T25995] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3070'. [ 1252.972928][T26006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1252.983537][T26006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.011696][T26006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.068185][T26006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.151995][T26006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1253.179739][T25995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1254.349624][T26019] bridge1: entered allmulticast mode [ 1254.444590][ T49] Bluetooth: hci6: Frame reassembly failed (-84) [ 1254.692548][T26035] FAULT_INJECTION: forcing a failure. [ 1254.692548][T26035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1254.694313][T26035] [ 1254.694322][T26035] ====================================================== [ 1254.694327][T26035] WARNING: possible circular locking dependency detected [ 1254.694336][T26035] 6.16.0-syzkaller #0 Not tainted [ 1254.694342][T26035] ------------------------------------------------------ [ 1254.694346][T26035] syz.9.3075/26035 is trying to acquire lock: [ 1254.694352][T26035] ffffffff8e133300 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 1254.694390][T26035] [ 1254.694390][T26035] but task is already holding lock: [ 1254.694394][T26035] ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1254.694416][T26035] [ 1254.694416][T26035] which lock already depends on the new lock. [ 1254.694416][T26035] [ 1254.694420][T26035] [ 1254.694420][T26035] the existing dependency chain (in reverse order) is: [ 1254.694424][T26035] [ 1254.694424][T26035] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1254.694438][T26035] lock_acquire+0x120/0x360 [ 1254.694447][T26035] _raw_spin_lock_nested+0x32/0x50 [ 1254.694457][T26035] raw_spin_rq_lock_nested+0x2a/0x140 [ 1254.694466][T26035] task_rq_lock+0xbc/0x470 [ 1254.694475][T26035] cgroup_move_task+0x9a/0x590 [ 1254.694486][T26035] css_set_move_task+0x658/0x9e0 [ 1254.694498][T26035] cgroup_post_fork+0x1ef/0x790 [ 1254.694509][T26035] copy_process+0x37e6/0x3b80 [ 1254.694519][T26035] kernel_clone+0x224/0x7f0 [ 1254.694530][T26035] user_mode_thread+0xdd/0x140 [ 1254.694541][T26035] rest_init+0x23/0x300 [ 1254.694552][T26035] start_kernel+0x47d/0x500 [ 1254.694564][T26035] x86_64_start_reservations+0x24/0x30 [ 1254.694577][T26035] x86_64_start_kernel+0x143/0x1c0 [ 1254.694590][T26035] common_startup_64+0x13e/0x147 [ 1254.694603][T26035] [ 1254.694603][T26035] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1254.694615][T26035] lock_acquire+0x120/0x360 [ 1254.694623][T26035] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1254.694637][T26035] try_to_wake_up+0x6e/0x1290 [ 1254.694649][T26035] __wake_up_common_lock+0x137/0x1f0 [ 1254.694663][T26035] tty_port_default_wakeup+0xa2/0xf0 [ 1254.694679][T26035] serial8250_tx_chars+0x72e/0x970 [ 1254.694692][T26035] serial8250_handle_irq+0x633/0xbb0 [ 1254.694704][T26035] serial8250_default_handle_irq+0xbf/0x1b0 [ 1254.694713][T26035] serial8250_interrupt+0xa2/0x1d0 [ 1254.694723][T26035] __handle_irq_event_percpu+0x289/0x980 [ 1254.694736][T26035] handle_irq_event+0x8b/0x1e0 [ 1254.694747][T26035] handle_edge_irq+0x267/0x9c0 [ 1254.694757][T26035] __common_interrupt+0x140/0x250 [ 1254.694771][T26035] common_interrupt+0xb6/0xe0 [ 1254.694784][T26035] asm_common_interrupt+0x26/0x40 [ 1254.694793][T26035] pv_native_safe_halt+0x13/0x20 [ 1254.694801][T26035] default_idle+0x13/0x20 [ 1254.694812][T26035] default_idle_call+0x74/0xb0 [ 1254.694823][T26035] do_idle+0x1e8/0x510 [ 1254.694832][T26035] cpu_startup_entry+0x44/0x60 [ 1254.694842][T26035] rest_init+0x2de/0x300 [ 1254.694853][T26035] start_kernel+0x47d/0x500 [ 1254.694863][T26035] x86_64_start_reservations+0x24/0x30 [ 1254.694875][T26035] x86_64_start_kernel+0x143/0x1c0 [ 1254.694889][T26035] common_startup_64+0x13e/0x147 [ 1254.694901][T26035] [ 1254.694901][T26035] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1254.694917][T26035] lock_acquire+0x120/0x360 [ 1254.694925][T26035] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1254.694941][T26035] __wake_up_common_lock+0x2f/0x1f0 [ 1254.694953][T26035] tty_port_default_wakeup+0xa2/0xf0 [ 1254.694968][T26035] serial8250_tx_chars+0x72e/0x970 [ 1254.694980][T26035] serial8250_handle_irq+0x633/0xbb0 [ 1254.694995][T26035] serial8250_default_handle_irq+0xbf/0x1b0 [ 1254.695004][T26035] serial8250_interrupt+0xa2/0x1d0 [ 1254.695014][T26035] __handle_irq_event_percpu+0x289/0x980 [ 1254.695026][T26035] handle_irq_event+0x8b/0x1e0 [ 1254.695038][T26035] handle_edge_irq+0x267/0x9c0 [ 1254.695048][T26035] __common_interrupt+0x140/0x250 [ 1254.695061][T26035] common_interrupt+0xb6/0xe0 [ 1254.695074][T26035] asm_common_interrupt+0x26/0x40 [ 1254.695083][T26035] pv_native_safe_halt+0x13/0x20 [ 1254.695092][T26035] default_idle+0x13/0x20 [ 1254.695102][T26035] default_idle_call+0x74/0xb0 [ 1254.695118][T26035] do_idle+0x1e8/0x510 [ 1254.695127][T26035] cpu_startup_entry+0x44/0x60 [ 1254.695137][T26035] rest_init+0x2de/0x300 [ 1254.695148][T26035] start_kernel+0x47d/0x500 [ 1254.695158][T26035] x86_64_start_reservations+0x24/0x30 [ 1254.695171][T26035] x86_64_start_kernel+0x143/0x1c0 [ 1254.695183][T26035] common_startup_64+0x13e/0x147 [ 1254.695196][T26035] [ 1254.695196][T26035] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1254.695209][T26035] lock_acquire+0x120/0x360 [ 1254.695217][T26035] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1254.695231][T26035] serial8250_console_write+0x17e/0x1ba0 [ 1254.695248][T26035] console_flush_all+0x728/0xc40 [ 1254.695259][T26035] console_unlock+0xc4/0x270 [ 1254.695269][T26035] vprintk_emit+0x5b7/0x7a0 [ 1254.695279][T26035] _printk+0xcf/0x120 [ 1254.695290][T26035] register_console+0xa8b/0xf90 [ 1254.695302][T26035] univ8250_console_init+0x52/0x90 [ 1254.695315][T26035] console_init+0x1a1/0x670 [ 1254.695327][T26035] start_kernel+0x2cc/0x500 [ 1254.695336][T26035] x86_64_start_reservations+0x24/0x30 [ 1254.695349][T26035] x86_64_start_kernel+0x143/0x1c0 [ 1254.695362][T26035] common_startup_64+0x13e/0x147 [ 1254.695374][T26035] [ 1254.695374][T26035] -> #0 (console_owner){-.-.}-{0:0}: [ 1254.695386][T26035] validate_chain+0xb9b/0x2140 [ 1254.695396][T26035] __lock_acquire+0xab9/0xd20 [ 1254.695404][T26035] lock_acquire+0x120/0x360 [ 1254.695411][T26035] console_flush_all+0x6d2/0xc40 [ 1254.695423][T26035] console_unlock+0xc4/0x270 [ 1254.695433][T26035] vprintk_emit+0x5b7/0x7a0 [ 1254.695442][T26035] _printk+0xcf/0x120 [ 1254.695453][T26035] should_fail_ex+0x3f5/0x560 [ 1254.695461][T26035] strncpy_from_user+0x36/0x290 [ 1254.695475][T26035] strncpy_from_user_nofault+0x72/0x150 [ 1254.695486][T26035] bpf_probe_read_compat_str+0xe2/0x180 [ 1254.695496][T26035] bpf_prog_56079403e473c493+0x70/0x76 [ 1254.695504][T26035] bpf_trace_run2+0x284/0x4b0 [ 1254.695516][T26035] __bpf_trace_tlb_flush+0xf5/0x150 [ 1254.695525][T26035] trace_tlb_flush+0x115/0x140 [ 1254.695536][T26035] switch_mm_irqs_off+0x53e/0x7a0 [ 1254.695547][T26035] __schedule+0x1078/0x4c90 [ 1254.695555][T26035] preempt_schedule_irq+0xb5/0x150 [ 1254.695564][T26035] irqentry_exit+0x6f/0x90 [ 1254.695572][T26035] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1254.695582][T26035] irqentry_exit_to_user_mode+0x51/0x120 [ 1254.695592][T26035] asm_sysvec_call_function_single+0x1a/0x20 [ 1254.695601][T26035] [ 1254.695601][T26035] other info that might help us debug this: [ 1254.695601][T26035] [ 1254.695605][T26035] Chain exists of: [ 1254.695605][T26035] console_owner --> &p->pi_lock --> &rq->__lock [ 1254.695605][T26035] [ 1254.695620][T26035] Possible unsafe locking scenario: [ 1254.695620][T26035] [ 1254.695624][T26035] CPU0 CPU1 [ 1254.695627][T26035] ---- ---- [ 1254.695631][T26035] lock(&rq->__lock); [ 1254.695637][T26035] lock(&p->pi_lock); [ 1254.695644][T26035] lock(&rq->__lock); [ 1254.695651][T26035] lock(console_owner); [ 1254.695657][T26035] [ 1254.695657][T26035] *** DEADLOCK *** [ 1254.695657][T26035] [ 1254.695660][T26035] 4 locks held by syz.9.3075/26035: [ 1254.695666][T26035] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1254.695689][T26035] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 1254.695714][T26035] #2: ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 1254.695738][T26035] #3: ffffffff8e01ac30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 1254.695763][T26035] [ 1254.695763][T26035] stack backtrace: [ 1254.695770][T26035] CPU: 0 UID: 0 PID: 26035 Comm: syz.9.3075 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1254.695782][T26035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1254.695789][T26035] Call Trace: [ 1254.695793][T26035] [ 1254.695798][T26035] dump_stack_lvl+0x189/0x250 [ 1254.695811][T26035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1254.695821][T26035] ? __pfx__printk+0x10/0x10 [ 1254.695834][T26035] ? print_lock_name+0xde/0x100 [ 1254.695846][T26035] print_circular_bug+0x2ee/0x310 [ 1254.695859][T26035] check_noncircular+0x134/0x160 [ 1254.695871][T26035] validate_chain+0xb9b/0x2140 [ 1254.695887][T26035] __lock_acquire+0xab9/0xd20 [ 1254.695897][T26035] ? console_flush_all+0x13a/0xc40 [ 1254.695909][T26035] lock_acquire+0x120/0x360 [ 1254.695917][T26035] ? console_flush_all+0x13a/0xc40 [ 1254.695931][T26035] ? do_raw_spin_unlock+0x122/0x240 [ 1254.695943][T26035] ? console_flush_all+0x13a/0xc40 [ 1254.695956][T26035] console_flush_all+0x6d2/0xc40 [ 1254.695968][T26035] ? console_flush_all+0x13a/0xc40 [ 1254.695981][T26035] ? console_flush_all+0x13a/0xc40 [ 1254.695994][T26035] ? __pfx_console_flush_all+0x10/0x10 [ 1254.696009][T26035] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1254.696024][T26035] console_unlock+0xc4/0x270 [ 1254.696035][T26035] ? __pfx_console_unlock+0x10/0x10 [ 1254.696047][T26035] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1254.696061][T26035] vprintk_emit+0x5b7/0x7a0 [ 1254.696073][T26035] ? __pfx_vprintk_emit+0x10/0x10 [ 1254.696084][T26035] ? trace_event_buffer_commit+0x264/0x7f0 [ 1254.696099][T26035] _printk+0xcf/0x120 [ 1254.696115][T26035] ? __pfx____ratelimit+0x10/0x10 [ 1254.696126][T26035] ? __pfx__printk+0x10/0x10 [ 1254.696138][T26035] ? rcu_is_watching+0x15/0xb0 [ 1254.696149][T26035] ? bpf_bprintf_cleanup+0x9f/0xd0 [ 1254.696163][T26035] should_fail_ex+0x3f5/0x560 [ 1254.696174][T26035] strncpy_from_user+0x36/0x290 [ 1254.696190][T26035] strncpy_from_user_nofault+0x72/0x150 [ 1254.696200][T26035] bpf_probe_read_compat_str+0xe2/0x180 [ 1254.696211][T26035] bpf_prog_56079403e473c493+0x70/0x76 [ 1254.696220][T26035] ? bpf_trace_run2+0x186/0x4b0 [ 1254.696233][T26035] ? __pfx___cant_migrate+0x10/0x10 [ 1254.696246][T26035] bpf_trace_run2+0x284/0x4b0 [ 1254.696259][T26035] ? bpf_trace_run2+0x186/0x4b0 [ 1254.696272][T26035] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1254.696285][T26035] ? kvm_sched_clock_read+0x11/0x20 [ 1254.696294][T26035] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 1254.696305][T26035] __bpf_trace_tlb_flush+0xf5/0x150 [ 1254.696315][T26035] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 1254.696327][T26035] ? psi_group_change+0xbc7/0x1210 [ 1254.696338][T26035] ? rcu_read_lock_sched_held+0x89/0x100 [ 1254.696350][T26035] trace_tlb_flush+0x115/0x140 [ 1254.696363][T26035] switch_mm_irqs_off+0x53e/0x7a0 [ 1254.696376][T26035] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 1254.696388][T26035] ? psi_task_switch+0x318/0x6d0 [ 1254.696400][T26035] __schedule+0x1078/0x4c90 [ 1254.696413][T26035] ? preempt_schedule_irq+0xb5/0x150 [ 1254.696422][T26035] ? __resched_curr+0x2ca/0x3d0 [ 1254.696433][T26035] ? __pfx___schedule+0x10/0x10 [ 1254.696443][T26035] ? do_raw_spin_unlock+0x122/0x240 [ 1254.696457][T26035] ? preempt_schedule_irq+0xaa/0x150 [ 1254.696468][T26035] preempt_schedule_irq+0xb5/0x150 [ 1254.696477][T26035] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1254.696489][T26035] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1254.696500][T26035] irqentry_exit+0x6f/0x90 [ 1254.696510][T26035] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1254.696520][T26035] RIP: 0010:irqentry_exit_to_user_mode+0x51/0x120 [ 1254.696532][T26035] Code: 07 85 c0 0f 85 c3 00 00 00 e8 1b 7e 44 f6 65 4c 8b 34 25 08 90 9c 92 49 8b 3e f7 c7 1e 30 02 00 74 53 49 89 ff e8 0f 7d 44 f6 <4c> 89 f8 a8 18 74 08 e8 a3 19 01 00 4c 89 f8 a9 00 10 00 00 74 0b [ 1254.696542][T26035] RSP: 0000:ffffc90015cf7f38 EFLAGS: 00000286 [ 1254.696550][T26035] RAX: 085bacec015df400 RBX: ffffc90015cf7f58 RCX: 085bacec015df400 [ 1254.696559][T26035] RDX: 0000000000000000 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 1254.696566][T26035] RBP: 0000000000000000 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 1254.696573][T26035] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 0000000000000000 [ 1254.696580][T26035] R13: 0000000000000000 R14: ffff88801c703c00 R15: 0000000000000008 [ 1254.696590][T26035] ? irqentry_exit_to_user_mode+0x51/0x120 [ 1254.696601][T26035] asm_sysvec_call_function_single+0x1a/0x20 [ 1254.696611][T26035] RIP: 0033:0x7f30bcf6772e [ 1254.696619][T26035] Code: Unable to access opcode bytes at 0x7f30bcf67704. [ 1254.696625][T26035] RSP: 002b:00007f30bdec3058 EFLAGS: 00000206 [ 1254.696633][T26035] RAX: 0000000000000090 RBX: 0000000000000005 RCX: 0000000000000000 [ 1254.696639][T26035] RDX: 00007f30bdec3090 RSI: 00007f30bdec3090 RDI: 00007f30bdec3090 [ 1254.696646][T26035] RBP: 00007f30bdec3090 R08: 0000000000000000 R09: 00007f30bdec2df7 [ 1254.696653][T26035] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1254.696659][T26035] R13: 00007f30bd1b6128 R14: 00007f30bd1b6090 R15: 00007ffd9495cff8 [ 1254.696670][T26035] [ 1255.987445][T26035] CPU: 0 UID: 0 PID: 26035 Comm: syz.9.3075 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1255.987461][T26035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1255.987469][T26035] Call Trace: [ 1255.987476][T26035] [ 1255.987483][T26035] dump_stack_lvl+0x189/0x250 [ 1255.987499][T26035] ? __pfx____ratelimit+0x10/0x10 [ 1255.987510][T26035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1255.987521][T26035] ? __pfx__printk+0x10/0x10 [ 1255.987534][T26035] ? rcu_is_watching+0x15/0xb0 [ 1255.987545][T26035] ? bpf_bprintf_cleanup+0x9f/0xd0 [ 1255.987560][T26035] should_fail_ex+0x414/0x560 [ 1255.987572][T26035] strncpy_from_user+0x36/0x290 [ 1255.987589][T26035] strncpy_from_user_nofault+0x72/0x150 [ 1255.987601][T26035] bpf_probe_read_compat_str+0xe2/0x180 [ 1255.987614][T26035] bpf_prog_56079403e473c493+0x70/0x76 [ 1255.987624][T26035] ? bpf_trace_run2+0x186/0x4b0 [ 1255.987637][T26035] ? __pfx___cant_migrate+0x10/0x10 [ 1255.987651][T26035] bpf_trace_run2+0x284/0x4b0 [ 1255.987664][T26035] ? bpf_trace_run2+0x186/0x4b0 [ 1255.987677][T26035] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1255.987690][T26035] ? kvm_sched_clock_read+0x11/0x20 [ 1255.987700][T26035] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 1255.987712][T26035] __bpf_trace_tlb_flush+0xf5/0x150 [ 1255.987723][T26035] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 1255.987734][T26035] ? psi_group_change+0xbc7/0x1210 [ 1255.987746][T26035] ? rcu_read_lock_sched_held+0x89/0x100 [ 1255.987758][T26035] trace_tlb_flush+0x115/0x140 [ 1255.987772][T26035] switch_mm_irqs_off+0x53e/0x7a0 [ 1255.987786][T26035] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 1255.987797][T26035] ? psi_task_switch+0x318/0x6d0 [ 1255.987810][T26035] __schedule+0x1078/0x4c90 [ 1255.987823][T26035] ? preempt_schedule_irq+0xb5/0x150 [ 1255.987833][T26035] ? __resched_curr+0x2ca/0x3d0 [ 1255.987845][T26035] ? __pfx___schedule+0x10/0x10 [ 1255.987855][T26035] ? do_raw_spin_unlock+0x122/0x240 [ 1255.987870][T26035] ? preempt_schedule_irq+0xaa/0x150 [ 1255.987880][T26035] preempt_schedule_irq+0xb5/0x150 [ 1255.987890][T26035] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1255.987902][T26035] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1255.987914][T26035] irqentry_exit+0x6f/0x90 [ 1255.987924][T26035] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1255.987935][T26035] RIP: 0010:irqentry_exit_to_user_mode+0x51/0x120 [ 1255.987948][T26035] Code: 07 85 c0 0f 85 c3 00 00 00 e8 1b 7e 44 f6 65 4c 8b 34 25 08 90 9c 92 49 8b 3e f7 c7 1e 30 02 00 74 53 49 89 ff e8 0f 7d 44 f6 <4c> 89 f8 a8 18 74 08 e8 a3 19 01 00 4c 89 f8 a9 00 10 00 00 74 0b [ 1255.987957][T26035] RSP: 0000:ffffc90015cf7f38 EFLAGS: 00000286 [ 1255.987968][T26035] RAX: 085bacec015df400 RBX: ffffc90015cf7f58 RCX: 085bacec015df400 [ 1255.987977][T26035] RDX: 0000000000000000 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 1255.987984][T26035] RBP: 0000000000000000 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 1255.987996][T26035] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 0000000000000000 [ 1255.988004][T26035] R13: 0000000000000000 R14: ffff88801c703c00 R15: 0000000000000008 [ 1255.988014][T26035] ? irqentry_exit_to_user_mode+0x51/0x120 [ 1255.988026][T26035] asm_sysvec_call_function_single+0x1a/0x20 [ 1255.988036][T26035] RIP: 0033:0x7f30bcf6772e [ 1255.988045][T26035] Code: Unable to access opcode bytes at 0x7f30bcf67704. [ 1255.988050][T26035] RSP: 002b:00007f30bdec3058 EFLAGS: 00000206 [ 1255.988059][T26035] RAX: 0000000000000090 RBX: 0000000000000005 RCX: 0000000000000000 [ 1255.988065][T26035] RDX: 00007f30bdec3090 RSI: 00007f30bdec3090 RDI: 00007f30bdec3090 [ 1255.988073][T26035] RBP: 00007f30bdec3090 R08: 0000000000000000 R09: 00007f30bdec2df7 [ 1255.988080][T26035] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1255.988087][T26035] R13: 00007f30bd1b6128 R14: 00007f30bd1b6090 R15: 00007ffd9495cff8 [ 1255.988098][T26035] [ 1256.004704][T25630] net_ratelimit: 4 callbacks suppressed [ 1256.004724][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.008402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1256.375593][T19853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.383926][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.398687][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1256.471966][T18048] Bluetooth: hci6: Opcode 0x1003 failed: -110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1256.869219][T19776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.439860][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1257.847761][T14851] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.947555][T14851] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.067036][T14851] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.174669][T14851] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.306102][T14851] gretap0: left allmulticast mode [ 1258.314257][T14851] gretap0: left promiscuous mode [ 1258.320065][T14851] bridge0: port 3(gretap0) entered disabled state [ 1258.329055][T14851] bridge_slave_1: left allmulticast mode [ 1258.334775][T14851] bridge_slave_1: left promiscuous mode [ 1258.340988][T14851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.350339][T14851] bridge_slave_0: left allmulticast mode [ 1258.356111][T14851] bridge_slave_0: left promiscuous mode [ 1258.362454][T14851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.489703][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1258.544088][T14851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.557131][T14851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.567375][T14851] bond0 (unregistering): Released all slaves [ 1258.679117][T14851] IPVS: stopping master sync thread 20176 ... [ 1258.865949][T14851] hsr_slave_0: left promiscuous mode [ 1258.873965][T14851] hsr_slave_1: left promiscuous mode [ 1258.880403][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1258.887936][T14851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1258.896635][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1258.904478][T14851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.916883][T14851] veth1_macvtap: left promiscuous mode [ 1258.922795][T14851] veth0_macvtap: left promiscuous mode [ 1258.929159][T14851] veth1_vlan: left promiscuous mode [ 1258.935106][T14851] veth0_vlan: left promiscuous mode [ 1259.219655][T14851] team0 (unregistering): Port device team_slave_1 removed [ 1259.268635][T14851] team0 (unregistering): Port device team_slave_0 removed [ 1259.362244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.449974][T17354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1259.526968][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1260.030900][T14851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.092194][T14851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.138578][T14851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.187136][T14851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.277694][T14851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.327598][T14851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.383792][T14851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.457402][T14851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.587291][T14851] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.637554][T14851] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.703329][T14851] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.766469][T14851] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.876002][T14851] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.925607][T14851] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.976703][T14851] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.054763][T14851] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.151740][T14851] bridge_slave_1: left allmulticast mode [ 1261.157455][T14851] bridge_slave_1: left promiscuous mode [ 1261.164986][T14851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.174586][T14851] bridge_slave_0: left allmulticast mode [ 1261.182935][T14851] bridge_slave_0: left promiscuous mode [ 1261.189917][T14851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.201747][T14851] gretap0: left allmulticast mode [ 1261.206916][T14851] gretap0: left promiscuous mode [ 1261.212438][T14851] bridge0: port 3(gretap0) entered disabled state [ 1261.222234][T14851] bridge_slave_1: left allmulticast mode [ 1261.227903][T14851] bridge_slave_1: left promiscuous mode [ 1261.233737][T14851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.242596][T14851] bridge_slave_0: left allmulticast mode [ 1261.249197][T14851] bridge_slave_0: left promiscuous mode [ 1261.254863][T14851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.264037][T14851] bridge_slave_1: left allmulticast mode [ 1261.269973][T14851] bridge_slave_1: left promiscuous mode [ 1261.275617][T14851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.284952][T14851] bridge_slave_0: left allmulticast mode [ 1261.291559][T14851] bridge_slave_0: left promiscuous mode [ 1261.297213][T14851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.306081][T14851] bridge_slave_1: left allmulticast mode [ 1261.312346][T14851] bridge_slave_1: left promiscuous mode [ 1261.318007][T14851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.326488][T14851] bridge_slave_0: left allmulticast mode [ 1261.332751][T14851] bridge_slave_0: left promiscuous mode [ 1261.338642][T14851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.466624][T14851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.476829][T14851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.486598][T14851] bond0 (unregistering): Released all slaves [ 1261.603335][T14851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.613387][T14851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.623040][T14851] bond0 (unregistering): Released all slaves [ 1261.684160][T14851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.693963][T14851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.704085][T14851] bond0 (unregistering): Released all slaves [ 1261.777009][T14851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1261.788114][T14851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1261.798428][T14851] bond0 (unregistering): Released all slaves [ 1262.437965][T14851] hsr_slave_0: left promiscuous mode [ 1262.451502][T14851] hsr_slave_1: left promiscuous mode [ 1262.457384][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.466677][T14851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.477624][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.485673][T14851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.497332][T14851] hsr_slave_0: left promiscuous mode [ 1262.504269][T14851] hsr_slave_1: left promiscuous mode [ 1262.511425][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.519438][T14851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.527341][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.536438][T14851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.547098][T14851] hsr_slave_0: left promiscuous mode [ 1262.556031][T14851] hsr_slave_1: left promiscuous mode [ 1262.563270][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.572937][T14851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.581889][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.590566][T14851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.601464][T14851] hsr_slave_0: left promiscuous mode [ 1262.607353][T14851] hsr_slave_1: left promiscuous mode [ 1262.615359][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.623364][T14851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.632834][T14851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.640782][T14851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.663878][T14851] veth1_macvtap: left promiscuous mode [ 1262.671315][T14851] veth0_macvtap: left promiscuous mode [ 1262.677009][T14851] veth1_vlan: left promiscuous mode [ 1262.682999][T14851] veth0_vlan: left promiscuous mode [ 1262.690892][T14851] veth1_macvtap: left promiscuous mode [ 1262.696440][T14851] veth0_macvtap: left promiscuous mode [ 1262.702478][T14851] veth1_vlan: left promiscuous mode [ 1262.707819][T14851] veth0_vlan: left promiscuous mode [ 1262.720937][T14851] veth1_macvtap: left promiscuous mode [ 1262.726492][T14851] veth0_macvtap: left promiscuous mode [ 1262.733370][T14851] veth1_vlan: left promiscuous mode [ 1262.739182][T14851] veth0_vlan: left promiscuous mode [ 1262.745258][T14851] veth1_macvtap: left promiscuous mode [ 1262.752068][T14851] veth0_macvtap: left promiscuous mode [ 1262.757858][T14851] veth1_vlan: left promiscuous mode [ 1262.763820][T14851] veth0_vlan: left promiscuous mode [ 1263.194104][T14851] team0 (unregistering): Port device team_slave_1 removed [ 1263.211051][T14851] team0 (unregistering): Port device team_slave_0 removed [ 1263.561816][T14851] team0 (unregistering): Port device team_slave_1 removed [ 1263.605815][T14851] team0 (unregistering): Port device team_slave_0 removed [ 1263.884809][T14851] team0 (unregistering): Port device team_slave_1 removed [ 1263.921847][T14851] team0 (unregistering): Port device team_slave_0 removed [ 1264.103823][T14851] team0 (unregistering): Port device team_slave_1 removed [ 1264.115928][T14851] team0 (unregistering): Port device team_slave_0 removed