last executing test programs: 5m8.446925279s ago: executing program 3 (id=4): r0 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5m7.257184961s ago: executing program 3 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0xfffedffa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4m57.365142465s ago: executing program 3 (id=22): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 4m56.681691628s ago: executing program 3 (id=23): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r4, 0xffffffffffffffff, 0x0) 4m54.481999279s ago: executing program 3 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0xfffedffa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 4m39.424558567s ago: executing program 32 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0xfffedffa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 3m47.430326526s ago: executing program 4 (id=156): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 3m47.009060049s ago: executing program 4 (id=157): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2c2dee9c106b0d4) clock_gettime(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) getpid() 3m45.775756719s ago: executing program 0 (id=158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="339ed397e389aaaaaaaaaa0f88a80a0081004f0008004500005c0000e0"], 0x72) 3m44.942256656s ago: executing program 4 (id=160): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x3) poll(&(0x7f0000000240)=[{r1, 0x90}], 0x1, 0x7) 3m44.758670165s ago: executing program 0 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x88100) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000240)={{0x8, 0x3, 0x29e4, 0x1ff, 'syz1\x00', 0x4}, 0x5, 0x20, 0x25, 0x0, 0x0, 0x95a, 'syz1\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000001340)}) pipe2$9p(&(0x7f0000000380), 0x4080) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x0, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) read(r5, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m44.716427116s ago: executing program 4 (id=162): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, 0x0, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[@authinfo={0x18, 0x84, 0x6, {0x3}}], 0x18, 0x8000}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001040)="fd348565ef85cd921919195eeb95a4f3de4513073eca657737aa209737892305f47a67a872e74305b957fa5ae238159778a5e5a234fb2c3d6f993b18037edfea9c688ec5d37e8ebc945413fb9c923c28082fc8dd4f05f0141090a3c244e68f0c4d62c2e11d53aa30516d4cf9802134d23c048a064014c49f869eba85ab2d15562503a3ed4c814856a2bf", 0x8a}, {&(0x7f0000001200)}], 0x2, &(0x7f0000001280)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xe}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x38, 0x24004802}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044080}, {&(0x7f00000029c0)=@in6={0xa, 0x4e23, 0xfffffffb, @local, 0x2439}, 0x1c, &(0x7f0000003c00)=[{&(0x7f0000002a80)="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", 0x7ee}, {&(0x7f0000003a80)="97da8ad3bf71a9c23c6256e4fcf50f9af030ef1b83c0f08f4ac4953bfa7ad00cab937f17e146e9eb3a07508c7bce45fce045636e5a97ebbcc958992904f63d76240cc2c70ced9038efa3e6419cc15ff3795bb64d4cef7a", 0x57}, {&(0x7f0000003b40)="02f2f57f", 0x4}, {&(0x7f0000003b80)="28ab3c32d3bb212cc958688023c94e778c1e4f93b65712bee0a74c358017f81761b10675e705a46be419a2576ab569878a6da7e8cc4b7c9a349bb246245e10f15f92477bda489036363c5f5ab96f86bcd9d23faf38764e0fab0d85a823a833ba387824893d634a", 0x67}], 0x4, 0x0, 0x0, 0x1}], 0x4, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 3m42.254895406s ago: executing program 4 (id=167): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x18000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000800)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r5}, 0x18) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) 3m41.303171285s ago: executing program 0 (id=169): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m40.25866795s ago: executing program 4 (id=170): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xa, 0xe}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044004}, 0x80c0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}}, 0x400c084) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r1, &(0x7f0000000300)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$unix(0x1, 0x1, 0x0) 3m40.147262848s ago: executing program 0 (id=173): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000300)=@known='security.selinux\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 3m38.10333957s ago: executing program 0 (id=176): fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}]}], {0x14}}, 0x78}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) 3m36.809029272s ago: executing program 0 (id=178): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x1e8) read$FUSE(r2, &(0x7f0000008bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x5, r2, 'id1\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x2, &(0x7f0000000400)={{'fd', 0x3d, r7}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1632fc9f}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0xff}}, {@default_permissions}], [{@hash}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@uid_gt={'uid>', r3}}, {@audit}, {@euid_lt={'euid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '#('}}]}}) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) 3m24.234892794s ago: executing program 33 (id=170): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xa, 0xe}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044004}, 0x80c0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}}, 0x400c084) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r1, &(0x7f0000000300)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) socket$unix(0x1, 0x1, 0x0) 3m21.697432673s ago: executing program 34 (id=178): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x1e8) read$FUSE(r2, &(0x7f0000008bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x5, r2, 'id1\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x2, &(0x7f0000000400)={{'fd', 0x3d, r7}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1632fc9f}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0xff}}, {@default_permissions}], [{@hash}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@uid_gt={'uid>', r3}}, {@audit}, {@euid_lt={'euid<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '#('}}]}}) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) 2m34.675077203s ago: executing program 5 (id=284): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES16]) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) r5 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) close(0xffffffffffffffff) syz_open_dev$midi(0x0, 0x3, 0x88c02) syz_usb_disconnect(r5) 2m30.68797435s ago: executing program 1 (id=292): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ustat(0xa, &(0x7f0000000000)) 2m30.530838113s ago: executing program 5 (id=294): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x1d, 0x800, 0xfffffffe) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000940d"], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 2m30.429373632s ago: executing program 1 (id=295): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 2m29.24549652s ago: executing program 1 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$qrtrtun(r3, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m29.244516787s ago: executing program 5 (id=297): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m27.001757623s ago: executing program 5 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r3 = socket$inet(0x2, 0x3, 0xfffedffa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m24.860616921s ago: executing program 1 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40, 0x1}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101280) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000000)={0x0, 0x4, 0x418bb}) setsockopt$inet_buf(r4, 0x0, 0x2e, &(0x7f00000000c0)="17000000020001004003be8c5e687a8a", 0x10) syz_usb_connect(0x3, 0x485, &(0x7f0000000880)={{0x12, 0x1, 0x110, 0xb8, 0xa, 0x2a, 0x40, 0x45e, 0x46e, 0x956f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x473, 0x4, 0x81, 0x9, 0x20, 0x9, [{{0x9, 0x4, 0x8a, 0x3, 0xa, 0x9d, 0xf1, 0xd3, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x5777, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x2, 0x9}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x1, 0x4a}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "13a0e14b1d12"}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0x8d7, 0x30}, [@mdlm_detail={0xbf, 0x24, 0x13, 0x0, "a7d90e8d19182f1bdd3b19300b27b3bfc11c01e7ffc580a8cabd12b50943545c395f9f87f04f985cc1a13efd56c7d7095960d3b3e93c88d125f4fc3badb464564c81a674d04f3f7330f25f1c08841481d7b66e4d5424d337409fbe725db2c4187a3c3c9dcb69d692c04dd63319d3ff5ba91082cb01b0fb09c3ea3fd90f04656433c06698ec3d9618ea2c7eaa15989fa95b65c210a2108dd843d5633e1b74dc592a09551017595354e7b3b1cac1688b880ed2950f3522cef3bb728d"}, @acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x81, 0x8, 0x200, 0xe8, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}]}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x6, 0x0, 0x2}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0xe8, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x5, 0x0, 0x80}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x9, 0x5, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0xa, 0xce, 0xb, [@generic={0x2a, 0x2f, "a42fd73b2ceb4c34ec7541f88b2ac5433daeef576be2ccd662e71a17247d08c7cd7692944cb59afb"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x4, 0x4, 0x7f, [@generic={0x65, 0x3, "82e659158e366d76f940acf1e0a4fd0435ed9ab035687b56a7fcf23b0eb50b89b799055a2afe3ab963287dec2a4b53c4188e4a28e1b7e49e9a53b5989bec485e79759b0309c2906eca95752c92f24f3d4ae638e1af44e9cb7a2a9a06b120008b34e3fb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x4, 0xb, 0x9, [@generic={0x2, 0x11}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x18, 0xa, 0xd7}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x5, 0x47, 0x5, [@generic={0x2, 0xa}, @generic={0xeb, 0x9, "224049af1a34b07ddd75db147c2899e868c6e066093779e70bc338279e31f836e527989626100def08f1e17b3603ff12f4387a47c49e1eae74ba25496070fa8e212d504a2bed560d7b2f7d94c37a6bb3b88a12edd3f904bdaa4ec3e113dc68def50c9eed8c5244f69e67fb08a5326c441e8b1c62fb959de99a04b3b8032b75ef56554aa460a463e3483c53f3c1b5334f93e38d76cc8a6d6aa3cbd4ade6e166dfe56b729eb91ab97a569f48094258589f78f6ed5fd63146ed833de9a81da50a2c6ef9359b6db52c94bfca2587ed547df1be34ee72b3c3091377643450a70c489508efba89f51a585f01"}]}}]}}, {{0x9, 0x4, 0x73, 0x80, 0x5, 0xff, 0xff, 0xff, 0xf, [], [{{0x9, 0x5, 0x2, 0xc, 0x40, 0x3, 0x4, 0x6}}, {{0x9, 0x5, 0x8, 0x3, 0x0, 0x2e, 0x40, 0x5, [@generic={0x46, 0x21, "0e43d43f9cc471833693b6d9c3e563d1e2ee4873cf0b691511bb15e30f08624fb61dc6d038145d4294d833faef60c6e8f70faa4a15075d1a8a610003a1abf4d5adb66fdc"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xb, 0x99}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x84, 0xd}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x3, 0x2, 0x0, [@generic={0xdd, 0x21, "f543e9173b0e8b0a2ed9d68ff3aeb6bdf0a44fe4ff3ac41e4f380d024e02a09ca67bc2f448185294af894748b5c862fd1ca72f6e18c663952a137020b79f30b340a31122c11142d696a778a5cdbdf1704a98281812178cbd2ab65fe6685693b362e30618676449c805ab742b8e52f57096d78984a66551506e1a5834fea1476f64d6d337cbe6abf3c292ec7cf279990af0adf5efa1fa146437331d0275001c51860cc3c17e94f9454fc9bf614600515758eb50557a1099b81825fbaf0f965f39a26c70976a3b08840d407c3f6cd000c38f7489f82ebd5f11253dde"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xfb, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x200}]}}]}}, {{0x9, 0x4, 0xc8, 0x8, 0x0, 0xff, 0x86, 0x7e, 0x4}}, {{0x9, 0x4, 0x55, 0x1c, 0x0, 0x84, 0x13, 0x1e, 0x3a}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xf, 0x9, 0x0, 0xff, 0x61}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x0, 0x0}, {0x28, &(0x7f0000000200)=@string={0x28, 0x3, "70013a4e1c813fe61745e50d16413e256e9e270f6a045b30e9ed4c417af27cd8a30e410ea7aa"}}, {0xaa, &(0x7f0000000500)=@string={0xaa, 0x3, "ee812fd784d0cbb14c7d65832112295bea7daabf70ffd49dce607a5b4483c8979a680349febd13e4fa2d70503d467c1edf028b573b7bc3ebe16282cbd0cc52ae853105593f3fe48968471526be1f0473b42e9fdc19d1bcdcf0b6066f1213e721074e532418ea9ba9bde40871ddb1ba735b9c0c7fd138af84a375f1067b92f48cfceba2a21abe3dd6ec36fc8229b215508a9b8610dd1308d99b25679ceec9adfd7425a64d3f7cf07e"}}, {0x9b, &(0x7f00000005c0)=@string={0x9b, 0x3, "7e83335a4db67195e55bfbb8da52e0c4dc9ebf7b74852c76b6ccf42c03098db0d571423d06c8b8605c4ea34a04b73b86e2a8b9baece92a8ddaf35b12ea6f3462992f0876c8513305fcc4debdd42eed6ca910dc92a4be5d8a93160f27aa6ec83bade2d52dedaee10d6006febc26b86377505e59f55679b1025a09ae2a720ae4dd2e68603fd195ce783cd02c498666ff840f8e4870fdf6d81b46"}}, {0x71, &(0x7f0000000680)=@string={0x71, 0x3, "37f88e1ad88b62727aad0f097239981918019e7ff379a6e0d1519d1ebd67b131b46d55452c1b0088c0d8e3fef69f8958d6021fd75e59c1dfce9d2a00f7ab2a9502feac818193dfe804c9f0643bcc7a8e8fb7c3bc4a0be063252da2101983181ec90a69a322a8da1bfaee8685f01cbc"}}, {0x63, &(0x7f0000000740)=@string={0x63, 0x3, "0ba6e246f9199a3d0da636e9a216153167710318833651d0abb6d7fa1c06bb1ce2548c3b3dd6865b9e242effc22ffead520a2b0016a269fccb7e515de7c1b74f4f7700f675d4e5b736759fda648ff34180774d518174e9385e524d8c1310c1f414"}}]}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000100)) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) 2m22.325099987s ago: executing program 5 (id=309): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m21.293747448s ago: executing program 5 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r3 = socket$inet(0x2, 0x3, 0xfffedffa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m21.24207415s ago: executing program 1 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0xfffffffffffffffe, 0x1000}], 0x0) close(0x3) close(0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, r9, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x44}}, 0x0) 2m19.51361591s ago: executing program 1 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r3 = socket$inet(0x2, 0x3, 0xfffedffa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m5.931182577s ago: executing program 35 (id=311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r3 = socket$inet(0x2, 0x3, 0xfffedffa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m4.028224578s ago: executing program 36 (id=317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r3 = socket$inet(0x2, 0x3, 0xfffedffa) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r3, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 29.971600921s ago: executing program 8 (id=539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000"], 0x50}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000a0a03000000000000000000010000060900020073790c96000000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x24002840) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000022000040"]) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) r9 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r9, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r12, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x200, 0x24, 0x549, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc38}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x81, 0xbd7, 0x1e52, 0x0, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0x6, 0xfffe, 0x1000]}}, {{0x1c, 0x1, {0x5, 0x2, 0x7, 0x1, 0x2, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x6, 0x5, 0x2, 0x5, 0x0, 0x6, 0x4, 0x4}}, {0xc, 0x2, [0x8, 0xf878, 0xb, 0x7f]}}, {{0x1c, 0x1, {0xf, 0x2, 0x5, 0xde1, 0x2, 0x267, 0x6, 0x7}}, {0x12, 0x2, [0x1, 0x5e83, 0xc, 0x8, 0x101, 0x1, 0x9]}}]}, @qdisc_kind_options=@q_choke={{0xa}, {0x110, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x32e5}, @TCA_CHOKE_STAB={0x104, 0x2, "a368625afc3945fa7e0d5d0144f5dcf3aeb03665b89aac1a208ba673249d611a165dc179aa26879552bb84e433b2899f9e13ccb70c732b7ea3b0972a7daf69e3455f0912f40978b6ed75dd80b2fe3813cd6c59ce405f0c37e4a20882b907333230dafc10016bf841c375f92daca2176cd8dda45662dadf6e5cf90bfa5fa5e6c18b36e03b3b5bef1ff841098492cc6ed41d7c3a02813b57f9d002b33b255ac74b515917441a8a76d13953e254682cfec296232a6d14f5a989465aa868774bb5709cce562c559516735c30b4b46b2158f9c5bfa6f07ab1b7082ab2ca10dd5734fff8c5b320395704320f54e32663984906c86808510d179a20fc9799699c4d0b6f"}]}}]}, 0x200}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, 0x0, 0x0) r13 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r13, &(0x7f0000002780)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, &(0x7f0000001480)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000001380)=""/248, 0xf8}], 0x4, &(0x7f0000001500)=""/198, 0xc6}, 0x42b0}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)=""/8, 0x8}, {&(0x7f0000001600)=""/62, 0x3e}], 0x2, &(0x7f0000001680)=""/220, 0xdc}, 0x2}, {{&(0x7f0000001780)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001800)=""/215, 0xd7}], 0x1, &(0x7f0000001940)=""/225, 0xe1}, 0x40}, {{&(0x7f0000001b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001b80)=""/242, 0xf2}], 0x1, &(0x7f0000001c80)=""/90, 0x5a}, 0x6}, {{&(0x7f0000001d00)=@ethernet, 0x80, &(0x7f0000002280)=[{&(0x7f0000001d80)=""/194, 0xc2}, {&(0x7f0000001e80)=""/230, 0xe6}, {&(0x7f0000001f80)=""/251, 0xfb}, {&(0x7f0000002080)=""/40, 0x28}, {&(0x7f00000020c0)=""/6, 0x6}, {&(0x7f0000002100)=""/156, 0x9c}, {&(0x7f00000021c0)=""/54, 0x36}, {&(0x7f0000002200)=""/111, 0x6f}], 0x8, &(0x7f0000002300)=""/84, 0x54}, 0x9db2}, {{&(0x7f0000002380)=@isdn, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002400)=""/168, 0xa8}, {&(0x7f00000024c0)=""/140, 0x8c}, {&(0x7f0000002580)}, {&(0x7f00000025c0)=""/207, 0xcf}], 0x4, &(0x7f0000002700)=""/71, 0x47}}], 0x6, 0x4040, &(0x7f0000002900)) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000002940)=ANY=[@ANYBLOB="0400000028c5896f0ee026bebbaa46d806f0f55a41f7ef9ee8453e1c0e31535c74057b6a34fbdee82677a7b2d0cfba9d9dfadcba0a6f9a511d7f1e20149281dbdc232a21099a2867042407822ea27f4b22700b4a7883a7e595278524611c3485e66a7151a653053671b2057952c60ffa247e8c3739b84373a9", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044890}, 0x0) 26.431801652s ago: executing program 8 (id=547): socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x4}, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 25.028797641s ago: executing program 7 (id=551): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x50}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021d"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 24.974191292s ago: executing program 8 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000280)={0x3, 0x1, @start={0xf7}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x1700000000000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}}, 0x14}}, 0x8000) syz_emit_vhci(0x0, 0x17) 22.138910339s ago: executing program 8 (id=554): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 21.837861465s ago: executing program 7 (id=555): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 21.782315038s ago: executing program 2 (id=556): mkdirat(0xffffffffffffffff, &(0x7f0000001b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x151) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xf) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}}, 0x0) 21.73493252s ago: executing program 8 (id=557): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 21.535841044s ago: executing program 7 (id=558): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)="fc") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x404043000) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x200, 0x12) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f030) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 20.833682598s ago: executing program 8 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$qrtrtun(r2, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 20.340754521s ago: executing program 7 (id=561): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e23, 0x0, @private0, 0x80000000}, {0xa, 0x0, 0x7, @loopback={0x9d}}, r2, 0x3}}, 0x48) 19.971256387s ago: executing program 7 (id=563): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900008500000004000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffd, 0x4000000, 0x1, 0x10, "0062ba7d8200000000f7ffffff00"}) r5 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x3) 19.876272902s ago: executing program 9 (id=564): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x300, 0x0, 0xc000}, 0x10) 19.875707774s ago: executing program 2 (id=565): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x50}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021d"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 19.146729873s ago: executing program 6 (id=566): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x9) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000340)) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x2008001) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8002}, 0x40084) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, 0x0) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x4800) 18.957255547s ago: executing program 2 (id=567): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800048004000380"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 18.956454211s ago: executing program 9 (id=568): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 18.904586238s ago: executing program 7 (id=569): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@restrict={0xf}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30, 0x2e, 0x0, 0x5f, 0x5f, 0x2e, 0x2e, 0x3adc999b37783f58]}}, &(0x7f0000000600)=""/246, 0x46, 0xf6, 0x1, 0xe629, 0x10000, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, r1, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) io_cancel(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 18.190475263s ago: executing program 6 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='kfree\x00', r0, 0x0, 0x3}, 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x8000) 18.125047327s ago: executing program 9 (id=571): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20b02, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x0, 0x20000000000, 0x0, 0x100, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x86, 0xfffffffffffffffe, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.989928937s ago: executing program 2 (id=572): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="dbeb5a02c82eb6e813ad57289a4d904cec88ac5fb3382f9641252d6ddb5bdfa00afa017a1953b6ac63b6d4bf3e6fa3686e820f7f62ee9a98dc360c47d48b1ba8b9330505dea72961a8ca73334dd98e6711ed6233ea7a888045a096628eee353e59163e0609fc0c0c8e60d1871f484c4a5feeade137aa3ce5db736e8871da7da4f530595c6d6e1f65723a61984228f02a4b2e7f23ac212f31a4", 0x99}, {&(0x7f00000009c0)="38683f236ec70a28ca402d598c63be8457d671512abf13", 0x17}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000180)="24aeb629fe7b9365d7b070ecc4dd1152738d0e31230b870ed50f6d166478d2b3e4963ba03800c460d40436d5d6dd73c8b2cf41e6937baa57c249d2bed4d36b15b641c2766034b01209e60dfa5ade22e0d4d897f050", 0x55}, {&(0x7f0000000380)="064b5a44bc841d0eb3cde7939f732de2357f57de1b028d9c939cf361d6e17fd0a67ea6b6456bb6c3c6739facbfbff1201931291b341b298590f55f00f3874ce872dbc3ce8cda35ace31b9b334bb5a9165ed6c44eecae86a24d83e1d288d3dd466809e24f0dc811508e518851cd83141ee9ba314b9f0398eaa68f6eae7e8ae7f63b846b74e2178d35f52c2ab884891ea40c2ce9b48fb4f5ce8f8ebfada1e4b15a367904af34b5d705f4130309ed83916c416f91224b852695a76bc8a8b95874d54bbd0f583fd39f957277b27ceb0348eeb5b30e9a5ddb33a6ad8d3a4a", 0xdc}, {&(0x7f0000000240)="7457b2316e204aba6b591334", 0xc}, {&(0x7f0000000480)="cdf3015ae846337720622f5ef786deee3b963ec31593af3e36f09ccbb64dcf5afc09d82f57e74df1f5fceb84dd", 0x2d}, {&(0x7f0000000c40)="645ae8fd31b3c84f6b49d710c86a75c8975baf0e80ffbba753a5dbc06bf3f6e09db2655db3539859eab379da476e7e93e21e317ca8321db540d815d0bceda8ffa2a594e00ba059d24bb7b2c1d926627d66dedb436faf50044f831c606e5d0338249fd87c2448393537362aebbc8d47fade3144643fc23015565cd1569db23cff792bc7f5c7d21ac333cd46175f6660c6789cf5a52d46f2e54284b6e42cecbaf6f60b911c318cea90bc55e98a2f179c72", 0xb0}], 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffffffffff00000000110000000000000000000000010000000800000000000000c0"], 0xf8}, 0x44000) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 17.954088677s ago: executing program 6 (id=573): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000300)=@known='security.selinux\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 17.056294629s ago: executing program 9 (id=574): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000023f3201", @ANYBLOB="d7bd94d0d907"], 0x138) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 16.991041283s ago: executing program 2 (id=575): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0x32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) 16.710391716s ago: executing program 6 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 16.27861585s ago: executing program 6 (id=577): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x50}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021d"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.590716017s ago: executing program 2 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) write$qrtrtun(r3, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 15.273217892s ago: executing program 6 (id=579): prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}]}}]}, 0x44}}, 0x400c084) 15.263414411s ago: executing program 9 (id=580): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x90000018}) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 15.083633947s ago: executing program 9 (id=581): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0xfffffffc}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x20002) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xc8) 5.545376156s ago: executing program 37 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$qrtrtun(r2, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 3.050813399s ago: executing program 38 (id=569): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@restrict={0xf}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30, 0x2e, 0x0, 0x5f, 0x5f, 0x2e, 0x2e, 0x3adc999b37783f58]}}, &(0x7f0000000600)=""/246, 0x46, 0xf6, 0x1, 0xe629, 0x10000, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, r1, 0x4, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) io_cancel(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 530.558081ms ago: executing program 39 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) write$qrtrtun(r3, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 54.549201ms ago: executing program 40 (id=581): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x503, 0x0, 0xfffffffc}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x20002) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xc8) 0s ago: executing program 41 (id=579): prctl$PR_SET_KEEPCAPS(0x8, 0xfdfffffffffffffb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}]}}]}, 0x44}}, 0x400c084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 89.045609][ T5814] cgroup: Unknown subsys name 'net' [ 89.182302][ T5814] cgroup: Unknown subsys name 'cpuset' [ 89.191733][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.931763][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.028432][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.048745][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.073997][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.097233][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.106945][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.115319][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.130170][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.164201][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.171958][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.180654][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.188285][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.196983][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.204192][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.205985][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.219839][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.242415][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.242885][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.258567][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.262187][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.274524][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.282178][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.292261][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.301722][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.314365][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.322116][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.010439][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 96.034468][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 96.060152][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 96.139910][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 96.274707][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 96.399615][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.406888][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.415728][ T5845] bridge_slave_0: entered allmulticast mode [ 96.423424][ T5845] bridge_slave_0: entered promiscuous mode [ 96.516788][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.524255][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.534717][ T5845] bridge_slave_1: entered allmulticast mode [ 96.542272][ T5845] bridge_slave_1: entered promiscuous mode [ 96.555685][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.563006][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.570543][ T5831] bridge_slave_0: entered allmulticast mode [ 96.578259][ T5831] bridge_slave_0: entered promiscuous mode [ 96.587212][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.594513][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.601835][ T5831] bridge_slave_1: entered allmulticast mode [ 96.611021][ T5831] bridge_slave_1: entered promiscuous mode [ 96.617890][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.625099][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.632702][ T5836] bridge_slave_0: entered allmulticast mode [ 96.640299][ T5836] bridge_slave_0: entered promiscuous mode [ 96.649051][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.656812][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.664189][ T5836] bridge_slave_1: entered allmulticast mode [ 96.671988][ T5836] bridge_slave_1: entered promiscuous mode [ 96.679463][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.686636][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.694419][ T5829] bridge_slave_0: entered allmulticast mode [ 96.702055][ T5829] bridge_slave_0: entered promiscuous mode [ 96.711265][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.718797][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.725995][ T5829] bridge_slave_1: entered allmulticast mode [ 96.733558][ T5829] bridge_slave_1: entered promiscuous mode [ 96.835883][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.889932][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.904874][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.937122][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.950792][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.963874][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.977011][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.988991][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.026162][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.033949][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.041637][ T5837] bridge_slave_0: entered allmulticast mode [ 97.050090][ T5837] bridge_slave_0: entered promiscuous mode [ 97.116856][ T5831] team0: Port device team_slave_0 added [ 97.123564][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.131340][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.138657][ T5837] bridge_slave_1: entered allmulticast mode [ 97.146090][ T5837] bridge_slave_1: entered promiscuous mode [ 97.184433][ T5845] team0: Port device team_slave_0 added [ 97.191958][ T9] cfg80211: failed to load regulatory.db [ 97.201213][ T5831] team0: Port device team_slave_1 added [ 97.224274][ T5836] team0: Port device team_slave_0 added [ 97.234826][ T5836] team0: Port device team_slave_1 added [ 97.244874][ T5829] team0: Port device team_slave_0 added [ 97.255195][ T5829] team0: Port device team_slave_1 added [ 97.262981][ T5845] team0: Port device team_slave_1 added [ 97.269613][ T5843] Bluetooth: hci1: command tx timeout [ 97.275444][ T5849] Bluetooth: hci3: command tx timeout [ 97.348539][ T5843] Bluetooth: hci0: command tx timeout [ 97.353270][ T5849] Bluetooth: hci4: command tx timeout [ 97.393272][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.428479][ T5849] Bluetooth: hci2: command tx timeout [ 97.437872][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.445641][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.472196][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.485301][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.492471][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.518655][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.532024][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.539253][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.565585][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.577403][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.584633][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.611437][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.624965][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.652783][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.659980][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.688338][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.700476][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.707472][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.733919][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.755282][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.762550][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.789484][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.813820][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.820933][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.847386][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.900829][ T5837] team0: Port device team_slave_0 added [ 97.943185][ T5845] hsr_slave_0: entered promiscuous mode [ 97.950786][ T5845] hsr_slave_1: entered promiscuous mode [ 97.986925][ T5837] team0: Port device team_slave_1 added [ 98.042551][ T5829] hsr_slave_0: entered promiscuous mode [ 98.049804][ T5829] hsr_slave_1: entered promiscuous mode [ 98.056150][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.065017][ T5829] Cannot create hsr debugfs directory [ 98.111969][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.119160][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.145533][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.179272][ T5831] hsr_slave_0: entered promiscuous mode [ 98.186012][ T5831] hsr_slave_1: entered promiscuous mode [ 98.192869][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.201400][ T5831] Cannot create hsr debugfs directory [ 98.230563][ T5836] hsr_slave_0: entered promiscuous mode [ 98.238751][ T5836] hsr_slave_1: entered promiscuous mode [ 98.245253][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.253599][ T5836] Cannot create hsr debugfs directory [ 98.260184][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.267297][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.295016][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.522073][ T5837] hsr_slave_0: entered promiscuous mode [ 98.528909][ T5837] hsr_slave_1: entered promiscuous mode [ 98.535643][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.544235][ T5837] Cannot create hsr debugfs directory [ 98.980809][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.997156][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.024902][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.046487][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.113530][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.134090][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.152219][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.175546][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.247210][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.274330][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.300108][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.331999][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.355062][ T5849] Bluetooth: hci3: command tx timeout [ 99.355467][ T5843] Bluetooth: hci1: command tx timeout [ 99.411840][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.429133][ T5843] Bluetooth: hci0: command tx timeout [ 99.429666][ T5849] Bluetooth: hci4: command tx timeout [ 99.445424][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.457640][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.489831][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.508594][ T5849] Bluetooth: hci2: command tx timeout [ 99.594784][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.615253][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.627138][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.639558][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.697245][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.776405][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.810323][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.817682][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.838585][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.845881][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.899793][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.971978][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.002943][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.031025][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.045701][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.052942][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.065940][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.100733][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.107922][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.132870][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.167810][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.179958][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.187103][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.202318][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.226174][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.233447][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.257065][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.264245][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.275228][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.282608][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.303970][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.311273][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.359676][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.367013][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.457647][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.823967][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.039270][ T5845] veth0_vlan: entered promiscuous mode [ 101.100111][ T5845] veth1_vlan: entered promiscuous mode [ 101.257555][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.291426][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.320846][ T5845] veth0_macvtap: entered promiscuous mode [ 101.343987][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.364316][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.379822][ T5845] veth1_macvtap: entered promiscuous mode [ 101.430722][ T5849] Bluetooth: hci1: command tx timeout [ 101.430731][ T5843] Bluetooth: hci3: command tx timeout [ 101.477850][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.509939][ T5849] Bluetooth: hci0: command tx timeout [ 101.509947][ T5843] Bluetooth: hci4: command tx timeout [ 101.524461][ T5829] veth0_vlan: entered promiscuous mode [ 101.541860][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.581945][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.596290][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.598841][ T5849] Bluetooth: hci2: command tx timeout [ 101.606787][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.621339][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.649571][ T5829] veth1_vlan: entered promiscuous mode [ 101.670061][ T5831] veth0_vlan: entered promiscuous mode [ 101.725380][ T5836] veth0_vlan: entered promiscuous mode [ 101.803080][ T5831] veth1_vlan: entered promiscuous mode [ 101.826716][ T5836] veth1_vlan: entered promiscuous mode [ 101.851831][ T5829] veth0_macvtap: entered promiscuous mode [ 101.876047][ T5829] veth1_macvtap: entered promiscuous mode [ 101.918850][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.930150][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.999853][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.013203][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.020168][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.047567][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.085096][ T5831] veth0_macvtap: entered promiscuous mode [ 102.095477][ T5837] veth0_vlan: entered promiscuous mode [ 102.106164][ T5836] veth0_macvtap: entered promiscuous mode [ 102.116498][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.126111][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.138818][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.147917][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.177094][ T5831] veth1_macvtap: entered promiscuous mode [ 102.194190][ T5836] veth1_macvtap: entered promiscuous mode [ 102.214806][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.253917][ T5837] veth1_vlan: entered promiscuous mode [ 102.275311][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.289567][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.330322][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.340405][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.352172][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.361464][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.377638][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.416098][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.429783][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.485323][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.498472][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.508629][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.522630][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.623045][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.656835][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.715417][ T5837] veth0_macvtap: entered promiscuous mode [ 103.427898][ T5837] veth1_macvtap: entered promiscuous mode [ 103.456748][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.498937][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.513587][ T5849] Bluetooth: hci1: command tx timeout [ 103.513656][ T5843] Bluetooth: hci3: command tx timeout [ 103.590555][ T5843] Bluetooth: hci4: command tx timeout [ 103.594255][ T5849] Bluetooth: hci0: command tx timeout [ 103.616028][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.643991][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.657264][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.658891][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.679224][ T5849] Bluetooth: hci2: command tx timeout [ 103.712015][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.724653][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.789253][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.810923][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.832555][ T5953] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.896279][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.909040][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.026897][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.098706][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.174181][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.371205][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.678336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.259476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.328945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.345923][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.362366][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.669563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.417524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.469472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.724679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.988227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 107.082497][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.111654][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.357867][ T5981] netlink: 'syz.0.8': attribute type 7 has an invalid length. [ 107.389186][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 108.320596][ T5994] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5'. [ 108.419353][ T5992] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5'. [ 108.429120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.437605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.046840][ T6002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.664001][ T6003] ======================================================= [ 109.664001][ T6003] WARNING: The mand mount option has been deprecated and [ 109.664001][ T6003] and is ignored by this kernel. Remove the mand [ 109.664001][ T6003] option from the mount to silence this warning. [ 109.664001][ T6003] ======================================================= [ 110.425242][ T6009] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.14' sets config #1 [ 110.490286][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.707157][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.748663][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.772489][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.800779][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.893889][ T6004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.239446][ T6018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 111.993432][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.383559][ T24] usb 2-1: USB disconnect, device number 2 [ 113.940965][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.502533][ T6050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.412258][ T6053] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.26' sets config #1 [ 116.475599][ T30] audit: type=1326 audit(1750097731.172:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 116.606445][ T30] audit: type=1326 audit(1750097731.172:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 116.736419][ T30] audit: type=1326 audit(1750097731.182:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 116.903621][ T30] audit: type=1326 audit(1750097731.182:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 116.985210][ T6066] udevd[6066]: failed to send result of seq 11165 to main daemon: Connection refused [ 117.043655][ T30] audit: type=1326 audit(1750097731.182:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 117.140278][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 117.148306][ T30] audit: type=1326 audit(1750097731.182:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 117.211832][ T6070] Zero length message leads to an empty skb [ 117.461892][ T30] audit: type=1326 audit(1750097731.182:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 117.645505][ T30] audit: type=1326 audit(1750097731.182:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 117.683131][ T30] audit: type=1326 audit(1750097731.182:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 117.795933][ T6076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.391674][ T30] audit: type=1326 audit(1750097731.192:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 121.658541][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 121.658581][ T30] audit: type=1326 audit(1750097736.362:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43015858e7 code=0x7ffc0000 [ 121.847824][ T30] audit: type=1326 audit(1750097736.402:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f430152ab19 code=0x7ffc0000 [ 121.876168][ T30] audit: type=1326 audit(1750097736.402:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43015858e7 code=0x7ffc0000 [ 122.357118][ T30] audit: type=1326 audit(1750097736.402:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f430152ab19 code=0x7ffc0000 [ 122.371920][ T6096] Process accounting resumed [ 122.383151][ T30] audit: type=1326 audit(1750097736.402:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43015858e7 code=0x7ffc0000 [ 122.511680][ T30] audit: type=1326 audit(1750097736.402:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f430152ab19 code=0x7ffc0000 [ 122.752726][ T30] audit: type=1326 audit(1750097736.402:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 122.991201][ T30] audit: type=1326 audit(1750097736.402:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6094 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 124.571795][ T6119] program syz.2.46 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.888247][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.026726][ T6116] Process accounting resumed [ 129.465425][ T6142] program syz.0.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.178515][ T6152] syz.4.53 (6152) used greatest stack depth: 16904 bytes left [ 132.483716][ T30] audit: type=1800 audit(1750097747.192:124): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.56" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 134.633467][ T30] audit: type=1326 audit(1750097749.342:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55a33858e7 code=0x7ffc0000 [ 134.842920][ T30] audit: type=1326 audit(1750097749.372:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55a332ab19 code=0x7ffc0000 [ 135.014371][ T30] audit: type=1326 audit(1750097749.372:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55a33858e7 code=0x7ffc0000 [ 135.152677][ T30] audit: type=1326 audit(1750097749.372:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55a332ab19 code=0x7ffc0000 [ 135.213983][ T6168] Process accounting resumed [ 135.277302][ T30] audit: type=1326 audit(1750097749.372:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 135.628352][ T30] audit: type=1326 audit(1750097749.372:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 135.941534][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.093649][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.105851][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.129744][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.145048][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.513419][ T30] audit: type=1326 audit(1750097749.422:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55a338e929 code=0x7ffc0000 [ 136.539313][ T30] audit: type=1326 audit(1750097749.432:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55a33858e7 code=0x7ffc0000 [ 136.582286][ T30] audit: type=1326 audit(1750097749.452:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55a332ab19 code=0x7ffc0000 [ 137.498224][ T30] audit: type=1326 audit(1750097749.452:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55a33858e7 code=0x7ffc0000 [ 137.521675][ T30] audit: type=1326 audit(1750097749.452:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55a332ab19 code=0x7ffc0000 [ 137.544621][ T30] audit: type=1326 audit(1750097749.452:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55a33858e7 code=0x7ffc0000 [ 137.567299][ T30] audit: type=1326 audit(1750097749.472:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55a332ab19 code=0x7ffc0000 [ 137.589297][ T30] audit: type=1326 audit(1750097749.482:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55a33858e7 code=0x7ffc0000 [ 137.611053][ T30] audit: type=1326 audit(1750097749.482:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55a332ab19 code=0x7ffc0000 [ 137.718421][ T30] audit: type=1326 audit(1750097749.482:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55a33858e7 code=0x7ffc0000 [ 137.857489][ T30] audit: type=1326 audit(1750097749.482:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55a332ab19 code=0x7ffc0000 [ 138.023617][ T30] audit: type=1326 audit(1750097749.482:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55a33858e7 code=0x7ffc0000 [ 138.088929][ T30] audit: type=1326 audit(1750097749.482:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6166 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55a332ab19 code=0x7ffc0000 [ 138.168007][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.180141][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.236187][ T5843] Bluetooth: hci5: command tx timeout [ 138.959376][ T3427] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.662641][ T6209] program syz.1.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.320592][ T5843] Bluetooth: hci5: command tx timeout [ 141.388493][ T977] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.485389][ T3427] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.642100][ T977] usb 2-1: config 129 has an invalid interface number: 138 but max is 3 [ 141.738372][ T977] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 141.869164][ T6221] syz.2.76 uses obsolete (PF_INET,SOCK_PACKET) [ 141.975542][ T977] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 141.985493][ T977] usb 2-1: config 129 has no interface number 0 [ 141.991918][ T977] usb 2-1: config 129 has no interface number 1 [ 141.998403][ T977] usb 2-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 142.011815][ T977] usb 2-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 142.024960][ T977] usb 2-1: config 129 interface 138 has no altsetting 0 [ 142.032233][ T977] usb 2-1: config 129 interface 2 has no altsetting 0 [ 142.051246][ T977] usb 2-1: string descriptor 0 read error: -22 [ 142.062868][ T3427] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.081851][ T977] usb 2-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 142.187163][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.621679][ T5843] Bluetooth: hci5: command tx timeout [ 142.825766][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 142.881168][ T977] usb 2-1: can't set config #129, error -71 [ 142.917561][ T977] usb 2-1: USB disconnect, device number 3 [ 142.961184][ T3427] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.628312][ T5843] Bluetooth: hci5: command tx timeout [ 144.718804][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'. [ 145.241267][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.81'. [ 145.339406][ T6257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.615783][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.656283][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.675125][ T6174] bridge_slave_0: entered allmulticast mode [ 147.704264][ T6174] bridge_slave_0: entered promiscuous mode [ 147.847826][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.857098][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.865495][ T6174] bridge_slave_1: entered allmulticast mode [ 149.081992][ T6174] bridge_slave_1: entered promiscuous mode [ 150.524174][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.066771][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.133929][ T3427] bridge_slave_1: left allmulticast mode [ 151.254328][ T6287] Cannot find add_set index 0 as target [ 151.411458][ T3427] bridge_slave_1: left promiscuous mode [ 151.497347][ T3427] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.747644][ T3427] bridge_slave_0: left allmulticast mode [ 151.761579][ T3427] bridge_slave_0: left promiscuous mode [ 151.846410][ T3427] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.644123][ T3427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.667212][ T3427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.723898][ T3427] bond0 (unregistering): Released all slaves [ 154.863620][ T6316] SET target dimension over the limit! [ 154.937382][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.98'. [ 154.952753][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.0.98'. [ 155.172686][ T6174] team0: Port device team_slave_0 added [ 155.408744][ T6174] team0: Port device team_slave_1 added [ 155.440603][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 155.659566][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.573396][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.668246][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.717105][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.750301][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.777506][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.031764][ T6174] hsr_slave_0: entered promiscuous mode [ 157.054908][ T6174] hsr_slave_1: entered promiscuous mode [ 157.062166][ T6174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.070216][ T6174] Cannot create hsr debugfs directory [ 157.083525][ T3427] hsr_slave_0: left promiscuous mode [ 157.090180][ T3427] hsr_slave_1: left promiscuous mode [ 157.096366][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.116144][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.126282][ T3427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.135165][ T3427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.234051][ T3427] veth1_macvtap: left promiscuous mode [ 157.263248][ T3427] veth0_macvtap: left promiscuous mode [ 158.138436][ T6353] SET target dimension over the limit! [ 158.228983][ T3427] veth1_vlan: left promiscuous mode [ 158.245366][ T3427] veth0_vlan: left promiscuous mode [ 161.336820][ T3427] team0 (unregistering): Port device team_slave_1 removed [ 161.373974][ T3427] team0 (unregistering): Port device team_slave_0 removed [ 162.702617][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 162.702636][ T30] audit: type=1326 audit(1750097777.412:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 162.739645][ T30] audit: type=1326 audit(1750097777.412:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 162.778279][ T30] audit: type=1326 audit(1750097777.452:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 162.849318][ T30] audit: type=1326 audit(1750097777.452:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 163.061624][ T30] audit: type=1326 audit(1750097777.452:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 163.084082][ T30] audit: type=1326 audit(1750097777.452:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 163.106000][ T30] audit: type=1326 audit(1750097777.452:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 163.139943][ T30] audit: type=1326 audit(1750097777.452:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 163.983248][ T30] audit: type=1326 audit(1750097777.452:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 164.014005][ T30] audit: type=1326 audit(1750097777.452:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6375 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 166.864945][ T6174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.885809][ T6174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.923233][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 167.050225][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 167.151409][ T6174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.017757][ T6420] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 168.282929][ T6174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.303736][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 168.303757][ T30] audit: type=1800 audit(1750097782.972:298): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.127" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 169.920185][ T6439] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 170.942407][ T30] audit: type=1326 audit(1750097785.652:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 171.418568][ T30] audit: type=1326 audit(1750097785.652:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 171.512355][ T30] audit: type=1326 audit(1750097785.692:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 171.586425][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.610911][ T30] audit: type=1326 audit(1750097785.692:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 171.689625][ T6174] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.825685][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.832896][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.860712][ T30] audit: type=1326 audit(1750097785.692:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 171.876138][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.890130][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.969932][ T6174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.989596][ T30] audit: type=1326 audit(1750097785.692:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 172.013740][ T6174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.215715][ T30] audit: type=1326 audit(1750097785.692:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 172.237316][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.243680][ T30] audit: type=1326 audit(1750097785.692:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.4.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 172.266863][ T30] audit: type=1326 audit(1750097785.692:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430158e929 code=0x7ffc0000 [ 172.287888][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.818378][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 173.818401][ T30] audit: type=1800 audit(1750097788.462:344): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.136" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 174.018359][ T6474] usb usb1: usbfs: process 6474 (syz.2.139) did not claim interface 0 before use [ 175.454925][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.155599][ T6509] capability: warning: `syz.0.143' uses deprecated v2 capabilities in a way that may be insecure [ 178.420973][ T6174] veth0_vlan: entered promiscuous mode [ 178.441720][ T6520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.465322][ T6174] veth1_vlan: entered promiscuous mode [ 179.249876][ T6174] veth0_macvtap: entered promiscuous mode [ 179.624606][ T6174] veth1_macvtap: entered promiscuous mode [ 179.917248][ T6526] fuse: Unknown parameter '' [ 179.945033][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.832930][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.074926][ T6174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.088152][ T6174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.097175][ T6174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.153288][ T6174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.587591][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.707857][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.344698][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.379116][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.617965][ T6552] SET target dimension over the limit! [ 186.548553][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 188.090194][ T6574] lo speed is unknown, defaulting to 1000 [ 188.101476][ T6574] lo speed is unknown, defaulting to 1000 [ 188.111078][ T6574] lo speed is unknown, defaulting to 1000 [ 188.256317][ T6574] infiniband sz1: set active [ 188.261350][ T6574] infiniband sz1: added lo [ 188.275826][ T43] lo speed is unknown, defaulting to 1000 [ 188.282476][ T2156] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.445114][ T6574] RDS/IB: sz1: added [ 188.449956][ T6574] smc: adding ib device sz1 with port count 1 [ 188.456373][ T6574] smc: ib device sz1 port 1 has pnetid [ 188.465650][ T6574] lo speed is unknown, defaulting to 1000 [ 188.667852][ T6574] lo speed is unknown, defaulting to 1000 [ 188.826999][ T6574] lo speed is unknown, defaulting to 1000 [ 188.984572][ T6574] lo speed is unknown, defaulting to 1000 [ 189.138127][ T6574] lo speed is unknown, defaulting to 1000 [ 189.293965][ T43] lo speed is unknown, defaulting to 1000 [ 189.423682][ T2156] usb 2-1: device descriptor read/all, error -71 [ 192.017732][ T6621] rdma_rxe: rxe_newlink: failed to add lo [ 192.708506][ T5841] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 193.041369][ T5841] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 193.057497][ T5841] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 193.937449][ T5841] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 194.184928][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.226504][ T5841] usb 6-1: can't set config #27, error -71 [ 195.471642][ T5841] usb 6-1: USB disconnect, device number 2 [ 197.811976][ T6652] atomic_op ffff88807cede998 conn xmit_atomic 0000000000000000 [ 199.593173][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.600083][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.273678][ T6701] lo speed is unknown, defaulting to 1000 [ 204.999166][ T6703] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 205.251225][ T30] audit: type=1326 audit(1750097819.882:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 205.405410][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 205.411681][ T30] audit: type=1326 audit(1750097819.882:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 205.706738][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 205.771796][ T30] audit: type=1326 audit(1750097819.882:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 206.476537][ T30] audit: type=1326 audit(1750097819.892:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 206.498038][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.633086][ T30] audit: type=1326 audit(1750097819.892:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 206.868369][ T30] audit: type=1326 audit(1750097819.892:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 206.996400][ T30] audit: type=1326 audit(1750097819.892:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 207.965966][ T30] audit: type=1326 audit(1750097819.892:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 207.994004][ T30] audit: type=1326 audit(1750097819.912:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 208.016906][ T30] audit: type=1326 audit(1750097820.982:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6694 comm="syz.2.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 209.219334][ T6728] program syz.5.202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.018279][ T5841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 211.279032][ T5841] usb 6-1: config 129 has an invalid interface number: 138 but max is 3 [ 211.287545][ T5841] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 211.550053][ T5841] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 211.605667][ T5841] usb 6-1: config 129 has no interface number 0 [ 211.675010][ T5841] usb 6-1: config 129 has no interface number 1 [ 211.728659][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.737521][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.749365][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.749372][ T5841] usb 6-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 211.759430][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.781236][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.937466][ T6735] lo speed is unknown, defaulting to 1000 [ 212.124077][ T5841] usb 6-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 213.058307][ T6745] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 213.143600][ T5841] usb 6-1: config 129 interface 138 has no altsetting 0 [ 213.254313][ T5841] usb 6-1: config 129 interface 2 has no altsetting 0 [ 213.315332][ T5841] usb 6-1: string descriptor 0 read error: -71 [ 213.356122][ T5841] usb 6-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 213.396141][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.909526][ T51] Bluetooth: hci4: command tx timeout [ 214.480466][ T5841] usb 6-1: can't set config #129, error -71 [ 214.519257][ T5841] usb 6-1: USB disconnect, device number 3 [ 214.600758][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.613787][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.644343][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.661683][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.670535][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.983108][ T6758] loop2: detected capacity change from 0 to 7 [ 215.020613][ T6758] Dev loop2: unable to read RDB block 7 [ 215.036687][ T6758] loop2: AHDI p1 p2 p3 [ 215.056110][ T6758] loop2: partition table partially beyond EOD, truncated [ 215.070610][ T6744] lo speed is unknown, defaulting to 1000 [ 215.105436][ T6758] loop2: p1 start 1601398130 is beyond EOD, truncated [ 215.132162][ T6758] loop2: p2 start 1702059890 is beyond EOD, truncated [ 216.282919][ T51] Bluetooth: hci4: command tx timeout [ 216.708195][ T51] Bluetooth: hci6: command tx timeout [ 216.890845][ T1100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.928510][ T6753] lo speed is unknown, defaulting to 1000 [ 217.281182][ T1100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.318158][ T51] Bluetooth: hci4: command tx timeout [ 218.788395][ T51] Bluetooth: hci6: command tx timeout [ 220.118736][ T6793] 9pnet_virtio: no channels available for device syz [ 220.389664][ T5850] Bluetooth: hci4: command tx timeout [ 220.868165][ T5850] Bluetooth: hci6: command tx timeout [ 221.223086][ T1100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.522728][ T1100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.594873][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 222.159636][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 222.167286][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 222.727721][ T6821] 9pnet_virtio: no channels available for device syz [ 223.038337][ T51] Bluetooth: hci6: command tx timeout [ 223.284121][ T6827] sz1: rxe_newlink: already configured on lo [ 223.901715][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.915609][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.949213][ T6735] bridge_slave_0: entered allmulticast mode [ 223.963633][ T6735] bridge_slave_0: entered promiscuous mode [ 224.021070][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.033032][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.088132][ T5838] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 224.119094][ T6735] bridge_slave_1: entered allmulticast mode [ 224.129403][ T6735] bridge_slave_1: entered promiscuous mode [ 224.261020][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.288570][ T1100] bridge_slave_1: left allmulticast mode [ 224.294321][ T1100] bridge_slave_1: left promiscuous mode [ 224.298402][ T5838] usb 2-1: config 0 has no interfaces? [ 224.305972][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.326093][ T5838] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 224.337990][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.365557][ T5838] usb 2-1: config 0 descriptor?? [ 224.387272][ T1100] bridge_slave_0: left allmulticast mode [ 224.395301][ T1100] bridge_slave_0: left promiscuous mode [ 224.401712][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.615267][ T10] usb 2-1: USB disconnect, device number 6 [ 225.028735][ T6841] 9pnet_virtio: no channels available for device syz [ 225.513484][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.571720][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.587533][ T1100] bond0 (unregistering): Released all slaves [ 225.759145][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.798689][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.076550][ T6845] fuse: Unknown parameter 'grou00000000000000000000' [ 226.663339][ T6735] team0: Port device team_slave_0 added [ 226.892326][ T6753] chnl_net:caif_netlink_parms(): no params data found [ 227.437708][ T6735] team0: Port device team_slave_1 added [ 228.195768][ T6857] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 229.407486][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.455166][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.269733][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.447683][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 230.447729][ T30] audit: type=1326 audit(1750097845.152:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 230.728532][ T30] audit: type=1326 audit(1750097845.152:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 230.769052][ T30] audit: type=1326 audit(1750097845.192:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 230.796826][ T30] audit: type=1326 audit(1750097845.192:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 230.807959][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.818986][ T30] audit: type=1326 audit(1750097845.212:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 230.927918][ T30] audit: type=1326 audit(1750097845.212:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 230.989470][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.088180][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.105623][ T30] audit: type=1326 audit(1750097845.222:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 231.106480][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.5.236'. [ 231.152389][ T6876] netlink: 16 bytes leftover after parsing attributes in process `syz.5.236'. [ 231.207217][ T6880] loop2: detected capacity change from 0 to 7 [ 231.216627][ T6880] Dev loop2: unable to read RDB block 7 [ 231.233010][ T30] audit: type=1326 audit(1750097845.232:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 231.268391][ T30] audit: type=1326 audit(1750097845.232:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 231.278358][ T6880] loop2: AHDI p1 p2 p3 [ 231.290686][ T30] audit: type=1326 audit(1750097845.852:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6867 comm="syz.5.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3597d8e929 code=0x7ffc0000 [ 231.333790][ T6880] loop2: partition table partially beyond EOD, truncated [ 231.341521][ T6880] loop2: p1 start 1601398130 is beyond EOD, truncated [ 231.350181][ T6880] loop2: p2 start 1702059890 is beyond EOD, truncated [ 231.379613][ T1100] hsr_slave_0: left promiscuous mode [ 231.386713][ T1100] hsr_slave_1: left promiscuous mode [ 231.393856][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.401812][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.413365][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.421077][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.451470][ T1100] veth1_macvtap: left promiscuous mode [ 231.457377][ T1100] veth0_macvtap: left promiscuous mode [ 233.248788][ T5880] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 233.324251][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 233.391446][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 233.411611][ T5880] usb 3-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 233.438143][ T5880] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 233.472009][ T5880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 233.487943][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.505126][ T5880] usb 3-1: SerialNumber: syz [ 233.530751][ T5880] usb 3-1: config 0 descriptor?? [ 233.932794][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.947168][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.145274][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.172274][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.189818][ T6753] bridge_slave_0: entered allmulticast mode [ 235.203636][ T6753] bridge_slave_0: entered promiscuous mode [ 235.351586][ T5880] usb 3-1: 0:2 : does not exist [ 235.361705][ T5880] usb 3-1: unit 203 not found! [ 235.384951][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.403135][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.408456][ T5880] usb 3-1: USB disconnect, device number 3 [ 235.418450][ T6753] bridge_slave_1: entered allmulticast mode [ 235.479191][ T6753] bridge_slave_1: entered promiscuous mode [ 235.601932][ T6735] hsr_slave_0: entered promiscuous mode [ 235.619565][ T6735] hsr_slave_1: entered promiscuous mode [ 235.709336][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.744745][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.836410][ T6753] team0: Port device team_slave_0 added [ 235.847270][ T6753] team0: Port device team_slave_1 added [ 235.963647][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.975766][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.010467][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.042694][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.050203][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.080208][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.187805][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.229313][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.313552][ T6753] hsr_slave_0: entered promiscuous mode [ 237.326626][ T6753] hsr_slave_1: entered promiscuous mode [ 237.336313][ T6753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.358888][ T6753] Cannot create hsr debugfs directory [ 237.444977][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.519728][ T6735] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.582055][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.769726][ T6735] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.834487][ T6735] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.925650][ T6735] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 239.381849][ T1100] bridge_slave_1: left allmulticast mode [ 239.390858][ T1100] bridge_slave_1: left promiscuous mode [ 239.413063][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.469451][ T1100] bridge_slave_0: left allmulticast mode [ 239.477637][ T1100] bridge_slave_0: left promiscuous mode [ 239.499989][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.889266][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.938711][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.952960][ T1100] bond0 (unregistering): Released all slaves [ 242.726309][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.906747][ T6753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.914044][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 243.914064][ T30] audit: type=1800 audit(1750097858.472:371): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.265" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 243.959861][ T6753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.575787][ T6753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.707737][ T6753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.946553][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.439945][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.447265][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.460103][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.467500][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.652156][ T30] audit: type=1326 audit(1750097861.362:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8e18e929 code=0x7ffc0000 [ 246.733447][ T30] audit: type=1326 audit(1750097861.362:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8e18e929 code=0x7ffc0000 [ 246.833469][ T30] audit: type=1326 audit(1750097861.402:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f8e18e929 code=0x7ffc0000 [ 246.890909][ T30] audit: type=1326 audit(1750097861.402:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8e18e929 code=0x7ffc0000 [ 246.973598][ T30] audit: type=1326 audit(1750097861.402:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8e18e929 code=0x7ffc0000 [ 246.984821][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.105762][ T30] audit: type=1326 audit(1750097861.402:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f0f8e18e929 code=0x7ffc0000 [ 247.171514][ T30] audit: type=1326 audit(1750097861.402:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8e18e929 code=0x7ffc0000 [ 247.272673][ T30] audit: type=1326 audit(1750097861.402:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8e18e929 code=0x7ffc0000 [ 247.416996][ T1100] hsr_slave_0: left promiscuous mode [ 247.434756][ T1100] hsr_slave_1: left promiscuous mode [ 247.487405][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.535202][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.792472][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.805702][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.206398][ T1100] veth1_macvtap: left promiscuous mode [ 249.212502][ T7036] uprobe: syz.5.274:7036 failed to unregister, leaking uprobe [ 249.221029][ T7036] uprobe: syz.5.274:7036 failed to unregister, leaking uprobe [ 249.248414][ T1100] veth0_macvtap: left promiscuous mode [ 249.255434][ T1100] veth1_vlan: left promiscuous mode [ 249.261915][ T1100] veth0_vlan: left promiscuous mode [ 250.673471][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 250.715500][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 251.135946][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.190185][ T7037] lo speed is unknown, defaulting to 1000 [ 251.540571][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.547844][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.733238][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.740548][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.037721][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.598467][ T7062] lo speed is unknown, defaulting to 1000 [ 253.616994][ T7063] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 255.054098][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.844870][ T6735] veth0_vlan: entered promiscuous mode [ 256.910976][ T6735] veth1_vlan: entered promiscuous mode [ 257.282283][ T7106] rdma_rxe: rxe_newlink: failed to add lo [ 258.170446][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 258.394134][ T6735] veth0_macvtap: entered promiscuous mode [ 258.415033][ T6735] veth1_macvtap: entered promiscuous mode [ 258.461564][ T5896] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 258.496860][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.508943][ T5896] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 258.542657][ T5896] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.563187][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.578484][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.630646][ T6735] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.676648][ T6735] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.707071][ T6735] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.727902][ T6735] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.870022][ T10] usb 6-1: USB disconnect, device number 4 [ 259.021918][ T6753] veth0_vlan: entered promiscuous mode [ 259.144828][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.173896][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.260900][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.270219][ T6753] veth1_vlan: entered promiscuous mode [ 259.302369][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.432095][ T6753] veth0_macvtap: entered promiscuous mode [ 259.809497][ T6753] veth1_macvtap: entered promiscuous mode [ 259.972615][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'. [ 260.005050][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.229054][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.242493][ T6753] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.252275][ T6753] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.261749][ T6753] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.273971][ T6753] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.364824][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 260.425585][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 261.031638][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.396176][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.585001][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.612093][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.288186][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 263.757092][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.780850][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.799821][ T7153] lo speed is unknown, defaulting to 1000 [ 265.800486][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.302'. [ 267.560897][ T7186] program syz.1.304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.048535][ T5944] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 268.280865][ T5944] usb 2-1: config 129 has an invalid interface number: 138 but max is 3 [ 268.291189][ T5944] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 268.310602][ T5944] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 268.323311][ T5944] usb 2-1: config 129 has no interface number 0 [ 268.333096][ T5944] usb 2-1: config 129 has no interface number 1 [ 268.344796][ T5944] usb 2-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 268.373157][ T5944] usb 2-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 268.402697][ T5944] usb 2-1: config 129 interface 138 has no altsetting 0 [ 268.410254][ T5944] usb 2-1: config 129 interface 2 has no altsetting 0 [ 268.450662][ T5944] usb 2-1: string descriptor 0 read error: -22 [ 268.457041][ T5944] usb 2-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 268.644351][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.388750][ T5944] usb 2-1: USB disconnect, device number 7 [ 273.818737][ T7238] Cannot find add_set index 0 as target [ 275.855570][ T7256] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 275.983692][ T7253] lo speed is unknown, defaulting to 1000 [ 276.601213][ T7264] 9pnet_virtio: no channels available for device syz [ 277.248853][ T30] audit: type=1326 audit(1750097891.882:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 277.507364][ T30] audit: type=1326 audit(1750097891.882:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 277.541920][ T30] audit: type=1326 audit(1750097891.882:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 277.565874][ T30] audit: type=1326 audit(1750097891.882:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 277.631357][ T30] audit: type=1326 audit(1750097891.892:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 277.807715][ T30] audit: type=1326 audit(1750097891.892:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 277.830418][ T30] audit: type=1326 audit(1750097891.892:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 277.853976][ T30] audit: type=1326 audit(1750097891.892:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 277.890803][ T30] audit: type=1326 audit(1750097891.892:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.7.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 278.510302][ T7271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.871728][ T30] audit: type=1326 audit(1750097891.892:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6078e929 code=0x7ffc0000 [ 279.472641][ T7277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.905049][ T7289] lo speed is unknown, defaulting to 1000 [ 282.610041][ T7290] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 287.837118][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.865569][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.876250][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.885806][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.893684][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 289.112158][ T7338] lo speed is unknown, defaulting to 1000 [ 290.116654][ T5843] Bluetooth: hci0: command tx timeout [ 290.409153][ T7353] uprobe: syz.7.346:7353 failed to unregister, leaking uprobe [ 290.417018][ T7353] uprobe: syz.7.346:7353 failed to unregister, leaking uprobe [ 291.243316][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.262104][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.333101][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.342136][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.353049][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.444039][ T1158] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.741913][ T1158] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.772618][ T7354] lo speed is unknown, defaulting to 1000 [ 291.933083][ T1158] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.002995][ T7362] lo speed is unknown, defaulting to 1000 [ 292.148446][ T5843] Bluetooth: hci0: command tx timeout [ 292.254040][ T1158] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.539963][ T5843] Bluetooth: hci2: command tx timeout [ 294.063155][ T7380] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 294.080784][ T7377] uprobe: syz.2.349:7377 failed to unregister, leaking uprobe [ 294.097919][ T7377] uprobe: syz.2.349:7377 failed to unregister, leaking uprobe [ 294.228330][ T5843] Bluetooth: hci0: command tx timeout [ 294.402622][ T7338] chnl_net:caif_netlink_parms(): no params data found [ 294.433535][ T7379] lo speed is unknown, defaulting to 1000 [ 294.537245][ T1158] bridge_slave_1: left allmulticast mode [ 294.543818][ T1158] bridge_slave_1: left promiscuous mode [ 294.563976][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.574561][ T1158] bridge_slave_0: left allmulticast mode [ 294.598212][ T1158] bridge_slave_0: left promiscuous mode [ 294.614408][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.601683][ T5843] Bluetooth: hci2: command tx timeout [ 295.973493][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.994822][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.014667][ T1158] bond0 (unregistering): Released all slaves [ 296.308169][ T5843] Bluetooth: hci0: command tx timeout [ 296.800109][ T7338] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.807723][ T7338] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.815159][ T7338] bridge_slave_0: entered allmulticast mode [ 296.827452][ T7338] bridge_slave_0: entered promiscuous mode [ 296.869693][ T7338] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.877175][ T7338] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.928467][ T7338] bridge_slave_1: entered allmulticast mode [ 296.937951][ T7338] bridge_slave_1: entered promiscuous mode [ 297.285096][ T7338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.325786][ T1158] hsr_slave_0: left promiscuous mode [ 297.348225][ T1158] hsr_slave_1: left promiscuous mode [ 297.489635][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.543085][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.782524][ T5843] Bluetooth: hci2: command tx timeout [ 298.362064][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.369881][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.419490][ T1158] veth1_macvtap: left promiscuous mode [ 298.425229][ T1158] veth0_macvtap: left promiscuous mode [ 298.432000][ T1158] veth1_vlan: left promiscuous mode [ 298.437943][ T1158] veth0_vlan: left promiscuous mode [ 299.233053][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 299.287020][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 299.842087][ T5843] Bluetooth: hci2: command tx timeout [ 299.920629][ T7338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.006726][ T7410] lo speed is unknown, defaulting to 1000 [ 300.012958][ T7338] team0: Port device team_slave_0 added [ 300.016712][ T7338] team0: Port device team_slave_1 added [ 300.066154][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.073609][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.140416][ T7338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.178413][ T7338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.190199][ T7338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.263309][ T7338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.544842][ T7338] hsr_slave_0: entered promiscuous mode [ 300.552128][ T7338] hsr_slave_1: entered promiscuous mode [ 300.559310][ T7338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.566919][ T7338] Cannot create hsr debugfs directory [ 301.787288][ T7444] batadv1: entered promiscuous mode [ 301.797981][ T7444] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 301.864427][ T7362] chnl_net:caif_netlink_parms(): no params data found [ 302.154020][ T43] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 302.225804][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.234044][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.246764][ T7362] bridge_slave_0: entered allmulticast mode [ 302.256705][ T7362] bridge_slave_0: entered promiscuous mode [ 302.262274][ T7453] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.362'. [ 302.286892][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.302748][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.311680][ T7362] bridge_slave_1: entered allmulticast mode [ 302.320142][ T7362] bridge_slave_1: entered promiscuous mode [ 302.350041][ T43] usb 7-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 302.368253][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 302.379891][ T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 302.399697][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.400935][ T1158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.407938][ T43] usb 7-1: SerialNumber: syz [ 302.429343][ T43] usb 7-1: config 0 descriptor?? [ 302.448182][ T5896] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 302.511535][ T7362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.583389][ T7362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.604816][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 302.626274][ T5896] usb 3-1: config 0 has no interfaces? [ 302.650546][ T5896] usb 3-1: New USB device found, idVendor=12d1, idProduct=f5c3, bcdDevice=a5.1e [ 302.673917][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.692758][ T1158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.692834][ T5896] usb 3-1: Product: syz [ 302.717329][ T5896] usb 3-1: Manufacturer: syz [ 302.812144][ T5896] usb 3-1: SerialNumber: syz [ 302.859583][ T5896] usb 3-1: config 0 descriptor?? [ 302.891335][ T7362] team0: Port device team_slave_0 added [ 302.970474][ T1158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.974663][ T43] usb 7-1: 0:2 : does not exist [ 302.989774][ T7338] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 302.991865][ T43] usb 7-1: unit 203 not found! [ 303.013741][ T7362] team0: Port device team_slave_1 added [ 303.024375][ T43] usb 7-1: USB disconnect, device number 2 [ 303.108526][ T7463] netlink: 1688 bytes leftover after parsing attributes in process `syz.7.364'. [ 303.112740][ T5838] usb 3-1: USB disconnect, device number 4 [ 303.149814][ T1158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.165187][ T7338] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 303.179577][ T7338] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 303.193396][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.200822][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.232519][ T7362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.247916][ T7338] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 303.269318][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.276337][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.312293][ T7362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.360526][ T7467] netlink: 60 bytes leftover after parsing attributes in process `syz.7.365'. [ 303.428907][ T7362] hsr_slave_0: entered promiscuous mode [ 303.437303][ T7362] hsr_slave_1: entered promiscuous mode [ 303.444453][ T7362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.452753][ T7362] Cannot create hsr debugfs directory [ 303.637244][ T1158] bridge_slave_1: left allmulticast mode [ 303.646070][ T1158] bridge_slave_1: left promiscuous mode [ 303.656497][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.683623][ T1158] bridge_slave_0: left allmulticast mode [ 303.696351][ T1158] bridge_slave_0: left promiscuous mode [ 303.703362][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.720373][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 303.720387][ T30] audit: type=1326 audit(1750097918.432:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 304.290577][ T30] audit: type=1326 audit(1750097918.432:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 304.392269][ T30] audit: type=1326 audit(1750097918.432:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 304.456982][ T30] audit: type=1326 audit(1750097918.462:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 304.520344][ T30] audit: type=1326 audit(1750097918.462:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 304.565505][ T30] audit: type=1326 audit(1750097918.462:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 304.629434][ T30] audit: type=1326 audit(1750097918.472:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 304.717606][ T30] audit: type=1326 audit(1750097918.472:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 304.796597][ T30] audit: type=1326 audit(1750097918.492:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="syz.6.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 305.228582][ T977] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 305.433180][ T30] audit: type=1326 audit(1750097918.492:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7476 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 305.535839][ T977] usb 8-1: Using ep0 maxpacket: 32 [ 305.553798][ T977] usb 8-1: config 0 has no interfaces? [ 305.598457][ T977] usb 8-1: New USB device found, idVendor=12d1, idProduct=f5c3, bcdDevice=a5.1e [ 305.607591][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.622384][ T977] usb 8-1: Product: syz [ 305.626700][ T977] usb 8-1: Manufacturer: syz [ 305.651041][ T977] usb 8-1: SerialNumber: syz [ 305.665053][ T977] usb 8-1: config 0 descriptor?? [ 305.977412][ T7491] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.373'. [ 306.108120][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.6.372'. [ 306.285507][ T5838] usb 8-1: USB disconnect, device number 2 [ 306.637000][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.665452][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.687888][ T1158] bond0 (unregistering): Released all slaves [ 307.659363][ T7499] fuse: Unknown parameter 'user_i00000000000000000000' [ 308.504774][ T7505] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 308.646003][ T7510] netlink: 'syz.7.377': attribute type 72 has an invalid length. [ 308.737295][ T7338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.954384][ T7338] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.017095][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.024436][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.058057][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.065374][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.469600][ T1158] hsr_slave_0: left promiscuous mode [ 309.493440][ T1158] hsr_slave_1: left promiscuous mode [ 310.186227][ T7523] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 310.198233][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.215267][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.226480][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.234160][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.276929][ T1158] veth1_macvtap: left promiscuous mode [ 310.310506][ T1158] veth0_macvtap: left promiscuous mode [ 310.320089][ T1158] veth1_vlan: left promiscuous mode [ 310.325590][ T1158] veth0_vlan: left promiscuous mode [ 311.448806][ T7542] netlink: 132 bytes leftover after parsing attributes in process `syz.7.382'. [ 311.480223][ T7543] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.383'. [ 311.764477][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 311.871660][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 312.768948][ T7549] uprobe: syz.7.385:7549 failed to unregister, leaking uprobe [ 312.777152][ T7549] uprobe: syz.7.385:7549 failed to unregister, leaking uprobe [ 313.105051][ T5966] smc: removing ib device sz1 [ 313.117737][ T7362] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 313.209935][ T5896] lo speed is unknown, defaulting to 1000 [ 313.229234][ T5896] sz1: Port: 1 Link DOWN [ 313.320532][ T7362] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 313.478110][ T7362] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 313.543721][ T7362] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 313.637852][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.387'. [ 314.003708][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.298230][ T7362] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.041996][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.049343][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.105548][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.112807][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.191158][ T7362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.224950][ T7362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.357027][ T7338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.438237][ T5896] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 315.612547][ T5896] usb 7-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 315.626621][ T5896] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 315.643543][ T5896] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 315.657843][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.682585][ T5896] usb 7-1: SerialNumber: syz [ 315.745802][ T5896] usb 7-1: config 0 descriptor?? [ 315.787134][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.152600][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.161943][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.309590][ T7338] veth0_vlan: entered promiscuous mode [ 316.331642][ T7338] veth1_vlan: entered promiscuous mode [ 316.759472][ T7338] veth0_macvtap: entered promiscuous mode [ 316.766025][ T5896] usb 7-1: 0:2 : does not exist [ 316.785219][ T5896] usb 7-1: unit 203 not found! [ 316.825680][ T5896] usb 7-1: USB disconnect, device number 3 [ 317.060992][ T7338] veth1_macvtap: entered promiscuous mode [ 317.141036][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.177332][ T7338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.206561][ T7362] veth0_vlan: entered promiscuous mode [ 317.221454][ T7338] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.239752][ T7338] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.252604][ T7338] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.264730][ T7338] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.317650][ T7362] veth1_vlan: entered promiscuous mode [ 317.546955][ T7362] veth0_macvtap: entered promiscuous mode [ 317.571504][ T5964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.585067][ T7362] veth1_macvtap: entered promiscuous mode [ 317.608456][ T5964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.684776][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.697423][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.710166][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.752008][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.816944][ T7362] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.843253][ T7362] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.852563][ T7362] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.861552][ T7362] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.304526][ T7531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.321778][ T7531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.458366][ T7614] Cannot find add_set index 0 as target [ 319.014774][ T7535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.056506][ T7535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.320751][ T7617] netlink: 'syz.8.394': attribute type 72 has an invalid length. [ 319.486049][ T7621] netlink: 'syz.8.396': attribute type 72 has an invalid length. [ 320.039593][ T5915] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 320.418738][ T5915] usb 8-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 320.533175][ T5915] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 320.606336][ T5915] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 320.626752][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 320.635657][ T5915] usb 8-1: SerialNumber: syz [ 320.693617][ T5915] usb 8-1: config 0 descriptor?? [ 321.185379][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.202281][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.821297][ T5915] usb 8-1: 0:2 : does not exist [ 321.826323][ T5915] usb 8-1: unit 203 not found! [ 321.885617][ T5915] usb 8-1: USB disconnect, device number 3 [ 322.249682][ T7643] lo speed is unknown, defaulting to 1000 [ 322.256164][ T7643] lo speed is unknown, defaulting to 1000 [ 322.269761][ T7643] lo speed is unknown, defaulting to 1000 [ 322.312256][ T7643] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 322.459750][ T7643] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 322.863107][ T7643] lo speed is unknown, defaulting to 1000 [ 322.871233][ T7643] lo speed is unknown, defaulting to 1000 [ 322.879099][ T7643] lo speed is unknown, defaulting to 1000 [ 322.886866][ T7643] lo speed is unknown, defaulting to 1000 [ 322.897039][ T7643] lo speed is unknown, defaulting to 1000 [ 322.958836][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.965462][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.255871][ T7658] netlink: 'syz.2.406': attribute type 72 has an invalid length. [ 324.337696][ T7662] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.408'. [ 326.533364][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 326.533384][ T30] audit: type=1326 audit(1750097941.242:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 326.710124][ T30] audit: type=1326 audit(1750097941.242:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 326.872887][ T30] audit: type=1326 audit(1750097941.242:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 326.900429][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.9.411'. [ 326.915620][ T30] audit: type=1326 audit(1750097941.242:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 326.961281][ T30] audit: type=1326 audit(1750097941.242:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 326.993933][ T30] audit: type=1326 audit(1750097941.242:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 327.188355][ T30] audit: type=1326 audit(1750097941.242:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 327.213889][ T30] audit: type=1326 audit(1750097941.242:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 327.244011][ T30] audit: type=1326 audit(1750097941.242:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 327.678729][ T30] audit: type=1326 audit(1750097941.282:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7685 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 329.246549][ T7706] lo speed is unknown, defaulting to 1000 [ 329.727039][ T7705] ref_ctr_offset mismatch. inode: 0xc0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 330.125421][ T7717] netlink: 'syz.9.420': attribute type 72 has an invalid length. [ 330.528923][ T7720] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.422'. [ 330.659473][ T7725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.481788][ T7732] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.424'. [ 333.492506][ T7737] lo speed is unknown, defaulting to 1000 [ 335.008107][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 335.826076][ T7762] siw: device registration error -23 [ 337.611986][ T7779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.342067][ T7781] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.436'. [ 338.472879][ T7785] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.438'. [ 339.911147][ T5843] Bluetooth: hci6: command 0x0406 tx timeout [ 342.345819][ T7809] lo speed is unknown, defaulting to 1000 [ 342.442835][ T7810] ref_ctr_offset mismatch. inode: 0x267 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 342.868248][ T5944] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 343.135651][ T5896] Process accounting resumed [ 343.733118][ T7835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.984298][ T5944] usb 7-1: device descriptor read/all, error -71 [ 347.010428][ T7852] program syz.7.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.318107][ T5838] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 348.256289][ T5838] usb 8-1: config 129 has an invalid interface number: 138 but max is 3 [ 348.264897][ T5838] usb 8-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 348.277103][ T5838] usb 8-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 348.288502][ T5838] usb 8-1: config 129 has no interface number 0 [ 348.295002][ T5838] usb 8-1: config 129 has no interface number 1 [ 348.301954][ T5838] usb 8-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 348.316061][ T5838] usb 8-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 348.329708][ T5838] usb 8-1: config 129 interface 138 has no altsetting 0 [ 348.336848][ T5838] usb 8-1: config 129 interface 2 has no altsetting 0 [ 348.352359][ T5838] usb 8-1: string descriptor 0 read error: -22 [ 348.368173][ T5838] usb 8-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 348.377471][ T5838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.570564][ T7875] ubi31: attaching mtd0 [ 349.578423][ T7875] ubi31: scanning is finished [ 349.583175][ T7875] ubi31: empty MTD device detected [ 350.317209][ T7875] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 350.591742][ T5896] usb 8-1: USB disconnect, device number 4 [ 351.000980][ T7900] lo speed is unknown, defaulting to 1000 [ 351.172226][ T7904] program syz.6.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.456596][ T5896] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 351.666664][ T5896] usb 7-1: config 129 has an invalid interface number: 138 but max is 3 [ 351.683497][ T5896] usb 7-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 351.714083][ T5896] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 4 [ 351.736666][ T5896] usb 7-1: config 129 has no interface number 0 [ 351.806655][ T5896] usb 7-1: config 129 has no interface number 1 [ 351.890999][ T5896] usb 7-1: config 129 interface 138 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 351.981167][ T5966] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 352.031959][ T5896] usb 7-1: config 129 interface 2 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 352.188691][ T5896] usb 7-1: config 129 interface 138 has no altsetting 0 [ 352.329101][ T5896] usb 7-1: config 129 interface 2 has no altsetting 0 [ 352.527436][ T5896] usb 7-1: string descriptor 0 read error: -22 [ 352.621024][ T5896] usb 7-1: New USB device found, idVendor=045e, idProduct=046e, bcdDevice=95.6f [ 352.716668][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.860401][ T5896] usb 7-1: USB disconnect, device number 6 [ 354.669423][ T7943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.239158][ T7960] netlink: 'syz.9.479': attribute type 13 has an invalid length. [ 357.486221][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.9.479'. [ 359.015681][ T7960] gretap0: refused to change device tx_queue_len [ 359.078403][ T7960] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 359.134658][ T5838] lo speed is unknown, defaulting to 1000 [ 359.180882][ T7972] lo speed is unknown, defaulting to 1000 [ 359.403678][ T5838] syz0: Port: 1 Link DOWN [ 361.026410][ T8006] lo speed is unknown, defaulting to 1000 [ 364.987385][ T8065] smc: net device bond0 applied user defined pnetid S [ 365.082285][ T8065] smc: net device bond0 erased user defined pnetid S [ 365.891750][ T8078] siw: device registration error -23 [ 366.129190][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.9.507'. [ 366.591907][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 367.300376][ T8095] ubi31: attaching mtd0 [ 367.319598][ T8095] ubi31: scanning is finished [ 368.189487][ T8095] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 369.271963][ T8113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.887935][ T8150] syzkaller1: entered promiscuous mode [ 375.091769][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 375.500710][ T8150] syzkaller1: entered allmulticast mode [ 376.865199][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.528'. [ 378.316542][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 378.316565][ T30] audit: type=1326 audit(1750097993.012:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 378.415175][ T30] audit: type=1326 audit(1750097993.012:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 379.601829][ T30] audit: type=1326 audit(1750097993.012:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 379.628275][ T30] audit: type=1326 audit(1750097993.012:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 379.650611][ T30] audit: type=1326 audit(1750097993.012:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 379.672741][ T30] audit: type=1326 audit(1750097993.012:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 379.695015][ T30] audit: type=1326 audit(1750097993.012:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 379.717819][ T30] audit: type=1326 audit(1750097993.012:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="syz.2.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 379.746464][ T30] audit: type=1326 audit(1750097993.012:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 379.786803][ T30] audit: type=1326 audit(1750097993.012:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8185 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff18af8e929 code=0x7ffc0000 [ 383.948961][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.955935][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.509332][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 384.509352][ T30] audit: type=1326 audit(1750097999.222:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 384.698783][ T30] audit: type=1326 audit(1750097999.252:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 384.738536][ T30] audit: type=1326 audit(1750097999.262:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 385.440369][ T30] audit: type=1326 audit(1750097999.262:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 385.475354][ T30] audit: type=1326 audit(1750097999.262:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 385.548321][ T30] audit: type=1326 audit(1750097999.262:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 385.755848][ T30] audit: type=1326 audit(1750097999.262:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 385.780457][ T30] audit: type=1326 audit(1750097999.262:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 385.803760][ T30] audit: type=1326 audit(1750097999.262:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fededf8d290 code=0x7ffc0000 [ 385.826544][ T30] audit: type=1326 audit(1750097999.262:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8225 comm="syz.6.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fededf8e929 code=0x7ffc0000 [ 386.803054][ T8244] batadv1: entered promiscuous mode [ 386.813640][ T8244] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 390.905570][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 390.905610][ T30] audit: type=1326 audit(1750098005.612:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 391.356453][ T30] audit: type=1326 audit(1750098005.752:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 391.432486][ T30] audit: type=1326 audit(1750098005.772:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 391.478157][ T30] audit: type=1326 audit(1750098005.772:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 391.523019][ T30] audit: type=1326 audit(1750098005.772:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 391.559003][ T30] audit: type=1326 audit(1750098005.822:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a0378d290 code=0x7ffc0000 [ 391.626783][ T30] audit: type=1326 audit(1750098005.842:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 391.657110][ T30] audit: type=1326 audit(1750098005.862:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 391.685469][ T30] audit: type=1326 audit(1750098006.172:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 391.852700][ T30] audit: type=1326 audit(1750098006.172:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8282 comm="syz.9.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0378e929 code=0x7ffc0000 [ 392.673939][ T8308] ip6gre1: entered promiscuous mode [ 392.689358][ T8308] ip6gre1: entered allmulticast mode [ 392.767706][ T8292] lo speed is unknown, defaulting to 1000 [ 393.333128][ T8303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.346797][ T8303] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 394.133654][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.576'. [ 395.078866][ T8329] batadv1: entered promiscuous mode [ 395.087776][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 395.118444][ T8303] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 395.128316][ T8303] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 395.202848][ T8303] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 395.237430][ T8303] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 395.257606][ T8331] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.577'. [ 395.867356][ T8335] lo speed is unknown, defaulting to 1000 [ 395.943663][ T8303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 395.962941][ T8303] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 396.000222][ T8303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 396.008275][ T8303] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 445.356659][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.363133][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.795658][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.804707][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 541.348551][ T31] INFO: task kworker/0:6:5944 blocked for more than 143 seconds. [ 541.356549][ T31] Not tainted 6.16.0-rc2-syzkaller #0 [ 541.362644][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.371424][ T31] task:kworker/0:6 state:D stack:23432 pid:5944 tgid:5944 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 541.383573][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 541.390515][ T31] Call Trace: [ 541.394134][ T31] [ 541.397113][ T31] __schedule+0x16a2/0x4cb0 [ 541.401779][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 541.407210][ T31] ? schedule+0x165/0x360 [ 541.411751][ T31] ? __pfx___schedule+0x10/0x10 [ 541.416690][ T31] ? schedule+0x91/0x360 [ 541.421096][ T31] schedule+0x165/0x360 [ 541.425316][ T31] schedule_preempt_disabled+0x13/0x30 [ 541.431002][ T31] __mutex_lock+0x724/0xe80 [ 541.435572][ T31] ? look_up_lock_class+0x74/0x170 [ 541.440775][ T31] ? __mutex_lock+0x51b/0xe80 [ 541.445617][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 541.452008][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 541.457231][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 541.463123][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 541.469049][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 541.475272][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 541.481358][ T31] process_scheduled_works+0xade/0x17b0 [ 541.486989][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.493185][ T31] worker_thread+0x8a0/0xda0 [ 541.497849][ T31] ? __kthread_parkme+0x7b/0x200 [ 541.502902][ T31] kthread+0x70e/0x8a0 [ 541.507015][ T31] ? __pfx_worker_thread+0x10/0x10 [ 541.512649][ T31] ? __pfx_kthread+0x10/0x10 [ 541.517301][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 541.522590][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.527838][ T31] ? __pfx_kthread+0x10/0x10 [ 541.532518][ T31] ret_from_fork+0x3fc/0x770 [ 541.537171][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 541.542389][ T31] ? __switch_to_asm+0x39/0x70 [ 541.547202][ T31] ? __switch_to_asm+0x33/0x70 [ 541.552169][ T31] ? __pfx_kthread+0x10/0x10 [ 541.556821][ T31] ret_from_fork_asm+0x1a/0x30 [ 541.561787][ T31] [ 541.564885][ T31] INFO: task syz.8.559:8272 blocked for more than 143 seconds. [ 541.572539][ T31] Not tainted 6.16.0-rc2-syzkaller #0 [ 541.578946][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.587667][ T31] task:syz.8.559 state:D stack:23584 pid:8272 tgid:8272 ppid:7338 task_flags:0x400040 flags:0x00004004 [ 541.600567][ T31] Call Trace: [ 541.603902][ T31] [ 541.606877][ T31] __schedule+0x16a2/0x4cb0 [ 541.611854][ T31] ? __lock_acquire+0xab9/0xd20 [ 541.616770][ T31] ? schedule+0x165/0x360 [ 541.621282][ T31] ? __pfx___schedule+0x10/0x10 [ 541.626209][ T31] ? schedule+0x91/0x360 [ 541.630686][ T31] schedule+0x165/0x360 [ 541.634907][ T31] schedule_preempt_disabled+0x13/0x30 [ 541.640583][ T31] __mutex_lock+0x724/0xe80 [ 541.645152][ T31] ? kobject_put+0x43f/0x480 [ 541.649872][ T31] ? __mutex_lock+0x51b/0xe80 [ 541.654604][ T31] ? rfkill_unregister+0xc8/0x220 [ 541.659735][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 541.664812][ T31] ? __pfx_device_del+0x10/0x10 [ 541.669824][ T31] rfkill_unregister+0xc8/0x220 [ 541.674744][ T31] nfc_unregister_device+0x96/0x2a0 [ 541.680168][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 541.685987][ T31] virtual_ncidev_close+0x56/0x90 [ 541.691168][ T31] __fput+0x449/0xa70 [ 541.695231][ T31] task_work_run+0x1d1/0x260 [ 541.699923][ T31] ? __pfx_task_work_run+0x10/0x10 [ 541.705088][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 541.711005][ T31] exit_to_user_mode_loop+0xec/0x110 [ 541.716341][ T31] do_syscall_64+0x2bd/0x3b0 [ 541.721140][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.726386][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.732542][ T31] ? clear_bhb_loop+0x60/0xb0 [ 541.737262][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.743271][ T31] RIP: 0033:0x7f801698e929 [ 541.747737][ T31] RSP: 002b:00007fff494c5448 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 541.756289][ T31] RAX: 0000000000000000 RBX: 00007f8016bb7ba0 RCX: 00007f801698e929 [ 541.764344][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 541.772499][ T31] RBP: 00007f8016bb7ba0 R08: 000000000001fb5c R09: 0000001b494c573f [ 541.780565][ T31] R10: 00007f8016bb7ac0 R11: 0000000000000246 R12: 000000000005fd65 [ 541.788780][ T31] R13: 00007f8016bb6320 R14: ffffffffffffffff R15: 00007fff494c5560 [ 541.796990][ T31] [ 541.800116][ T31] INFO: task syz.7.569:8303 blocked for more than 143 seconds. [ 541.807698][ T31] Not tainted 6.16.0-rc2-syzkaller #0 [ 541.813667][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.822738][ T31] task:syz.7.569 state:D stack:24408 pid:8303 tgid:8302 ppid:6753 task_flags:0x400140 flags:0x00004006 [ 541.835330][ T31] Call Trace: [ 541.838718][ T31] [ 541.841810][ T31] __schedule+0x16a2/0x4cb0 [ 541.846360][ T31] ? __lock_acquire+0xab9/0xd20 [ 541.851338][ T31] ? schedule+0x165/0x360 [ 541.855741][ T31] ? __pfx___schedule+0x10/0x10 [ 541.860715][ T31] ? schedule+0x91/0x360 [ 541.865018][ T31] schedule+0x165/0x360 [ 541.869257][ T31] schedule_preempt_disabled+0x13/0x30 [ 541.874763][ T31] __mutex_lock+0x724/0xe80 [ 541.879366][ T31] ? __lock_acquire+0xab9/0xd20 [ 541.884281][ T31] ? __mutex_lock+0x51b/0xe80 [ 541.889111][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 541.894443][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 541.899604][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.905080][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 541.911111][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 541.917539][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 541.923362][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 541.928938][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 541.934712][ T31] rfkill_set_block+0x1d2/0x440 [ 541.939670][ T31] rfkill_fop_write+0x44b/0x570 [ 541.944577][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 541.950148][ T31] ? security_kernfs_init_security+0x230/0x290 [ 541.956347][ T31] ? rw_verify_area+0x258/0x650 [ 541.961379][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 541.966827][ T31] vfs_write+0x27e/0xa90 [ 541.971215][ T31] ? __pfx_vfs_write+0x10/0x10 [ 541.976082][ T31] ? __fget_files+0x2a/0x420 [ 541.980778][ T31] ? __fget_files+0x2a/0x420 [ 541.985514][ T31] ? __fget_files+0x3a0/0x420 [ 541.990541][ T31] ? __fget_files+0x2a/0x420 [ 541.995632][ T31] ksys_write+0x145/0x250 [ 542.000081][ T31] ? __pfx_ksys_write+0x10/0x10 [ 542.004978][ T31] ? rcu_is_watching+0x15/0xb0 [ 542.009849][ T31] ? trace_sys_enter+0x25/0x120 [ 542.014761][ T31] do_syscall_64+0xfa/0x3b0 [ 542.019564][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.024984][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.031262][ T31] ? clear_bhb_loop+0x60/0xb0 [ 542.035988][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.042277][ T31] RIP: 0033:0x7ffa6078e929 [ 542.046749][ T31] RSP: 002b:00007ffa615b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 542.055568][ T31] RAX: ffffffffffffffda RBX: 00007ffa609b5fa0 RCX: 00007ffa6078e929 [ 542.064905][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 542.073197][ T31] RBP: 00007ffa60810b39 R08: 0000000000000000 R09: 0000000000000000 [ 542.083079][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.091317][ T31] R13: 0000000000000000 R14: 00007ffa609b5fa0 R15: 00007ffc34989f48 [ 542.099381][ T31] [ 542.102418][ T31] INFO: task syz.2.578:8337 blocked for more than 144 seconds. [ 542.111085][ T31] Not tainted 6.16.0-rc2-syzkaller #0 [ 542.117020][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.125887][ T31] task:syz.2.578 state:D stack:26840 pid:8337 tgid:8332 ppid:5831 task_flags:0x400040 flags:0x00004004 [ 542.137961][ T31] Call Trace: [ 542.141368][ T31] [ 542.144337][ T31] __schedule+0x16a2/0x4cb0 [ 542.148996][ T31] ? __lock_acquire+0xab9/0xd20 [ 542.153894][ T31] ? schedule+0x165/0x360 [ 542.158325][ T31] ? __pfx___schedule+0x10/0x10 [ 542.163330][ T31] ? schedule+0x91/0x360 [ 542.167622][ T31] schedule+0x165/0x360 [ 542.171965][ T31] schedule_preempt_disabled+0x13/0x30 [ 542.177484][ T31] __mutex_lock+0x724/0xe80 [ 542.182206][ T31] ? __mutex_lock+0x51b/0xe80 [ 542.186944][ T31] ? rfkill_register+0x37/0x8e0 [ 542.192044][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 542.197142][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 542.202776][ T31] ? device_initialize+0x24b/0x440 [ 542.208200][ T31] rfkill_register+0x37/0x8e0 [ 542.212962][ T31] nfc_register_device+0x14a/0x320 [ 542.218271][ T31] nci_register_device+0x87f/0x9d0 [ 542.223433][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 542.229186][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 542.234550][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 542.240034][ T31] virtual_ncidev_open+0x129/0x1a0 [ 542.245207][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 542.250943][ T31] misc_open+0x2bc/0x330 [ 542.255234][ T31] chrdev_open+0x4c9/0x5e0 [ 542.259772][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 542.264759][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 542.269814][ T31] do_dentry_open+0xdf0/0x1970 [ 542.274644][ T31] vfs_open+0x3b/0x340 [ 542.278805][ T31] ? path_openat+0x2ecd/0x3830 [ 542.283722][ T31] path_openat+0x2ee5/0x3830 [ 542.288424][ T31] ? arch_stack_walk+0xfc/0x150 [ 542.293377][ T31] ? __pfx_path_openat+0x10/0x10 [ 542.298429][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.304562][ T31] do_filp_open+0x1fa/0x410 [ 542.309496][ T31] ? __lock_acquire+0xab9/0xd20 [ 542.314473][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 542.320024][ T31] ? _raw_spin_unlock+0x28/0x50 [ 542.324939][ T31] ? alloc_fd+0x64c/0x6c0 [ 542.329441][ T31] do_sys_openat2+0x121/0x1c0 [ 542.334199][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.339748][ T31] ? exc_page_fault+0x76/0xf0 [ 542.344486][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 542.350267][ T31] __x64_sys_openat+0x138/0x170 [ 542.355208][ T31] do_syscall_64+0xfa/0x3b0 [ 542.359826][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.365173][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.371435][ T31] ? clear_bhb_loop+0x60/0xb0 [ 542.376148][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.382102][ T31] RIP: 0033:0x7ff18af8e929 [ 542.386549][ T31] RSP: 002b:00007ff18be60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.395388][ T31] RAX: ffffffffffffffda RBX: 00007ff18b1b6240 RCX: 00007ff18af8e929 [ 542.405880][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 542.414264][ T31] RBP: 00007ff18b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 542.422367][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.430530][ T31] R13: 0000000000000001 R14: 00007ff18b1b6240 R15: 00007ffee1bc98d8 [ 542.438769][ T31] [ 542.441856][ T31] INFO: task syz.6.579:8344 blocked for more than 144 seconds. [ 542.449563][ T31] Not tainted 6.16.0-rc2-syzkaller #0 [ 542.455495][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.464332][ T31] task:syz.6.579 state:D stack:28328 pid:8344 tgid:8336 ppid:6735 task_flags:0x400040 flags:0x00004004 [ 542.476718][ T31] Call Trace: [ 542.480107][ T31] [ 542.483083][ T31] __schedule+0x16a2/0x4cb0 [ 542.487661][ T31] ? __kasan_slab_free+0x62/0x70 [ 542.492748][ T31] ? security_file_open+0xb1/0x270 [ 542.497982][ T31] ? do_dentry_open+0x35e/0x1970 [ 542.502989][ T31] ? __lock_acquire+0xab9/0xd20 [ 542.507875][ T31] ? schedule+0x165/0x360 [ 542.512443][ T31] ? __pfx___schedule+0x10/0x10 [ 542.517329][ T31] ? schedule+0x91/0x360 [ 542.521666][ T31] schedule+0x165/0x360 [ 542.525862][ T31] schedule_preempt_disabled+0x13/0x30 [ 542.531433][ T31] __mutex_lock+0x724/0xe80 [ 542.535994][ T31] ? __mutex_lock+0x51b/0xe80 [ 542.540797][ T31] ? misc_open+0x51/0x330 [ 542.545169][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 542.550346][ T31] misc_open+0x51/0x330 [ 542.554554][ T31] chrdev_open+0x4c9/0x5e0 [ 542.559074][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 542.564075][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 542.569239][ T31] do_dentry_open+0xdf0/0x1970 [ 542.574068][ T31] vfs_open+0x3b/0x340 [ 542.578255][ T31] ? path_openat+0x2ecd/0x3830 [ 542.583070][ T31] path_openat+0x2ee5/0x3830 [ 542.587673][ T31] ? arch_stack_walk+0xfc/0x150 [ 542.592698][ T31] ? __pfx_path_openat+0x10/0x10 [ 542.597701][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.603898][ T31] do_filp_open+0x1fa/0x410 [ 542.608499][ T31] ? __lock_acquire+0xab9/0xd20 [ 542.613398][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 542.618555][ T31] ? _raw_spin_unlock+0x28/0x50 [ 542.623461][ T31] ? alloc_fd+0x64c/0x6c0 [ 542.630252][ T31] do_sys_openat2+0x121/0x1c0 [ 542.635021][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.640365][ T31] ? exc_page_fault+0x76/0xf0 [ 542.645188][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 542.650593][ T31] __x64_sys_openat+0x138/0x170 [ 542.655503][ T31] do_syscall_64+0xfa/0x3b0 [ 542.660098][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.665347][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.671499][ T31] ? clear_bhb_loop+0x60/0xb0 [ 542.676200][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.682177][ T31] RIP: 0033:0x7fededf8e929 [ 542.686753][ T31] RSP: 002b:00007fedeedb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.695458][ T31] RAX: ffffffffffffffda RBX: 00007fedee1b6080 RCX: 00007fededf8e929 [ 542.703506][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 542.711953][ T31] RBP: 00007fedee010b39 R08: 0000000000000000 R09: 0000000000000000 [ 542.720097][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.728280][ T31] R13: 0000000000000001 R14: 00007fedee1b6080 R15: 00007ffc47bc5698 [ 542.736390][ T31] [ 542.739522][ T31] INFO: task syz.9.581:8346 blocked for more than 144 seconds. [ 542.747106][ T31] Not tainted 6.16.0-rc2-syzkaller #0 [ 542.753216][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.762061][ T31] task:syz.9.581 state:D stack:28328 pid:8346 tgid:8345 ppid:7362 task_flags:0x400040 flags:0x00004004 [ 542.774566][ T31] Call Trace: [ 542.777884][ T31] [ 542.781004][ T31] __schedule+0x16a2/0x4cb0 [ 542.785565][ T31] ? __kasan_slab_free+0x62/0x70 [ 542.790814][ T31] ? security_file_open+0xb1/0x270 [ 542.796179][ T31] ? do_dentry_open+0x35e/0x1970 [ 542.801311][ T31] ? __lock_acquire+0xab9/0xd20 [ 542.806206][ T31] ? schedule+0x165/0x360 [ 542.810650][ T31] ? __pfx___schedule+0x10/0x10 [ 542.815560][ T31] ? schedule+0x91/0x360 [ 542.820199][ T31] schedule+0x165/0x360 [ 542.824406][ T31] schedule_preempt_disabled+0x13/0x30 [ 542.829977][ T31] __mutex_lock+0x724/0xe80 [ 542.834569][ T31] ? __mutex_lock+0x51b/0xe80 [ 542.839361][ T31] ? misc_open+0x51/0x330 [ 542.843736][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 542.849000][ T31] misc_open+0x51/0x330 [ 542.853294][ T31] chrdev_open+0x4c9/0x5e0 [ 542.857732][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 542.862766][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 542.867843][ T31] do_dentry_open+0xdf0/0x1970 [ 542.873044][ T31] vfs_open+0x3b/0x340 [ 542.877340][ T31] ? path_openat+0x2ecd/0x3830 [ 542.882327][ T31] path_openat+0x2ee5/0x3830 [ 542.887117][ T31] ? arch_stack_walk+0xfc/0x150 [ 542.892162][ T31] ? __pfx_path_openat+0x10/0x10 [ 542.897135][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.903396][ T31] do_filp_open+0x1fa/0x410 [ 542.908013][ T31] ? __lock_acquire+0xab9/0xd20 [ 542.912931][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 542.918172][ T31] ? _raw_spin_unlock+0x28/0x50 [ 542.923177][ T31] ? alloc_fd+0x64c/0x6c0 [ 542.927544][ T31] do_sys_openat2+0x121/0x1c0 [ 542.932357][ T31] ? __se_sys_futex+0x36f/0x400 [ 542.937243][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.942567][ T31] ? rcu_is_watching+0x15/0xb0 [ 542.947509][ T31] __x64_sys_openat+0x138/0x170 [ 542.952586][ T31] do_syscall_64+0xfa/0x3b0 [ 542.957354][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.962688][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.968871][ T31] ? clear_bhb_loop+0x60/0xb0 [ 542.973607][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.979617][ T31] RIP: 0033:0x7f0a0378e929 [ 542.984086][ T31] RSP: 002b:00007f0a04524038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.992712][ T31] RAX: ffffffffffffffda RBX: 00007f0a039b5fa0 RCX: 00007f0a0378e929 [ 543.000799][ T31] RDX: 0000000000020002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 543.008910][ T31] RBP: 00007f0a03810b39 R08: 0000000000000000 R09: 0000000000000000 [ 543.016968][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.025150][ T31] R13: 0000000000000000 R14: 00007f0a039b5fa0 R15: 00007ffe4d748398 [ 543.033356][ T31] [ 543.036461][ T31] [ 543.036461][ T31] Showing all locks held in the system: [ 543.044565][ T31] 1 lock held by khungtaskd/31: [ 543.049520][ T31] #0: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 543.059632][ T31] 1 lock held by klogd/5185: [ 543.064250][ T31] #0: ffff8880b873b798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 543.074467][ T31] 2 locks held by getty/5587: [ 543.079221][ T31] #0: ffff88814c7510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 543.089241][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 543.099499][ T31] 3 locks held by kworker/0:6/5944: [ 543.104836][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 543.116075][ T31] #1: ffffc90004e27bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 543.129839][ T31] #2: ffffffff8f7d8d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 543.141523][ T31] 2 locks held by kworker/u8:19/5967: [ 543.146947][ T31] 2 locks held by syz.8.559/8272: [ 543.152084][ T31] #0: ffff888057f19100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 543.162007][ T31] #1: ffffffff8f7d8d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 543.172596][ T31] 2 locks held by syz.7.569/8303: [ 543.177841][ T31] #0: ffffffff8f7d8d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 543.188141][ T31] #1: ffff888057f19100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 543.197889][ T31] 3 locks held by syz.2.578/8337: [ 543.203010][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.211598][ T31] #1: ffff88803112c100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 543.221314][ T31] #2: ffffffff8f7d8d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 543.231460][ T31] 1 lock held by syz.6.579/8344: [ 543.236434][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.245002][ T31] 1 lock held by syz.9.581/8346: [ 543.250054][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.258648][ T31] 1 lock held by syz-executor/8355: [ 543.263882][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.272521][ T31] 1 lock held by syz-executor/8357: [ 543.277756][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.286315][ T31] 1 lock held by syz-executor/8359: [ 543.291621][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.300167][ T31] 1 lock held by syz-executor/8362: [ 543.305386][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.313974][ T31] 1 lock held by syz-executor/8363: [ 543.319254][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.328059][ T31] 1 lock held by syz-executor/8365: [ 543.333292][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.341989][ T31] 1 lock held by syz-executor/8367: [ 543.347299][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.355872][ T31] 1 lock held by syz-executor/8369: [ 543.361185][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.369785][ T31] 1 lock held by syz-executor/8371: [ 543.375105][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.383644][ T31] 1 lock held by syz-executor/8373: [ 543.388940][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.397555][ T31] 1 lock held by syz-executor/8375: [ 543.402850][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.411444][ T31] 1 lock held by syz-executor/8377: [ 543.416652][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.425188][ T31] 1 lock held by syz-executor/8379: [ 543.430466][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.439015][ T31] 1 lock held by syz-executor/8381: [ 543.444238][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.452840][ T31] 1 lock held by syz-executor/8383: [ 543.458148][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 543.466895][ T31] [ 543.470760][ T31] ============================================= [ 543.470760][ T31] [ 543.479303][ T31] NMI backtrace for cpu 0 [ 543.479328][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 543.479351][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.479363][ T31] Call Trace: [ 543.479371][ T31] [ 543.479380][ T31] dump_stack_lvl+0x189/0x250 [ 543.479413][ T31] ? __wake_up_klogd+0xd9/0x110 [ 543.479439][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.479469][ T31] ? __pfx__printk+0x10/0x10 [ 543.479502][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 543.479532][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 543.479556][ T31] ? _printk+0xcf/0x120 [ 543.479590][ T31] ? __pfx__printk+0x10/0x10 [ 543.479615][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 543.479646][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 543.479677][ T31] watchdog+0xfee/0x1030 [ 543.479707][ T31] ? watchdog+0x1de/0x1030 [ 543.479744][ T31] kthread+0x70e/0x8a0 [ 543.479770][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.479796][ T31] ? __pfx_kthread+0x10/0x10 [ 543.479821][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.479851][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.479882][ T31] ? __pfx_kthread+0x10/0x10 [ 543.479907][ T31] ret_from_fork+0x3fc/0x770 [ 543.479940][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 543.479976][ T31] ? __switch_to_asm+0x39/0x70 [ 543.479996][ T31] ? __switch_to_asm+0x33/0x70 [ 543.480015][ T31] ? __pfx_kthread+0x10/0x10 [ 543.480039][ T31] ret_from_fork_asm+0x1a/0x30 [ 543.480077][ T31] [ 543.480086][ T31] Sending NMI from CPU 0 to CPUs 1: [ 543.636585][ C1] NMI backtrace for cpu 1 [ 543.636602][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 543.636624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.636636][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 543.636668][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f6 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 543.636686][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 543.636702][ C1] RAX: 9a1d43af08c5a200 RBX: ffffffff81975c68 RCX: 9a1d43af08c5a200 [ 543.636717][ C1] RDX: 0000000000000001 RSI: ffffffff8d96e7d3 RDI: ffffffff8be1b680 [ 543.636730][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 543.636743][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fe2f0 [ 543.636757][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a56b40 [ 543.636770][ C1] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 543.636785][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.636805][ C1] CR2: 00007f5228ac576b CR3: 000000000df38000 CR4: 00000000003526f0 [ 543.636822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 543.636832][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 543.636844][ C1] Call Trace: [ 543.636852][ C1] [ 543.636859][ C1] default_idle+0x13/0x20 [ 543.636877][ C1] default_idle_call+0x74/0xb0 [ 543.636896][ C1] do_idle+0x1e8/0x510 [ 543.636927][ C1] ? __pfx_do_idle+0x10/0x10 [ 543.636963][ C1] cpu_startup_entry+0x44/0x60 [ 543.636990][ C1] start_secondary+0x101/0x110 [ 543.637012][ C1] common_startup_64+0x13e/0x147 [ 543.637038][ C1] [ 543.637765][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 543.821914][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 543.832177][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.842428][ T31] Call Trace: [ 543.845728][ T31] [ 543.848674][ T31] dump_stack_lvl+0x99/0x250 [ 543.853291][ T31] ? __asan_memcpy+0x40/0x70 [ 543.857988][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 543.863209][ T31] ? __pfx__printk+0x10/0x10 [ 543.867854][ T31] panic+0x2db/0x790 [ 543.871780][ T31] ? __pfx_panic+0x10/0x10 [ 543.876225][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 543.882060][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 543.887460][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 543.893646][ T31] watchdog+0x102d/0x1030 [ 543.898009][ T31] ? watchdog+0x1de/0x1030 [ 543.902457][ T31] kthread+0x70e/0x8a0 [ 543.906582][ T31] ? __pfx_watchdog+0x10/0x10 [ 543.911277][ T31] ? __pfx_kthread+0x10/0x10 [ 543.915883][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.921112][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.926341][ T31] ? __pfx_kthread+0x10/0x10 [ 543.931036][ T31] ret_from_fork+0x3fc/0x770 [ 543.935650][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 543.940811][ T31] ? __switch_to_asm+0x39/0x70 [ 543.945606][ T31] ? __switch_to_asm+0x33/0x70 [ 543.950387][ T31] ? __pfx_kthread+0x10/0x10 [ 543.955080][ T31] ret_from_fork_asm+0x1a/0x30 [ 543.959875][ T31] [ 543.963271][ T31] Kernel Offset: disabled [ 543.967614][ T31] Rebooting in 86400 seconds..