last executing test programs: 23m19.748637028s ago: executing program 32 (id=434): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}, @IFLA_AF_SPEC={0x4}]}, 0x40}}, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000000200)=""/63, 0x3f}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000340)=""/208, 0xd0}], 0x6, &(0x7f00000002c0)=""/46, 0x2e}, 0x6}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='veth\x00', 0x0, r0) 22m54.477905606s ago: executing program 33 (id=515): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000180000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000003b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800821300007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000004602010076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m3.080958404s ago: executing program 34 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) (async) write$binfmt_misc(r7, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r7, 0x0, 0x81, 0x2) (async) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0bac0f0002ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 10m37.834416728s ago: executing program 35 (id=4146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0) 8m56.120694796s ago: executing program 36 (id=4651): eventfd2(0x5, 0x2) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x14, 0x96, 0x7e, 0x8, 0x413c, 0x8138, 0xe12f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x30, 0x60, 0x0, [{{0x9, 0x4, 0x4e, 0x0, 0x0, 0x8, 0xf1, 0x34}}]}}]}}, 0x0) 2m24.846803033s ago: executing program 3 (id=6433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014008000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) syz_usb_connect(0x3, 0x64, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2m23.522532357s ago: executing program 3 (id=6439): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="020602"], 0x10}}, 0x0) 2m23.49553572s ago: executing program 3 (id=6440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000001080)=""/73, &(0x7f0000000300)=0x49) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) 2m8.450527537s ago: executing program 37 (id=6440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000001080)=""/73, &(0x7f0000000300)=0x49) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) 2m6.000669681s ago: executing program 9 (id=6522): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000180000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500010305000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800821300007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000004602010076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m5.843096244s ago: executing program 9 (id=6523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) sendmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)="1f94258f0af7844bf26db6f497c748e9d66f040ee0682f0fd1e4617f50659457667ce7a9f45fd94bbdece50173f5262b7cbc989b70", 0x35}], 0x1, &(0x7f00000018c0)=[{0xe0, 0x3a, 0xfd2, "1ff302690a7f6a38d0ff8d6832a874fab1b223b05607a4c8c8c4b3d4755b57303066e19e2f3734b0ea006e2451196173de038a82d8eb59d2680b09c9ec1f63964748a353806c9a9ccf670ef27744dc05a9c1f2e4f472955fa08dec9da8077db6a8bf881cd5002b08d880ccf71c51c8fddad14e60313dd392bc748bbe3d27f01a3986115e3b8928a77a58114af28023e1ecb834037a4bd9901566a5dee7b5c7b7354916d80764d029645d4598fb9f4fb44e7aec2b32e94d5a11bb0ea7cad5e25139a3f648a605c463abe9cb"}, {0xb0, 0x119, 0xc43b, "086d5e4f4a03ba285c26ada243b1e05e1bd3782f6b1031c0b28ac8afddf56d7611ccc105098e7b9944a0d568e280a56b350240f2f34855d7e8aaf213f751227df72fb0894df829d1893bae450913d6ba7880a15976f095160168c796ed25d6e82000612332d56050e6d9e2cf45ce45fee17af939be0162c36cc112acee6c1b67dbd9056af79bb0de4a4aecd33c58ff2b8d47030589075107004891"}, {0xa0, 0x103, 0x818, "9690110cc91c6318c34f4abb9fd48bde1df254653d0e8d3d874becc66205e29eeec253031ec3bc851267eac20b246c10ccc4ea04cd5b3638f36a85febb7332030d84e73500f4bdbf285725fbaa5204b80b573af7767f59438ee3d1ba570bad2490213739b3c152f4e3e86e0109751f73d4b58b9b6b5b7be2db1fd57b020bb1d29b1038a428a7a2d86319bcaa25177d8c"}], 0x230}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="0f2054c4e39922c9a43e0fc759c9c74424001d010000c74424025f000000ff2c24c7442400f5ffffffc744240200b00000c7442406000000000f011424c46249002d0b000080c4e22d37f8f30f0966b81f000f00d00f20d835080000000f22d8", 0x60}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m4.777452306s ago: executing program 9 (id=6529): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r1, 0x1000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280"], 0x168}}, 0x4010) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c014}, 0x4c040) 2m4.635192593s ago: executing program 9 (id=6530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) symlink(0x0, &(0x7f00000059c0)='./file0\x00') r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 2m4.148580793s ago: executing program 9 (id=6534): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x800, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0x10ea}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m3.810609281s ago: executing program 9 (id=6535): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40080000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000000000406d041fc7000000000001090204f470a2096574770400000103000000092100000801220700090581030000060200"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "96"}]}}, 0x0}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES8=r1, @ANYBLOB='\x00'/10, @ANYRESHEX], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) socket$kcm(0x2, 0x1000000000000007, 0x0) 1m48.446017731s ago: executing program 38 (id=6535): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40080000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000000000406d041fc7000000000001090204f470a2096574770400000103000000092100000801220700090581030000060200"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "96"}]}}, 0x0}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000080000000000000", @ANYRES8=r1, @ANYBLOB='\x00'/10, @ANYRESHEX], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) socket$kcm(0x2, 0x1000000000000007, 0x0) 1m15.002099366s ago: executing program 1 (id=6733): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000240)='./file0\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r2, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xffffd000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000900)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88a86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061cddf2b257cacbba656cda626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34130a0000e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff0552d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9e9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39a8f3f1b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d77a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd37ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x7f94, {0x7, 0x28, 0x4, 0x42800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100"], 0x50) 1m14.661718143s ago: executing program 1 (id=6738): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x6, {0x5, 0x1, 0x1, 0x4000000000008, 0xfffffffd, 0x6d, {0x3, 0xfffffffffffffffb, 0x1, 0x100000000004, 0x7, 0x81, 0x8, 0x80000000, 0x8, 0x1000, 0x28001, 0x0, 0x0, 0x5, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x800, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000000)={{0x0, 0x2, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x4, 0xffff1000, 0x3, 0x5, 0xb, 0x8, 0xd, 0x4, 0x0, 0x81, 0x8, 0x1}, {0xd000, 0xd000, 0x0, 0x7, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x3}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0xf, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0xe, 0x81, 0x5, 0x8, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xd000, 0xa, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x6, 0x8, 0xe1}, {0xf000, 0x8080000, 0xc, 0xf8, 0xdd, 0x2a, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0x83c1}, {0xeeef0000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x4, 0x1000, 0x80a0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) sendmsg$NFT_BATCH(r0, 0x0, 0x1000) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r8, 0x1, 0x0, 0xfffffffc, {{}, {}, {0x18, 0x17, {0x21, 0x0, @udp='udp:syz1\x00'}}}}, 0x34}}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1m13.406146299s ago: executing program 1 (id=6747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904"], 0x0) r1 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x5e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) getdents(r2, &(0x7f0000000000)=""/176, 0xb0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x20) syz_usb_connect(0x3, 0x36, &(0x7f0000002100)={{0x12, 0x1, 0x300, 0xcd, 0x97, 0x2c, 0x8, 0x3923, 0x718a, 0x9b2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0xa5, 0x81, 0x2, 0x1f, 0xc7, 0xfd, 0xf1, [], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x0, 0x10, 0x7f}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x3, 0x81, 0xf7}}]}}]}}]}}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0}) 1m11.855022298s ago: executing program 1 (id=6756): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) removexattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)=@random={'user.', 'usLr.incfs.metadata\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'macsec0\x00'}}, 0x1e) r4 = gettid() ptrace$getregs(0xe, 0xffffffffffffffff, 0xd53, &(0x7f0000000180)=""/44) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$kcm(0x2, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000ab02000018080000", @ANYRES32, @ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x8, 0xff7, &(0x7f0000001840)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m10.456453411s ago: executing program 1 (id=6759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "1ccdfb37f9d563e6", "65ce72e74a036530ae9a16c91786e7de9fae2a8fe379148751dfc40abc07a68b", "008000", "c99b4f9268be5a59"}, 0x4f) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x10000, 0x4, 0x8, 0x5e, 0x0, [{0x6d, 0x8, 0xb0, '\x00', 0xe}, {0x7, 0x8, 0xbd, '\x00', 0x5}, {0x0, 0x41, 0x9, '\x00', 0x3}, {0x67, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x60, '\x00', 0x60}, {0x0, 0x4, 0x2, '\x00', 0x7}, {0x3, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0xfe, '\x00', 0xff}, {0xb7, 0x6, 0x0, '\x00', 0x6}, {0x40, 0x11, 0x4, '\x00', 0x1}, {0x8, 0x24, 0x0, '\x00', 0x5}, {0x3, 0x86, 0xc, '\x00', 0xe9}, {0x5, 0x4e, 0x2}, {0x4, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x20, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x4c, 0x3, 0x2, '\x00', 0x1}, {0x8, 0x1, 0xbe, '\x00', 0xff}, {0x2, 0x3, 0x8, '\x00', 0x48}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0xf, 0x4, '\x00', 0xe5}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3, &(0x7f0000000240)=0x200, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a300000000009"], 0x54}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000021731f2fbaeb2207f7045035e5c24bc91493084e2692184b2d27e9eb109817f53becb986407e3e3bc9c4e33930e89efa2fa7436b0757fdae1811c62dcec0ef078c7de0eb003d2a32730b31e8fbd4fa7232452970285be91d3e734acaf920e54a36aa7ebfced40f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000008850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.211058248s ago: executing program 1 (id=6760): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200", @ANYRES8=r2], 0x108}}], 0x2, 0xc040) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011005836b1a17000fddbdf2500000100", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x1, 0x2, 0x40024e}, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) 1m9.925513199s ago: executing program 39 (id=6760): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200", @ANYRES8=r2], 0x108}}], 0x2, 0xc040) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011005836b1a17000fddbdf2500000100", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548", 0x36, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x1, 0x2, 0x40024e}, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) 51.259084588s ago: executing program 0 (id=6834): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @private2, 0x3}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000040)={r5, 0x7}, 0x8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) dup(r3) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x3, 0x84a, 0x4, 0x8}) ftruncate(0xffffffffffffffff, 0x200004) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CAP_X2APIC_API(r9, 0x4068aea3, 0x0) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000340)={0xeeee8000, 0x0, 0x59, 0x0, 0x80000000}) 49.221739682s ago: executing program 0 (id=6842): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0x8d4, &(0x7f00000000c0)={0x0, 0xf971, 0x80, 0x1, 0x1000001}, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1}]}, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 47.366925038s ago: executing program 0 (id=6850): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') fcntl$notify(r0, 0x402, 0x3) getdents64(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x15ed, &(0x7f0000000380)={0x0, 0x75fe, 0x80, 0x2, 0xab9}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xc00, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x5, 0xd}, {0x7, 0x8}}}, 0xff23}, 0x1, 0x0, 0x0, 0xcb6e2ef8cab843f0}, 0x400c854) 47.287261587s ago: executing program 0 (id=6851): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f0000000240)="7818840e72127022", 0x8) sendfile(r2, r2, &(0x7f0000001000), 0xffff) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14000000100004000000000000000000ffffffffffffffff000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a30156d07a9fe55417cc8332067ce6c72a33e00000000080005400000001c08000a40000000000800032f0001004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3008000000100003800c00009a8700034000000002140000"], 0xd0}}, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 45.752814302s ago: executing program 0 (id=6853): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) unshare(0x28000600) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r1, 0x407, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000800000340000000e0001"], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r11, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 45.55905688s ago: executing program 0 (id=6855): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000100f6de", @ANYRES32=0x0, @ANYBLOB="0010040000b40000140012800b00010067656e6576650000040002800a000100aaaaaaaaaabb0000"], 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x20008000) r2 = fsmount(r0, 0x0, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e0001006970366772657461700000003800028014000700fe8000000000000000000000000000aa06000f00ff072000060003000100000006000e000302"], 0x6c}}, 0x44850) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x18) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x110, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x110}}, 0x1) (async) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 44.91223246s ago: executing program 40 (id=6855): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000100f6de", @ANYRES32=0x0, @ANYBLOB="0010040000b40000140012800b00010067656e6576650000040002800a000100aaaaaaaaaabb0000"], 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x20008000) r2 = fsmount(r0, 0x0, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e0001006970366772657461700000003800028014000700fe8000000000000000000000000000aa06000f00ff072000060003000100000006000e000302"], 0x6c}}, 0x44850) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x18) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x110, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x58, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xa}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x110}}, 0x1) (async) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 31.667138388s ago: executing program 8 (id=6901): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000380)={0xa, 0x0, {0x1, 0x1, 0x2, 0x1, 0x5}, 0x4}) move_pages(0xffffffffffffffff, 0x20000000000001b4, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000004000/0x4000)=nil], &(0x7f0000000080)=[0xfffffef7, 0x1, 0x8f, 0xff, 0x4], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0xa) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @empty}, &(0x7f0000000140)=0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, 0x2, 0x9, 0x103, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44080}, 0x48000) 31.565812692s ago: executing program 8 (id=6902): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') fcntl$notify(r0, 0x402, 0x3) getdents64(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x15ed, &(0x7f0000000380)={0x0, 0x75fe, 0x80, 0x2, 0xab9}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xc00, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x5, 0xd}, {0x7, 0x8}}}, 0xff23}, 0x1, 0x0, 0x0, 0xcb6e2ef8cab843f0}, 0x400c854) 31.28590201s ago: executing program 8 (id=6904): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)='>', 0x1, 0xfffffffffffffffe) (async) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)='>', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000240)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) (async) keyctl$dh_compute(0x17, &(0x7f0000000240)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="080000000344", 0xfffffffffffffffd, 0x0, 0x10010, 0x2, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) (async) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) (async) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = syz_open_dev$usbfs(0x0, 0x75, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r7, 0x80045518, &(0x7f0000000000)=0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500), 0x2, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500), 0x2, 0x0) r8 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x3, &(0x7f00000002c0)=[{0x8, 0x4, 0x22, 0x3}, {0x9, 0x3, 0xf, 0xc}, {0x400, 0x5, 0x3, 0x10}]}) sendfile(r8, r8, 0x0, 0x9) 29.606722702s ago: executing program 8 (id=6908): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) write$binfmt_script(r2, &(0x7f0000010240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000200)='3V', 0x2}, {0x0, 0x300}], 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200007f00000000020000000c0000000014"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x18000, 0x23456}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001480)='./file0\x00', 0x1c25, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file7\x00', 0x60) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 28.675042545s ago: executing program 8 (id=6915): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x10000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000140)=0x4) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndpcmp(&(0x7f00000003c0), 0x0, 0x501080) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x40084504, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) accept(r6, &(0x7f0000000080)=@can, 0x0) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlockall(0x2) r8 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r8, 0xb) shmat(r8, &(0x7f0000ffd000/0x1000)=nil, 0x7000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/uevent_seqnum', 0x2000, 0x60) 28.214824337s ago: executing program 8 (id=6919): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000540)={0x20, 0x11, 0xac, {0xac, 0x1, "6e15aff4e2696c218af63707786b4685a6519cddd02c5a5be2a2697268934e6ca89975d31f3ff1644206122144ef4cf7215b7a28258738b64b1e7691d0f0055a1a3a45300aabf4d91852a7e02aafbdaf88ba66fee07d1757f2ed1bf55d6ea9ca2068c0fc4d133fdd90981ddb41808214f861188c498e234a421dcd8e5817510cbe56650bdc8015afd1a7cd64ed9e5cb4522d398bd1cde4ee12bef54dd177b15e0cfd2e2adf801c0df4e7"}}, &(0x7f0000000600)={0x0, 0x3, 0x85, @string={0x85, 0x3, "fc5af473450ba62f4e3b33907dc3de1f0d6a4cab128031a888e40bdde71d4150269c058a7b22a189f8e9e8e958f64878a9050307221755f134f986d9c6b5f03cd7117593722f2d340518620ba46678d7d54d8ea7431a861afce028b4b88418bad9a2c352d804dfd6375fa3d2815d8177ea0530df9fc5f1328c24c62e8362463ba2fb6f"}}, &(0x7f00000006c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x0, 0xb9, 0x1, "d64f8b9f", "91f5d8d9"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x7, 0x8, 0x6, 0x8001, 0x3}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000007c0)={0x20, 0x15, 0x8, "c6d4b2ea07352737"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x1e0, 0x40, [0xf000]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x4b}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, "dd23"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa9d"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x96}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x5}}) syz_usb_connect$cdc_ncm(0x0, 0xf6, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x2, 0x1, 0x5, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '.6'}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x48, 0x3, 0x80}, {0x6, 0x24, 0x1a, 0x4, 0xa}, [@mdlm_detail={0x76, 0x24, 0x13, 0x7, "3a94fa0895b280ce10eb8b085410dd0481b4ce2ddf623ed45c6bc5e939d5b70d59fa5809d0f616f260dcb53b241ee9a60c231f1e652cf5e54a43bbf83a82523f5d1f902434811c6408c3f856355209e1828bf03920bd2974bed5e41e781d19742d1ddf4c2cd854640eac19151d3ea6c442d4"}, @country_functional={0x10, 0x24, 0x7, 0xe, 0x0, [0x9, 0xfff9, 0xc9, 0x6, 0x6f]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xd6, 0xc0, 0x9e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x1, 0xe8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x6, 0xc}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x300, 0xfc, 0x4, 0x7, 0x20, 0xd8}, 0xdb, &(0x7f0000000dc0)={0x5, 0xf, 0xdb, 0x1, [@generic={0xd6, 0x10, 0x1, "b81299d9dfcd1123a191490c803e150ee3207abf606b870502dfce0b25dbd12799d4cb1151b4a963801e894b03582d41409024f02905bd7825523ae7cf8a0df157fc49211a0c5a0077a5d0838de737dfdf8410f79552af22d014c04d2ded0240adf7fc712018270fd55a843fdd68d1a1bed901a209de723fff7eeca7124af73c74c46eb2624ba3ce9db92d33260cb5e65c1f20bb4f332bece28362ea7d984ba0fc99b4498e37220b86c223f80fe716a46e75e536238a9500b7667235462797bea7c856115520f64f9fb1152dd14fb2d6cec27d"}]}, 0x5, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x424}}, {0x95, &(0x7f0000000f00)=@string={0x95, 0x3, "da9f2d7927caf454d48466eb6cd4fa4aa63fb5a63559504a5c3d64ea72f97d2a3bf9aede385c7ff13eecc5f35b42d21ef002bb50a6aff3623d5ed4307743ad1a1dfa135cc7e4ecbf78cce30610f418cb9f902894fc538d337fcad0969e1770567737fc034ea9c18d18eca32493fc14f047865104dfd49adb6bec03ae25936bebb893adb1f05ad4270b8d95fef922e5fb5c3a05"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x843}}, {0x63, &(0x7f0000001000)=@string={0x63, 0x3, "c70eddc4ddf867cefec3bd82ba76262a648a555b04e9a2337eb0ab91961063862fed38714c58407979a7eac1c7a1db07970d78bedbe5e121e29b31b79fd84037b5ac59789bd5fdd5b09e0cb73740b7149315e3ecb227905340f009053056fac62a"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x84e}}]}) syz_usb_connect$uac1(0x0, 0xe0, &(0x7f0000000080)={{0x12, 0x1, 0xa3d03b16a50135aa, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0xb, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf5a1, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x6, 0x9, 0x8000, 0x6, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x6, 0x2, "cc78eba4d068c357f9"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfff6, 0x9bd5, 0x8, "03693a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x5, 0x8, "107cab844be2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x7, 0x6, {0x7, 0x25, 0x1, 0x1, 0x2, 0xff01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x3, 0x3, "3295f7"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0x3, "45396759cd5d49f201"}, @as_header={0x7}, @as_header={0x7, 0x24, 0x1, 0x9, 0x81, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x1, 0xa, "1039", "cbe1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1c, 0x7, 0x40, {0x7, 0x25, 0x1, 0x80, 0x7, 0x1}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0xe, 0x4, 0x20, 0x5}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9a, 0x3d, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x9, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xc, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x5}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0xd1, &(0x7f0000000240)=@string={0xd1, 0x3, "991aacaa073ddfcb0b8292871053cfb1f6413f0fcf9c7a50340d241a6c2947077a78e3ebf123eff3aa8d8c5fe75bd94f4d141f5b0554adc52e12f9b43d98f86ebd45a0352aeea6906e70824bb61d6d16e9de087c642cd3f79cccef93dbef78ba543c280ffd6dcb3d18db4a56080ca37f8a8e02e8200631c9e48b19efdda7538fc7f205fd9a08f24f0a87ab8b51d9e717363e0ad8aa8467db372290665ce54a3084dd59f88649e300cbc0f52d6087f5354e429b8627df1b9b056e3af50ba0cb1906d009e144c0ac7029d82ffce447c8"}}, {0x97, &(0x7f0000000340)=@string={0x97, 0x3, "2c1ba38970cd39a6ce1fb30b302f1334cb82fcb11126d813b5e2ca683ae2817d9469a1b5ccc9b98181825a0e149409c21b43afe3dcf039c8cd85112eedee5dae48a4c65becf3327510af77d8b8e1311112e77fbc6c9729a2c7c4ce03ef7ec14c775913e55bdd2283892bf489986b432d0cf0d59ebdea5f6c3b125a5999609ff26e6f280dea3bcdcb3eb85569d270620c0e94d6d0c3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x861}}, {0x1d, &(0x7f0000000480)=@string={0x1d, 0x3, "611dd0b5b5f202bb4f9c873358c7cd00b2a3dfa3b74dd2f903455f"}}]}) 27.870622172s ago: executing program 41 (id=6919): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000540)={0x20, 0x11, 0xac, {0xac, 0x1, "6e15aff4e2696c218af63707786b4685a6519cddd02c5a5be2a2697268934e6ca89975d31f3ff1644206122144ef4cf7215b7a28258738b64b1e7691d0f0055a1a3a45300aabf4d91852a7e02aafbdaf88ba66fee07d1757f2ed1bf55d6ea9ca2068c0fc4d133fdd90981ddb41808214f861188c498e234a421dcd8e5817510cbe56650bdc8015afd1a7cd64ed9e5cb4522d398bd1cde4ee12bef54dd177b15e0cfd2e2adf801c0df4e7"}}, &(0x7f0000000600)={0x0, 0x3, 0x85, @string={0x85, 0x3, "fc5af473450ba62f4e3b33907dc3de1f0d6a4cab128031a888e40bdde71d4150269c058a7b22a189f8e9e8e958f64878a9050307221755f134f986d9c6b5f03cd7117593722f2d340518620ba46678d7d54d8ea7431a861afce028b4b88418bad9a2c352d804dfd6375fa3d2815d8177ea0530df9fc5f1328c24c62e8362463ba2fb6f"}}, &(0x7f00000006c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x0, 0xb9, 0x1, "d64f8b9f", "91f5d8d9"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x7, 0x8, 0x6, 0x8001, 0x3}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000007c0)={0x20, 0x15, 0x8, "c6d4b2ea07352737"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0x1e0, 0x40, [0xf000]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x4b}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0xb, 0x2, "dd23"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "fa9d"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x96}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x5}}) syz_usb_connect$cdc_ncm(0x0, 0xf6, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x2, 0x1, 0x5, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, '.6'}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x48, 0x3, 0x80}, {0x6, 0x24, 0x1a, 0x4, 0xa}, [@mdlm_detail={0x76, 0x24, 0x13, 0x7, "3a94fa0895b280ce10eb8b085410dd0481b4ce2ddf623ed45c6bc5e939d5b70d59fa5809d0f616f260dcb53b241ee9a60c231f1e652cf5e54a43bbf83a82523f5d1f902434811c6408c3f856355209e1828bf03920bd2974bed5e41e781d19742d1ddf4c2cd854640eac19151d3ea6c442d4"}, @country_functional={0x10, 0x24, 0x7, 0xe, 0x0, [0x9, 0xfff9, 0xc9, 0x6, 0x6f]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xd6, 0xc0, 0x9e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x1, 0xe8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x6, 0xc}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x300, 0xfc, 0x4, 0x7, 0x20, 0xd8}, 0xdb, &(0x7f0000000dc0)={0x5, 0xf, 0xdb, 0x1, [@generic={0xd6, 0x10, 0x1, "b81299d9dfcd1123a191490c803e150ee3207abf606b870502dfce0b25dbd12799d4cb1151b4a963801e894b03582d41409024f02905bd7825523ae7cf8a0df157fc49211a0c5a0077a5d0838de737dfdf8410f79552af22d014c04d2ded0240adf7fc712018270fd55a843fdd68d1a1bed901a209de723fff7eeca7124af73c74c46eb2624ba3ce9db92d33260cb5e65c1f20bb4f332bece28362ea7d984ba0fc99b4498e37220b86c223f80fe716a46e75e536238a9500b7667235462797bea7c856115520f64f9fb1152dd14fb2d6cec27d"}]}, 0x5, [{0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x424}}, {0x95, &(0x7f0000000f00)=@string={0x95, 0x3, "da9f2d7927caf454d48466eb6cd4fa4aa63fb5a63559504a5c3d64ea72f97d2a3bf9aede385c7ff13eecc5f35b42d21ef002bb50a6aff3623d5ed4307743ad1a1dfa135cc7e4ecbf78cce30610f418cb9f902894fc538d337fcad0969e1770567737fc034ea9c18d18eca32493fc14f047865104dfd49adb6bec03ae25936bebb893adb1f05ad4270b8d95fef922e5fb5c3a05"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x843}}, {0x63, &(0x7f0000001000)=@string={0x63, 0x3, "c70eddc4ddf867cefec3bd82ba76262a648a555b04e9a2337eb0ab91961063862fed38714c58407979a7eac1c7a1db07970d78bedbe5e121e29b31b79fd84037b5ac59789bd5fdd5b09e0cb73740b7149315e3ecb227905340f009053056fac62a"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x84e}}]}) syz_usb_connect$uac1(0x0, 0xe0, &(0x7f0000000080)={{0x12, 0x1, 0xa3d03b16a50135aa, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0xb, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf5a1, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x6, 0x9, 0x8000, 0x6, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x6, 0x2, "cc78eba4d068c357f9"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfff6, 0x9bd5, 0x8, "03693a"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x5, 0x8, "107cab844be2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x7, 0x6, {0x7, 0x25, 0x1, 0x1, 0x2, 0xff01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x3, 0x3, "3295f7"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0x3, "45396759cd5d49f201"}, @as_header={0x7}, @as_header={0x7, 0x24, 0x1, 0x9, 0x81, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x1, 0xa, "1039", "cbe1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1c, 0x7, 0x40, {0x7, 0x25, 0x1, 0x80, 0x7, 0x1}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0xe, 0x4, 0x20, 0x5}, 0x24, &(0x7f0000000180)={0x5, 0xf, 0x24, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9a, 0x3d, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x9, 0x40}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xc, 0x101}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x5}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0xd1, &(0x7f0000000240)=@string={0xd1, 0x3, "991aacaa073ddfcb0b8292871053cfb1f6413f0fcf9c7a50340d241a6c2947077a78e3ebf123eff3aa8d8c5fe75bd94f4d141f5b0554adc52e12f9b43d98f86ebd45a0352aeea6906e70824bb61d6d16e9de087c642cd3f79cccef93dbef78ba543c280ffd6dcb3d18db4a56080ca37f8a8e02e8200631c9e48b19efdda7538fc7f205fd9a08f24f0a87ab8b51d9e717363e0ad8aa8467db372290665ce54a3084dd59f88649e300cbc0f52d6087f5354e429b8627df1b9b056e3af50ba0cb1906d009e144c0ac7029d82ffce447c8"}}, {0x97, &(0x7f0000000340)=@string={0x97, 0x3, "2c1ba38970cd39a6ce1fb30b302f1334cb82fcb11126d813b5e2ca683ae2817d9469a1b5ccc9b98181825a0e149409c21b43afe3dcf039c8cd85112eedee5dae48a4c65becf3327510af77d8b8e1311112e77fbc6c9729a2c7c4ce03ef7ec14c775913e55bdd2283892bf489986b432d0cf0d59ebdea5f6c3b125a5999609ff26e6f280dea3bcdcb3eb85569d270620c0e94d6d0c3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x861}}, {0x1d, &(0x7f0000000480)=@string={0x1d, 0x3, "611dd0b5b5f202bb4f9c873358c7cd00b2a3dfa3b74dd2f903455f"}}]}) 16.393403436s ago: executing program 6 (id=6947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x2000, 0x2000, &(0x7f0000001000/0x2000)=nil}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000008) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a0427159ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x2000, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000008) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000440)={"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"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 15.843170038s ago: executing program 6 (id=6949): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004e2000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="36460faab9120a00000f32420f070f2bab614584dfc4e1ddea0d0b000000440fc7b000880000c74424002b000000c74424020a000000ff2c24653e66430f388143d167430fe11c36c4e2c1a6e1", 0x4d}], 0x1, 0x19, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x2, 0x2, 0xffffffff}, {0x6, 0x2, 0x9, 0xfffffff7}, {0xc, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x4, 0x4}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000040)={'broute\x00', 0x0, 0x3, 0x9d, [0x8001, 0x4, 0x1, 0x10000, 0x10000, 0x3], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000140)=""/157}, &(0x7f0000000240)=0x78) syz_usb_connect(0x5, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f0000004000000905", @ANYBLOB="cba9"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(aegis128l,blake2s-256-x86)\x00'}, 0x58) 13.194113548s ago: executing program 7 (id=6961): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x39}, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x4, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0xa}, {0x1, 0x4, 0x5}, {0x3, 0x3, 0x7}, 0x9, 0x9f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000100)='./file0\x00', 0x7a) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file2\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x12}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x100}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048804}, 0x8014) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x6, 0x9, 0x2, 0x5], 0x5}, {0xffffffffffffffff, [0x0, 0x0, 0x6, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1b, 0x0, 0x7fff, 0x8, 'snmp\x00', 'syz0\x00', {0xffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030915800000e600fc000705db224370bf09050b02"], 0x0) 12.679153132s ago: executing program 6 (id=6962): syz_emit_ethernet(0xd0, &(0x7f0000000180)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x9a, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x7, 0x6, "9e6467", 0x9c7, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, @private2, [@srh={0x29, 0xc, 0x4, 0x6, 0xd3, 0x8, 0xd4b8, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}], "341f"}}}}}}}, 0x0) 12.567991282s ago: executing program 6 (id=6963): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, &(0x7f0000000180)={0x5, 0x0, [{0x4, 0xfffffffc, 0x0, 0x9, 0x54, 0x800, 0x4}, {0xd, 0xaff9, 0x6, 0x6, 0x7f, 0x6, 0xffffffb4}, {0x0, 0xed, 0x2, 0xe, 0x4, 0x7, 0x9}, {0xd, 0x8, 0x2, 0x1, 0xfffffffd, 0x347, 0x5}, {0x80000019, 0x42, 0x2, 0x800, 0x9, 0x7, 0x6}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f0000000280)=[{}, {}], 0x2, 0x0, 0x0, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xc000000b}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) write$qrtrtun(r2, &(0x7f0000000040)="b2c5b53af9dbfa53f153c49a5dc50c27e08bfb", 0x13) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x808001, 0x0, 0x100000, 0x2080, 0x6add}) 11.681024087s ago: executing program 6 (id=6967): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0xfffe, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x40009, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x4640, 0x6, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x1db, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c77, 0x10000, 0x242, 0x4, 0x11, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18c, 0x6, 0x6, 0x454f, 0x206, 0x6, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0xb08, 0x9, 0x8000012f, 0x8001, 0x8, 0xfffffff3, 0x129432f6, 0xc8, 0xef, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xb, 0x66abcbd2, 0x6, 0x5, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x382, 0x8, 0xb, 0x4, 0x9, 0x8, 0x2, 0x6, 0x46, 0x9, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0xfc, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x33c9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x8001, 0x1000000, 0x303c, 0xfffffffa, 0x8000000b, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x3, 0x6d01, 0x6, 0x38, 0x800003, 0x202, 0x40000080, 0x3, 0x0, 0x2950bfaf, 0x1003, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x0, 0xa, 0x3, 0x5, 0x1c, 0x8, 0x807ff, 0x2006, 0x80a2ef, 0x1, 0x3a], [0x9, 0xbb33, 0xf8df, 0xb, 0x5, 0x6, 0x6, 0x6, 0x4, 0xb9, 0x0, 0x1fb, 0x2, 0x57, 0x5, 0x6, 0x2, 0x10000, 0x1b57d867, 0xf4, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x106, 0x7, 0xfff7ffff, 0xfbfffffd, 0x0, 0x5, 0xc8, 0x2, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x107, 0xaf, 0x20000008, 0x5, 0x226, 0x6, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x5, 0x5, 0x803, 0x3, 0x200, 0x0, 0x3]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) (async, rerun: 64) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000000940)=""/195, 0x41000, 0x40, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8}, 0x94) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) (async, rerun: 32) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000001c0)={0x5, "5660359c3245d1c42b17afad7d48ed51010000000000000000000000000007e6", 0xffffffffffffffff}) (async, rerun: 32) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) (rerun: 32) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r9}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0x102}, 0xd, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x81, 0xffff2d34, 0xffffff01, 0x7fff, 0x3, 0xfffffffc, 0x5, 0xffff, 0x2, 0x7, 0x3c5b, 0x80000801, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe663, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xcc, 0xf9, 0xe, 0x8, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x40, 0x401, 0x2, 0x1, 0x4, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x4b, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0x9, 0x7, 0x3, 0x5, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x5, 0x6, 0x5, 0x0, 0x9, 0x1, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x3, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2002, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x3, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x3, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0xfff, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 10.872901381s ago: executing program 6 (id=6969): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x238, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0x8], 0x10000, 0x2, 0x4, [@dev={0xfe, 0x80, '\x00', 0x2a}, @empty, @local, @loopback, @mcast2, @loopback, @loopback, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast1, @empty], 0xd}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0x100000, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x198, 0x200, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@local, [0xff, 0x0, 0xffffffff, 0xffffff00], @ipv6=@private1, [0xffffff00, 0xff, 0xff, 0xff000000], @ipv4=@empty, [0x0, 0xffffff00, 0x0, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 0x3, 0x4, 0x87, 0x4e24, 0x4e23, 0x4e21, 0x4e23, 0x20, 0x6}, 0x101, 0x3018, 0x4e22, 0x4e23, 0x4e24, 0x4e24}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x600, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 10.392005295s ago: executing program 42 (id=6969): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001600)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x238, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0x8], 0x10000, 0x2, 0x4, [@dev={0xfe, 0x80, '\x00', 0x2a}, @empty, @local, @loopback, @mcast2, @loopback, @loopback, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @mcast1, @empty], 0xd}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x4b, 0x1ff, 0x6, 0x100000, 0x80ffff, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x198, 0x200, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@local, [0xff, 0x0, 0xffffffff, 0xffffff00], @ipv6=@private1, [0xffffff00, 0xff, 0xff, 0xff000000], @ipv4=@empty, [0x0, 0xffffff00, 0x0, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 0x3, 0x4, 0x87, 0x4e24, 0x4e23, 0x4e21, 0x4e23, 0x20, 0x6}, 0x101, 0x3018, 0x4e22, 0x4e23, 0x4e24, 0x4e24}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x600, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 9.344054143s ago: executing program 7 (id=6976): bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xffffffffffffffb0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x4, 0x4002) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0xa03, 0x44) syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x4000032d}, &(0x7f0000000080), &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f00000000c0)=0xfffffff9, 0x0, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x5) syz_usb_connect(0x0, 0x34, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80cb59acbc0413a1f8480f0000005e2900421803001825e60a001402000002800000121f", 0x2e}], 0x1}, 0x0) 9.048219598s ago: executing program 5 (id=6978): socket$netlink(0x10, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = io_uring_setup(0x72c7, &(0x7f0000000500)={0x0, 0x1033, 0x3000, 0x3, 0x381}) poll(0x0, 0x0, 0xffffffff) io_uring_enter(r1, 0x0, 0xcb, 0xf, &(0x7f0000000000)={[0x20]}, 0x18) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) personality(0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) bind$netlink(r4, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@newtfilter={0x4bc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0x0, 0x9}, {0x10, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x779f0574}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa8}}, @TCA_RATE={0x6, 0x5, {0xab, 0xb}}, @filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_POLICE={0x410, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x368, 0x6, 0x5, 0x5f, 0x81, 0xe6, 0x5, 0x10, 0x4, 0x2, 0x4, 0x84, 0x9, 0x7, 0x17ee, 0x8001, 0x2, 0x6, 0x1, 0x0, 0xb, 0x1, 0xfffffffb, 0x35ab, 0x4, 0xddc, 0x1, 0xa, 0x0, 0x2, 0x1, 0xffffffff, 0x3, 0x72820263, 0x9, 0x7, 0x0, 0x5, 0x7, 0x0, 0xfffffff9, 0x4, 0x7, 0x6, 0xc, 0xfff, 0x5, 0x5a9, 0x7ffe, 0x49d2, 0xa, 0x100, 0x1b, 0x0, 0x3, 0x9, 0x28000000, 0x0, 0x8, 0x6, 0xf, 0x2735, 0x7ff, 0x0, 0x80, 0x101, 0x7f, 0x8, 0x1, 0x8, 0x9d, 0x391, 0x7, 0x6, 0x7, 0x6, 0xc4, 0xb, 0xec0, 0x40, 0x8, 0x8001, 0x2, 0x40, 0x7, 0x8, 0x7564, 0xb, 0x1, 0x4, 0x6, 0x10, 0x9, 0xc054, 0x6, 0xfffffff9, 0x4, 0x4, 0x8, 0x4, 0xea, 0x3, 0x3, 0x0, 0x9843, 0xb9a, 0x40, 0x2, 0x3, 0x0, 0x4, 0x2, 0xa94, 0x7, 0x0, 0x6, 0x0, 0x8000c, 0x1, 0x3, 0x0, 0xfffffff8, 0xd7, 0x80000001, 0x40, 0xfff, 0x4, 0x9, 0x9, 0xaa, 0x7fffffff, 0x9, 0x0, 0x80, 0x3ff, 0x6, 0x3, 0x800, 0x5, 0x1, 0x2, 0xe, 0x1, 0x8001, 0x7ff, 0x40, 0x4, 0x100, 0x8, 0x1, 0x1, 0xae0c, 0x1df, 0x6, 0x7, 0x1, 0x6, 0x0, 0x200, 0x7, 0x200, 0x9, 0xffff, 0x2f, 0x0, 0xffffffff, 0x7ff, 0x6, 0xb029, 0x8, 0x2, 0x2, 0x80, 0x100000, 0x2, 0x6, 0x20000, 0x10001, 0x5, 0x4, 0x400, 0x58a2, 0x1ff, 0x800ff, 0x8, 0x8, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3, 0x81, 0xff, 0x6, 0xffffffff, 0x5, 0xfffffff8, 0x1, 0x10000, 0xd, 0x2, 0x0, 0x8, 0x5c8d, 0x40000005, 0x1385, 0x800, 0x9, 0x8, 0x80, 0x836, 0x8c66, 0x8, 0x1, 0x8, 0x3, 0xe8c, 0x47c4, 0x9f, 0x4, 0x2, 0x8, 0x7, 0xa6f, 0x9, 0x1, 0x2000000c, 0x5, 0x7, 0x40, 0x5, 0x4a5e, 0xd32c, 0x1000, 0x4c, 0xfffffffc, 0x1, 0x440, 0x1000, 0x1, 0x7, 0x8, 0x9, 0x9, 0x8000, 0x51c, 0x7, 0x1, 0x5, 0x3, 0x5, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x874}]}, @TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5) 8.814710734s ago: executing program 5 (id=6981): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x19b74cb7, 0x421c3) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@userptr={0x6, 0x3, 0x4, 0x1000, 0x101, {0x77359400}, {0x5, 0x9, 0x1, 0xfb, 0x8, 0x6, "aaf0a02c"}, 0x3, 0x2, {&(0x7f0000000100)}, 0xf0, 0x0, r3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002180)=ANY=[@ANYBLOB="1c000000334dd3b9b5482e9e1564eb62be5e1c70bdc2d78fcbad3c61a1127d930ef054f32e4e49c2ce48c7e4007b24437c5d79bca1dc9faf33b387fd093e77", @ANYRES16=r6, @ANYBLOB="080029bd7000fcdbdf25030000000800040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='\b\x006\x00', @ANYRES16=r6, @ANYBLOB="02002dbd7000fddbdf250a00000005000500020000003000068008000300ffffffff060001000200000014000400fe880000000000000000000000000001080006001e0000000800020000000000080004000100000008000400292d0000"], 0x64}}, 0xb7cbdec33ba9cb23) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/77, 0x4d}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/219, 0xdb}, {&(0x7f0000001e00)=""/55, 0x37}, {&(0x7f0000001e40)=""/66, 0x42}, {&(0x7f0000001ec0)=""/181, 0xb5}], 0x8, &(0x7f0000001840)=""/220, 0xdc}, 0xffffffff}, {{&(0x7f0000001940)=@generic, 0x80, &(0x7f0000001c80)=[{&(0x7f00000019c0)=""/164, 0xa4}, {&(0x7f0000001a80)=""/91, 0x5b}, {&(0x7f0000001b00)=""/126, 0x7e}, {&(0x7f0000001b80)=""/242, 0xf2}], 0x4, &(0x7f0000001cc0)=""/186, 0xba}, 0x7}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r9, 0xc028aa03, 0x0) r10 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0xa, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r13 = landlock_create_ruleset(&(0x7f00000020c0)={0xc402, 0x3}, 0x18, 0x3) landlock_restrict_self(r13, 0x0) r14 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r14, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)=ANY=[@ANYBLOB="2c0000001800040025bd7000fcdbdf251d01060015000300010000a0ea0200004f47abeaa5830a3901000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40001) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="4c00000010000d0400"/20, @ANYRES32=r5, @ANYBLOB="0000000003a305002c0012801100617603000000001400058005000a000000000005000c0076000000000200000000000000000800"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.990746797s ago: executing program 4 (id=6982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xc00, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x5, 0xd}, {0x7, 0x8}}}, 0xff23}, 0x1, 0x0, 0x0, 0xcb6e2ef8cab843f0}, 0x400c854) 7.670249521s ago: executing program 4 (id=6983): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) syz_usb_connect$uac1(0x5, 0xba, &(0x7f00000002c0)={{0x12, 0x1, 0x1b5cb6af6ea10582, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0x1, 0x90, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2f, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xfd, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xf, 0x4, 0x4, 0xf, "f2ea"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x4}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5c, 0x1, "", 'i'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x3, 0x0, 0x36}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2a, 0x3a, 0x4f, {0x7, 0x25, 0x1, 0x80, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2a, 0x2, 0x3, 0x4, 'z', "da89"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x88, 0x1002}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x80, 0x9, 0x81, "47f7521075"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xca, 0x8, 0x5, {0x7, 0x25, 0x1, 0x80, 0x81, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x4, 0x2, 0xb, 0xc7, 0x7}, 0xd0, &(0x7f00000003c0)={0x5, 0xf, 0xd0, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "2ee793c8b981b12f0a05566fa6fcff2d"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "79a06a5ce134c38a7be856bfe401a226"}, @generic={0x8b, 0x10, 0x4, "7677c101914c3ccafae06bb056a2c0af2dc5ee4cc2bbec59df30edaae49d4c9883e83add49716744920cbe0f3275fab3f5d2341b21396aea42cbd186f81e2bcb5a9c24c708783224d3e072fbef771fa7775a7d16c8bbf8ecae5567820d4ebbe26570c49f5882cbf31b3ebfa17dea9910a0f1efc3a16b23b08e5fd3778ab46c7ec9268473d44d1f8e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x86, 0x1, 0x10}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x7, 0x2}]}, 0x3, [{0x61, &(0x7f00000004c0)=@string={0x61, 0x3, "d80a1a88c49246732af70460eb587426fa141e4a71114107ae54a5f21898843d4f1b43c4562eb250e59c8251fffd113160b4ac6374790774e02f93d8c83bc43b52c7d4241c74349e895014d46caac909c12c79a82ae5a8eb02476ce171b70a"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x436}}]}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r3, 0x0) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) (async) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102008741c82f8fcb45053ca7e1e0c90252af6ee2cdd5be1e924d89deaf5c11044d158d60c88a54a8de405baf2c557f34d197ea043451010bb7673939cf2633ebba9ffd7b3b2edf96da159cfc824278"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 5.915107865s ago: executing program 7 (id=6984): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) sendmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000340)="1f94258f0af7844bf26db6f497c748e9d66f040ee0682f0fd1e4617f50659457667ce7a9f45fd94bbdece50173f5262b7cbc989b701a618f", 0x38}], 0x1, &(0x7f00000018c0)=[{0xe0, 0x3a, 0xfd2, "1ff302690a7f6a38d0ff8d6832a874fab1b223b05607a4c8c8c4b3d4755b57303066e19e2f3734b0ea006e2451196173de038a82d8eb59d2680b09c9ec1f63964748a353806c9a9ccf670ef27744dc05a9c1f2e4f472955fa08dec9da8077db6a8bf881cd5002b08d880ccf71c51c8fddad14e60313dd392bc748bbe3d27f01a3986115e3b8928a77a58114af28023e1ecb834037a4bd9901566a5dee7b5c7b7354916d80764d029645d4598fb9f4fb44e7aec2b32e94d5a11bb0ea7cad5e25139a3f648a605c463abe9cb"}, {0xb0, 0x119, 0xc43b, "086d5e4f4a03ba285c26ada243b1e05e1bd3782f6b1031c0b28ac8afddf56d7611ccc105098e7b9944a0d568e280a56b350240f2f34855d7e8aaf213f751227df72fb0894df829d1893bae450913d6ba7880a15976f095160168c796ed25d6e82000612332d56050e6d9e2cf45ce45fee17af939be0162c36cc112acee6c1b67dbd9056af79bb0de4a4aecd33c58ff2b8d47030589075107004891"}, {0x30, 0x103, 0x818, "9690110cc91c6318c34f4abb9fd48bde1df254653d0e8d3d874becc66205"}], 0x1c0}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="0f2054c4e39922c9a43e0fc759c9c74424001d010000c74424025f000000ff2c24c7442400f5ffffffc744240200b00000c7442406000000000f011424c46249002d0b000080c4e22d37f8f30f0966b81f000f00d00f20d835080000000f22d8", 0x60}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.876456179s ago: executing program 2 (id=6987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000002340)=[0x0]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRES8, @ANYRESDEC], 0x0) 4.752712355s ago: executing program 7 (id=6988): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) (async) r2 = gettid() syz_clone3(&(0x7f00000002c0)={0x80, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x2}, &(0x7f0000000140)=""/121, 0x79, 0x0, &(0x7f0000000200)=[r2], 0x1}, 0x58) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) (async) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) alarm(0x9) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x2c, 0x1, '\x00', [@generic={0x3, 0x6, "00b793f13357"}]}]}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$evdev(0x0, 0x2, 0x903d01) (async) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) (async) alarm(0x1) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005540)=""/99, 0x63}, 0x38}], 0x4, 0x40000000, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x4040041) 4.3787226s ago: executing program 4 (id=6989): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000040)='./file0\x00') openat2(r3, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000240)={0xc, {0x2, 0x2375, 0x100, 0x5}, {0x3, 0x7, 0x9, 0x5}, {0xfff, 0x200}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x9, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) 3.883021303s ago: executing program 7 (id=6990): socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) semget$private(0x0, 0x6, 0x3b1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b640), 0x0, 0x40) socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f00000000c0)={&(0x7f0000001080)=""/4096, 0x1000}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10a000, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b3bf00", @ANYRES16=r3, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="20001d801c00008006000500c000000005000c000200000005000b0000000000"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, &(0x7f0000000080), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) 2.191800087s ago: executing program 7 (id=6991): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = fanotify_init(0x200, 0x0) r2 = fsopen(&(0x7f0000000a80)='zonefs\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000ac0)='/dev/input/event#\x00', 0x0, r1) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x11, "def90deeaaed04b4ba4c6cd83cc5319741"}, 0x0, 0x0, 0x0, 0x0}) 1.647059228s ago: executing program 2 (id=6992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000007c0)=[{0x1, 0x0, {0x1, 0xf0, 0x1}, {0x2, 0x1}, 0x0, 0x1}], 0x20) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000500), &(0x7f0000000580)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0xfff2}, {0xfff1, 0xfff2}, {0xfff3, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x1, 0x6, 0x0, 0xa68, 0x7, 0x5f8, 0x5, 0x8, 0x6, 0x80, 0x4, 0x1, 0x0, 0x2, 0x80000001, 0x9, 0x6, 0x0, 0xa, 0x4, 0xd, 0x9}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x120, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x19005093}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x23b6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x19}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "c0833a94bfe87077cd5df108607c06eb7faf32e45037bfde"}}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "530c48c5f99b58f71f104b5d6886b1ea3fff07c109c8eb533917"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}, {0x9, 0x4, 0xa, 0x2}]}) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 1.627613716s ago: executing program 3 (id=6970): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000180000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d3000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800821300007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000080000004602010076001e00bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.468833674s ago: executing program 3 (id=6993): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4d}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x177, 0x9, 0x2f2}, 0x10) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) kcmp(r2, 0x0, 0x4, r0, r0) r3 = add_key$user(&(0x7f0000002140), &(0x7f0000002180)={'syz', 0x2}, &(0x7f00000021c0)="3713f2aefd170a54ae419a46ba65579a9cd1c849b2228e517c87ff2d74a740c15c5e9981a0258792f0fc330224c3167eb1cfe2715a1c5d9b381e40ec8dff6397ee8901872e0da15f756c7f3a76adf60986ef85babd12b2", 0x57, 0xfffffffffffffff8) r4 = add_key$user(&(0x7f0000002240), &(0x7f0000002280)={'syz', 0x1}, &(0x7f00000022c0)="d0ba42dc0a785376464595482d1f391fd65d1af80e638520622afdacb536c5e568289520ce05b52f0400ca794b6dca7e81f43d47d658101420232f8d20cba0db8745e2e99e229fe0bd3117528ef2ee4f375014de67db6f13de3dbdfd80d97195aaf6df7425971dea28c463b9b0d9b2afcd363ab4c07452c34a571dc97fbaf3c9c9647ab130aa34290b63b0e3c21f7984ad034d1ac65719a58c971c305250bbb6308714655bc7b6fbcabe7b40ed1d5c8b99dc1b80e678b18aa1f86a241b45d1bc9b1a8cb3f7", 0xc5, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f00000023c0)={r3, 0x0, r4}, &(0x7f0000002400)=""/174, 0xae, &(0x7f00000025c0)={&(0x7f00000024c0)={'blake2s-160-arm\x00'}, &(0x7f0000002500)="f643a052bb76ddc7ffd1e21a635cbb3ae96ef894dcd22510e55345fc1f993960f98de229944b3c565b64e55c14421a505d89fa6236d6fe01299e9b9c1ac37123ba9a2621e01c42570a30d054d7abc1ab6d7de29d06f35106403d1f38f7727183ed99d0aa1811525aa5254b5b3be284506da99a0886d42de4950ddef6f0fde1ff7eec89f4b123d7f5b7975c88a3f4ff42404fb96438142d358c3e8829b4", 0x9d}) keyctl$instantiate(0xc, r3, &(0x7f0000002600)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 'blake2s-160-arm\x00', 0x20, 0x1, 0x20, [0x66, 0x64, 0x32, 0x37, 0x32, 0x36]}, 0x42, 0xfffffffffffffffb) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002800)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000027c0)={&(0x7f00000026c0)={0xe4, 0x13, 0xa, 0x300, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0xc4, 0x8, "cf32deb6db4c37dde60c20cd7863d1992bcc85eb0db7706e26098313e76c44ecc69d4520cc50f6c1e44d5762bb082b4756b631a0b6887ccae6ef353995efb2a022ca2865d098261961978d134cddfab68b11ea5d3dba222d919707ee2a9dadb7f5a7cb656becb6f9564203019a9fa0a0cab65edc94e087772acd568f6fc0a085326d36437648ac0bc2138880f2eec5fbe2a9051ffdeff6857f4aa13dc2555a443d59b90df0fc2010de6572523ca1240f9c1eaec4e7fa09331ef46061a19d9371"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040010) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000002840), 0x2, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r5, 0x8818564c, &(0x7f0000002880)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000030c0)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000003100)={0xd088, 0xa}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000003140)={{r6}, "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"}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000004140)=0xffffffffffffffff, 0x8) inotify_init1(0x80000) r8 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000004180)={0x0, @loopback, 0x4e22, 0x1, 'nq\x00', 0x1, 0x5, 0x33}, 0x2c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000041c0)={r1, 0x2, 0x14c9}, &(0x7f0000004200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000004280)={r9, 0x0, &(0x7f0000004240)}, &(0x7f00000042c0)=0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000043c0)={'tunl0\x00', &(0x7f0000004300)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x7, 0x33, {{0x20, 0x4, 0x1, 0x35, 0x80, 0x66, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@cipso={0x86, 0x10, 0x3, [{0x3, 0xa, "a5c2e7b6cdfa4f61"}]}, @end, @lsrr={0x83, 0x7, 0x45, [@local]}, @noop, @ssrr={0x89, 0x7, 0x3b, [@local]}, @rr={0x7, 0xb, 0xee, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1c}]}, @timestamp_addr={0x44, 0x3c, 0x3b, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x10}, {@broadcast, 0x6}, {@multicast2, 0x200}, {@multicast2, 0x8}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x1f400}]}, @ra={0x94, 0x4}]}}}}}) bind$packet(r6, &(0x7f0000004400)={0x11, 0xf8, r10, 0x1, 0x3, 0x6, @local}, 0x14) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000045c0)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004580)={&(0x7f0000004480)={0xf4, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x6e, 0x6, "0201910ab6935d28accb154c5d9108d4e18aa9051c88299c52fcecfbd2ff77171a28dac20712fec36ded623ce36337fedd0b0567201caead2a87465fa93e582a86a084c937e0d123bb5d7d3261f9a70b59a20e74ab73a2b420aa65223504696eafdcf9687df4383672d1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x41, 0x6, "af9e7f41a3cfbfaed44f2dcac482953af307aeb46f79d1bd9b97adfbb26d2f2bc5aa21ce893d1eb8954027ea1e1ef2e81f63f70cebd1a3f686b6af8295"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000004600), 0x101000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x67, &(0x7f0000004640), 0x4) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000fff000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x0) syz_open_dev$hiddev(&(0x7f0000004680), 0x9, 0x4000) 1.399006581s ago: executing program 5 (id=6994): pipe(&(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000a000100feffffff"], 0x20}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'geneve1\x00', 0x2402}) socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') 1.292661145s ago: executing program 4 (id=6995): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000280)=""/245, 0xf5}, {0x0}], 0x2) epoll_create(0xffffff87) read$usbmon(r1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 1.237860297s ago: executing program 2 (id=6996): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000240)='./file0\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) readv(r2, &(0x7f0000001540)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xffffd000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000900)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x7f94, {0x7, 0x28, 0x4, 0x42800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100"], 0x50) 1.155037496s ago: executing program 3 (id=6997): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0xffff, 0x3ead, 0x3, 0x4, 0x10000, 0x2cc, 0x2, 0x101, 0xffffffffffffffff, 0x3, 0x8, 0x401, 0xf, 0x3, 0x9]}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800b5610000000000000000020000000000000004000b00080010"], 0x24}}, 0x800) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)={0x20, 0x0, 0x4, {0xa0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 928.270985ms ago: executing program 2 (id=6998): syz_clone3(&(0x7f0000000540)={0x2000, 0x0, 0x0, 0x0, {}, &(0x7f00000003c0), 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0xc0, r2, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x40067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2cdab476a81cc6d4378893878f44251eb64d9f6b5e41102"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cd5327e71f39981cf19770bea5e99da5b838ba58426ab02b"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="202c020000000000300012800b00010065727370616e00002000028008000400ffffff7f060071001f000000040012"], 0x50}}, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x2e8}}], 0x2, 0x4008000) syz_clone3(&(0x7f0000000540)={0x2000, 0x0, 0x0, 0x0, {}, &(0x7f00000003c0), 0x0, 0x0, 0x0}, 0x58) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0xc0, r2, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x40067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2cdab476a81cc6d4378893878f44251eb64d9f6b5e41102"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cd5327e71f39981cf19770bea5e99da5b838ba58426ab02b"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="202c020000000000300012800b00010065727370616e00002000028008000400ffffff7f060071001f000000040012"], 0x50}}, 0x0) (async) socket(0x848000000015, 0x805, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x2e8}}], 0x2, 0x4008000) (async) 774.886753ms ago: executing program 4 (id=6999): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8) (async) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="05d1691dc0aade53f6e387fe56be992b50a6573ebf4b25ec249306e568441232b0bbc449ad893b1dd1feb1a3e719d2beed7627668c3779f329cc34922f8873c2e1447abd12f07171ba66026db0f6497e2d4283d4"], 0x28}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (rerun: 32) io_uring_setup(0xb92, &(0x7f0000001fc0)={0x0, 0x88f7, 0x1000, 0x2, 0x90}) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (rerun: 32) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020a0000020000000000000000000000f14d99202432b9c7740b1b7a4bf4dc08d650da98cb5a155688e6ea504953ddacfa7daeb361a9cdfaa91cb4e2e0259d55240bf6fd"], 0x10}}, 0x0) (async) recvmmsg(r7, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 689.719195ms ago: executing program 2 (id=7000): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000180)={0xb, 0x8, 0x3}) (async) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000180)={0xb, 0x8, 0x3}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) syz_io_uring_setup(0x4cc7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffd}, &(0x7f0000000000), &(0x7f0000000100)) (async) r3 = syz_io_uring_setup(0x4cc7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000008c0)=@IORING_OP_LINKAT={0x27, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000, 0x0, {0x0, r6}}) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r1, 0x0) (async) dup3(r8, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r9, 0x0) 625.932608ms ago: executing program 4 (id=7001): r0 = socket$vsock_stream(0x28, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x100000, 0x2, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) socket$kcm(0xa, 0x5, 0x0) syz_usb_connect(0x5, 0x51, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100000be99c1099041810dab20102030109023f00010200000009040400022cb3d8000524040000052400ff070d240f010900000001000300800423fc09090501"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') execveat$binfmt(r1, r3, &(0x7f0000000400)={[&(0x7f0000000080)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='&\a\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)='\x00', &(0x7f0000000340)='wlan1\x00', &(0x7f0000000380)='-,-\x00', &(0x7f00000003c0)='\\-\'-%}\\:\x00']}, &(0x7f00000004c0)={[&(0x7f0000000480)='^\xb6\'$,\x00']}, 0x400) 530.502012ms ago: executing program 2 (id=7002): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003df6ecd20720cfa0000001000000809047c09013e801708579d2b1c4fdc0176b61d09128fd68627723ac7dbfc789ed11266000000000000000000"], &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x4, 0xaf, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029d0003010080050904000000010100000a24010600f902010205240508030a24050600ab0289e10c092403040203060402090401000001020000090401010101020000102402010901034a84579633d86128760c0000fffd0707250142081c0009040200000102000009046b8c48a9160332db29461b7510cdfe18020101010200000a240202090001000ce20905820920000c04030725010002ef66e49cac63daa7"], &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x3, 0x1, 0x40, 0x10}, 0x12c, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 319.547439ms ago: executing program 5 (id=7003): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000001d80)=ANY=[@ANYBLOB="66643d41c51c90ae789184a9fb25a247b0a9c9279c0e92399c31f386a86b79ecf310e83b", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000001a80)=ANY=[@ANYBLOB="2a486cb26cde6e6f20000000000000000100000000000000040000000020000001000000020000000008fef2f6453041462069ef499c1e563b662c346de5dcc13f75fa4ec0942fa4d231ad5def8d9a52cfd7854304c05a541917bac3069dd2e58e24d3755ee6d35408c8fd8b293435099468b6609928d70b408e108d65baf149686cac1a70f591406a83849c673659c7321297"], 0x2a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') unshare(0x2a020400) r3 = landlock_create_ruleset(&(0x7f0000000140)={0xac69}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x3, 0x0, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x4000, @fd=r1, 0x3ff, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000001b40)=""/164, 0xa4}, {&(0x7f0000001680)=""/69, 0x45}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000017c0)=""/118, 0x76}, {&(0x7f0000001840)=""/134, 0x86}, {&(0x7f0000001900)=""/192, 0xc0}, {&(0x7f00000019c0)=""/157, 0x9d}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000001700)=""/164, 0xa4}, {&(0x7f0000001c00)=""/157, 0x9d}], 0xb, 0x0, 0x0, {0x0, r7}}) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r8, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg$inet(r9, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="0e4f9b", 0x3}, {0x0, 0x4}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f0000000440)="d85ebac3e188a13346b8b7f57abc9a0a01ac842be0543d5988a54bd588b035577f7d618a4261dc4814a6d0003e2d550b3fecf4162e8aeb94b10e25f45bf8ac804be88498cfd90a7fbf86b2b5f52044199357555d31cb36cf25b74b1d87a790aa33fa62631d0cdc7de6ab6b65e67edb61138c0b3365b5ef00a9ab2f13f770f80bb05810f5b1b75154b98288ce4b19da0667ad682137d1ba6887e8a2327eb7eba342b6e495d0ee5c", 0xa7}, {&(0x7f0000000500)="337dc95d07ce63b4dc3fdf0df4d811a391e15e7d5773ac0f332cf9956c17e0f28846d3e6e7261276854ac64da5bc666bd6176a168333992e784ac6af1208c7fd43e5afb948dbd5eaa9c78e8054cfebfd37264a8dcff985c3579dcb0fbc757a22fa4374b4b2dde6fc633591287d8b258b5c6d231176778c261812d1896f88bf19bfc965278d49d6dd8141b90c39d703df299ece50c182609b1880eed5b1a29c472cdbeb16bd6bdaa06b2ea8854d1b2797f740142e6d5e", 0xb6}, {&(0x7f00000005c0)="b715a46950fa5bb996ea116fcb3b9313da8ae320c714dc83121fef0fd4a01875484618abe067a6f6d72a05f81b3bc185400d3a047feb1d", 0x37}], 0x6}, 0x90) ioctl$sock_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000100)) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) 82.652086ms ago: executing program 5 (id=7004): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0xb) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) getsockopt$inet_mreqn(r2, 0x0, 0x14, 0x0, &(0x7f0000004080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, r3) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x2, "fcd1ca9a0967216a"}}}, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xf, 0x4) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x48}, 0x1, 0x7}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r6, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x1c}}, 0x4040804) (async) getsockopt$inet6_buf(r5, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000e3ff0b000000180005800800010075647000050002"], 0x2c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240), 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffff}, 0x10) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}}, 0x0) (async, rerun: 64) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (rerun: 64) 0s ago: executing program 5 (id=7005): sendmmsg$unix(0xffffffffffffffff, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000004c0)="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", 0x2d0}], 0x1, 0x0, 0x0, 0x20004005}}], 0x1, 0x40000) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) inotify_init() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a0300000000000000000002"], 0x34}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) kernel console output (not intermixed with test programs): dor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1456.203794][T12625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.215185][T12625] usb 6-1: config 0 descriptor?? [ 1456.224764][T12625] cp210x 6-1:0.1: cp210x converter detected [ 1456.246177][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.432893][T12625] cp210x 6-1:0.1: failed to get vendor val 0x370b size 1: -121 [ 1456.450103][T12625] cp210x 6-1:0.1: querying part number failed [ 1456.461032][T12625] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1456.501020][T12629] usb 6-1: USB disconnect, device number 122 [ 1456.544527][T12629] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1456.560385][T30652] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1456.569265][T12629] cp210x 6-1:0.1: device disconnected [ 1456.586387][T30652] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1456.609709][T30652] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1456.659706][T30652] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1456.881809][T30652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.893304][T26527] Bluetooth: hci1: command tx timeout [ 1456.951330][T30652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.003062][T17969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.006398][T30716] IPv6: addrconf: prefix option has invalid lifetime [ 1457.010252][T17969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.045270][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.080393][T27519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.087596][T27519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.200676][T30652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1457.241099][T30721] vti0: entered promiscuous mode [ 1457.256506][T30721] vti0: entered allmulticast mode [ 1457.362666][T30652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.477300][T30652] veth0_vlan: entered promiscuous mode [ 1457.517500][T30652] veth1_vlan: entered promiscuous mode [ 1457.579612][T30652] veth0_macvtap: entered promiscuous mode [ 1457.610792][T30652] veth1_macvtap: entered promiscuous mode [ 1457.663037][T12628] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1457.727675][T30652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.762455][T30652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.862886][T12628] usb 6-1: device descriptor read/64, error -71 [ 1457.894654][T27519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.917078][T27519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.941611][T27519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.970753][T27519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.146201][T12628] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 1458.307870][T27535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.316277][T12628] usb 6-1: device descriptor read/64, error -71 [ 1458.372790][T27535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.473868][T12628] usb usb6-port1: attempt power cycle [ 1458.518001][T17969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.558802][T17969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.843264][T12628] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1458.865072][T12628] usb 6-1: device descriptor read/8, error -71 [ 1458.890136][T12640] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1458.973240][T26527] Bluetooth: hci1: command tx timeout [ 1459.067924][T12640] usb 10-1: config index 0 descriptor too short (expected 62468, got 36) [ 1459.088581][T12640] usb 10-1: config 162 has too many interfaces: 112, using maximum allowed: 32 [ 1459.107650][T12628] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 1459.143413][T12640] usb 10-1: config 162 has an invalid descriptor of length 119, skipping remainder of the config [ 1459.164393][T12628] usb 6-1: device descriptor read/8, error -71 [ 1459.174055][T12640] usb 10-1: config 162 has 0 interfaces, different from the descriptor's value: 112 [ 1459.193797][T12640] usb 10-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1459.222938][T12622] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1459.230800][T12640] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.273730][T12628] usb usb6-port1: unable to enumerate USB device [ 1459.397719][T12622] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1459.432828][T12622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.461469][T12622] usb 2-1: Product: syz [ 1459.479732][T12622] usb 2-1: Manufacturer: syz [ 1459.503438][T12622] usb 2-1: SerialNumber: syz [ 1459.569611][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1459.569628][ T30] audit: type=1326 audit(1761617459.158:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1459.649045][ T30] audit: type=1326 audit(1761617459.158:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1459.738976][ T30] audit: type=1326 audit(1761617459.158:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1459.938750][T12622] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1459.972854][ T30] audit: type=1326 audit(1761617459.158:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1460.010704][T12622] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1460.083476][T12638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.125822][ T30] audit: type=1326 audit(1761617459.158:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1460.169562][ T30] audit: type=1326 audit(1761617459.158:8191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1460.192037][ C1] vkms_vblank_simulate: vblank timer overrun [ 1460.201266][ T30] audit: type=1326 audit(1761617459.158:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1460.228355][ T30] audit: type=1326 audit(1761617459.158:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1460.254046][ T30] audit: type=1326 audit(1761617459.158:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1460.276410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1460.289885][ T30] audit: type=1326 audit(1761617459.158:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30784 comm="syz.6.6538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1460.322595][T12622] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1460.338755][T12622] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1460.350276][T12622] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1460.365760][T12622] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1460.492293][T12622] usb 2-1: USB disconnect, device number 36 [ 1460.500651][T30802] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6539'. [ 1460.737748][T17966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.792262][T30808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.854708][T30808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.052847][T26527] Bluetooth: hci1: command tx timeout [ 1462.020517][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.303605][T12622] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1462.467197][T12622] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1462.488109][T12622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.532281][T12622] usb 6-1: config 0 descriptor?? [ 1462.622940][T12629] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1462.782833][T12629] usb 2-1: Using ep0 maxpacket: 16 [ 1462.790793][T12629] usb 2-1: config 2 has an invalid interface number: 141 but max is 0 [ 1462.801952][T12629] usb 2-1: config 2 has no interface number 0 [ 1462.831986][T12629] usb 2-1: config 2 interface 141 altsetting 129 endpoint 0x2 has invalid maxpacket 1535, setting to 64 [ 1462.869987][T12629] usb 2-1: config 2 interface 141 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1462.916403][T12629] usb 2-1: config 2 interface 141 altsetting 129 has a duplicate endpoint with address 0x2, skipping [ 1462.948319][T12629] usb 2-1: config 2 interface 141 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 1463.030546][T12629] usb 2-1: config 2 interface 141 has no altsetting 0 [ 1463.079417][T12629] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0135, bcdDevice=40.ce [ 1463.088708][T12629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.102430][T12629] usb 2-1: Product: ᇠ[ 1463.112908][T12629] usb 2-1: Manufacturer:  [ 1463.117927][T12629] usb 2-1: SerialNumber: Ђ [ 1463.123339][T12638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.124187][T26527] Bluetooth: hci1: command tx timeout [ 1463.375897][T12629] ftdi_sio 2-1:2.141: FTDI USB Serial Device converter detected [ 1463.417968][T12629] ftdi_sio ttyUSB0: unknown device type: 0x40ce [ 1463.499459][T12629] usb 2-1: USB disconnect, device number 37 [ 1463.527139][T12629] ftdi_sio 2-1:2.141: device disconnected [ 1463.566664][T12622] usb 6-1: Cannot set autoneg [ 1463.584819][T12622] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1463.857641][T30881] netlink: 'syz.6.6554': attribute type 3 has an invalid length. [ 1463.866907][T30880] netlink: 'syz.6.6554': attribute type 3 has an invalid length. [ 1464.079839][T25924] usb 6-1: USB disconnect, device number 127 [ 1464.489147][T12640] usb 10-1: string descriptor 0 read error: -32 [ 1466.174033][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.219670][T30967] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6567'. [ 1466.497823][T27535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.947292][T30967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.992910][T30967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.038671][T30967] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1467.059732][T30967] bond0 (unregistering): Released all slaves [ 1467.203299][T12629] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1467.359045][T12629] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1467.423943][T12629] usb 2-1: config 5 has no interface number 0 [ 1467.478853][T12629] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1467.580748][T12629] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1467.631629][T12629] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1467.660832][T12629] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1467.681748][T12629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.737002][T12629] usb 2-1: Product: syz [ 1467.741744][T12629] usb 2-1: Manufacturer: syz [ 1467.747955][T12629] usb 2-1: SerialNumber: syz [ 1467.763675][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.083164][T12629] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1469.139304][T12629] usb 2-1: USB disconnect, device number 38 [ 1469.203551][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.509530][T31027] kvm: pic: non byte write [ 1469.795772][T31038] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6575'. [ 1469.874721][T31040] netlink: 'syz.5.6576': attribute type 39 has an invalid length. [ 1470.648058][T31054] nvme_fabrics: missing parameter 'transport=%s' [ 1470.657097][T31054] nvme_fabrics: missing parameter 'nqn=%s' [ 1471.650030][T31064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1471.762891][T25924] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1471.933259][T12625] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1472.009223][T25924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1472.036324][T25924] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1472.046519][T25924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.057491][T25924] usb 2-1: Product: syz [ 1472.063650][T25924] usb 2-1: Manufacturer: syz [ 1472.068409][T25924] usb 2-1: SerialNumber: syz [ 1472.088398][T25924] usb 2-1: config 0 descriptor?? [ 1472.122939][T12625] usb 6-1: Using ep0 maxpacket: 8 [ 1472.131534][T12625] usb 6-1: config 5 has an invalid interface number: 35 but max is 1 [ 1472.139769][T12625] usb 6-1: config 5 has an invalid interface number: 4 but max is 1 [ 1472.148233][T12625] usb 6-1: config 5 has an invalid interface number: 4 but max is 1 [ 1472.157796][T12625] usb 6-1: config 5 has no interface number 0 [ 1472.164555][T12625] usb 6-1: config 5 has no interface number 1 [ 1472.171027][T12625] usb 6-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1472.184637][T12625] usb 6-1: config 5 interface 4 altsetting 9 endpoint 0x5 has an invalid bInterval 64, changing to 10 [ 1472.197894][T12625] usb 6-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1472.228113][T12625] usb 6-1: config 5 interface 35 has no altsetting 0 [ 1472.235297][T12625] usb 6-1: config 5 interface 4 has no altsetting 0 [ 1472.242354][T12625] usb 6-1: config 5 interface 4 has no altsetting 1 [ 1472.253840][T17968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.257078][T12625] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 1472.262859][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.273150][T12625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.301348][T12625] usb 6-1: Product: syz [ 1472.305794][T12625] usb 6-1: Manufacturer: syz [ 1472.310464][T12625] usb 6-1: SerialNumber: syz [ 1472.524495][T31064] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6581'. [ 1472.533891][T31064] tipc: Invalid UDP bearer configuration [ 1472.534050][T31064] tipc: Enabling of bearer rejected, failed to enable media [ 1472.575180][T12625] ttusbir 6-1:5.35: cannot find expected altsetting [ 1472.621079][T12625] ttusbir 6-1:5.4: cannot find expected altsetting [ 1472.640366][T12625] usb 6-1: USB disconnect, device number 2 [ 1473.375134][T31079] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6587'. [ 1473.528560][T17977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.333537][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1474.344947][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1474.353793][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1474.362025][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1474.369798][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1474.577989][T12625] usb 2-1: USB disconnect, device number 39 [ 1474.868213][T31097] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6590'. [ 1475.023708][T12625] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1475.163279][T31087] chnl_net:caif_netlink_parms(): no params data found [ 1475.245033][T12625] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.277297][T12625] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1475.283118][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.311382][T12625] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1475.326099][T12625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.342803][T12625] usb 2-1: Product: syz [ 1475.351950][T12625] usb 2-1: Manufacturer: syz [ 1475.364489][T12625] usb 2-1: SerialNumber: syz [ 1475.400452][T12625] cdc_mbim 2-1:1.0: skipping garbage [ 1475.625992][T31092] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1475.655921][T31087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.677048][T31087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.701378][T31087] bridge_slave_0: entered allmulticast mode [ 1475.741708][T31087] bridge_slave_0: entered promiscuous mode [ 1475.762454][T31087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.770932][T31087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.784021][T31087] bridge_slave_1: entered allmulticast mode [ 1475.794267][T31087] bridge_slave_1: entered promiscuous mode [ 1475.926345][T31087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.967456][T31087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.062177][T31092] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1476.111792][T12625] cdc_mbim 2-1:1.0: setting rx_max = 16384 [ 1476.118427][T31116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.142391][T31087] team0: Port device team_slave_0 added [ 1476.166094][T31087] team0: Port device team_slave_1 added [ 1476.178383][T31116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.260768][T31087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1476.281942][T31087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.316538][T12625] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1476.328294][T31087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1476.339550][T12625] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1476.364764][T12625] wwan wwan0: port wwan0mbim0 attached [ 1476.373547][T31087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1476.387168][T31087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.402981][T26527] Bluetooth: hci6: command tx timeout [ 1476.432565][T31087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.464253][T12625] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, aa:44:9e:e0:77:ce [ 1476.583951][T12625] usb 2-1: USB disconnect, device number 40 [ 1476.592220][T12625] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1476.711983][T31087] hsr_slave_0: entered promiscuous mode [ 1476.724316][T31087] hsr_slave_1: entered promiscuous mode [ 1476.732470][T31087] debugfs: 'hsr0' already exists in 'hsr' [ 1476.741122][T31087] Cannot create hsr debugfs directory [ 1476.806743][T12625] wwan wwan0: port wwan0mbim0 disconnected [ 1477.122891][T12640] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1477.282855][T12640] usb 6-1: Using ep0 maxpacket: 32 [ 1477.346148][T12640] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.368243][T12640] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1477.397301][T12640] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1477.419305][T12640] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1477.446156][T12640] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1477.472321][T12640] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1477.497785][T12640] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.525602][T12640] usb 6-1: Product: syz [ 1477.539539][T12640] usb 6-1: Manufacturer: syz [ 1477.555375][T12640] usb 6-1: SerialNumber: syz [ 1477.771891][T31126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.790020][T31126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.986331][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1477.986348][ T30] audit: type=1326 audit(1761617477.568:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31148 comm="syz.1.6599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9481f8efc9 code=0x0 [ 1478.024404][T27535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.288348][T12640] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1478.314867][T12640] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1478.325769][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.422375][T12640] usb 6-1: USB disconnect, device number 3 [ 1478.483515][T26527] Bluetooth: hci6: command tx timeout [ 1478.527587][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.568985][T31087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1478.596562][T31087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1478.616730][T31087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1478.630978][T31087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1478.790976][T31087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.851945][T31087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.885655][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.892847][T17977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.969255][ T30] audit: type=1326 audit(1761617478.558:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1479.001427][T27533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.008833][T27533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.026443][T31188] program syz.1.6604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1479.036697][ T30] audit: type=1326 audit(1761617478.558:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1479.066204][ T30] audit: type=1326 audit(1761617478.558:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1479.205936][ T30] audit: type=1326 audit(1761617478.558:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1479.211769][T31087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1479.242853][T12622] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1479.292252][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.303087][ T30] audit: type=1326 audit(1761617478.558:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1479.390214][T31199] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6606'. [ 1479.405096][T12622] usb 6-1: device descriptor read/64, error -71 [ 1479.438636][ T30] audit: type=1326 audit(1761617478.558:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1479.643084][ T30] audit: type=1326 audit(1761617478.578:8236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1479.676363][T12622] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1479.703118][T31087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.783574][ T30] audit: type=1326 audit(1761617478.578:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1479.843372][T12622] usb 6-1: device descriptor read/64, error -71 [ 1479.970382][T12622] usb usb6-port1: attempt power cycle [ 1480.000124][T31087] veth0_vlan: entered promiscuous mode [ 1480.038715][T31087] veth1_vlan: entered promiscuous mode [ 1480.102251][T31087] veth0_macvtap: entered promiscuous mode [ 1480.122378][T31087] veth1_macvtap: entered promiscuous mode [ 1480.153117][ T30] audit: type=1326 audit(1761617478.578:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31184 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1480.198706][T31087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.241449][T31087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.311096][T17968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.362892][T12622] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1480.411011][T12622] usb 6-1: device descriptor read/8, error -71 [ 1480.427870][T17968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.506179][T17968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.564596][T26527] Bluetooth: hci6: command tx timeout [ 1480.602882][T17968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.678259][T31228] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6610'. [ 1480.703056][T12622] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1480.744811][T12622] usb 6-1: device descriptor read/8, error -71 [ 1480.778674][T31226] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1480.874502][T12622] usb usb6-port1: unable to enumerate USB device [ 1481.006889][T17969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.097418][T17969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.250666][T17977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.270692][T17977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.364114][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.960614][T31255] netlink: 'syz.1.6614': attribute type 4 has an invalid length. [ 1482.613325][T12629] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1482.642871][T26527] Bluetooth: hci6: command tx timeout [ 1482.827047][T12629] usb 6-1: config index 0 descriptor too short (expected 55488, got 27) [ 1482.835726][T12629] usb 6-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 1482.856849][T12629] usb 6-1: config 0 has no interfaces? [ 1482.879445][T12629] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1482.889409][T12629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.921952][T12629] usb 6-1: Product: syz [ 1482.942298][T12629] usb 6-1: Manufacturer: syz [ 1482.984419][T12629] usb 6-1: SerialNumber: syz [ 1482.993364][T12629] usb 6-1: config 0 descriptor?? [ 1483.031077][T31278] netlink: 'syz.4.6588': attribute type 1 has an invalid length. [ 1483.031422][T31277] netlink: 'syz.4.6588': attribute type 1 has an invalid length. [ 1483.235345][T12625] usb 6-1: USB disconnect, device number 8 [ 1483.455552][T25924] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1483.663371][T25924] usb 2-1: Using ep0 maxpacket: 16 [ 1483.673807][T25924] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.708642][T25924] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1483.734740][T25924] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1483.750306][T25924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.774865][T17968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.800673][T25924] usb 2-1: Product: syz [ 1483.819163][T25924] usb 2-1: Manufacturer: syz [ 1483.833980][T25924] usb 2-1: SerialNumber: syz [ 1484.035082][T31316] veth0_macvtap: mtu less than device minimum [ 1484.405993][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.412916][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.413055][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.051672][T17966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.612834][T12622] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1485.873267][T12622] usb 6-1: Using ep0 maxpacket: 16 [ 1485.881997][T12622] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1485.893729][T12622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.919971][T12622] usb 6-1: Product: syz [ 1485.936242][T12622] usb 6-1: Manufacturer: syz [ 1485.954095][T12622] usb 6-1: SerialNumber: syz [ 1485.971352][T12622] usb 6-1: config 0 descriptor?? [ 1485.983835][T12622] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1486.009872][T12622] usb 6-1: Detected FT-X [ 1486.172442][T12640] usb 2-1: USB disconnect, device number 41 [ 1486.286759][T12622] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1486.320205][T12622] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1486.370214][T12622] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1486.409819][T12622] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1486.455944][T12622] usb 6-1: USB disconnect, device number 9 [ 1486.490730][T12622] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1486.529906][T12622] ftdi_sio 6-1:0.0: device disconnected [ 1486.874615][T31399] binder: 31398:31399 ioctl c0046209 200000000000000 returned -22 [ 1486.892138][T31399] vlan3: entered promiscuous mode [ 1486.892162][T31399] bridge0: entered promiscuous mode [ 1486.899642][T31399] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6629'. [ 1487.081578][T31406] ksmbd: Unknown IPC event: 3, ignore. [ 1487.308821][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6632'. [ 1487.448601][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.545479][T12622] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1487.616707][T12640] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1487.682905][T12622] usb 2-1: device descriptor read/64, error -71 [ 1487.778146][T12640] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1487.791813][T12640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.825449][T12640] usb 5-1: config 0 descriptor?? [ 1487.850197][T12640] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1487.922977][T12622] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1488.072939][T12622] usb 2-1: device descriptor read/64, error -71 [ 1488.193303][T12622] usb usb2-port1: attempt power cycle [ 1488.545115][T12622] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1488.583486][T12622] usb 2-1: device descriptor read/8, error -71 [ 1488.756374][T12640] usb 5-1: USB disconnect, device number 44 [ 1488.873742][T12622] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1489.040141][T12622] usb 2-1: device descriptor read/8, error -71 [ 1489.204370][T12622] usb usb2-port1: unable to enumerate USB device [ 1489.526356][T27519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.487470][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.563568][T31479] IPv6: addrconf: prefix option has invalid lifetime [ 1490.804214][T17977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1490.834205][T12622] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1491.058507][T12622] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 1491.097507][T12622] usb 2-1: config 0 has no interface number 0 [ 1491.110927][T12622] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1491.168298][T12622] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 1491.192797][T12622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.211223][T12622] usb 2-1: Product: syz [ 1491.249718][T12622] usb 2-1: Manufacturer: syz [ 1491.280130][T12622] usb 2-1: SerialNumber: syz [ 1491.320857][T12622] usb 2-1: config 0 descriptor?? [ 1491.335879][T31484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1491.382545][T12622] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1491.398829][T31513] vlan2: entered allmulticast mode [ 1491.404185][T12625] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1491.574346][T12640] usb 2-1: USB disconnect, device number 46 [ 1491.579559][T17969] usb 2-1: Failed to submit usb control message: -71 [ 1491.597302][T12625] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1491.627078][T17969] usb 2-1: unable to send the bmi data to the device: -71 [ 1491.634363][T12625] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1491.666854][T17969] usb 2-1: unable to get target info from device [ 1491.689119][T12625] usb 5-1: config 150 has no interface number 0 [ 1491.697184][T17969] usb 2-1: could not get target info (-71) [ 1491.705695][T12625] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1491.712664][T12625] usb 5-1: config 150 interface 1 has no altsetting 0 [ 1491.720697][T17969] usb 2-1: could not probe fw (-71) [ 1491.761975][T12625] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1491.780674][T12625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.792489][T12625] usb 5-1: Product: syz [ 1491.807010][T12625] usb 5-1: Manufacturer: syz [ 1491.811713][T12625] usb 5-1: SerialNumber: syz [ 1492.040879][T12625] xr_serial 5-1:150.204: skipping garbage [ 1492.047757][T12625] xr_serial 5-1:150.204: xr_serial converter detected [ 1492.142823][T12622] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1492.296827][T12622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.308349][T12622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.318855][T12622] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1492.328860][T12622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.340063][T12622] usb 6-1: config 0 descriptor?? [ 1492.648078][T31502] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1492.661739][T12625] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1492.669655][T12625] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1492.697315][T12625] usb 5-1: USB disconnect, device number 45 [ 1492.712260][T12625] xr_serial 5-1:150.204: device disconnected [ 1492.759138][T12622] logitech 0003:046D:C294.0072: unbalanced collection at end of report description [ 1492.770044][T12622] logitech 0003:046D:C294.0072: parse failed [ 1492.777614][T12622] logitech 0003:046D:C294.0072: probe with driver logitech failed with error -22 [ 1492.956275][T12625] usb 6-1: USB disconnect, device number 10 [ 1493.014511][T31545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1493.023547][T31545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1493.239142][T31548] netlink: 71 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1493.524808][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.682971][T25924] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1493.974472][T25924] usb 5-1: Using ep0 maxpacket: 16 [ 1494.413107][T12622] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1494.552886][T12633] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1494.575057][T12622] usb 2-1: Using ep0 maxpacket: 16 [ 1494.595007][T12622] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1494.613593][T12622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.632630][T12622] usb 2-1: config 0 descriptor?? [ 1494.661998][T12622] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1494.853581][T12633] usb 6-1: Using ep0 maxpacket: 16 [ 1494.871576][T12633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.885078][T12633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.914629][T12633] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.930777][T12633] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1494.940610][T12633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.961344][T12633] usb 6-1: config 0 descriptor?? [ 1494.977560][T12633] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input161 [ 1494.993437][ T5184] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1495.029248][ T5184] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1495.077441][T12622] gspca_sonixj: reg_r err -71 [ 1495.100120][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1495.100138][ T30] audit: type=1326 audit(1761617494.688:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1495.200026][T12622] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1495.219152][ T5184] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1495.248320][ T5184] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1495.266072][T31577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.279679][T31577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.288656][T17966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.313442][T31580] loop6: detected capacity change from 0 to 7 [ 1495.329760][T12622] usb 2-1: USB disconnect, device number 47 [ 1495.331723][ T6692] Dev loop6: unable to read RDB block 7 [ 1495.345319][ T6692] loop6: unable to read partition table [ 1495.351200][ T6692] loop6: partition table beyond EOD, truncated [ 1495.395118][T31580] Dev loop6: unable to read RDB block 7 [ 1495.404453][ T30] audit: type=1326 audit(1761617494.688:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1495.437511][T31580] loop6: unable to read partition table [ 1495.444557][T31580] loop6: partition table beyond EOD, truncated [ 1495.451090][T31580] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1495.460945][ T30] audit: type=1326 audit(1761617494.698:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1495.524878][ T30] audit: type=1326 audit(1761617494.698:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1495.552628][ T30] audit: type=1326 audit(1761617494.698:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1495.576064][ T30] audit: type=1326 audit(1761617494.698:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1495.604438][ T30] audit: type=1326 audit(1761617494.698:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d11f8d810 code=0x7ffc0000 [ 1495.637402][ T30] audit: type=1326 audit(1761617494.698:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1495.688174][ T30] audit: type=1326 audit(1761617494.698:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1495.716973][ T30] audit: type=1326 audit(1761617494.698:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31578 comm="syz.6.6668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1496.119477][T31583] netlink: 'syz.1.6669': attribute type 13 has an invalid length. [ 1496.137992][T31583] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1496.158670][T31583] program syz.1.6669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1496.228106][T31584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6669'. [ 1496.564055][T17977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.577479][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1496.997699][T25924] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1497.009203][T25924] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1497.018071][T25924] usb 5-1: can't read configurations, error -71 [ 1497.068027][T31618] netlink: 'syz.6.6677': attribute type 1 has an invalid length. [ 1497.161857][T12627] usb 6-1: USB disconnect, device number 11 [ 1497.171560][T31618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1497.406903][T31636] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6679'. [ 1497.642911][T25924] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1497.835157][T25924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1497.910476][T25924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.947683][T25924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1497.988881][T25924] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1498.004066][T25924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.022245][T25924] usb 5-1: config 0 descriptor?? [ 1498.493754][T25924] plantronics 0003:047F:FFFF.0073: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1498.839103][T31634] xt_CT: No such helper "snmp" [ 1498.860567][T12627] usb 5-1: USB disconnect, device number 47 [ 1498.924040][T25924] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1499.009455][T31669] blktrace: Concurrent blktraces are not allowed on loop4 [ 1499.114865][T25924] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1499.144504][T25924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.168620][T25924] usb 2-1: config 0 descriptor?? [ 1499.604494][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.646097][T31686] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6694'. [ 1499.740769][T31680] kvm: kvm [31679]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1499.752237][T31680] kvm: kvm [31679]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1499.779520][T25927] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1499.811419][T25927] dvb_usb_dibusb_mc 7-1:0.168: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 1499.869555][T25927] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in cold state, will try to load a firmware [ 1499.889635][T25927] usb 7-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 1499.910653][T25927] usb 7-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 1500.407077][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.423110][T25924] hackrf 2-1:0.0: usb_control_msg() failed -110 request 0f [ 1500.432891][T12633] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1500.448351][T25924] hackrf 2-1:0.0: Could not detect board [ 1500.462144][T25924] hackrf 2-1:0.0: probe with driver hackrf failed with error -110 [ 1500.607886][T12633] usb 6-1: config 0 has no interfaces? [ 1500.623205][T12633] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1500.642650][T12633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.672793][T12633] usb 6-1: Product: syz [ 1500.683637][T12633] usb 6-1: Manufacturer: syz [ 1500.698494][T12633] usb 6-1: SerialNumber: syz [ 1500.759804][T12633] usb 6-1: config 0 descriptor?? [ 1501.227951][T31708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6701'. [ 1501.259084][T31708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6701'. [ 1501.296573][T31701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.315946][T31701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.323122][T31701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.521138][T12627] usb 2-1: USB disconnect, device number 48 [ 1501.650569][T31708] pim6reg1: entered promiscuous mode [ 1501.656656][T31708] pim6reg1: entered allmulticast mode [ 1501.685608][T17977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1502.416418][T31737] netlink: 'syz.6.6708': attribute type 4 has an invalid length. [ 1502.462033][T31737] netlink: 'syz.6.6708': attribute type 4 has an invalid length. [ 1502.643154][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.153367][T12633] usb 6-1: USB disconnect, device number 12 [ 1503.319364][T31739] fuse: Bad value for 'fd' [ 1503.783811][T31741] loop9: detected capacity change from 0 to 7 [ 1503.822302][T31741] Dev loop9: unable to read RDB block 7 [ 1503.923354][T31741] loop9: unable to read partition table [ 1503.923692][T31745] syzkaller1: entered promiscuous mode [ 1503.929211][T31741] loop9: partition table beyond EOD, truncated [ 1503.960765][T31741] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1503.997385][T31745] syzkaller1: entered allmulticast mode [ 1504.263101][T12627] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1504.415224][T12627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.429048][T12627] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1504.438631][T12627] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1504.450964][T12627] usb 5-1: Product: syz [ 1504.455201][T12627] usb 5-1: Manufacturer: syz [ 1504.460053][T12627] usb 5-1: SerialNumber: syz [ 1504.468136][T12627] usb 5-1: config 0 descriptor?? [ 1504.476575][T12627] gspca_main: conex-2.14.0 probing 0572:0041 [ 1504.668485][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1504.668505][ T30] audit: type=1326 audit(1761617504.248:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1504.707125][ T30] audit: type=1326 audit(1761617504.298:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1504.731542][ T30] audit: type=1326 audit(1761617504.318:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1504.785365][ T30] audit: type=1326 audit(1761617504.318:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1504.811453][ T30] audit: type=1326 audit(1761617504.318:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1504.838515][ T30] audit: type=1326 audit(1761617504.368:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d11f8d810 code=0x7ffc0000 [ 1504.863339][ T30] audit: type=1326 audit(1761617504.378:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1504.888531][ T30] audit: type=1326 audit(1761617504.378:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1504.983775][ T30] audit: type=1326 audit(1761617504.428:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1505.007286][ T30] audit: type=1326 audit(1761617504.548:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31756 comm="syz.6.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x7ffc0000 [ 1505.182207][T31774] fuse: Bad value for 'fd' [ 1505.252071][T12627] usb 5-1: USB disconnect, device number 48 [ 1505.392845][T12622] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1505.552821][T12622] usb 6-1: Using ep0 maxpacket: 32 [ 1505.559941][T12622] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1505.568925][T12622] usb 6-1: config 0 has no interface number 0 [ 1505.578177][T12622] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.589545][T12622] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.599427][T12622] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1505.609817][T12622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.620000][T12622] usb 6-1: config 0 descriptor?? [ 1505.639883][T31786] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1505.693260][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.712827][T12625] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1505.812903][T12627] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1505.862890][T12625] usb 2-1: Using ep0 maxpacket: 32 [ 1505.870232][T12625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.881975][T12625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.892545][T12625] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1505.901679][T12625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.912571][T12625] usb 2-1: config 0 descriptor?? [ 1505.966994][T12627] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1505.976263][T12627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.989270][T12627] usb 5-1: config 0 descriptor?? [ 1506.165374][T17969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.197890][T12627] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1506.208528][T12627] asix 5-1:0.0: probe with driver asix failed with error -61 [ 1506.384842][T12625] hid_parser_main: 76 callbacks suppressed [ 1506.384858][T12625] ft260 0003:0403:6030.0074: unknown main item tag 0x0 [ 1506.422598][T31785] bond_slave_0: entered promiscuous mode [ 1506.428312][T31785] bond_slave_1: entered promiscuous mode [ 1506.436506][T31785] vlan2: entered promiscuous mode [ 1506.441696][T31785] bond0: entered promiscuous mode [ 1506.582057][T12625] ft260 0003:0403:6030.0074: failed to retrieve chip version [ 1506.608663][T12625] ft260 0003:0403:6030.0074: probe with driver ft260 failed with error -71 [ 1506.638497][T12625] usb 2-1: USB disconnect, device number 49 [ 1506.750519][T25924] usb 5-1: USB disconnect, device number 49 [ 1507.391633][T31810] fuse: Bad value for 'fd' [ 1507.444385][T17966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.743183][T31825] program syz.4.6739 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1507.819135][T31829] tipc: Enabling of bearer rejected, failed to enable media [ 1507.935119][T31831] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1508.184940][T25924] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1508.268656][T12622] usbhid 6-1:0.1: can't add hid device: -71 [ 1508.285022][T31839] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6742'. [ 1508.309052][T12622] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1508.355606][T25924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1508.390152][T25924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1508.395083][T12622] usb 6-1: USB disconnect, device number 13 [ 1508.434140][T25924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 2047, setting to 1024 [ 1508.482525][T25924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1508.503369][T25924] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1508.526288][T25924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.558896][T25924] usb 5-1: config 0 descriptor?? [ 1508.583614][T31831] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1508.725832][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.140273][T25924] plantronics 0003:047F:FFFF.0075: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1509.292137][T12629] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1509.463141][T12629] usb 2-1: Using ep0 maxpacket: 16 [ 1509.491066][T12629] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1509.501435][T12629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.520944][T12629] usb 2-1: Product: syz [ 1509.530131][T12629] usb 2-1: Manufacturer: syz [ 1509.541627][T12629] usb 2-1: SerialNumber: syz [ 1509.563437][T12629] usb 2-1: config 0 descriptor?? [ 1509.584024][T12629] hub 2-1:0.0: bad descriptor, ignoring hub [ 1509.599233][T12629] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1509.722948][T25924] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1509.783636][T31862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.797011][T31862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.895260][T25924] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1509.910120][T25924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.923219][T12625] usb 2-1: USB disconnect, device number 50 [ 1509.937737][T25924] usb 6-1: config 0 descriptor?? [ 1509.981449][T25924] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1510.048021][T31882] pim6reg: entered allmulticast mode [ 1510.246608][T25924] gspca_stv06xx: I2C: Read error writing address: -71 [ 1510.283468][T25924] usb 6-1: USB disconnect, device number 14 [ 1511.213225][T12629] usb 5-1: USB disconnect, device number 50 [ 1511.764020][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.933224][T27520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.269980][T27533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.438280][T31912] loop6: detected capacity change from 0 to 7 [ 1512.471232][T31912] Dev loop6: unable to read RDB block 7 [ 1512.488163][T31912] loop6: AHDI p3 [ 1512.496735][T31912] loop6: partition table partially beyond EOD, truncated [ 1512.563642][T27519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.608654][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1512.634009][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1512.661927][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1512.675340][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1512.684550][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1512.893135][T31915] loop6: detected capacity change from 0 to 7 [ 1512.927002][T31915] Dev loop6: unable to read RDB block 7 [ 1512.934347][T31915] loop6: AHDI p1 p2 p3 [ 1512.938541][T31915] loop6: partition table partially beyond EOD, truncated [ 1512.989305][T31915] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1513.022987][T31915] loop6: p2 size 108 extends beyond EOD, truncated [ 1513.330271][ T5199] Dev loop6: unable to read RDB block 7 [ 1513.336570][ T5199] loop6: AHDI p1 p2 p3 [ 1513.340771][ T5199] loop6: partition table partially beyond EOD, truncated [ 1513.366720][ T5199] loop6: p1 start 4217409618 is beyond EOD, truncated [ 1513.385329][T31930] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6767'. [ 1513.391136][T27533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.405136][ T5199] loop6: p2 size 108 extends beyond EOD, truncated [ 1513.465464][ T6692] udevd[6692]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1513.669640][T27533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.942262][T27533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.025495][T31948] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6767'. [ 1514.076249][T31917] chnl_net:caif_netlink_parms(): no params data found [ 1514.423084][T12622] hid (null): global environment stack underflow [ 1514.429516][T12622] hid (null): unknown global tag 0xe [ 1514.435055][T12622] hid (null): unknown global tag 0xe [ 1514.440378][T12622] hid (null): unknown global tag 0xe [ 1514.446639][T12622] hid (null): bogus close delimiter [ 1514.672774][T12622] hid (null): usage index exceeded [ 1514.677920][T12622] hid (null): unknown global tag 0xe [ 1514.703113][T12622] hid (null): unknown global tag 0xd [ 1514.724069][T12622] hid (null): unknown global tag 0xe [ 1514.755389][T12622] hid-generic 0401:0007:9B1A.0076: unknown main item tag 0x0 [ 1514.803198][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.828913][T12622] hid-generic 0401:0007:9B1A.0076: collection stack underflow [ 1514.836633][T12622] hid-generic 0401:0007:9B1A.0076: item 0 1 0 12 parsing failed [ 1514.836715][T26527] Bluetooth: hci1: command tx timeout [ 1514.876299][T12622] hid-generic 0401:0007:9B1A.0076: probe with driver hid-generic failed with error -22 [ 1516.006182][T31917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.018478][T31917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.041529][T31917] bridge_slave_0: entered allmulticast mode [ 1516.066938][T31917] bridge_slave_0: entered promiscuous mode [ 1516.167041][T31917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.224655][T31917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.233256][T31917] bridge_slave_1: entered allmulticast mode [ 1516.245483][T31917] bridge_slave_1: entered promiscuous mode [ 1516.483653][T27533] bridge_slave_1: left allmulticast mode [ 1516.489328][T27533] bridge_slave_1: left promiscuous mode [ 1516.520312][T27533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.825428][T27533] bridge_slave_0: left allmulticast mode [ 1516.831321][T27533] bridge_slave_0: left promiscuous mode [ 1516.839918][T27533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.982924][T26527] Bluetooth: hci1: command tx timeout [ 1517.050058][T17966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.364130][T31968] loop6: detected capacity change from 0 to 7 [ 1517.439798][T31968] Dev loop6: unable to read RDB block 7 [ 1517.467589][T31968] loop6: AHDI p3 [ 1517.492884][T31968] loop6: partition table partially beyond EOD, truncated [ 1517.683496][T27519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.855487][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.142831][T12627] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1518.294644][T12627] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.310331][T12627] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1518.338693][T12627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.379258][T12627] usb 6-1: config 0 descriptor?? [ 1518.397189][T12627] pwc: Askey VC010 type 2 USB webcam detected. [ 1518.450800][T27533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.465203][T27533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1518.479983][T27533] bond0 (unregistering): Released all slaves [ 1518.501747][T31917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.521839][T31974] vlan3: entered allmulticast mode [ 1518.540483][T31976] netlink: 'syz.5.6774': attribute type 12 has an invalid length. [ 1518.571947][T31976] netlink: 'syz.5.6774': attribute type 29 has an invalid length. [ 1518.581655][T31976] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6774'. [ 1518.592960][T31988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1518.674916][T31917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.806953][T12627] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1518.836828][T31917] team0: Port device team_slave_0 added [ 1518.852840][T31917] team0: Port device team_slave_1 added [ 1519.042947][T26527] Bluetooth: hci1: command tx timeout [ 1519.068238][T31917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.077628][T31917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.115441][T12627] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1519.133194][T31917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.148290][T31917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.155497][T31917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.327560][T12627] pwc: recv_control_msg error -32 req 04 val 1000 [ 1519.346711][T31917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.357828][T12627] pwc: recv_control_msg error -32 req 04 val 1300 [ 1519.372423][T12627] pwc: recv_control_msg error -32 req 04 val 1400 [ 1519.383897][T12627] pwc: recv_control_msg error -32 req 02 val 2000 [ 1519.391069][T12627] pwc: recv_control_msg error -32 req 02 val 2100 [ 1519.399110][T12627] pwc: recv_control_msg error -32 req 04 val 1500 [ 1519.406250][T12627] pwc: recv_control_msg error -32 req 02 val 2500 [ 1519.414583][T12627] pwc: recv_control_msg error -32 req 02 val 2400 [ 1519.421578][T12627] pwc: recv_control_msg error -32 req 02 val 2600 [ 1519.428876][T12627] pwc: recv_control_msg error -32 req 02 val 2900 [ 1519.435908][T12627] pwc: recv_control_msg error -32 req 02 val 2800 [ 1519.445141][T31976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.455545][T31976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.468799][T31976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.492547][T31976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.506937][T12627] pwc: recv_control_msg error -71 req 04 val 1100 [ 1519.519340][T12627] pwc: recv_control_msg error -71 req 04 val 1200 [ 1519.530665][T12627] pwc: Registered as video103. [ 1519.541941][T12627] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input166 [ 1519.588703][T12627] usb 6-1: USB disconnect, device number 15 [ 1519.649266][T27533] hsr_slave_0: left promiscuous mode [ 1519.678562][T27533] hsr_slave_1: left promiscuous mode [ 1519.685624][T27533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1519.693611][T27533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.701346][T27533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1519.709671][T27533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.738125][T27533] veth1_macvtap: left promiscuous mode [ 1519.743881][T27533] veth0_macvtap: left promiscuous mode [ 1519.749446][T27533] veth1_vlan: left promiscuous mode [ 1519.755205][T27533] veth0_vlan: left promiscuous mode [ 1520.298727][T32019] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6780'. [ 1520.310593][T32019] netlink: 'syz.8.6780': attribute type 10 has an invalid length. [ 1520.737946][T27533] team0 (unregistering): Port device team_slave_1 removed [ 1520.792434][T27533] team0 (unregistering): Port device team_slave_0 removed [ 1520.899599][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.122928][T26527] Bluetooth: hci1: command tx timeout [ 1521.466328][T32019] syz_tun: entered promiscuous mode [ 1521.491638][T32019] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1521.544982][T31917] hsr_slave_0: entered promiscuous mode [ 1521.566350][T31917] hsr_slave_1: entered promiscuous mode [ 1521.574062][T31917] debugfs: 'hsr0' already exists in 'hsr' [ 1521.579887][T31917] Cannot create hsr debugfs directory [ 1522.027370][T31917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.189362][T31917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.314149][T31917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.446485][T31917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.743512][T32059] loop6: detected capacity change from 0 to 7 [ 1522.761123][ T6692] Dev loop6: unable to read RDB block 7 [ 1522.778346][T31917] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1522.781429][ T6692] loop6: AHDI p3 [ 1522.805270][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.808967][T31917] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1522.814504][T17966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.833789][ T6692] loop6: partition table partially beyond EOD, truncated [ 1522.849170][T32059] Dev loop6: unable to read RDB block 7 [ 1522.867893][T31917] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1522.874887][T32059] loop6: AHDI p3 [ 1522.880424][T32059] loop6: partition table partially beyond EOD, truncated [ 1522.901606][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1522.901622][ T30] audit: type=1326 audit(1761617522.468:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1522.903344][T31917] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1522.914497][ T30] audit: type=1326 audit(1761617522.468:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.030537][ T30] audit: type=1326 audit(1761617522.468:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.081522][ T30] audit: type=1326 audit(1761617522.468:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.132813][ T30] audit: type=1326 audit(1761617522.468:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.174133][T31917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.186105][T12627] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1523.227493][ T30] audit: type=1326 audit(1761617522.468:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.232460][T31917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.260402][ T30] audit: type=1326 audit(1761617522.468:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.286073][ T30] audit: type=1326 audit(1761617522.468:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.318797][T27533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.326003][T27533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.362889][T12627] usb 6-1: Using ep0 maxpacket: 8 [ 1523.363552][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.373360][T12627] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.375119][T17977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.405326][ T30] audit: type=1326 audit(1761617522.468:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.416258][T12627] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1523.427765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.480373][T12627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.522300][ T30] audit: type=1326 audit(1761617522.478:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32061 comm="syz.5.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x7ffc0000 [ 1523.544870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.560725][T12627] usb 6-1: config 0 descriptor?? [ 1523.627060][T12627] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22 [ 1523.722122][T31917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1523.801790][T32095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6791'. [ 1523.846642][T12627] usb 6-1: USB disconnect, device number 16 [ 1523.923087][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.094607][T31917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.253672][T32096] vlan2: entered allmulticast mode [ 1524.315501][T32101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1524.759092][T31917] veth0_vlan: entered promiscuous mode [ 1524.818812][T31917] veth1_vlan: entered promiscuous mode [ 1524.877385][T31917] veth0_macvtap: entered promiscuous mode [ 1524.886445][T31917] veth1_macvtap: entered promiscuous mode [ 1524.913056][T31917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.929430][T31917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.944724][T17977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1524.972234][T17977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.067060][T27520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.083018][T27520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.267311][T27520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.319465][T27520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.482890][T17968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.490738][T17968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.637790][T32132] tty tty33: ldisc open failed (-12), clearing slot 32 [ 1526.963291][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.519445][T32173] vlan3: entered allmulticast mode [ 1527.571020][T32183] netlink: 'syz.5.6809': attribute type 1 has an invalid length. [ 1527.994655][T12622] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1528.152813][T12622] usb 6-1: Using ep0 maxpacket: 32 [ 1528.177271][T12622] usb 6-1: config 1 interface 0 altsetting 47 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1528.202821][T12622] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1528.251979][T12622] usb 6-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.40 [ 1528.280849][T12622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.292868][T12622] usb 6-1: Product: Щ [ 1528.297018][T12622] usb 6-1: Manufacturer: 嘔攌빓引㩡콃覾꜒唘ｘ瞹픱î°é™¨ä…¨èªº×’ç“—ä³á”ˆíš¾ã†¤åŽŠìˆ¨ã¾Šã¿Œé„­ëˆ¤ç•µíœ‰ë‹³ä•„â…³ê“┓⥇ㄭ金ïŠî—‹ç¼œë¸‰å±£ë€–ꕴ蓟셼꠬é¤áˆ‰äµ¼æ…†î¹¨æ£œï·„ңᗰΰﶞ銮ꪉ㸵艔녶̴ᓦ난å؇ﺴæ—餉â¹î”°êª…â‡ê®†ä ¬á„ªï¼”ãˆï……쥃傒켫뉪åˆçŠ¿ï‹‰ï©Žâ¢µáž·è•©ë™›â¾˜à­ï”„ [ 1528.322830][ T5834] Bluetooth: hci1: command 0x0405 tx timeout [ 1528.415256][T12622] usb 6-1: SerialNumber: Ẅ伾á‚溭㓷蟓┻鱮暊綣尌Ệ鄕å„îž³ã¶ëˆ¼á‚«âµ˜Ü‰ï£¬â‚¢æ¨‘맩똠â£èºªçᔷষ傼⚠[ 1528.433077][T32201] program syz.8.6815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1528.438923][T32202] program syz.8.6815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1528.563814][T17977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.573390][T17969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.716070][T12622] usbhid 6-1:1.0: can't add hid device: -71 [ 1528.733494][T12622] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1528.756021][T12622] usb 6-1: USB disconnect, device number 17 [ 1529.211415][T32222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6820'. [ 1529.494767][T32240] syzkaller0: entered promiscuous mode [ 1530.003292][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.493896][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.043118][T32086] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1531.212796][T32086] usb 6-1: Using ep0 maxpacket: 16 [ 1531.219812][T32086] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1531.232486][T32086] usb 6-1: config 1 has an invalid interface number: 26 but max is 1 [ 1531.241112][T32086] usb 6-1: config 1 has an invalid interface number: 89 but max is 1 [ 1531.250631][T32086] usb 6-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 1531.261481][T32086] usb 6-1: config 1 has no interface number 0 [ 1531.271145][T32086] usb 6-1: config 1 has no interface number 1 [ 1531.279597][T32086] usb 6-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 1531.291923][T32086] usb 6-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1531.303781][T32086] usb 6-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 1531.318413][T32086] usb 6-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1531.333360][T32086] usb 6-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1531.346835][T32086] usb 6-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1531.361455][T32086] usb 6-1: config 1 interface 26 has no altsetting 0 [ 1531.368888][T32086] usb 6-1: config 1 interface 89 has no altsetting 0 [ 1531.378619][T32086] usb 6-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 1531.390977][T32086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.420150][T32086] usb 6-1: Manufacturer: 뢻蚼屷ä‹è¡â¾Î»ì‰ì¥—锂ꞣ늧蘆è§î«µé«Šé§‹è¶‡è¢´î–„븇æªâ¥Žìª™æº”ጼ봡⬈栞ᑞ殞ቴཤ἟똸åŽì‚’눾鉞ꀅ柱燎摠㬊织⊃짬漣붮ᅹç„⶧ä¦ê›’쟺èŽæ¡°î’²ë±µæ´¸ç†ì¬™ã‹æŽ‹Ñ [ 1531.444898][T32086] usb 6-1: SerialNumber: ã°Š [ 1531.452121][T32257] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1531.459590][T32257] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1531.699408][T32086] usb 6-1: unknown interface protocol 0x7d, assuming v1 [ 1531.756602][T32086] usb 6-1: 26:2 : does not exist [ 1531.800971][T32086] usb 6-1: unknown interface protocol 0x13, assuming v1 [ 1531.819134][T32086] usb 6-1: 89:2 : does not exist [ 1531.937278][T32086] usb 6-1: USB disconnect, device number 18 [ 1532.080937][T32114] udevd[32114]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1532.455465][T32277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6836'. [ 1532.657549][T32283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6838'. [ 1533.012928][T12622] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1533.178652][T12622] usb 6-1: Using ep0 maxpacket: 16 [ 1533.187134][T12622] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1533.221605][T12622] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 1533.250546][T12622] usb 6-1: config 13 has no interface number 0 [ 1533.270473][T12622] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1533.342862][T12622] usb 6-1: config 13 interface 50 has no altsetting 0 [ 1533.393585][T12622] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1533.433966][T12622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.484481][T12622] usb 6-1: Product: syz [ 1533.497660][T12622] usb 6-1: Manufacturer: syz [ 1533.521556][T12622] usb 6-1: SerialNumber: syz [ 1533.530110][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.565878][T32283] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1533.687963][T27520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.866489][T12622] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1533.921725][T12622] usb 6-1: MIDIStreaming interface descriptor not found [ 1534.153174][T12622] usb 6-1: USB disconnect, device number 19 [ 1534.338156][T17969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.382569][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1536.563211][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.835251][T27520] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.086648][T32370] can: request_module (can-proto-0) failed. [ 1537.385822][T27520] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.768900][T27520] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.988688][T27520] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.225549][T26527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1538.236063][T26527] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1538.244756][T26527] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1538.252603][T26527] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1538.260581][T26527] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1538.350553][T27520] bridge_slave_1: left allmulticast mode [ 1538.357543][T27520] bridge_slave_1: left promiscuous mode [ 1538.420543][T27520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.449602][T27520] bridge_slave_0: left allmulticast mode [ 1538.460632][T27520] bridge_slave_0: left promiscuous mode [ 1538.469103][T27520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.143133][T27520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1539.152808][T12622] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1539.165735][T27520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1539.178122][T27520] bond0 (unregistering): Released all slaves [ 1539.281247][T32409] vlan4: entered promiscuous mode [ 1539.288483][T32409] ip6gretap0: entered promiscuous mode [ 1539.316288][T12622] usb 6-1: Using ep0 maxpacket: 8 [ 1539.326861][T12622] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1539.370745][T12622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.406330][T12622] usb 6-1: Product: syz [ 1539.417450][T12622] usb 6-1: Manufacturer: syz [ 1539.426286][T12622] usb 6-1: SerialNumber: syz [ 1539.436358][T12622] usb 6-1: config 0 descriptor?? [ 1539.450555][T12622] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1539.458743][T17968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.604326][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.898977][T32423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.908546][T32423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.078266][T32423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.084337][T17966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.107782][T32423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.326132][T26527] Bluetooth: hci1: command tx timeout [ 1540.377910][T27520] hsr_slave_0: left promiscuous mode [ 1540.396605][T27520] hsr_slave_1: left promiscuous mode [ 1540.403243][T27520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.410651][T27520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.419241][T27520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.427057][T27520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.466489][T27520] veth1_macvtap: left promiscuous mode [ 1540.472138][T27520] veth0_macvtap: left promiscuous mode [ 1540.478851][T27520] veth1_vlan: left promiscuous mode [ 1540.484807][T27520] veth0_vlan: left promiscuous mode [ 1540.733363][T12633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1541.130369][T27520] team0 (unregistering): Port device team_slave_1 removed [ 1541.181470][T27520] team0 (unregistering): Port device team_slave_0 removed [ 1541.489082][T32408] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1541.497549][T32408] [U] J"—E:ÀÆ" [ 1541.501136][T32408] [U] [ 1541.742038][T17969] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.751318][T17969] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.788490][T17969] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.810155][T17969] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.919385][T12622] gspca_sonixj: reg_w1 err -71 [ 1542.002339][T12622] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1542.039506][T12622] usb 6-1: USB disconnect, device number 20 [ 1542.111127][T32401] chnl_net:caif_netlink_parms(): no params data found [ 1542.414378][T26527] Bluetooth: hci1: command tx timeout [ 1542.446950][T32401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.454675][T32401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.462174][T32401] bridge_slave_0: entered allmulticast mode [ 1542.475176][T32401] bridge_slave_0: entered promiscuous mode [ 1542.484844][T32401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.492057][T32401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.499500][T32401] bridge_slave_1: entered allmulticast mode [ 1542.507688][T32401] bridge_slave_1: entered promiscuous mode [ 1542.589441][T32401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.604888][T32401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.666750][T32401] team0: Port device team_slave_0 added [ 1542.704828][T32401] team0: Port device team_slave_1 added [ 1542.750533][T32481] sctp: [Deprecated]: syz.5.6873 (pid 32481) Use of int in max_burst socket option. [ 1542.750533][T32481] Use struct sctp_assoc_value instead [ 1542.808490][T32401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.818944][T32401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.847120][T32401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.871309][T32401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.879872][T32401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.906967][T32401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.959751][T32401] hsr_slave_0: entered promiscuous mode [ 1542.966305][T32401] hsr_slave_1: entered promiscuous mode [ 1542.972593][T32401] debugfs: 'hsr0' already exists in 'hsr' [ 1542.979774][T32401] Cannot create hsr debugfs directory [ 1543.449953][T32490] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6874'. [ 1543.764401][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.038621][T32503] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1544.329697][T32508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6875'. [ 1544.374350][T32508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6875'. [ 1544.473989][T32508] gretap0: entered promiscuous mode [ 1544.492809][T26527] Bluetooth: hci1: command tx timeout [ 1544.509545][T32508] gretap0: left promiscuous mode [ 1544.563158][T17966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.791684][T32401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1544.887153][T32401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1544.948740][T32401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1545.016042][T32401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1545.406278][T32401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.438531][T32401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.452421][T27520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.459646][T27520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.481042][T17966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.488217][T17966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.579856][T32401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.637602][T32401] veth0_vlan: entered promiscuous mode [ 1545.655087][T32401] veth1_vlan: entered promiscuous mode [ 1545.693588][T32401] veth0_macvtap: entered promiscuous mode [ 1545.705351][T32401] veth1_macvtap: entered promiscuous mode [ 1545.729009][T32401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.745691][T32401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.766647][T27533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.781011][T27533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.809866][T27533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.819085][T27533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.844827][T17969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.862624][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.869796][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.990910][T27533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.020576][T27533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.078069][T32558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1546.126501][T27535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.146270][T27535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.168955][T32563] binder_alloc: binder_alloc_mmap_handler: 32562 200000ffc000-200001000000 already mapped failed -16 [ 1546.389452][T32575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6885'. [ 1546.565871][T32580] tipc: Enabled bearer , priority 0 [ 1546.572973][T26527] Bluetooth: hci1: command tx timeout [ 1546.577548][T32580] syzkaller0: entered promiscuous mode [ 1546.605794][T32580] syzkaller0: entered allmulticast mode [ 1546.806840][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.379715][T32579] tipc: Resetting bearer [ 1547.417136][T32579] tipc: Disabling bearer [ 1547.843478][T32086] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1548.035616][T32086] usb 6-1: Using ep0 maxpacket: 32 [ 1548.043990][T32086] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1548.052253][T32086] usb 6-1: config 0 has no interface number 0 [ 1548.062584][T32086] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1548.075269][T32086] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1548.087462][T32086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.097966][T32086] usb 6-1: Product: syz [ 1548.102212][T32086] usb 6-1: Manufacturer: syz [ 1548.107418][T32086] usb 6-1: SerialNumber: syz [ 1548.115879][T32086] usb 6-1: config 0 descriptor?? [ 1549.846097][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.268526][T32733] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1550.269515][T32734] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6898'. [ 1550.321194][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1550.321206][ T30] audit: type=1326 audit(1761617549.908:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.352288][T27519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.437394][ T30] audit: type=1326 audit(1761617549.908:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.460855][ T30] audit: type=1326 audit(1761617549.968:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.486094][ T30] audit: type=1326 audit(1761617549.968:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.510695][ T30] audit: type=1326 audit(1761617549.968:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.587341][T32086] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1550.597103][T32086] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 1550.628550][ T30] audit: type=1326 audit(1761617549.968:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.658587][T32086] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1550.671997][T32086] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 1550.736144][ T30] audit: type=1326 audit(1761617549.968:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.778587][T32086] usb 6-1: USB disconnect, device number 21 [ 1550.788763][ T30] audit: type=1326 audit(1761617549.968:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.841698][ T30] audit: type=1326 audit(1761617549.968:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.873758][ T30] audit: type=1326 audit(1761617549.968:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32731 comm="syz.8.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1778efc9 code=0x7ffc0000 [ 1550.965833][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.084715][ C1] sd 0:0:1:0: [sda] tag#7591 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1551.095197][ C1] sd 0:0:1:0: [sda] tag#7591 CDB: Read(6) 08 00 00 00 03 44 [ 1551.156294][T32754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6903'. [ 1551.304553][T32754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6903'. [ 1552.772856][T12633] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1552.778779][ T327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1552.894288][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.023600][T12633] usb 6-1: Using ep0 maxpacket: 8 [ 1553.034654][T12633] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1553.055925][T12633] usb 6-1: config 179 has no interface number 0 [ 1553.070425][T12633] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1553.112311][T12633] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1553.126660][T12633] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1553.150534][T12633] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1553.162380][T12633] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1553.187145][T12633] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1553.202326][T12633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.215338][ T321] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1553.487269][T12622] usb 6-1: USB disconnect, device number 22 [ 1553.487383][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1553.501782][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1553.922258][T29993] bond0: (slave syz_tun): Releasing backup interface [ 1554.110999][T27519] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1554.124733][T27519] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.135819][T27519] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1554.213280][T12622] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1554.265852][T27519] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1554.276275][T27519] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.287330][T27519] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1554.387248][T12622] usb 6-1: Using ep0 maxpacket: 32 [ 1554.395632][T12622] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.438679][T12622] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.454000][T12622] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1554.471057][T27519] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1554.492886][T12622] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1554.501394][T12622] usb 6-1: Product: syz [ 1554.512948][T27519] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.527701][T12622] usb 6-1: Manufacturer: syz [ 1554.538950][T27519] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1554.543214][T12622] hub 6-1:4.0: USB hub found [ 1554.660466][T27519] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1554.674451][T27519] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.685196][T27519] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1554.744471][T12622] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 1554.833450][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1554.846820][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1554.856804][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1554.865997][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1554.873574][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1555.094346][T27519] bridge_slave_1: left allmulticast mode [ 1555.100103][T27519] bridge_slave_1: left promiscuous mode [ 1555.106373][T27519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.115677][T27519] bridge_slave_0: left allmulticast mode [ 1555.121340][T27519] bridge_slave_0: left promiscuous mode [ 1555.123408][T32086] usb 6-1: USB disconnect, device number 23 [ 1555.130148][T27519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.449628][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.552794][T27519] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1555.872875][T32086] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1555.900105][T27519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.909888][T27519] bond_slave_0: left promiscuous mode [ 1555.924389][T12638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.937549][T27520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.943507][T27519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.954540][T12638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.964677][T27519] bond_slave_1: left promiscuous mode [ 1555.966613][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.972484][T27519] bond0 (unregistering): Released all slaves [ 1555.991936][T27519] bond1 (unregistering): Released all slaves [ 1556.005563][T27519] bond2 (unregistering): Released all slaves [ 1556.018575][T27519] bond3 (unregistering): Released all slaves [ 1556.031040][T27519] bond4 (unregistering): Released all slaves [ 1556.032780][T32086] usb 6-1: Using ep0 maxpacket: 16 [ 1556.048868][T27519] bond5 (unregistering): Released all slaves [ 1556.049401][T32086] usb 6-1: config 1 has an invalid interface number: 3 but max is 2 [ 1556.080571][T32086] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.095428][T27535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.107075][T32086] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1556.133278][T32086] usb 6-1: config 1 has no interface number 1 [ 1556.150567][T32086] usb 6-1: too many endpoints for config 1 interface 3 altsetting 9: 227, using maximum allowed: 30 [ 1556.173867][T32086] usb 6-1: config 1 interface 3 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 227 [ 1556.222230][T32086] usb 6-1: config 1 interface 3 has no altsetting 0 [ 1556.292549][T32086] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1556.303776][T32086] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.311853][T32086] usb 6-1: Product: syz [ 1556.316648][T32086] usb 6-1: Manufacturer: syz [ 1556.321335][T32086] usb 6-1: SerialNumber: syz [ 1556.388693][T27519] tipc: Left network mode [ 1556.399932][ T404] netlink: 'syz.4.6926': attribute type 10 has an invalid length. [ 1556.425948][ T404] team0: Port device dummy0 added [ 1556.457881][ T404] netlink: 'syz.4.6926': attribute type 10 has an invalid length. [ 1556.555897][ T404] team0: Port device dummy0 removed [ 1556.598494][ T404] dummy0: entered promiscuous mode [ 1556.611407][ T404] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1556.631920][T32086] usb 6-1: 0:2 : does not exist [ 1556.687354][ T386] chnl_net:caif_netlink_parms(): no params data found [ 1556.840955][T32086] usb 6-1: USB disconnect, device number 24 [ 1556.977856][T26527] Bluetooth: hci2: command tx timeout [ 1556.995700][T32114] udevd[32114]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1557.787188][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.848675][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1557.848692][ T30] audit: type=1800 audit(1761617557.438:8461): pid=438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6927" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1557.887360][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.901562][ T386] bridge_slave_0: entered allmulticast mode [ 1557.908818][ T386] bridge_slave_0: entered promiscuous mode [ 1557.922150][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.929981][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.941989][ T386] bridge_slave_1: entered allmulticast mode [ 1557.949058][T12628] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1558.017834][ T386] bridge_slave_1: entered promiscuous mode [ 1558.072482][T27519] hsr_slave_0: left promiscuous mode [ 1558.139832][T27519] hsr_slave_1: left promiscuous mode [ 1558.173026][T12628] usb 6-1: Using ep0 maxpacket: 8 [ 1558.181828][T27519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.202286][T12628] usb 6-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 1558.220653][T12628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.230869][T27519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.260834][T12628] usb 6-1: Product: syz [ 1558.273810][T27519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.301553][T12628] usb 6-1: Manufacturer: syz [ 1558.306278][T27519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.315244][T12628] usb 6-1: SerialNumber: syz [ 1558.364189][T12628] usb 6-1: config 0 descriptor?? [ 1558.425415][T12628] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 1558.446321][T27519] veth1_macvtap: left promiscuous mode [ 1558.489916][T27519] veth0_macvtap: left promiscuous mode [ 1558.511414][T12628] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input168 [ 1558.533161][T27519] veth1_vlan: left promiscuous mode [ 1558.538417][T27519] veth0_vlan: left promiscuous mode [ 1559.059596][T12628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.068152][T26527] Bluetooth: hci2: command tx timeout [ 1559.672976][T27519] team0 (unregistering): Port device team_slave_1 removed [ 1559.725809][T27519] team0 (unregistering): Port device C removed [ 1560.228408][ T463] batadv_slave_0: entered promiscuous mode [ 1560.238902][ T463] batadv_slave_0: left promiscuous mode [ 1560.262187][ T386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.286621][ T386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.380272][ T386] team0: Port device team_slave_0 added [ 1560.402489][ T386] team0: Port device team_slave_1 added [ 1560.506571][ T386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.523401][ T386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.549349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1560.558298][ T386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.580794][ T386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.588216][ T386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1560.606908][T25922] usb 6-1: USB disconnect, device number 25 [ 1560.614539][ T386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.660724][T27519] IPVS: stop unused estimator thread 0... [ 1560.760123][ T386] hsr_slave_0: entered promiscuous mode [ 1560.774102][ T386] hsr_slave_1: entered promiscuous mode [ 1560.790138][ T386] debugfs: 'hsr0' already exists in 'hsr' [ 1560.797040][ T386] Cannot create hsr debugfs directory [ 1561.016788][ T490] libceph: resolve '0..' (ret=-3): failed [ 1561.122826][T26527] Bluetooth: hci2: command tx timeout [ 1561.204356][T27520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.236910][T25927] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1561.262187][T25927] dvb_usb_dibusb_mc 7-1:0.29: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 1561.272835][T25922] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1561.297365][T25927] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in cold state, will try to load a firmware [ 1561.329508][T25927] usb 7-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 1561.355488][T25927] usb 7-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 1561.453205][T25922] usb 6-1: Using ep0 maxpacket: 16 [ 1561.471697][T25922] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.483940][T25922] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.496160][T25922] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1561.503504][T25922] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1561.512980][T25922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.524401][T25922] usb 6-1: config 0 descriptor?? [ 1561.848491][T17968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.984014][ T386] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1562.058135][ T386] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1562.082246][ T386] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1562.090623][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1562.108966][ T386] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1562.480351][ T386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.661119][ T386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.789590][T27535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.796815][T27535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.864810][T27535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.871932][T27535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.015989][ T386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.213625][T26527] Bluetooth: hci2: command tx timeout [ 1563.286189][ T386] veth0_vlan: entered promiscuous mode [ 1563.396926][ T386] veth1_vlan: entered promiscuous mode [ 1563.740962][ T386] veth0_macvtap: entered promiscuous mode [ 1563.747844][ T542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6942'. [ 1563.879916][ T386] veth1_macvtap: entered promiscuous mode [ 1563.970818][ T386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1564.052399][ T386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1564.113514][T17968] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.134782][T27519] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.191414][T25922] usbhid 6-1:0.0: can't add hid device: -71 [ 1564.204153][T27519] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.213831][T25922] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1564.221710][T27519] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.275672][T25922] usb 6-1: USB disconnect, device number 26 [ 1564.498159][T27519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.542748][T27519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.631398][ T30] audit: type=1326 audit(1761617564.218:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=550 comm="syz.5.6943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f24f8efc9 code=0x0 [ 1564.719522][T27533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.748428][T27533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.010008][ T568] ptrace attach of "./syz-executor exec"[32401] was attempted by "./syz-executor exec"[568] [ 1565.136123][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.323132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.488006][ T30] audit: type=1326 audit(1761617566.078:8463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=598 comm="syz.6.6949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d11f8efc9 code=0x0 [ 1566.947162][ T618] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1566.957329][ T30] audit: type=1326 audit(1761617566.548:8464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.7.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff972b8efc9 code=0x50000 [ 1566.981447][T27519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.005620][ T30] audit: type=1326 audit(1761617566.568:8465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.7.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff972b8efc9 code=0x50000 [ 1567.029199][ T30] audit: type=1326 audit(1761617566.568:8466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.7.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff972b8efc9 code=0x50000 [ 1567.055993][ T30] audit: type=1326 audit(1761617566.568:8467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.7.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff972b8efc9 code=0x50000 [ 1567.080715][ T30] audit: type=1326 audit(1761617566.568:8468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.7.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff972b8efc9 code=0x50000 [ 1567.104908][ T30] audit: type=1326 audit(1761617566.568:8469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.7.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff972b8efc9 code=0x50000 [ 1567.131945][ T30] audit: type=1326 audit(1761617566.568:8470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.7.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff972b8efc9 code=0x50000 [ 1567.160888][ T30] audit: type=1326 audit(1761617566.568:8471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=617 comm="syz.7.6954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff972b8efc9 code=0x50000 [ 1567.222792][T12625] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1567.243228][T12628] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1567.251658][T12628] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1567.259765][T12628] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1567.301712][T12628] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1567.317153][T12628] rtc rtc0: __rtc_set_alarm: err=-22 [ 1567.453573][ T639] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1567.453573][ T639] program syz.7.6957 not setting count and/or reply_len properly [ 1567.534808][T12625] usb 6-1: Using ep0 maxpacket: 32 [ 1567.593790][T12625] usb 6-1: config 0 has an invalid interface number: 38 but max is 0 [ 1567.608821][T27520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.641676][T12625] usb 6-1: config 0 has no interface number 0 [ 1567.673332][T12625] usb 6-1: config 0 interface 38 has no altsetting 0 [ 1567.728452][T12625] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3 [ 1567.738614][T12625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.752137][T12625] usb 6-1: Product: syz [ 1567.757578][T12625] usb 6-1: Manufacturer: syz [ 1567.762214][T12625] usb 6-1: SerialNumber: syz [ 1567.797458][T12625] usb 6-1: config 0 descriptor?? [ 1567.936790][T12625] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1568.164221][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.741107][T12625] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input169 [ 1569.298001][T12625] usb 6-1: USB disconnect, device number 27 [ 1570.676992][ T706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1571.203799][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.115986][ T744] fuse: Invalid uid '00000000000000000003' [ 1572.176780][T27519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.215766][ T744] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1572.520244][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1572.537045][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1572.545898][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1572.561623][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1572.569719][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1573.193330][ T765] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6976'. [ 1573.339308][ T773] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6979'. [ 1573.365498][T27535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.639820][ T791] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1574.009446][ T765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.080111][ T765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.098285][ T765] bond0 (unregistering): Released all slaves [ 1574.204352][ T791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.227766][ T750] chnl_net:caif_netlink_parms(): no params data found [ 1574.245879][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.520846][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.540306][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.549540][ T750] bridge_slave_0: entered allmulticast mode [ 1574.559814][ T750] bridge_slave_0: entered promiscuous mode [ 1574.574212][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.584222][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.591695][ T750] bridge_slave_1: entered allmulticast mode [ 1574.637043][ T750] bridge_slave_1: entered promiscuous mode [ 1574.645038][T26527] Bluetooth: hci0: command tx timeout [ 1574.721188][ T750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.806822][ T750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.023004][ T750] team0: Port device team_slave_0 added [ 1575.122639][ T750] team0: Port device team_slave_1 added [ 1575.420118][ T750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.482929][ T750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.529262][ T750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.571223][ T750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.616172][ T750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.664098][ T750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.803948][ T750] hsr_slave_0: entered promiscuous mode [ 1575.834886][ T750] hsr_slave_1: entered promiscuous mode [ 1575.855473][ T750] debugfs: 'hsr0' already exists in 'hsr' [ 1575.861444][ T750] Cannot create hsr debugfs directory [ 1576.722819][T26527] Bluetooth: hci0: command tx timeout [ 1576.758883][ T750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.031272][ T750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.311522][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.365163][ T750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.568193][ T750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.847936][T17968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1578.308583][ T750] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1578.357026][ T750] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1578.424176][ T750] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1578.495040][ T750] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1578.784500][ T750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.806985][T26527] Bluetooth: hci0: command tx timeout [ 1578.876667][ T750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.019087][T27533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.026290][T27533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.068687][T27519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.075823][T27519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.125843][T17968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.531791][ T750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.677204][ T750] veth0_vlan: entered promiscuous mode [ 1579.718932][ T750] veth1_vlan: entered promiscuous mode [ 1579.835933][ T750] veth0_macvtap: entered promiscuous mode [ 1579.866206][ T750] veth1_macvtap: entered promiscuous mode [ 1579.966420][ T750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.001301][ T750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.049867][T27533] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.087740][T27533] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.107792][T27533] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.159351][T27533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.336691][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.350770][T27535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.397699][T27535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.461558][T17968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.502914][T17968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.654833][ T904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6992'. [ 1580.884215][T26527] Bluetooth: hci0: command tx timeout [ 1581.067570][ T931] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1581.081795][ T932] fuse: Unknown parameter '00000000000000000003' [ 1581.393524][T12640] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1581.412493][ T950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1581.441375][ T950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1581.565290][T12640] usb 4-1: Using ep0 maxpacket: 32 [ 1581.587516][T12640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.611170][T12640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.639135][T12640] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1581.661025][T12640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.677674][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1581.677691][ T30] audit: type=1804 audit(1761617581.268:8539): pid=964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.7000" name="/newroot/23/file1" dev="fuse" ino=1 res=1 errno=0 [ 1581.737589][T12640] usb 4-1: config 0 descriptor?? [ 1581.761783][T12640] hub 4-1:0.0: USB hub found [ 1581.935894][ T976] fuse: Bad value for 'fd' [ 1581.957686][T12640] hub 4-1:0.0: 1 port detected [ 1582.533585][T12633] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1582.566252][T12640] hub 4-1:0.0: activate --> -90 [ 1582.704825][T12633] usb 6-1: Using ep0 maxpacket: 16 [ 1582.712186][T12633] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.728647][T12633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1582.739816][T12633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1582.749679][T12633] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1582.759910][T12633] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1582.786890][T12633] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1582.796152][T12633] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1582.804416][T12633] usb 6-1: Manufacturer: syz [ 1582.821275][T12633] usb 6-1: config 0 descriptor?? [ 1582.964383][ T31] INFO: task syz.3.6440:30404 blocked for more than 143 seconds. [ 1582.982841][T25922] usb 4-1: USB disconnect, device number 22 [ 1582.990080][ T31] Not tainted syzkaller #0 [ 1582.997447][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1583.011220][ T31] task:syz.3.6440 state:D stack:27272 pid:30404 tgid:30403 ppid:28697 task_flags:0x400140 flags:0x00080002 [ 1583.042951][ T31] Call Trace: [ 1583.046609][ T31] [ 1583.049577][ T31] __schedule+0x1798/0x4cc0 [ 1583.072907][ T31] ? __pfx___schedule+0x10/0x10 [ 1583.128942][ T31] ? schedule+0x91/0x360 [ 1583.143045][ T31] schedule+0x165/0x360 [ 1583.147282][ T31] schedule_preempt_disabled+0x13/0x30 [ 1583.212936][ T31] __mutex_lock+0x7e6/0x1350 [ 1583.216186][T12633] rc_core: IR keymap rc-hauppauge not found [ 1583.217606][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1583.244289][T12633] Registered IR keymap rc-empty [ 1583.249342][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.256792][ T31] ? usbdev_open+0x16e/0x760 [ 1583.261423][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1583.292338][ T31] ? bus_find_device+0x273/0x2b0 [ 1583.303735][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1583.309068][ T31] ? __lock_acquire+0xab9/0xd20 [ 1583.327691][ T31] usbdev_open+0x16e/0x760 [ 1583.332164][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1583.333839][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.337875][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1583.354074][ T31] chrdev_open+0x4cc/0x5e0 [ 1583.359493][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1583.366933][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.369601][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1583.386033][T12633] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1583.397894][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1583.402923][ T31] do_dentry_open+0x953/0x13f0 [ 1583.407725][ T31] vfs_open+0x3b/0x340 [ 1583.411809][ T31] ? path_openat+0x2ecd/0x3830 [ 1583.418601][ T31] path_openat+0x2ee5/0x3830 [ 1583.419345][T12633] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input170 [ 1583.436943][ T31] ? __pfx_path_openat+0x10/0x10 [ 1583.441930][ T31] do_filp_open+0x1fa/0x410 [ 1583.449069][ T31] ? __lock_acquire+0xab9/0xd20 [ 1583.456596][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1583.461841][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.469467][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1583.475959][ T31] ? alloc_fd+0x64c/0x6c0 [ 1583.480359][ T31] do_sys_openat2+0x121/0x1c0 [ 1583.485512][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1583.490786][ T31] ? exc_page_fault+0x82/0x100 [ 1583.495851][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.503658][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 1583.509547][ T31] __x64_sys_openat+0x138/0x170 [ 1583.515131][ T31] do_syscall_64+0xfa/0xfa0 [ 1583.519745][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1583.525954][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.533257][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.539492][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1583.545076][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.551034][ T31] RIP: 0033:0x7fa94878d810 [ 1583.556089][ T31] RSP: 002b:00007fa9496f7b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1583.564693][ T31] RAX: ffffffffffffffda RBX: 000000000010b701 RCX: 00007fa94878d810 [ 1583.564866][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.576517][ T31] RDX: 000000000010b701 RSI: 00007fa9496f7c10 RDI: 00000000ffffff9c [ 1583.589049][ T31] RBP: 00007fa9496f7c10 R08: 0000000000000000 R09: 0000000000000000 [ 1583.598026][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1583.604571][T27533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.608642][ T31] R13: 00007fa9489e6038 R14: 00007fa9489e5fa0 R15: 00007fa948b0fa28 [ 1583.614667][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.623138][ T31] [ 1583.632448][ T31] INFO: task syz.3.6440:30405 blocked for more than 144 seconds. [ 1583.643675][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.650971][ T31] Not tainted syzkaller #0 [ 1583.663171][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.679901][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1583.711168][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.723484][ T31] task:syz.3.6440 state:D stack:28192 pid:30405 tgid:30403 ppid:28697 task_flags:0x400040 flags:0x00080002 [ 1583.738737][ T31] Call Trace: [ 1583.742090][ T31] [ 1583.745114][ T31] __schedule+0x1798/0x4cc0 [ 1583.749686][ T31] ? __pfx___schedule+0x10/0x10 [ 1583.755088][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.762456][ T31] ? schedule+0x91/0x360 [ 1583.767612][ T31] schedule+0x165/0x360 [ 1583.771829][ T31] schedule_preempt_disabled+0x13/0x30 [ 1583.777685][T12633] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.784881][ T31] __mutex_lock+0x7e6/0x1350 [ 1583.789523][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1583.794624][ T31] ? usbdev_open+0x16e/0x760 [ 1583.799284][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1583.804462][ T31] ? bus_find_device+0x273/0x2b0 [ 1583.809443][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1583.819630][ T31] ? __lock_acquire+0xab9/0xd20 [ 1583.824809][T12633] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1583.832935][ T31] usbdev_open+0x16e/0x760 [ 1583.837436][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1583.842419][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1583.847843][T12633] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1583.862434][ T31] chrdev_open+0x4cc/0x5e0 [ 1583.873222][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1583.878224][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1583.902726][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1583.907754][ T31] do_dentry_open+0x953/0x13f0 [ 1583.915014][ T31] vfs_open+0x3b/0x340 [ 1583.919161][ T31] ? path_openat+0x2ecd/0x3830 [ 1583.934374][ T31] path_openat+0x2ee5/0x3830 [ 1583.939087][ T31] ? __pfx_path_openat+0x10/0x10 [ 1583.944626][ T31] do_filp_open+0x1fa/0x410 [ 1583.949288][ T31] ? __lock_acquire+0xab9/0xd20 [ 1583.954702][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1583.959803][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1583.964744][ T31] ? alloc_fd+0x64c/0x6c0 [ 1583.969113][ T31] do_sys_openat2+0x121/0x1c0 [ 1583.974603][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1583.979882][ T31] ? rcu_is_watching+0x15/0xb0 [ 1583.984985][ T31] __x64_sys_openat+0x138/0x170 [ 1583.989864][ T31] do_syscall_64+0xfa/0xfa0 [ 1583.994476][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1583.999694][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.008547][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1584.014094][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.020028][ T31] RIP: 0033:0x7fa94878d810 [ 1584.024646][ T31] RSP: 002b:00007fa9496d6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1584.033131][ T31] RAX: ffffffffffffffda RBX: 000000000010b701 RCX: 00007fa94878d810 [ 1584.041111][ T31] RDX: 000000000010b701 RSI: 00007fa9496d6c10 RDI: 00000000ffffff9c [ 1584.049342][ T31] RBP: 00007fa9496d6c10 R08: 0000000000000000 R09: 0000000000000000 [ 1584.057482][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1584.065552][ T31] R13: 00007fa9489e6128 R14: 00007fa9489e6090 R15: 00007fa948b0fa28 [ 1584.073620][ T31] [ 1584.109137][ T31] [ 1584.109137][ T31] Showing all locks held in the system: [ 1584.171960][ T31] 1 lock held by khungtaskd/31: [ 1584.178791][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1584.204646][ T31] 2 locks held by getty/5588: [ 1584.209361][ T31] #0: ffff88814d86d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1584.234192][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1584.253003][ T31] 4 locks held by udevd/6233: [ 1584.257705][ T31] #0: ffff888066c988b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1584.302732][ T31] #1: ffff888045103088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1584.312210][ T31] #2: ffff88803f18b3c8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1584.362723][ T31] #3: ffff88806643b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1584.372118][ T31] 4 locks held by kworker/0:11/12633: [ 1584.412777][ T31] 6 locks held by kworker/0:3/25927: [ 1584.418109][ T31] #0: ffff8880202afd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1584.462710][ T31] #1: ffffc9000509fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1584.502824][ T31] #2: ffff888145320198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1584.511776][ T31] #3: ffff88806643b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1584.582795][ T31] #4: ffff88802ffdb160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1584.592127][ T31] #5: ffffffff8dde26f0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 1584.627577][ T31] 1 lock held by syz.3.6440/30404: [ 1584.643218][ T31] #0: ffff888145320198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1584.652314][ T31] 1 lock held by syz.3.6440/30405: [ 1584.693711][ T31] #0: ffff888145320198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1584.707015][ T31] 1 lock held by syz.9.6535/30786: [ 1584.712191][ T31] #0: ffff888145320198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1584.751773][ T31] 3 locks held by syz.7.6991/894: [ 1584.757101][ T31] #0: ffff88803aa74dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1584.767202][ T31] #1: ffff88803aa740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1584.776976][ T31] #2: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1584.787949][ T31] 5 locks held by syz.3.6997/935: [ 1584.798016][ T31] #0: ffff8880266ecdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1584.808744][ T31] #1: ffff8880266ec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1584.818577][ T31] #2: ffffffff8f435268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1584.828652][ T31] #3: ffff88807d6cd338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1584.839094][ T31] #4: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1584.850126][ T31] 3 locks held by syz.4.7001/967: [ 1584.855196][ T31] #0: ffff88803a4c8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1584.865184][ T31] #1: ffff88803a4c80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1584.874938][ T31] #2: ffffffff8f435268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1584.884126][T27535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.885816][ T31] 3 locks held by syz.2.7002/972: [ 1584.898225][ T31] #0: ffff88807d448dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1584.908296][ T31] #1: ffff88807d4480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1584.918042][ T31] #2: ffffffff8f435268 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1584.928164][ T31] 1 lock held by syz.5.7005/988: [ 1584.933234][ T31] #0: ffffffff8f2cb148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1584.942877][ T31] 1 lock held by dhcpcd/1022: [ 1584.947566][ T31] #0: ffff88804934a260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1584.957350][ T31] 2 locks held by dhcpcd/1023: [ 1584.962199][ T31] [ 1584.975388][ T31] ============================================= [ 1584.975388][ T31] [ 1584.993124][ T31] NMI backtrace for cpu 0 [ 1584.993146][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1584.993166][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1584.993177][ T31] Call Trace: [ 1584.993185][ T31] [ 1584.993193][ T31] dump_stack_lvl+0x189/0x250 [ 1584.993224][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1584.993252][ T31] ? __pfx__printk+0x10/0x10 [ 1584.993280][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1584.993302][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1584.993317][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1584.993339][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1584.993370][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1584.993388][ T31] watchdog+0xf60/0xfa0 [ 1584.993405][ T31] ? watchdog+0x1e2/0xfa0 [ 1584.993422][ T31] kthread+0x711/0x8a0 [ 1584.993441][ T31] ? __pfx_watchdog+0x10/0x10 [ 1584.993454][ T31] ? __pfx_kthread+0x10/0x10 [ 1584.993472][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1584.993487][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1584.993502][ T31] ? __pfx_kthread+0x10/0x10 [ 1584.993519][ T31] ret_from_fork+0x4bc/0x870 [ 1584.993535][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1584.993553][ T31] ? __switch_to_asm+0x39/0x70 [ 1584.993565][ T31] ? __switch_to_asm+0x33/0x70 [ 1584.993575][ T31] ? __pfx_kthread+0x10/0x10 [ 1584.993593][ T31] ret_from_fork_asm+0x1a/0x30 [ 1584.993618][ T31] [ 1584.993643][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1585.146146][ C1] NMI backtrace for cpu 1 [ 1585.146164][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1585.146182][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1585.146192][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1585.146217][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1585.146230][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1585.146247][ C1] RAX: cddd5f5b52e3b200 RBX: ffffffff81967be7 RCX: cddd5f5b52e3b200 [ 1585.146260][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bf1d RDI: ffffffff8bbf05e0 [ 1585.146272][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1585.146284][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd470 [ 1585.146296][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d7b58 [ 1585.146307][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 1585.146321][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1585.146332][ C1] CR2: 00007ffd6611ce64 CR3: 0000000031ae8000 CR4: 00000000003526f0 [ 1585.146347][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1585.146358][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1585.146369][ C1] Call Trace: [ 1585.146378][ C1] [ 1585.146385][ C1] default_idle+0x13/0x20 [ 1585.146407][ C1] default_idle_call+0x73/0xb0 [ 1585.146429][ C1] do_idle+0x1e7/0x510 [ 1585.146447][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1585.146465][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1585.146484][ C1] ? __pfx_do_idle+0x10/0x10 [ 1585.146505][ C1] ? do_idle+0x4ed/0x510 [ 1585.146522][ C1] cpu_startup_entry+0x44/0x60 [ 1585.146540][ C1] start_secondary+0x101/0x110 [ 1585.146561][ C1] common_startup_64+0x13e/0x147 [ 1585.146589][ C1] [ 1585.551424][T25923] usb 6-1: USB disconnect, device number 28 [ 1585.708277][T17968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1585.722090][T17968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.814139][T17968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1585.825268][T17968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.931870][T17968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1585.947561][T17968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.031377][T17968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1586.041974][T17968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.178223][T17968] bridge_slave_1: left allmulticast mode [ 1586.185376][T17968] bridge_slave_1: left promiscuous mode [ 1586.191086][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.200248][T17968] bridge_slave_0: left allmulticast mode [ 1586.206581][T17968] bridge_slave_0: left promiscuous mode [ 1586.212248][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.403788][T25922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.737310][T17968] bond0 (unregistering): Released all slaves [ 1586.867641][T17968] tipc: Left network mode [ 1587.120218][T17968] hsr_slave_0: left promiscuous mode [ 1587.126514][T17968] hsr_slave_1: left promiscuous mode [ 1587.150497][T17968] veth1_macvtap: left promiscuous mode [ 1587.159102][T17968] veth0_macvtap: left promiscuous mode [ 1587.165318][T17968] veth1_vlan: left promiscuous mode [ 1587.170777][T17968] veth0_vlan: left promiscuous mode [ 1587.758937][T17968] team0 (unregistering): Port device team_slave_1 removed [ 1587.821546][T17968] team0 (unregistering): Port device team_slave_0 removed [ 1588.117284][T17968] vxcan1 (unregistering): left allmulticast mode [ 1588.745792][T17968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.878293][T17968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.958075][T17968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.038280][T17968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.284907][T17968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.359756][T17968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.371882][T27535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.448392][T25923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.476577][T17968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.587071][T17968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.830084][T17968] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.926412][T17968] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.005116][T17968] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.081816][T17968] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1590.645706][T27520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.712953][T17968] bridge_slave_1: left allmulticast mode [ 1590.718621][T17968] bridge_slave_1: left promiscuous mode [ 1590.724876][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.738341][T17968] bridge_slave_0: left allmulticast mode [ 1590.745121][T17968] bridge_slave_0: left promiscuous mode [ 1590.751133][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.766147][T17968] bridge_slave_1: left allmulticast mode [ 1590.772505][T17968] bridge_slave_1: left promiscuous mode [ 1590.778848][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.791280][T17968] bridge_slave_0: left allmulticast mode [ 1590.798779][T17968] bridge_slave_0: left promiscuous mode [ 1590.805102][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.818500][T17968] bridge_slave_1: left allmulticast mode [ 1590.825105][T17968] bridge_slave_1: left promiscuous mode [ 1590.830958][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.843704][T17968] bridge_slave_0: left allmulticast mode [ 1590.849393][T17968] bridge_slave_0: left promiscuous mode [ 1590.855717][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.868020][T17968] bridge_slave_1: left allmulticast mode [ 1590.874527][T17968] bridge_slave_1: left promiscuous mode [ 1590.880301][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.891779][T17968] bridge_slave_0: left promiscuous mode [ 1590.898901][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.449849][T17968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.460749][T17968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.472311][T17968] bond0 (unregistering): Released all slaves [ 1591.836374][T17968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.848359][T17968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.858660][T17968] bond0 (unregistering): Released all slaves [ 1592.462925][T17968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.471808][T17968] bond_slave_0: left promiscuous mode [ 1592.478872][T17968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.488081][T17968] bond_slave_1: left promiscuous mode [ 1592.488218][T12622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.502518][T17968] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1592.511357][T17968] dummy0: left promiscuous mode [ 1592.518276][T17968] bond0 (unregistering): Released all slaves