last executing test programs: 12m45.350415917s ago: executing program 32 (id=527): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x600000, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) getitimer(0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5m18.939317014s ago: executing program 33 (id=1676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x27a) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000bc0)={'syz0\x00', {0x7, 0x6, 0x8, 0x6}, 0x4f, [0xe440, 0x1, 0x5, 0x8, 0xfff, 0x80000001, 0x5, 0x3, 0x5, 0x3, 0x8, 0x7, 0x4, 0x101, 0xfffffe01, 0x1, 0x601c, 0x6, 0x400, 0xa, 0x4cd, 0x10000, 0x7fffffff, 0x401, 0x6, 0xd8, 0x0, 0x6, 0x0, 0x8, 0x1, 0x2, 0x64, 0xf7, 0x200, 0x1ff, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x40000000, 0x8, 0x9, 0x800, 0x9f, 0xbd6, 0xd, 0x3, 0xffdf, 0xff, 0x1d8, 0x2, 0x400, 0xa055, 0x64e, 0x6, 0xa, 0x10, 0x0, 0xb, 0x2, 0x1], [0x0, 0x6, 0x6, 0x6, 0xfff, 0x3, 0xb, 0xb300, 0x9, 0x17, 0x2, 0x0, 0xfffffffe, 0xac3, 0x40, 0x20, 0x7, 0xc, 0x45, 0xfff, 0x8, 0x8, 0x3e, 0x4, 0x7ebc, 0x6, 0x8c26, 0x2, 0x7, 0xc9600000, 0x1, 0x8, 0xc80, 0x4, 0x10000, 0x3ff, 0x3, 0x8, 0x1000, 0x9, 0x278, 0x6, 0x401, 0x8, 0x8, 0x800, 0xf, 0x9de, 0x2, 0x3, 0x1, 0x9, 0xe11, 0xc681, 0x936, 0x5, 0x4, 0x0, 0x1000, 0x5, 0xde59, 0xfffffffc, 0xe, 0x5], [0x4, 0x3, 0xce2d9a9, 0x7, 0x3, 0x5, 0x4f, 0x2, 0xcb3e, 0x8, 0x2dd, 0x0, 0x7, 0x5, 0x4000, 0xb8e9, 0x5, 0x7fffffff, 0x5, 0x8, 0x9, 0xf8000000, 0x8, 0x2, 0x0, 0x3, 0x1bec80, 0x4, 0x8, 0x9598, 0x8001, 0x6, 0xe, 0x3, 0x4, 0xa2, 0x4f, 0x0, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0x2, 0x1, 0x6, 0x5, 0x6, 0x9, 0x0, 0xfffffff8, 0x7, 0x8000, 0x4, 0xf7, 0x1, 0x3, 0x4, 0x97c4, 0x9, 0xffffe097, 0xfffffda4, 0x800, 0x8], [0x8001, 0x8001, 0x80, 0x9, 0x7, 0xffff, 0x1, 0x84f2, 0x4, 0x7b00, 0x2, 0xe19, 0x7, 0x4, 0x5, 0x9, 0x28, 0x0, 0x3, 0x2322f958, 0x9, 0x3, 0xc00, 0x10001, 0x7, 0x0, 0xfff, 0x7fff, 0x6, 0xfffff9f2, 0xfffffffb, 0x3, 0xa11, 0xd, 0x2, 0x6, 0x0, 0xfc1d, 0x0, 0x4, 0x2, 0x572a, 0x5, 0xffffffff, 0x5, 0xff, 0xffffff01, 0x0, 0x4, 0x2, 0x400, 0x1, 0x6fa9, 0x7, 0x7, 0x1, 0x8, 0x1b, 0x3, 0xc000000, 0xc, 0x7, 0x5, 0x1]}, 0x45c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000580)="d58f50", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80000, 0x2c, 0x3}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310428bd7000000000001600000018000180140002006e657464657673696d300000000000000500020001000000050003028aeeb532bcb397a2397a4f1c0001000000bd9d032639bc8e10014c5f914ac39e6296771abab289755ad457941e34"], 0x3c}}, 0x0) setresuid(0x0, 0xee00, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '\x1f:'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x5c}}, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0xfff) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000180)=0x8, 0x4) 5m16.714016238s ago: executing program 34 (id=1682): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x2b3, 0x2}, {0xbd1, 0x800000000}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x10000}}, 0xe8) 3m38.96349323s ago: executing program 0 (id=2063): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) r2 = fsopen(&(0x7f0000000040)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000000c0)='acl\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x5, 0x4, 0x800, 'pptp\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@loopback, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0x0, 0xff], 'veth0_macvtap\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x9, 0x1, 0x25}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xc, 0x5, 0x0, [0x101, 0x1, 0x1, 0x100, 0x6, 0x7, 0x2, 0x25ff, 0x668, 0x4, 0x0, 0x2, 0xf88, 0xfd, 0x91c, 0x6], 0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f000001f500)='illinois\x00', 0x9) shutdown(r4, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x5e}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x4, 0x10000}) socket$netlink(0x10, 0x3, 0x0) pread64(r3, &(0x7f0000000100)=""/86, 0x56, 0x4) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000000), &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0010100109050b362f", @ANYRES8=r0], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) 3m35.261452528s ago: executing program 6 (id=2073): syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x1, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='bond0\x00', 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000140)=""/92, 0x5c) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) socket$kcm(0x2, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) add_key$user(&(0x7f0000000400), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x8881) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf2509000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000900fa0400000e000152a4cec2910c41391ad88d006e657464657673696d0000000f0002006e657464657673696d3000000800030001"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100b, &(0x7f0000002440)=""/4107, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) socket(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r1]) 3m34.82461186s ago: executing program 0 (id=2077): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000500)=""/135) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r5, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x4}}], 0x2, 0x60, 0x0) 3m34.746910832s ago: executing program 6 (id=2078): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x5, 0xfffffff9]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@remote}, {@broadcast}, {@empty, 0x3}, {@private=0xa010100, 0xa}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) 3m33.602284338s ago: executing program 0 (id=2080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m33.429226983s ago: executing program 6 (id=2081): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x20008000) 3m33.113819689s ago: executing program 6 (id=2085): writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)="5e9522cc6aecbff884f38ea99a412d337073f3b23efa0e3f3e1b726ee6b98292b5efcd67e2fc1c6630f40242920a40f5d22b2af258b50ec559dc0c4d0a03f6cdb3389b0cb1e6d1836ace8d428ae6f9bb47c7f21d191f28f8ab339ec376f9a461c0241c702d036a65b59ff626edeef5b85cd8bae8c8b9ff7e0c99c1ce526de9a945c23b6766a235cafce6964e78ad1d6ce0b7d98ba0378294cd26526e81e4f2816d9fd443312e47a16398ba94109904daf256c654014accea213636bb167f9cd534460e748a1ecd3bb0858a87004502bd95746e1232039d6eba1d10c3ddba6431c09944d8", 0xe4}, {&(0x7f0000000100)="180bcef162ba99181592a2901768891d9bc3395c7738079bd1a6f392d5224e388f3c287561a4f94ba014af6ef15dcdff0ee5ff5310851cdf9b1dfa375c45e410f9d32a1016abf13f7a18475914df71471d9e7d16992c6d24f0325c281c3abe11902d9214291f4a7340578dda9e665b9483a7fd3dfbed3ce35e077b0db23e6389897a12e87527706569106ba75130a5d5be9ceb35731aba9ca4530e81659d10af27cf7742193150ee1769b42fdb0c339019e844f801207ffad24c58d5c3ba2e381c", 0xc1}], 0x2) sendto(0xffffffffffffffff, &(0x7f0000000240)="64dc3a2103c3c62ef7379fcc3c49cf6364d378b8cf601ece18b35c3ad35d9fa3d5600619293f038f620d6177d11070df5d14647df0245549e2b955c17c451364170a4e1c249a2a16f575eee992a4aff1cefe636eebf76e8f5aab7e6df0c8a42871dacbff08ab27086373e5ce66c42720119a8985556c049212d5037af3d93938f8790a05c1598c107c6603cd008f37c9e7857c9cf3956e9718d61ab6c15bf0cd9db52fdcc53d6f0022cb9b122ed2d67a59458b25541877", 0xb7, 0x4000000, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000380)={0x0, "1ea24f05c0e0c1deb7fae8758682e719"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001380)={r0, 0xffffffffffffffae, 0xffffffffffff3ca6}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001780), 0x25c2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000017c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000018c0)={r2, r3, 0x3, 0xe, 0x5}) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, &(0x7f0000001900)={0xa, 0x4e21, 0x5, @mcast2}, 0x1c) vmsplice(r4, &(0x7f0000001980)=[{&(0x7f0000001940)="50deb688674e83a3c003686c0266e4", 0xf}], 0x1, 0x7) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000002a80)={0x8001, 0x8, 0x2, 0x6a, &(0x7f00000019c0)=""/106, 0x1000, &(0x7f0000001a40)=""/4096, 0x35, &(0x7f0000002a40)=""/53}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002ac0), 0x294080, 0x0) r6 = syz_clone(0x18022280, &(0x7f0000002cc0)="97bed32015dff949fdd8256e7b6fbf3cc0474695f67f", 0x16, &(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80)="97ef11d06bf3f3f593a6c0d3c1f5d8b6982e8f230054e317bb08c9d010741707bf4a919ba2a901f38dde2cbc5607fac444469b2d0f302227e47197d77e1c2f7a804d221a30b2529c6a6dd745") r7 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002e00)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$netlink(r5, &(0x7f0000002ec0)={&(0x7f0000002b00)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c80)=[{&(0x7f0000002b40)={0x108, 0x17, 0x200, 0x70bd25, 0x25dfdbfe, "", [@generic="6f9355cc6a1d9bfe5ab551300b9d0d252c83041953a623", @generic="e256a14ac3e26a3c5984b6291d4bd24a3c92e85f49be89189077db4658a7abfe78e3c8e412a31522d83e4793c0f1db8af8fcdb97aa97c18e4b485a6ccdabb00caebe188a885f1a2e6548e41df2612092c0928300c744befa91a6462a778ebecf7e2c8fc05d6fc00c13940bca5747952babda6393e0f53b69f638cc2aa04aa7e8f7efc646826178f216d2876f1c06fac0fd5ce44a386e4fee2bd9429b9f5410f6fd3bb069aeca185e6aac03bee3a0f6c6623fef886f2f4c906dd9949ffdaf8f2f1e493decf39e02f634128e78074b2a44f62df741efd0a643bb16c3d260adc94e"]}, 0x108}], 0x1, &(0x7f0000002e40)=[@rights={{0x30, 0x1, 0x1, [r1, r1, r1, r1, r4, r1, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}], 0x50, 0x4004054}, 0x0) r10 = socket(0x1, 0xcee1123112c6ca5e, 0xe36f) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000002f00)={0x2c, @local, 0x4e23, 0x0, 'lc\x00', 0x26, 0x7f, 0x16}, 0x2c) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002f80)={0x2, &(0x7f0000002f40)=[{0xffff, 0x8, 0xf0, 0xfa}, {0x242, 0x2, 0x8, 0x1}]}) sendmmsg$inet(r8, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000002fc0)="291e027b1b2e990c6877d4ec1bcecb3c6111b5f4f5375fba92dfa35c415bc6afe270d62fec0957419a2cec251bdfaa4c88c5ed0c1cc2e9bd46196c9be8ad1bd532836d7765517becb0b996af442573d9c43583b4d5f6d8157219f497e4979f88b8ac43a3185844d991ea2fdb7f503d8b4c4fe165b1bbfc76a28019a0a089f2e7089f3f69452601fb3c311a256063f58f6dda17a3860039d492", 0x99}, {&(0x7f0000003080)="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", 0x1000}], 0x2, &(0x7f00000040c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd8d}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x99, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x9}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x98}}], 0x1, 0x8000) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000041c0), 0xf3dcc18989870876, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000004480)={0x0, 0xfffffffffffffffd, 0xc7, 0x9, @buffer={0x0, 0x30, &(0x7f0000004200)=""/48}, &(0x7f0000004240)="61f5fb15c68689e557c73aee31631fa17aea79ac1252f6ddd06367914d9520fdfb502fda825097c16568310efd87e3b53ad7ef15a1c8c8967318ad9e7076286a1473d5200c784dda39e57f9d96d10e06a6426b95701171ad895dba488c9c164f78b6b11c1474df6001379877dc366f2d84bfa6719ee2346545b45dbfc6e3364eacbe87aa0b1f9b923292c1a65f00b1ace39ec2217be37d22c27634140a07056172b01d104c4df9fac16c623fdecdc8b8fd173f8e9dd36b46be68844548ea4664e88e66fe433691", &(0x7f0000004340)=""/243, 0x0, 0x10005, 0xffffffffffffffff, &(0x7f0000004440)}) syz_open_dev$dri(&(0x7f0000004500), 0x5, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000004540)={0x0, r10, 0x6, 0x5, 0x0, 0x3d9a}) lseek(r11, 0x7, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000046c0)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004680)={&(0x7f0000004600)=@RTM_GETNSID={0x54, 0x5a, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_FD={0x8, 0x3, r12}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000885}, 0x40000) 3m31.370606773s ago: executing program 0 (id=2087): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rpc_xdr_overflow\x00', r0, 0x0, 0x805}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$l2tp6(0xa, 0x2, 0x73) symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioprio_get$uid(0x3, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0xf4) socket$kcm(0x10, 0x2, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x8, @remote, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xc800) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x88c00, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f00000002c0)) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000000000000000000004500001c000000000002907800000000ac1414221100907800000001"], 0x0) 3m31.370058743s ago: executing program 6 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000340)=0x7) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x6788, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000}, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1, 0x3, 0x0, 0x8, 0x1, 0x200000000}, 0x0, 0x0) 3m29.677245884s ago: executing program 6 (id=2092): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x5, 0xfffffff9]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty, 0x3}, {@private=0xa010100, 0xa}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) 3m28.435491794s ago: executing program 1 (id=2096): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01082c00"/18, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40905}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1001200080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3m28.055250388s ago: executing program 1 (id=2099): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) prctl$PR_GET_THP_DISABLE(0x2a) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r8 = dup(r7) sendfile(r7, r8, 0x0, 0x80006) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4800003e, r6, 0x0) (async) unlink(0x0) (async) r10 = dup2(r9, r6) (async) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) (async) r11 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8, &(0x7f0000000240)=[{}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8008084}, 0x8080) (async) r12 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) 3m27.488174344s ago: executing program 0 (id=2102): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000005fc0), &(0x7f0000006000)=0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000400)={{0x1, 0x300, 0x0, 0x3, 0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x81, 0x87, 0xffffffffffffd0c4}) sendmmsg(r1, &(0x7f00000019c0)=[{{&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x1, @multicast, 'gretap0\x00'}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000500)="5a5e2382b4b1bc648792ffb3011f002bd4669420981ca8f794be63e2a77544c65f386b5a5e4ba8e341a17117751833e84f362a71f4d1cd24d1511b4ceaadbe62aa6a8b0fddca18b96af81b3da3dc5ac10ecc8a1d386220e41c84f16973d3828f1f152f3816534c903d1e4da56b53a0a678dbc33ee730bdd30d60149a5de3a331d6a83d969db27ea5a366152e5e97c378e54ff56cd96d8dd548b7afbd505df915f7eaedd0a230c2e38ee6781671dc473ef89d20322384f41822256892dbae66d91d242d855c4031ed877801a7cd77cce171053ac7f535d3c940690713f594993e870a3853f2bacf1407ad82ab5244ded755ebb14cf19c0d1d8e8d1af8fd651e4ea8d495caba7c6865c00caa342e9b12d8a76a55b41c23fc240aa78dbd26d51202a1b1d1ec7dc81d96157f85d44b310c3da9c9cbed02a414e0bf11ae741394ee2fde2baf57313b6d5c68a7e7d15330a1f6f35f5f6f43de7df7ad65e47bf743dc2ae40b3c393f83af02b2acb42eb7c0b1454875369e63b540d08a8ee6172ecdd567d228f7af68155b916962b0783b06f3b4e1ca0f695f47d15f025894f6a667a106da8f245a76e4b2bffb136e93e27c937cae3b87c4d194e5d61dc2fdcc9168eb7433ac7069ab8cbdef45cec16b8453788223fa74653dfe54dd47545299965220df9f8e8b64971032884bd76135844a873e899a2010b6b1c9b00ead648479e23172e06a30a247f8c35b5dd199f37aed8089e85bf35bdee51bd5ab15ca2e394476d0691301339e51d8853f30184df4970c711f0260b5311ba8bc8c818620a79b6b86c63fb4e65c54cb5ba3a81240739096fdccddf376452a40039fcd77d8fd57a8fc5517e21421ff43058aad19e69af76fb090792cd555e77a43c0168e5ba3fb86107db3d094e90c998171fca65c3061b5249efc9aec8135392ce385af9b25fa689d1f6dd9ec3477013b581e9538d20128b0d364ad5cbd96c9cf44ec7ce266650cb391de749d181e2522f56b68691f310f6350f6ea5899695fcb505a691f4e28844f2a60911117bba4f8445d83b13159cb062f94fb65d225e57b3ffb94b2937d5f7e28776bc3407994579786c4d561c120290f019c53263b10e681c56475a1e0c79eae15e04f9c10d2a34eadbc97a50525e8d6a3daf668711a18ef47440ee28dd6947c5755536f012faf6a0e2dd9648673c171788ba682697259e9bea00fa692de3fd262a7aef3ae9001104901a6730f2f5067aacbfe371d244dad186a3fbcadfa10626166a99e727e90c246eada8db03930da48a1d338feec59922071baf01e9193504d54cb27ef92a2d3ca5603cbc6f15cfc7fdd1dcbb26fafa13c998d7baf2b0dbc109dece06d997b7bf91b34a217aa5429c77cd85358eeafb1db829636f599e18c48a6526df5fac92d01d2a52541dc661939caf059e91ba651d9532918d360a59553ef714985e5e18eae8e772f27fa0ebab03b3c582650b11a9453553d4c3654d5806b48dfe42b55b44230e9c81962ea99227b1d4ef0ed1af8a14653eac5e5c577610872079bf966ef517dc85869cc602f9c670c0438b23e5dce93a6bb96f8542ba21ad39e45c5cf2b82b11afd261bc69ac5be85930f833c16da773aeaeae0996368de6a500fa3647ec5655ed7c91f1913c31698c5462f0a1249669276f937006f8f2ffe27045a9001a560e44a861c5e7144c499f668f2316f4ba2545a74c34773de93fe1d0fb7f95cba233484eb60bb87e8e5f2d45bb059910a55bf3029282708fa5c66e4ecda60ac5737b3f7eb1937de26342787a721de4fdd9cf79f8edefbd3f326fe675a2573c4e611262b4183330a42b0ac08125429cd0b91f5dc3bda8cec2e4d535a7d49451d82fe72874caf864ac0d804b13faf7cb01e627f114d698d4a2a3493d9f3e932777b5277adb6cc145972c7da97ec17396184031046b7e7f4d79a60a88699904ac521a3f468dcbf0855c7f5400eaf2b46958ff853fbc4c5cadc7a155a9666b2d1ead3721d4010d2b63c3e5f47db6b2893acc3d447ecad5d9b716816859af4f699183f22cb18eabaa978fb35b167995d434fa2b5077729c5eec018f2b8478769027a71f116638ac42af13fddcb1c415c6411c6fadfe27ffcc21dee92846552eb73a07ce5e36f69590370aacd9564d1466d801d1127d1897f6a8432f15c161a49f5a9a6e067be91eadb7bb010f2b0d709c6b05e748dd6564e4043a82f9019a18ed023e83f340d869004536807a1ac482dfa20a0193467202e3bcef11245faac08dd7d82c387c0eeb382c7151b8e7df4993a0bcba56a4a0d5c616849e410607ccda5e8effb333741c5a2a412d7b8ced64baadf1876e0409e309588c010d5253a04e089c578c16d5dae5eec5898644b8381aa7230265de225d54a1845b066e3d4d118e4298c2cb0b80d8d37d8751bbe4c335368abe5de61103ee54b92ced4f72c6888c601bdb22d93f05fb47e9e86c7cac480ddf2abdc0044232793d0a92edbc0a6db2a7625d1a801990f86348657ca945cfdbc060e5bdca769c8929fa8f499be624712e1015baeeee7f0ae49cbe8c4094bb8414bfa3bdb81d85eba0eaf2e0168d06681d493f9783612d629299a03eccafb20da78a7705d36ae99feb0ceeb8e86a8d9515753111f81570c6203199aec1c8b57bb1a7963169fea8776ee1483e9a2685e211cf2d0abce4066a418f5ec23b4a69bb179e5d86e12cdb2d1f2663135181b682ddd8bfd2df0257b5661c5c114d5b6b4ffeb458a0fd6ebf98921ec715734b5f826c4a8d314af3a2fbddf204853fa0e329de839d3e498ade5279881fbb44e96f8740b9f4eba211894ad41d3dd832373fd18bf54b877f35dcddacad934ed799cae53500fececd3fb6066f218849a0353529efebe127f069c0a789cb9204cc02e743ddfd227469650e1c4c751108ef702b1eac8e8798473dda808a101126f2e0cc62932615ec5a0acca9d98dacc6f5ecce22d7cb3757875f82fc4bbad0055d73d9b9dbf5b17d9b7391f43cb4633bdd4f329f6637e249a9eebdc3f535f30b4351234fd9b8138f5007b653787e0c55af36919bd95a9c827fa0f830ed3a90f8db284c984f0adf25efe16211ad893127a63123b084611f21e5b2cf36d68a6c06e1db23437c3730579c359b20fa4b06966f16fc1c4cb2ff3e17010a378a1f080c421a0f622991b7114aa3a52f7fe5050d1fff87511ebece0ecebb7a155bd16f8178704fcc39180c21626514a25732e24b86e230ede7aaef212c21d14a51659fc596b1c387c2b2a6eca8c94d4e3eeb8786d7f14962023bd3337847c9b74929b493df780c8b2a77b160c74d39127a728c8dd33afe9b9d50f62a2e9c83f9b47c7b58c1639f759524d5c7612857e634a137795b2d5faa2ac1b37be437fcbbeecc0e0f11f1b060af8bf2c13818f9a250a3b233900ee537ff8d75db9cd5f3674e7b5e22d2a59eaed508f22ff39d038ada9d795d989d25e412b600b280d9714d1e9c42199233d64925b57307476688ef6860393dcf9756e4eb12789a5634acfa12327990bce4f91ddb79cdbc221d6b5bc6e8e13346abc516f08718a83e15c0c455e308668ed6726529ce91ad011660d021b7f2bcdce3c03e7091b9098011fda6c12e485596e6749d3874ec2a14df2daf4c65eadf7679eb921b5fe0f077871bb6c64ea6cc6047889a1c071785550182adc476f1e6cb0f49887075ff2096941ae5b00db154179e1033ac9c1fc359e492e32b3cb61b9e069d8f51765cc63131cfd1b1d6b6038c32712d974d361ce0f25449310fc4ed7f4d005cef27244a0f029973c261dab5245c61885e1569cfe6598fcce4eb32540fa0d8666a1c60798f76995f45aaa2c6d1724701e9d433ac2622cdbe0181c81f58c4c33c81180f2cf5f52a7e156b7b8c9ee2d730ad0e91c8a21c8815781e8818c75e70d27877fc4d5d1a5e588667d1cc6b93440421dfbd088990277e4d870abe97b28706c638e0875fc05d376a9dbed48800373c65b0f9553f2b42e7f1c7c4b76c92f2b15037a2f32b2f06a7ce44623ce975ec1523c2712b942cb69babdb5bc6cbe7989748ea15d630cf26de7f33f87a670adb82908c976185bb467218a2594846588c07de8bcd4be52b2ef458bb025cdd518e50420862f59f7e700ecd395d9e04d59473597a80be64baa99d62e593a4557bc83ad49087eb97482503f64effade012f80ed9443f986c6a4334496043f3b7af166d9b4fe3d1a1d76cce008d23fde4212c61d3ad5027e422debc7a0f80ea01193562c873d93735ef978b11d79f0b8b841ad6be12ea2eae9573d690c6416ace65fd55eb6aa7efda609528f60fb57a59918766ca32824dd20add461a9fa09cf26e0bacbc494027edd8afc5a793db7e6beee5124ede4b4f89dc25652a6b5881ac65a0de2b2de3c510967add80af87b8e8be9cdc9c4c6aaf4164e10c8eb431ea9d4e5cc255ea8716fca19f488671e0d56e37394c1459862783835207a060f7e02ebaf5b48ccab5e21b02da6b5a438a78d6c8f3a9b022f8da8cbb35465d6405bdd58d6fb08a610fd5cff7587e0464dc5eb3aef448a0d3c11e8fb22de511b7a3074c0046a49af907997d0f5d7e70ff7bd20a553e67e3e816150371a92ea4b680b020655ec3bf19ca311a386c1fbc4efcf02711762489ecbde849df6369fcfc9cc367fd0c78fc27e2c0882e6268b1c31a410b96dc67624be4276663cfead398d696fc9093613b0deea860afc8eed7d2af0961b5aa8cc4bb66462d1846c52113106a61431f8220d0a6fd5c11f19d73a2742fd01d481946276b40ef6eff0135626be34c2cc2cebc5944f43f78d33e939972d99d1445230b4661e6e749e8f9e6454678e59573aefd0daeb542c67b43cf65186473217c55ec3fbde10111baa8bfcc7073feb2de176c215e9d073356e111a92ac1a56e24b89a90474094e6c5d7b20cef43698f3194c5383546c9c62446876affe96fc81825305834fcc49bf3a629735c493398b5707046eda5938370666802448585b4d8b83e3fc82efbc3c5def54ff3527bff4c4ab501d845206ee359a8ecaa7cd66ffbd5cd3bb04f3adb62abc905c6d1f0120467b7461d85fed331c067f786cac81902671e9b25c2cb4f5c32ee58ccb022a72873009df2ac25c49368acc02eabee8c19dda50b0f4582dfe88263b50d4295dd732373ee1745b17497e510faecb574c3939d013e97270f1cceedce3436654798c0f16c5b7e5fbf970f809db1b3b257dab7b27d485d3881783b95bf27e6b4ca23ff9783d004ce878bff3b48377559329b9f7a63d6c0aff1e84fd5a55393b80002308a9321b733e2343f5c4992e25d7a92db55ee5b6fb8da2bcdc4a77f4b2e94658c94efe63a400f9f075de9b3fc3302273265a379217a50d8d9ddda6db02a12e57563194e1598164441ca33d1aea6f17037ed1e762058074e53f5015bf3e68d1d1496ded4c52d4e8849d3ab34d7c1372e89e85fcd6b20f797f1d686e8a7a72016dcc170d8dc3ffb275f0881eb58f3c198cbb26fbe763c8b992e806539839698faf505f587db8763f538aa458e0618d96234d57f68058db9715f6b8de781d9561834ce9aefd6f7c6c7fb96c06d4d981af22585bcd291ab68066c30a3be2c24f5776ce8932435b94a8305af482347b6d2023d35ceff10e43d769d24adb42ab185f55a4bc3a8cb0018d526d36f183d20dc45254bc105089e7dcb3e2591901bc7f2ee41c8639d00a28f457f8d39bfd3ce4000bb68c4add74b61ba47b71a6a37eae5e04e9e97020628ada7b9fb76f53f6598379e0ff3608eaa8eec1bf", 0x1000}, {&(0x7f00000000c0)="5082633050d2553ccea2e2b84db50013553be953244ef03c189c9422e7357078e1b69ecaf0a3f4d72fea4780e59d8cb6e2", 0x31}, {&(0x7f0000000100)="f1af148f7c7f3c0f65458753dd4e31de370c4380396ab6ee2d76d0fb65a0694d0c231b5c70652c6a0f1a01c6ff62aedd9fc2b9cedf450eb31c76304a249f2688f4369b0b29247230ae9ef9d2d604f43652623af8ec76ffb6f08f0d25a1aa10f4501e3a269c889330579645575dd844535b123e634c268d56bae1f8a79af8519825b8a6adfca2cd7c2e517957", 0x8c}, {&(0x7f00000001c0)="d4691974f64c8258d5bcbd7554263a2baa0cf10c0c5922abaeb2eb51074ade23fa83f48c97c5ed750f58ffe9fc36a76856aa27567a20810ed8d5f4f0aad3f77c8b23131aa9460eece486596b9708faaf188f358850c9715ebf02c5aab2fd9b93b2a223b2953d128c0901837433a90329c42427350b7c3d78e45d8c798f57102d16be85906e11e0c359b3a36072c3f452b0b01f6e4900ae4ff63f", 0x9a}, {&(0x7f0000000280)="643771b2baf96f6d3158e9caa5c368", 0xf}], 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x148}}, {{&(0x7f0000000340)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001680)="846f050c58ca46ec39d675760a93d19b54632072dc4c9758fa3fe27eb563846fd41ddfdf3a9c98d125e207fc57cdbec1556a2e2f05ac83d9abed1e40e3b57201186e64d2f03432aa9de98c7da5b9be5e0995d632c068f4102952dbdc8d662e22c5b992b0a949", 0x66}, {&(0x7f0000001700)="871e5010526db2e9bd2aaf26eaf97e8cb4f4816242e1ebbdabd560b6246d7a42e4a50dc6baf92a3ecb83c614c1680f0765a35d9a4a5eb23a030f691aa52f8e0c8d78b3676466ad21309ed58903e429dc01bdddaba43fb4d80c5626ae4aa36a6256f25327dd002dbab440739a96cf7c547448e64d5d3c60632663ef05ce0a3736433798f3af9272843223a220a3a09fa208b2e32529f07ee82ae9cf32576dd378959ca4c458ac3760f4dc37654294ebafa1544ee855e03437edcffecba179b3e2faea9ea5c2552471977deabbd3", 0xcd}, {&(0x7f0000001800)="7a6b16ece77d1b0f9f08efd40e94401dd334ad713d16c6aab46002aecd53075914907171a14b68b09b2b1516fdec03a9836918d80904b0f77acfbc19cbd01337f3dbf7d77e459de82c4bd67b0f06da762cec99ff133b1529f3137762092b10b062b11a78c8b2509d24665e646a09c24349fab8f398577198ee0a8b17ee223e558451304bb135afe285d42ff84bd123c9372ad5148a70de7ddf9fcfe477a2", 0x9e}], 0x3, &(0x7f00000018c0)=[{0xe0, 0xff, 0x0, "509f4b247a672aee5571eaf5acbefa47bee6a60416b41f747dbda76712ae3aa3c32636c577b9a7094acc73844468d4b39af41913cf21e7f250efaee3967ce7fce0139401eceb88c62591d08caab62524a54c425b23dd6c1b58c0f7d902d75c31a7d3a792beab4256bbaf39bbde2411666944f4cd5e601ca7eea49b35afc1b9ccf5b98cdece8b9a05433da0ccd00e0762ae55e6428b021f7b5c78d9ced65a0958b29cf5f63ef032c595409a07175c5083ffe9b2c8956dcf4e721454838ec504ab95b3c8f93de056d33726bbe6"}], 0xe0}}], 0x2, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, 0x0, 0x0) 3m27.222060682s ago: executing program 0 (id=2104): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x5, 0xfffffff9]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@empty, 0x3}, {@private=0xa010100, 0xa}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m26.86376773s ago: executing program 1 (id=2106): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000100)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x65, 0x6b]}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$ppp(r0, &(0x7f00000001c0)='8\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x1, 0x181) 3m26.628949103s ago: executing program 1 (id=2107): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000500)=""/135) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r5, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x4}}], 0x2, 0x60, 0x0) 3m25.291394685s ago: executing program 1 (id=2110): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x28, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0xffffffffffffff61, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}]}, 0x28}}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="010000000000007fff00010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2], 0x90}}, 0x0) 3m14.872988985s ago: executing program 1 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001180)={@in6={{0xa, 0x4e22, 0x80007, @loopback, 0x9}}, 0x0, 0x0, 0xf, 0x0, "1637890e4aca5ea20faf08435c3c28a99366c24028eb6d515e7f921edf8b7c1ab4ddc300402eeb5a55e539e845af3fec1831a94243dfa4dc71a593a5386beed6f5cbe047c0a6ec8464c5e59f00"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x95) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) readv(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r7}, &(0x7f0000000d80), &(0x7f0000000dc0)=r8}, 0x20) sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x201, 0x0, 0x9, 0xb7, 0x20, @link_local}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) 3m14.192856965s ago: executing program 35 (id=2092): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x5, 0xfffffff9]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty, 0x3}, {@private=0xa010100, 0xa}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) 3m11.724745593s ago: executing program 36 (id=2104): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x5, 0xfffffff9]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@empty, 0x3}, {@private=0xa010100, 0xa}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m59.578946256s ago: executing program 37 (id=2118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0xd733043595a52279}, "a8e0930a1a884884", "74743275e5fc20c3ab14916504a8ca92", '\x00', "3e6a808941a488cc"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001180)={@in6={{0xa, 0x4e22, 0x80007, @loopback, 0x9}}, 0x0, 0x0, 0xf, 0x0, "1637890e4aca5ea20faf08435c3c28a99366c24028eb6d515e7f921edf8b7c1ab4ddc300402eeb5a55e539e845af3fec1831a94243dfa4dc71a593a5386beed6f5cbe047c0a6ec8464c5e59f00"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x40000006) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x95) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) readv(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r7}, &(0x7f0000000d80), &(0x7f0000000dc0)=r8}, 0x20) sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x201, 0x0, 0x9, 0xb7, 0x20, @link_local}, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) 57.998676202s ago: executing program 9 (id=2433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') read$msr(r3, &(0x7f00000004c0)=""/208, 0xd0) 56.87825183s ago: executing program 9 (id=2435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffff7, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xffffffffffffff1c, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000580)) r2 = syz_open_dev$video(&(0x7f00000003c0), 0x8000000000000001, 0x143902) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x3, 0x8000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x700, 0x8, 0xd}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000180a0101000b000000000000010000000900020073797a3000000000c85c557f79296e5bb44a0900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d00000014000fa1400000100001000000"], 0xe4}}, 0x0) 56.196520449s ago: executing program 9 (id=2437): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) r2 = fsopen(&(0x7f0000000040)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000000c0)='acl\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x5, 0x4, 0x800, 'pptp\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@loopback, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0x0, 0xff], 'veth0_macvtap\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x9, 0x1, 0x25}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xc, 0x5, 0x0, [0x101, 0x1, 0x1, 0x100, 0x6, 0x7, 0x2, 0x25ff, 0x668, 0x4, 0x0, 0x2, 0xf88, 0xfd, 0x91c, 0x6], 0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f000001f500)='illinois\x00', 0x9) shutdown(r6, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x5e}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x4, 0x10000}) socket$netlink(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000100)=""/86, 0x56, 0x4) r7 = add_key$user(&(0x7f0000000280), &(0x7f0000000000), &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0010100109050b362f", @ANYRES8=r0], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 54.044355709s ago: executing program 9 (id=2440): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x600000, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0) getitimer(0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f3e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1ace52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r6, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c9233", 0x4b, 0x0, &(0x7f0000000380), 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) 53.356497732s ago: executing program 9 (id=2444): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r0, 0x50}, {r1, 0x3201}, {r1, 0xe041}], 0x3, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000000}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="f36741d9fc460fc75d3fc442119da60600000066ba2000ec470ff5a4f10100000036460fc73fb99a0b00000f3266baf80cb893591089ef66bafc0cb0ceee0f20e035100000000f22e064420f07", 0x4d}], 0x1, 0x1, &(0x7f00000000c0)=[@cr4={0x1, 0x60200}, @flags={0x3, 0x10102}], 0x2) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) 51.585669425s ago: executing program 9 (id=2447): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x64, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r9, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) read$snapshot(r9, 0x0, 0xffffffbf) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000000080)) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ca205c402505a0a4660f0000000109022400010001000009048a0002c2882b000905610220005706ff090597a3"], 0x0) close(0xffffffffffffffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@hyper, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000000000)={0xfffffffffffffffc, 0x1, 0x6934, 0x403, 0x1ff, 0x10002}) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) 44.439981347s ago: executing program 8 (id=2469): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000ea0ed7c18f0b8c8e953d62200000000000000000000000000000000005d5ca25ac096d0abdf055d99be1dd9bbf60f7fe796ca7397a6413a57d1ca63cec8fa991267e53b"], 0x10) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000bc0)={0x0, 0x8, 0x1}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x61]}}, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 44.37355564s ago: executing program 8 (id=2470): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) r2 = fsopen(&(0x7f0000000040)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000000c0)='acl\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x5, 0x4, 0x800, 'pptp\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@loopback, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0x0, 0xff], 'veth0_macvtap\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x9, 0x1, 0x25}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xc, 0x5, 0x0, [0x101, 0x1, 0x1, 0x100, 0x6, 0x7, 0x2, 0x25ff, 0x668, 0x4, 0x0, 0x2, 0xf88, 0xfd, 0x91c, 0x6], 0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f000001f500)='illinois\x00', 0x9) shutdown(r6, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x5e}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x4, 0x10000}) socket$netlink(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000100)=""/86, 0x56, 0x4) r7 = add_key$user(&(0x7f0000000280), &(0x7f0000000000), &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0010100109050b362f", @ANYRES8=r0], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 41.391889131s ago: executing program 8 (id=2478): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0x7f, 0x2, 0x0, {0x5, 0x4, 0x3, 0xe, 0x1ff, 0x67, 0x9, 0x2, 0x0, 0xfff7, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3a}}}}}}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00'}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe1f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000400)={0x14, r9, 0x400, 0x0, 0x800000}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r10, 0x708, 0x40) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x7, &(0x7f0000000080)={0x0, "6a4da751434fd7f4a4331cbdbfe693a5babcdf3aa54bce5d926ef908d52773fa7f"}}) r11 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000380)=']\xf97Mz\x1b\xd6\xc6J\xe6\xd5\x80\xc2?\xacW\xe41\x00\xab\x17\xbdo=h\x0f&\xd0#!\xa9\x949\x9a\xda\x96\x1f\xc9&\x7f\x93\x9cL\xc3{\x05\",\xfb\xd9\xee\xf6\x14\xe8\xf7\n\xe49\xf3\x82\xb4\xe4\x17;\x8aH\xf5\x1a\xf1y&8\xb4\xc2\x06p\r\xb4\xdbO\xa4\xd7\xb6\xca\xb9^\xa6\x12\x17H\x02K\xa6\xb9\xe2\xb8\x85\x8b\xf5\xd2\xbe\x97\x81\xcf\xfb5\x85', &(0x7f0000000a80)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t\\\x00\x00\x90\x853\xd7@z\xd7\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_8\xadqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%;;\xf1\xaa_\xcb\x81\xa3\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7u\xba\x84\xaeDG\x99F,\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e\x1d\x82\x98\x86h\xaa\xb5X\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\x9d`\x1e\xb42t\xea\xa7\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdW<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x1d\"\xce\x98\xd2\xc50\xe7\x02A\xcdh\xf5\x85g\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\xf1\xfdd\x88\n\xa2e\t\xda0\x05\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C\t\xebKP6\x15p\xb6\xf7Vi\x8d_\xd3\xe6\xccR\x93\xed\xda\t\x0f\xfb\x12\x85FR\xb8$\x1d\xc7\xb8H\x1e{\x91\x05\x8a\xfbBQ[\xe1\xf5\x02\x12\x88\xccR<\xa2o\x8b!5U\xd4\xf6\x14c\x1bz\xb6\xa8\xd6\xa0\x95\xec7N\x14\xfd\bBb\xf7\x9a\vq\xd8\b9C\x86\x80\xa2~\x01 1$IL\xe5\rIp\xe02!\xfe\xbe\xa6\x16\xfd+\xfb\x86x9\aYc\x8c\xc89\xef&\x93\x8f\xe7.6\xb0Gf\x8cZ\xd3\x19\xb3\xd2k\x95\x91\xf3\xc5\x85\xa1\xa8\xc7C\xc3N\xd2P\xfa\x1f\x06!d&\xec\xecJ\xb543\xc1)\x0e\x1e\xf2\xda\xa8{\x10\xd7', 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 40.745034146s ago: executing program 8 (id=2480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8000000, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 40.475977103s ago: executing program 8 (id=2481): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x600000, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r7, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c9233", 0x4b, 0x0, &(0x7f0000000380), 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) 39.893728466s ago: executing program 8 (id=2483): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x4, 0x0, [{0x0, 0xff, 0x0, 0x4, 0x2, 0x3eff}, {0x80000007, 0xfff, 0x4, 0xf, 0xa, 0x9, 0x9}, {0x80000001, 0x8, 0x0, 0xbbd, 0x0, 0x6, 0x1}, {0x80000001, 0x9, 0x5, 0x3, 0x7, 0x17c76b17, 0xba10}]}) 35.808847829s ago: executing program 38 (id=2447): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x64, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r9, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) read$snapshot(r9, 0x0, 0xffffffbf) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000000080)) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ca205c402505a0a4660f0000000109022400010001000009048a0002c2882b000905610220005706ff090597a3"], 0x0) close(0xffffffffffffffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000040)={@hyper, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r7, 0x7a6, &(0x7f0000000000)={0xfffffffffffffffc, 0x1, 0x6934, 0x403, 0x1ff, 0x10002}) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) 24.639311831s ago: executing program 39 (id=2483): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x4, 0x0, [{0x0, 0xff, 0x0, 0x4, 0x2, 0x3eff}, {0x80000007, 0xfff, 0x4, 0xf, 0xa, 0x9, 0x9}, {0x80000001, 0x8, 0x0, 0xbbd, 0x0, 0x6, 0x1}, {0x80000001, 0x9, 0x5, 0x3, 0x7, 0x17c76b17, 0xba10}]}) 13.690349424s ago: executing program 3 (id=2554): open_tree(0xffffffffffffff9c, 0x0, 0x81000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6f8f1b7e3e806009"}}, 0x48}}, 0x0) 13.251886264s ago: executing program 4 (id=2556): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991a", 0xbc) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4, 0x4) bind$xdp(r4, &(0x7f0000000100), 0x10) recvfrom(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000440)=ANY=[], 0x18) 12.489196401s ago: executing program 3 (id=2557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xfffffffffffffff7, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xffffffffffffff1c, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000580)) r2 = syz_open_dev$video(&(0x7f00000003c0), 0x8000000000000001, 0x143902) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x3, 0x8000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x1, 0x700, 0x8, 0xd}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000180a0101000b000000000000010000000900020073797a3000000000c85c557f79296e5bb44a0900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d00000014000fa1400000100001000000"], 0xe4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r4, 0x0, 0x10, 0x0, 0xfffffffb, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @local, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', r6, 0x0, 0x0, 0x4000002, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x64, 0x0, 0xfe, 0x4, 0x0, @loopback, @multicast1}}}}) ioctl$SNDRV_PCM_IOCTL_LINK(r5, 0x40044160, &(0x7f0000000500)=0x6) 11.173372589s ago: executing program 7 (id=2560): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="5c000000120069c49a3fe3d86e17f90f97e61edb944448007ea60864160a764604001a0038001d002b310100000017d34460bc06000000a705251e6182949a3651f60a84c9f4d49383606761ab59b99821d600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x18}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100008000"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) set_robust_list(0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/145, &(0x7f0000000100)=0x91) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) ioctl$HCIINQUIRY(r6, 0x400448dd, &(0x7f0000000240)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = dup(r8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, 0x0, 0x0) r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r10, 0x0, 0xb7d4, 0x1001f0) 10.536612672s ago: executing program 3 (id=2561): mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x7000000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)=0xff) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000001f00)={0x7, 0x7, 0x7fff, 0x2, 0xc0, "d171a6307f026900", 0x40, 0x9835}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x88) openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x44, r9, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @initial, {0x9, 0x8}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x110, 0x29, @default, @void, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 9.501583486s ago: executing program 2 (id=2562): memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="021000000a000200aaaaaaaaaabb00000c000e80"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 9.436917866s ago: executing program 5 (id=2515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) io_uring_setup(0x3846, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x2b3, 0x2}, {0xbd1, 0x800000000}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x10000}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 9.364261624s ago: executing program 2 (id=2563): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map=r1, 0x2b, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.726049843s ago: executing program 5 (id=2564): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x14c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x11c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x110, 0x6, [@m_simple={0x10c, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xdd, 0x6, "bb56072c27c5e2984fb9b39740c7dea2e6372a168bf1fdb8ecb6019c9f5db834fcaca18620641b7aab2922f69d2f9b062f5ec4be8a5a603fe7236ffd67f60e9e007b34e0f9cb58fc8855dae5289e4e856559f64bc5a1c5683263937fdd088e5f34874e0d2d2273a7a09810d9042b32fb69223c74e88c41fda5268c22a3107d32ee49d3a99665178abfde24d27a872b23ece9d09c9560070a6e3cca383ccb4d1a6d7c302ab3ee820e67d26e78f72566a2f9765698d783e6c14d8da6156473bc39143eaba66c1921f94f19f65bc88b127c0eb8ac765b9220105c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x14c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x2000000, &(0x7f0000003700)={0x77359400}) 7.725255845s ago: executing program 4 (id=2565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x53}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_labels_list(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='$$! @'], 0x10) preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/184, 0xb8}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3800000002020104000000000000000002000006240002800c000280040001003a00000014000180080001000000000008000200"], 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x2f) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) 7.704058164s ago: executing program 2 (id=2566): open_tree(0xffffffffffffff9c, 0x0, 0x81000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6f8f1b7e3e806009"}}, 0x48}}, 0x0) 7.591843249s ago: executing program 3 (id=2567): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) r2 = fsopen(&(0x7f0000000040)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000000c0)='acl\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x5, 0x4, 0x800, 'pptp\x00', 'syz0\x00', {0x8}}}}, {{@ipv6={@loopback, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0x0, 0xff], 'veth0_macvtap\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2e, 0x9, 0x1, 0x25}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xc, 0x5, 0x0, [0x101, 0x1, 0x1, 0x100, 0x6, 0x7, 0x2, 0x25ff, 0x668, 0x4, 0x0, 0x2, 0xf88, 0xfd, 0x91c, 0x6], 0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f000001f500)='illinois\x00', 0x9) shutdown(r6, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000000)={0x4000000, 0x0, 0x5e}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x4, 0x10000}) socket$netlink(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000100)=""/86, 0x56, 0x4) r7 = add_key$user(&(0x7f0000000280), &(0x7f0000000000), &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0010100109050b362f", @ANYRES8=r0], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 7.591422929s ago: executing program 7 (id=2568): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x600000, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f3e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1ace52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r7, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c9233", 0x4b, 0x0, &(0x7f0000000380), 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) 6.56778019s ago: executing program 5 (id=2569): mkdir(&(0x7f0000000040)='./file1\x00', 0x204) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000002c0)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) symlink(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file1\x00') unlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(0x0, 0x5588f34ebbdab445, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800041, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 6.153539678s ago: executing program 2 (id=2570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) dup(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.508451814s ago: executing program 7 (id=2571): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a563301bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000100000400000d3d000000bc7a46e3988285dcdf12f21308f868fece01008000000000000014e6a065c806539ff5b1326f67958f0a947ee2b49e33", 0x89}], 0x1}, 0x8001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000040)={0x19, 0x1, 0x9, 0x7, 0x7, 0xd}) inotify_init() r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000180)=r5) ptrace(0x10, r5) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x6, 0x0, 0x0) ptrace$setregs(0xf, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x1f, 0x0, @tid=r0}, &(0x7f0000000340)) 5.353124163s ago: executing program 5 (id=2572): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 5.352680635s ago: executing program 2 (id=2573): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) pread64(r0, &(0x7f00000004c0)=""/224, 0xe0, 0xfffffffffffffffb) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r2, 0x1) sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x2308c0}, 0x1c) r3 = dup(r1) write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0001059519ffffffdb9f2500200000400000000800", @ANYRESOCT=r4], 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x2000c880) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) unlinkat(r3, &(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 5.280936524s ago: executing program 4 (id=2574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) io_uring_setup(0x3846, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x0, 0x1, 0x2b3, 0x2}, {0xbd1, 0x800000000}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x3, 0x800, 0x0, 0x10000}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 5.187863203s ago: executing program 5 (id=2575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991a", 0xbc) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4, 0x4) bind$xdp(r4, &(0x7f0000000100), 0x10) recvfrom(r4, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000440)=ANY=[], 0x18) 3.455260448s ago: executing program 4 (id=2576): pipe2$watch_queue(0x0, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x20, 0xc, 0x1, "e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x1, 0x13, r5, 0x44a3f000) close(r1) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x0, 0x38d000, 0x8}) 3.37225889s ago: executing program 7 (id=2577): r0 = socket$tipc(0x1e, 0x3, 0x0) bind$tipc(r0, 0x0, 0xff39) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x100000, @empty, 0x9}, 0x1c) r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0xc0000) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000240)) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @remote, [0xff, 0xffffff00], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'dvmrp1\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370) 3.18392639s ago: executing program 2 (id=2578): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="5c000000120069c49a3fe3d86e17f90f97e61edb944448007ea60864160a764604001a0038001d002b310100000017d34460bc06000000a705251e6182949a3651f60a84c9f4d49383606761ab59b99821d600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x18}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100008000"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdc0}]}) set_robust_list(0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000040)=""/145, &(0x7f0000000100)=0x91) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) ioctl$HCIINQUIRY(r6, 0x400448dd, &(0x7f0000000240)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = dup(r8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, 0x0, 0x0) r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r10, 0x0, 0xb7d4, 0x1001f0) 2.144661275s ago: executing program 3 (id=2579): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$ppp(r0, &(0x7f00000001c0)='8\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x1, 0x181) 2.038641334s ago: executing program 4 (id=2580): open_tree(0xffffffffffffff9c, 0x0, 0x81000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x6, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6f8f1b7e3e806009"}}, 0x48}}, 0x0) 1.927725593s ago: executing program 7 (id=2581): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1404, 0x1}, 0x10}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x600000, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502"], 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r7, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c9233", 0x4b, 0x0, &(0x7f0000000380), 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) 1.654090943s ago: executing program 7 (id=2582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x200, 0x3a0, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800, r0}, 0x38) unshare(0x8040480) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x10d142, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)={[&(0x7f00000006c0)=' \x87N\x10\x86A.\x8fF\xa1\x1c\xf9\a\x00\x00\x00\x1c$}\xfb\xebP\xd7\xfa\xce\xf7\xad\x0f\xe6\xc4I\xfa\x83\x85B\x11\x14h\t\x00\xb3\xc9\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe0v\xe8Z\xa3\x8dBER\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='$\x00\xf0\xc7~C\x88)}\xab\xb9\xf2\x1f\aD\t_\x96\x9c\xcd\xfc/\xc6\xa9\x1d$t\xc3\xe5R\xa3_\x9d\x1c=u\x1a\xf4\x06\xa2g\x05\xf3\x140a\xdb\x1f\x01~\xbc\x8d\x06\xef\xfd\xc7\xed\x15\x03O0A\x18\xea\xd1\x02\xe4\x198\xe8M*\xb8\xa3z\xfc(\xfc\xd1\x99\xef\x98\x15\a\f7s\xda\xfbrO70b\xa1\xde\xe0o\xc1\xc0\xd0\xe7\xe2\x04\xe98\xb7\xe8T\xba\xdd\x96v']}) ioctl$FICLONE(r1, 0x40049409, r1) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r5, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000100)) poll(0x0, 0x0, 0xffffffff) ioctl$MEDIA_IOC_G_TOPOLOGY(r4, 0xc0487c04, &(0x7f0000001880)={0x0, 0x1, 0x0, &(0x7f0000001280)=[{}], 0x9, 0x0, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000001700)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000001780)=[{}, {}, {}, {}, {}, {}]}) 1.503389497s ago: executing program 3 (id=2583): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000004c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8, 0x80000) read$snddsp(r1, &(0x7f0000000c80)=""/227, 0xe3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000010140)) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="010000000000ffffffff1800000008000300", @ANYRES32=r4, @ANYBLOB="9800308005000200090000000500020000000000240003006b4ee2c0643810d1855bb8a69664d80bd285ba5899d2ea6c1b6406977791a43e600001800800010003"], 0xb4}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000140)={0x0, 0x400000000000257, 0x7, 0xfffbffff, &(0x7f0000001600)}) 799.245134ms ago: executing program 4 (id=2584): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c0001800600060086dd"], 0x38}}, 0xc000) socket$netlink(0x10, 0x3, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xbb, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x3) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) close(r7) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xe4428, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x0]}}]}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) setreuid(r8, r8) writev(r6, &(0x7f0000000140)=[{&(0x7f00000001c0)="4d7547389007c87295c77d3dceebf4bc490cad494e5723db3754e79877d254ccebbfca45b23af5ac135e06a8901bba543ae5b72f68b2819d6af89327db9abfee96588a354d424be92751d33dd16b81c9e3649dccf97b5551d7816dc4"}, {&(0x7f0000000480)="15a808000110fe281828e8ca1c82b4409ed0aded6b5fc411dfdcec8916bd326b4247c3a6b332434c789cb79d297495db6ff6af153dab7f27e831e1e24a8cd929fcd1badffc2caedf3fd572a57779e33b7cc3d304f7f56d74cefe168601d334f06414347291f9d479ea12ecb5bccfa9f0c059951e0a7457178967a7b8c0132c864845ae756717033635ac7fbd519f55af08dd0524674c9446bd2be3d9293b61c44c6120b32e2e8167929101876ed4a07ff20be3fa1a5aa6436d9104710fdf254daa1e08948ac2b9bc8b3875cfe9f7e4f0006f5ba791293f6c778b5054ea287cc98703af5bde508ccc14d7d822d9497d098df70f68971f43b62a8e6565fc9fc35f630a2c380ef484f94617ec53cd994d7f9b5f200c1ff293dbf2f9bb5515427485d8926709055e780af1ac5004"}], 0x1) 0s ago: executing program 5 (id=2585): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdee, &(0x7f0000000100)={0x0, 0xfffffc80, 0x0, 0x0}}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x820000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/xfrm_stat\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) pread64(r3, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) r4 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f00000008c0)={0x4, "47cda678f220bc6a716a8c6ce4fc9936a070fb2f64735b760a6bd3b3c1f6c770", 0x3}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000001980)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x18) r6 = io_uring_setup(0x57a4, &(0x7f0000000440)={0x0, 0xd898, 0xc2, 0x2000, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x16, 0x20000002, 0x0) kernel console output (not intermixed with test programs): 05699][ T9] usb 2-1: USB disconnect, device number 56 [ 825.605764][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 826.465266][T12916] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 826.539788][T12918] ntfs3(nbd7): try to read out of volume at offset 0x0 [ 830.688264][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 831.247349][T12968] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1957'. [ 831.333846][T12972] syz.7.1959: attempt to access beyond end of device [ 831.333846][T12972] nbd7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 831.336315][T12973] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1960'. [ 831.348945][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 831.357795][T12972] SQUASHFS error: Failed to read block 0x0: -5 [ 831.369783][T12972] unable to read squashfs_super_block [ 831.372465][ T9] usb 2-1: config 0 has an invalid interface number: 174 but max is 0 [ 831.383807][ T9] usb 2-1: config 0 has no interface number 0 [ 831.395693][ T9] usb 2-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=ee.4a [ 831.491879][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.501832][ T9] usb 2-1: Product: syz [ 831.506147][ T9] usb 2-1: Manufacturer: syz [ 831.515035][ T9] usb 2-1: SerialNumber: syz [ 831.523304][ T9] usb 2-1: config 0 descriptor?? [ 831.619971][ T9] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 831.632941][T12972] 9pnet_fd: Insufficient options for proto=fd [ 831.663013][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 832.516748][ T9] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 832.529818][ T9] usb 2-1: media controller created [ 832.550653][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 832.588178][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 832.624723][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 832.653804][ T9] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 833.119065][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1962'. [ 833.708705][ T9] rc_core: IR keymap rc-avermedia-m135a not found [ 833.717671][ T9] Registered IR keymap rc-empty [ 833.724638][ T9] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 833.878349][ T9] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input21 [ 833.928582][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 833.929412][T12998] overlayfs: failed to resolve './file0': -2 [ 833.953803][ T9] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 833.976533][ T9] usb 2-1: USB disconnect, device number 57 [ 834.458638][ T9] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 835.916448][T13019] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 837.037634][T13019] : entered promiscuous mode [ 837.097682][T13032] FAULT_INJECTION: forcing a failure. [ 837.097682][T13032] name failslab, interval 1, probability 0, space 0, times 0 [ 837.125974][T13019] bond0: (slave ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 837.456779][T13032] CPU: 1 UID: 0 PID: 13032 Comm: syz.1.1971 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 837.467672][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 837.477797][T13032] Call Trace: [ 837.481114][T13032] [ 837.484086][T13032] dump_stack_lvl+0x241/0x360 [ 837.488824][T13032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.494082][T13032] ? __pfx__printk+0x10/0x10 [ 837.498755][T13032] ? kmem_cache_alloc_noprof+0x48/0x380 [ 837.504357][T13032] ? __pfx___might_resched+0x10/0x10 [ 837.509696][T13032] should_fail_ex+0x3b0/0x4e0 [ 837.514421][T13032] should_failslab+0xac/0x100 [ 837.519155][T13032] ? getname_flags+0xb7/0x540 [ 837.523911][T13032] kmem_cache_alloc_noprof+0x70/0x380 [ 837.529348][T13032] getname_flags+0xb7/0x540 [ 837.533918][T13032] do_sys_openat2+0xd2/0x1d0 [ 837.538567][T13032] ? __pfx_do_sys_openat2+0x10/0x10 [ 837.543826][T13032] ? __fget_files+0x2a/0x410 [ 837.548475][T13032] ? __fget_files+0x2a/0x410 [ 837.553114][T13032] __x64_sys_openat+0x247/0x2a0 [ 837.558011][T13032] ? __pfx___x64_sys_openat+0x10/0x10 [ 837.563434][T13032] ? do_syscall_64+0x100/0x230 [ 837.568252][T13032] ? do_syscall_64+0xb6/0x230 [ 837.573077][T13032] do_syscall_64+0xf3/0x230 [ 837.577649][T13032] ? clear_bhb_loop+0x35/0x90 [ 837.582378][T13032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.588328][T13032] RIP: 0033:0x7f499b584690 [ 837.592799][T13032] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 837.612450][T13032] RSP: 002b:00007f499c2fab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 837.620914][T13032] RAX: ffffffffffffffda RBX: 0000000000000401 RCX: 00007f499b584690 [ 837.628924][T13032] RDX: 0000000000000401 RSI: 00007f499c2fac10 RDI: 00000000ffffff9c [ 837.636944][T13032] RBP: 00007f499c2fac10 R08: 0000000000000000 R09: 0000000000000000 [ 837.644956][T13032] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 837.652975][T13032] R13: 0000000000000000 R14: 00007f499b776160 R15: 00007fff38711168 [ 837.661092][T13032] [ 839.856908][ T118] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 839.909742][T13058] overlayfs: failed to resolve './file0': -2 [ 840.007677][ T118] usb 1-1: device descriptor read/64, error -71 [ 840.292905][ T118] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 840.592135][ T118] usb 1-1: device descriptor read/64, error -71 [ 840.950005][ T118] usb usb1-port1: attempt power cycle [ 842.108236][T13074] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 842.120098][T13074] overlayfs: missing 'lowerdir' [ 842.916787][ T118] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 842.989663][ T118] usb 1-1: device descriptor read/8, error -71 [ 844.012489][T13108] overlayfs: failed to clone upperpath [ 845.566872][ T51] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 845.685353][T13135] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 845.697994][T13135] overlayfs: missing 'lowerdir' [ 846.521387][ T51] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 846.545586][ T51] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 846.566810][ T51] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 846.575915][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.599343][T13120] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 846.611519][ T51] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 847.407254][ T51] usb 2-1: USB disconnect, device number 58 [ 848.920601][ T29] audit: type=1326 audit(1736925356.056:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13178 comm="syz.6.2014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9806f85d29 code=0x0 [ 849.301137][T13187] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 849.312941][T13187] overlayfs: missing 'lowerdir' [ 850.649031][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 850.812060][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 850.835884][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 850.852618][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 850.862600][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.886852][ T5916] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 850.899976][T13204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 850.914085][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.038221][ T5916] usb 8-1: device descriptor read/64, error -71 [ 851.201096][T10642] usb 1-1: USB disconnect, device number 61 [ 851.276803][ T51] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 851.277695][ T5916] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 851.416964][ T5916] usb 8-1: device descriptor read/64, error -71 [ 851.447197][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 851.453070][ T51] usb 2-1: no configurations [ 851.466681][ T51] usb 2-1: can't read configurations, error -22 [ 851.527308][ T5916] usb usb8-port1: attempt power cycle [ 851.620533][ T51] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 851.638990][T13233] overlayfs: failed to clone upperpath [ 851.877096][ T5916] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 851.899788][ T5916] usb 8-1: device descriptor read/8, error -71 [ 851.916806][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 851.925538][ T51] usb 2-1: no configurations [ 851.930425][ T51] usb 2-1: can't read configurations, error -22 [ 851.938784][ T51] usb usb2-port1: attempt power cycle [ 852.089751][T13240] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 852.101696][T13240] overlayfs: missing 'lowerdir' [ 852.846884][ T51] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 852.869565][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 852.875574][ T51] usb 2-1: no configurations [ 852.885717][ T51] usb 2-1: can't read configurations, error -22 [ 853.046899][ T5916] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 853.067421][ T5916] usb 8-1: device descriptor read/8, error -71 [ 853.168573][ T51] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 853.182483][ T5916] usb usb8-port1: unable to enumerate USB device [ 853.207317][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 853.213140][ T51] usb 2-1: no configurations [ 853.217987][ T51] usb 2-1: can't read configurations, error -22 [ 853.224643][ T51] usb usb2-port1: unable to enumerate USB device [ 855.763998][T13281] syz.1.2044: attempt to access beyond end of device [ 855.763998][T13281] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 855.809112][T13281] efs: cannot read volume header [ 858.078520][ T51] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 858.326748][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 858.332925][ T51] usb 1-1: no configurations [ 858.348064][ T51] usb 1-1: can't read configurations, error -22 [ 859.325986][ T51] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 859.378009][T13314] overlayfs: failed to clone upperpath [ 859.387227][ T118] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 859.547334][ T118] usb 2-1: Using ep0 maxpacket: 8 [ 859.554663][ T118] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 859.585152][ T118] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 859.631396][ T118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 859.666926][ T51] usb 1-1: device not accepting address 63, error -71 [ 859.674339][ T51] usb usb1-port1: attempt power cycle [ 859.714641][ T118] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 860.615702][ T118] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 860.625017][ T118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.899802][ T118] usb 2-1: Product: syz [ 860.904248][ T118] usb 2-1: Manufacturer: syz [ 860.972931][ T118] usb 2-1: SerialNumber: syz [ 861.021939][ T118] usb 2-1: config 0 descriptor?? [ 861.082201][T13303] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 861.367845][ T118] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 861.378604][ T118] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 861.433175][T13343] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 861.511340][T13343] 8021q: adding VLAN 0 to HW filter on device bond5 [ 862.181009][ C1] powermate: config urb returned -71 [ 862.186670][ C1] powermate: config urb returned -71 [ 862.192274][ C1] powermate: config urb returned -71 [ 862.201719][ T51] usb 2-1: USB disconnect, device number 63 [ 862.207738][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 862.267037][ T118] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 862.386781][T10642] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 862.538998][T10642] usb 8-1: unable to get BOS descriptor or descriptor too short [ 862.561091][T10642] usb 8-1: not running at top speed; connect to a high speed hub [ 862.687331][ T118] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 862.698515][ T118] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 862.708714][ T118] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 862.718059][ T118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.380995][T13351] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 863.396295][ T118] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 863.494022][T13360] overlayfs: failed to clone upperpath [ 863.585164][T10642] usb 8-1: config 3 has an invalid interface number: 3 but max is 1 [ 863.593485][T10642] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 863.604102][T10642] usb 8-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 863.613751][T10642] usb 8-1: config 3 has no interface number 0 [ 863.620017][T10642] usb 8-1: config 3 interface 3 has no altsetting 0 [ 863.630336][T10642] usb 8-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=b8.82 [ 863.639815][T10642] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.648030][T10642] usb 8-1: Product: syz [ 863.677585][T10642] usb 8-1: Manufacturer: syz [ 863.682255][T10642] usb 8-1: SerialNumber: syz [ 863.800254][ T5916] usb 1-1: USB disconnect, device number 65 [ 864.865385][T10642] hub 8-1:3.3: bad descriptor, ignoring hub [ 864.871442][T10642] hub 8-1:3.3: probe with driver hub failed with error -5 [ 864.880693][T10642] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 864.887722][T10642] gspca_sn9c2028: read1 error -71 [ 864.893075][T10642] gspca_sn9c2028: read1 error -71 [ 865.078782][T10642] gspca_sn9c2028: read1 error -71 [ 865.083926][T10642] sn9c2028 8-1:3.3: probe with driver sn9c2028 failed with error -71 [ 865.207651][T10642] usb 8-1: USB disconnect, device number 11 [ 865.576818][T10642] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 865.973763][T10642] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 865.983253][T10642] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.034158][T10642] usb 8-1: Product: syz [ 866.202864][T10642] usb 8-1: Manufacturer: syz [ 866.307439][T10642] usb 8-1: SerialNumber: syz [ 866.597664][T10642] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 866.776819][ T5856] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 866.903302][T13407] overlayfs: failed to clone upperpath [ 866.979289][T13410] overlayfs: failed to resolve './file1': -2 [ 867.008367][T13384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.052099][T13384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.422668][ T5856] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 868.430575][ T5856] ath9k_htc: Failed to initialize the device [ 870.681559][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.689621][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.108767][T13451] overlayfs: failed to clone upperpath [ 871.258540][T13454] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 873.245149][T13480] syz.7.2103: attempt to access beyond end of device [ 873.245149][T13480] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 873.333800][T13480] efs: cannot read volume header [ 873.598900][T13488] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 875.155455][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2110'. [ 875.171547][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'. [ 875.184550][T13502] netlink: 'syz.1.2110': attribute type 1 has an invalid length. [ 875.198524][T13502] nbd: error processing sock list [ 876.489151][T13510] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 876.500225][T13510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2112'. [ 886.007476][T13526] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 887.362407][T13541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 887.374342][T13541] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 887.383625][T13541] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 887.395466][T13541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 887.410027][T13541] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 887.418510][T13541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 887.733949][T13539] chnl_net:caif_netlink_parms(): no params data found [ 887.882307][T13539] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.895262][T13539] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.903838][T13539] bridge_slave_0: entered allmulticast mode [ 887.922333][T13539] bridge_slave_0: entered promiscuous mode [ 887.934489][T13539] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.952968][T13539] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.961992][T13539] bridge_slave_1: entered allmulticast mode [ 887.974599][T13539] bridge_slave_1: entered promiscuous mode [ 888.063916][T13539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.090534][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 888.119890][T13539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.195938][T13539] team0: Port device team_slave_0 added [ 888.214465][T13539] team0: Port device team_slave_1 added [ 888.266576][T13539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.274213][T13539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.315636][T13539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.343032][T13539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.356931][T13539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.391807][T13539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.493884][T13539] hsr_slave_0: entered promiscuous mode [ 888.508311][T13539] hsr_slave_1: entered promiscuous mode [ 888.515434][T13539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.540730][T13539] Cannot create hsr debugfs directory [ 889.526948][ T5842] Bluetooth: hci1: command tx timeout [ 890.079451][T13539] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 890.159584][T13539] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 890.258410][T13539] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 890.307854][T13539] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 890.615104][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 890.636863][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 890.675042][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 890.685189][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 890.693203][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 890.700731][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 890.977578][T13539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.405639][T13539] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.607496][ T5842] Bluetooth: hci1: command tx timeout [ 891.729833][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.737076][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.772702][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.779917][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.163084][T13539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 892.489919][T13553] chnl_net:caif_netlink_parms(): no params data found [ 892.808802][ T5842] Bluetooth: hci2: command tx timeout [ 892.964741][T13553] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.982138][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.011558][T13553] bridge_slave_0: entered allmulticast mode [ 893.058872][T13553] bridge_slave_0: entered promiscuous mode [ 893.106403][T13553] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.130259][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.155274][T13553] bridge_slave_1: entered allmulticast mode [ 893.187306][T13553] bridge_slave_1: entered promiscuous mode [ 893.210887][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 893.315534][T13553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.360047][T13539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.410824][T13553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.637847][T13553] team0: Port device team_slave_0 added [ 893.684813][T13553] team0: Port device team_slave_1 added [ 893.692024][ T5831] Bluetooth: hci1: command tx timeout [ 894.076188][T13553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.096470][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.185134][T13553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.253086][T13553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.278255][T13553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 894.339532][T13553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.618185][T13553] hsr_slave_0: entered promiscuous mode [ 894.642548][T13553] hsr_slave_1: entered promiscuous mode [ 894.657830][T13553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.670611][T13553] Cannot create hsr debugfs directory [ 894.887661][ T5831] Bluetooth: hci2: command tx timeout [ 894.937823][T13539] veth0_vlan: entered promiscuous mode [ 894.996309][T13539] veth1_vlan: entered promiscuous mode [ 895.213103][T13539] veth0_macvtap: entered promiscuous mode [ 895.268054][T13539] veth1_macvtap: entered promiscuous mode [ 895.310450][T13553] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 895.341183][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.364505][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.384509][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.407641][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.424014][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.444438][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.483334][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.502138][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.545100][T13539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.553233][T13553] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 895.597890][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.620289][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.644711][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.666436][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.695833][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.716695][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.740620][T13539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.770966][ T5831] Bluetooth: hci1: command tx timeout [ 895.784511][T13539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.812291][T13539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.831138][T13553] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 895.873525][T13539] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.893806][T13539] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.918899][T13539] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.935679][T13539] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.954445][T13553] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 896.242766][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.286439][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.397210][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.425851][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.435112][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.527503][T13553] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.589681][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.596935][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.645801][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.653062][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.967623][ T5831] Bluetooth: hci2: command tx timeout [ 897.325606][T13553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.972800][T13553] veth0_vlan: entered promiscuous mode [ 898.985439][T13553] veth1_vlan: entered promiscuous mode [ 899.016330][T13553] veth0_macvtap: entered promiscuous mode [ 899.025805][T13553] veth1_macvtap: entered promiscuous mode [ 899.045899][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.057073][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.068249][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.078867][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.107225][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.118220][ T5831] Bluetooth: hci2: command tx timeout [ 899.124850][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.134929][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.146278][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.157157][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.174181][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.186094][T13553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.262525][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.302166][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.346021][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.384880][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.411973][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.434988][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.522725][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.587293][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.643384][T13553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.701934][T13553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.753127][T13553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.839364][T13553] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.906108][T13553] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.954635][T13553] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.024091][T13553] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.647424][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.706917][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.426323][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.582941][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.758354][T13630] netlink: 'syz.8.2143': attribute type 29 has an invalid length. [ 902.873408][ T5842] Bluetooth: hci0: sending frame failed (-49) [ 902.881801][ T5831] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 903.513731][ T1158] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.741251][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 904.779341][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 904.792524][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 904.809979][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 904.824877][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 904.832907][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 905.097068][ T5916] usb 8-1: USB disconnect, device number 12 [ 906.234014][ T5916] usb 8-1: ath9k_htc: USB layer deinitialized [ 906.494926][ T1158] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.706755][T12797] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 906.781969][ T1158] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.891103][ T5842] Bluetooth: hci5: command tx timeout [ 906.975074][T12797] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 906.996786][T12797] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 907.007311][T12797] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 907.016817][T12797] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.040829][T13655] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 907.054618][T12797] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 907.887747][T13672] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2152'. [ 907.952577][ T1158] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.027249][T13672] 0XD: renamed from gretap0 (while UP) [ 908.044685][T13672] 0XD: entered allmulticast mode [ 908.141248][T12797] usb 10-1: USB disconnect, device number 2 [ 908.219851][T13641] chnl_net:caif_netlink_parms(): no params data found [ 908.978099][ T5842] Bluetooth: hci5: command tx timeout [ 909.237368][T13641] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.291656][T13641] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.496558][T13641] bridge_slave_0: entered allmulticast mode [ 909.609696][T13641] bridge_slave_0: entered promiscuous mode [ 909.787484][T13641] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.892958][T13641] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.927156][T13641] bridge_slave_1: entered allmulticast mode [ 909.960874][T13641] bridge_slave_1: entered promiscuous mode [ 910.443982][ T1158] bridge_slave_1: left allmulticast mode [ 910.469798][ T1158] bridge_slave_1: left promiscuous mode [ 910.517423][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.648544][ T1158] bridge_slave_0: left allmulticast mode [ 910.655909][ T1158] bridge_slave_0: left promiscuous mode [ 910.662013][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.072281][ T5842] Bluetooth: hci5: command tx timeout [ 911.926820][ T5856] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 912.839726][ T5856] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.861821][ T5856] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 912.874008][ T5856] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 912.883403][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.891782][ T5856] usb 9-1: Product: syz [ 912.896087][ T5856] usb 9-1: Manufacturer: syz [ 912.911462][ T5856] usb 9-1: SerialNumber: syz [ 912.922325][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.940461][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.951951][ T1158] bond0 (unregistering): Released all slaves [ 912.981451][T13641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.023022][T13641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.133362][ T5842] Bluetooth: hci5: command tx timeout [ 913.296789][T13641] team0: Port device team_slave_0 added [ 913.414878][T13641] team0: Port device team_slave_1 added [ 913.618467][ T5856] usb 9-1: 0:2 : does not exist [ 913.793467][ T5856] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 914.280313][ T5856] usb 9-1: USB disconnect, device number 2 [ 914.346348][T13641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.365699][T13641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.429935][T13641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.814261][T13641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.884499][T13641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 915.053915][T13641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 915.379970][ T1158] hsr_slave_0: left promiscuous mode [ 915.403844][ T1158] hsr_slave_1: left promiscuous mode [ 915.413514][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.441581][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.461556][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.489633][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.594701][ T1158] veth1_macvtap: left promiscuous mode [ 915.624016][ T1158] veth0_macvtap: left promiscuous mode [ 915.631493][ T1158] veth1_vlan: left promiscuous mode [ 915.640641][ T1158] veth0_vlan: left promiscuous mode [ 918.454336][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 918.575102][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 920.005086][T13641] hsr_slave_0: entered promiscuous mode [ 920.012205][T13641] hsr_slave_1: entered promiscuous mode [ 920.023365][T13641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.046832][T13641] Cannot create hsr debugfs directory [ 921.188869][T13776] syz.8.2176: attempt to access beyond end of device [ 921.188869][T13776] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 921.304674][T13776] efs: cannot read volume header [ 924.710799][ T1158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.368021][ T1158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.477387][ T1158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.556961][T13824] netlink: 'syz.9.2191': attribute type 21 has an invalid length. [ 927.570421][T13824] netlink: 'syz.9.2191': attribute type 1 has an invalid length. [ 927.590638][T13641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 927.678991][ T1158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.800175][T13641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 929.889932][T13641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 930.136189][T13641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 930.216262][T13641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.239515][T13641] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.260571][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.267730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.346882][T13723] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.354086][T13723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.454988][T13641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 930.495451][T13641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 930.783929][ T1158] bridge_slave_1: left allmulticast mode [ 930.794170][ T1158] bridge_slave_1: left promiscuous mode [ 930.818878][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.885972][T13855] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 931.637333][ T1158] bridge_slave_0: left allmulticast mode [ 931.690557][ T1158] bridge_slave_0: left promiscuous mode [ 931.697526][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.092289][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.104806][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.139134][ T51] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 937.384654][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.396076][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.407816][ T1158] bond0 (unregistering): Released all slaves [ 937.434559][T13886] netdevsim netdevsim7: Direct firmware load for ExDZ4+f]HDa]EwTltaW\Dp0)궤)ds 3^t,]k<:L!eՓϾ =lGʺ`W~{RMb* failed with error -2 [ 937.455570][T13886] netdevsim netdevsim7: Falling back to sysfs fallback for: ExDZ4+f]HDa]EwTltaW\Dp0)궤)ds 3^t,]k<:L!eՓϾ =lGʺ`W~{RMb* [ 937.608266][ T51] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 937.727224][ T5832] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 937.909960][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 938.041908][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.100177][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.115603][ T51] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 938.155842][ T5832] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 938.203471][ T51] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 938.260610][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.271172][ T51] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 938.299827][ T5832] usb 9-1: config 0 descriptor?? [ 938.313494][ T51] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 938.382534][ T51] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 938.399670][T13641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.418787][ T51] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 939.628739][ T51] usb 10-1: string descriptor 0 read error: -71 [ 939.635251][ T51] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 939.644651][ T51] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.665246][ T51] usb 10-1: config 0 descriptor?? [ 939.698063][ T51] usb 10-1: can't set config #0, error -71 [ 939.705777][ T51] usb 10-1: USB disconnect, device number 3 [ 939.943349][T13641] veth0_vlan: entered promiscuous mode [ 940.000808][ T5832] usbhid 9-1:0.0: can't add hid device: -71 [ 940.007179][ T5832] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 940.016982][ T5832] usb 9-1: USB disconnect, device number 3 [ 941.234274][T13641] veth1_vlan: entered promiscuous mode [ 941.378755][T13926] overlayfs: failed to resolve './file0': -2 [ 941.773735][T13641] veth0_macvtap: entered promiscuous mode [ 942.133944][ T1158] hsr_slave_0: left promiscuous mode [ 942.145489][ T1158] hsr_slave_1: left promiscuous mode [ 942.684674][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2226'. [ 942.721836][ T1158] veth1_macvtap: left promiscuous mode [ 942.751164][ T1158] veth0_macvtap: left promiscuous mode [ 942.803171][ T1158] veth1_vlan: left promiscuous mode [ 942.855530][ T1158] veth0_vlan: left promiscuous mode [ 943.496740][ T51] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 943.856781][ T51] usb 8-1: Using ep0 maxpacket: 8 [ 943.890109][ T51] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 943.899865][ T51] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.916431][ T51] usb 8-1: Product: syz [ 943.997076][ T51] usb 8-1: Manufacturer: syz [ 944.002221][ T51] usb 8-1: SerialNumber: syz [ 944.032160][ T51] usb 8-1: config 0 descriptor?? [ 944.568429][ T51] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 945.203815][ T51] gspca_m5602: Failed to find a sensor [ 945.252647][ T51] ALi m5602 8-1:0.0: ALi m5602 webcam failed [ 945.254468][T13972] overlayfs: failed to resolve './file0': -2 [ 945.261961][ T51] usb 8-1: USB disconnect, device number 13 [ 945.491518][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 945.546343][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 945.616826][ T5856] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 945.827620][ T5856] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.844531][ T5856] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 945.896067][ T5856] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 945.908853][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 945.944874][ T5856] usb 10-1: SerialNumber: syz [ 947.727082][ T5856] usb 10-1: 0:2 : does not exist [ 947.756510][ T5856] usb 10-1: USB disconnect, device number 4 [ 948.459555][T13641] veth1_macvtap: entered promiscuous mode [ 948.507631][T13970] netlink: 'syz.4.2234': attribute type 29 has an invalid length. [ 948.574897][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2240'. [ 948.665080][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.676275][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.706681][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.750368][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.764385][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.783821][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.794565][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.807250][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.819647][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 948.831013][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.978192][T13641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.988035][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.998542][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.008591][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.019078][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.129076][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.167995][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.216777][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.243044][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.253252][T13641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.263958][T13641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.298708][T13641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.504179][T13641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.513833][T13641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.522852][T13641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.531652][T13641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.590362][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.600455][ T8110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.608427][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.616867][ T8110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.757099][T14029] bond_slave_0: entered promiscuous mode [ 951.763373][T14029] bond_slave_1: entered promiscuous mode [ 951.769591][T14029] macsec1: entered promiscuous mode [ 951.775508][T14029] bond0: entered promiscuous mode [ 951.781844][T14029] macsec1: entered allmulticast mode [ 951.788535][T14029] bond0: entered allmulticast mode [ 951.793798][T14029] bond_slave_0: entered allmulticast mode [ 951.799657][T14029] bond_slave_1: entered allmulticast mode [ 954.416769][ T51] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 954.756687][ T51] usb 8-1: device descriptor read/64, error -71 [ 955.026933][ T51] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 955.177026][ T51] usb 8-1: device descriptor read/64, error -71 [ 955.428388][ T51] usb usb8-port1: attempt power cycle [ 955.666673][ T5856] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 955.776732][ T51] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 955.797763][ T5856] usb 4-1: device descriptor read/64, error -71 [ 955.947497][ T51] usb 8-1: device descriptor read/8, error -71 [ 956.058828][ T29] audit: type=1326 audit(1736925463.196:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14072 comm="syz.8.2264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7fa55ab85d29 code=0x0 [ 956.266713][ T5856] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 956.567319][ T5856] usb 4-1: device descriptor read/64, error -71 [ 956.927128][ T5856] usb usb4-port1: attempt power cycle [ 956.990779][ T51] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 957.061981][ T51] usb 8-1: device descriptor read/8, error -71 [ 957.152413][T14089] bpf: Bad value for 'gid' [ 957.163890][T14089] binder: 14085:14089 ioctl 4018620d 0 returned -22 [ 957.310489][ T51] usb usb8-port1: unable to enumerate USB device [ 961.667677][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'. [ 961.667700][T14114] tipc: Started in network mode [ 961.667715][T14114] tipc: Node identity 7, cluster identity 4711 [ 961.667725][T14114] tipc: Node number set to 7 [ 961.825777][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2277'. [ 965.085435][T10642] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 966.296829][T10642] usb 4-1: device not accepting address 16, error -71 [ 966.382532][ T5856] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 967.479536][ T5856] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 967.508301][ T5856] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 967.666840][ T5856] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 967.676207][ T5856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.689749][T14157] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 967.700907][ T5856] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 968.089235][ T51] usb 8-1: USB disconnect, device number 18 [ 969.017098][T14182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.276843][ T5856] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 970.408241][ T5856] usb 10-1: device descriptor read/64, error -71 [ 970.838891][ T5856] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 971.056951][ T5856] usb 10-1: device descriptor read/64, error -71 [ 971.177366][ T5856] usb usb10-port1: attempt power cycle [ 972.146970][T14220] fuse: Bad value for 'user_id' [ 972.152724][T14220] fuse: Bad value for 'user_id' [ 972.390368][T12797] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 972.446773][ T5856] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 972.484343][ T5856] usb 10-1: device descriptor read/8, error -71 [ 973.088550][T14225] xt_NFQUEUE: number of total queues is 0 [ 973.677442][T14225] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 973.683565][T14225] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 973.693921][T14225] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 973.731958][T12797] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 973.757655][T14225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 973.763808][T14225] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 973.780436][T12797] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 973.820834][T14225] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 973.864576][T12797] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 973.907630][T14225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 973.913703][T14225] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 973.921188][T12797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.934007][T14214] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 973.946261][T12797] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 973.954374][T14225] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 973.975400][T14225] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 973.981537][T14225] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 973.990279][T14225] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 974.291708][T12797] usb 4-1: USB disconnect, device number 18 [ 975.788413][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 975.794896][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 975.848595][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 975.927305][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 976.007741][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 977.838942][ T5916] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 977.878898][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 977.926694][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 978.326917][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 978.333338][ T5831] Bluetooth: hci5: command 0x0c1a tx timeout [ 978.917162][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 978.929036][ T5916] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 978.940304][ T5916] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 26223, setting to 1024 [ 978.955463][ T5916] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 978.969154][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 978.976254][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 978.985505][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.995667][ T5916] usb 4-1: config 0 descriptor?? [ 979.001560][T14271] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 979.572148][ T5877] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 979.585815][ T5916] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 979.597021][ T5916] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 979.604556][ T5916] hid-generic 0003:045E:05DA.0008: unknown main item tag 0x0 [ 979.612150][ T5916] hid-generic 0003:045E:05DA.0008: ignoring exceeding usage max [ 979.621795][ T5916] hid-generic 0003:045E:05DA.0008: ignoring exceeding usage max [ 979.630133][ T5916] hid-generic 0003:045E:05DA.0008: item fetching failed at offset 32/34 [ 979.639769][ T5916] hid-generic 0003:045E:05DA.0008: probe with driver hid-generic failed with error -22 [ 980.263568][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 981.152976][ T5916] usb 4-1: USB disconnect, device number 19 [ 981.168338][ T5877] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 981.179781][ T5877] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 981.190057][ T5877] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 981.199333][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.214098][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 981.220460][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 981.248543][T14283] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 981.265005][ T5877] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 981.590978][ T5916] usb 10-1: USB disconnect, device number 9 [ 982.262797][T14313] syz.3.2335: attempt to access beyond end of device [ 982.262797][T14313] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 982.316392][T14313] efs: cannot read volume header [ 985.336721][T12797] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 985.356990][ T5856] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 985.476892][T12797] usb 9-1: device descriptor read/64, error -71 [ 985.585785][ T5856] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 985.597710][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.681219][ T5856] usb 4-1: config 0 descriptor?? [ 985.688774][ T5856] cp210x 4-1:0.0: cp210x converter detected [ 985.737127][T12797] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 985.887075][T12797] usb 9-1: device descriptor read/64, error -71 [ 985.999183][T12797] usb usb9-port1: attempt power cycle [ 986.407093][T12797] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 986.507531][T12797] usb 9-1: device descriptor read/8, error -71 [ 986.531739][ T5856] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 986.760999][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2349'. [ 986.776755][T12797] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 986.802529][T12797] usb 9-1: device descriptor read/8, error -71 [ 986.859103][ T5856] usb 4-1: cp210x converter now attached to ttyUSB0 [ 986.917084][T12797] usb usb9-port1: unable to enumerate USB device [ 987.266996][ T5856] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 987.330689][T14364] usb 4-1: USB disconnect, device number 20 [ 987.393864][T14364] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 987.469955][ T5856] usb 8-1: Using ep0 maxpacket: 8 [ 987.575712][ T5856] usb 8-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 987.686781][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.699062][ T5856] usb 8-1: Product: syz [ 987.703310][ T5856] usb 8-1: Manufacturer: syz [ 987.709531][T14364] cp210x 4-1:0.0: device disconnected [ 987.730872][ T5856] usb 8-1: SerialNumber: syz [ 987.738004][ T5856] usb 8-1: config 0 descriptor?? [ 987.746250][ T5856] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 988.154227][T14372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.285584][T14372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.866933][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2352'. [ 989.549390][T14379] cgroup: name respecified [ 990.386126][ T5856] gspca_m5602: Failed to find a sensor [ 990.395733][ T5856] ALi m5602 8-1:0.0: ALi m5602 webcam failed [ 990.414800][ T5856] usb 8-1: USB disconnect, device number 19 [ 991.938648][T13541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 991.965059][T13541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 991.975453][T13541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 991.987210][T13541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 991.998064][T13541] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 992.005549][T13541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.305964][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.316899][ T5875] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 992.454565][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.481096][T14400] chnl_net:caif_netlink_parms(): no params data found [ 992.487526][ T5875] usb 10-1: Using ep0 maxpacket: 32 [ 992.502813][ T5875] usb 10-1: config 0 interface 0 has no altsetting 0 [ 992.509838][T13591] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 992.525910][ T5875] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 992.537281][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.545678][ T5875] usb 10-1: Product: syz [ 992.550915][ T5875] usb 10-1: Manufacturer: syz [ 992.556289][ T5875] usb 10-1: SerialNumber: syz [ 992.563488][ T5875] usb 10-1: config 0 descriptor?? [ 992.617628][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.688835][T14400] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.693239][T13591] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 992.707036][T14400] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.707268][T14400] bridge_slave_0: entered allmulticast mode [ 992.720741][ T5856] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 992.743011][T13591] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 992.748005][T14400] bridge_slave_0: entered promiscuous mode [ 992.767867][T14400] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.775335][T14400] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.782534][T13591] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 992.782840][T14400] bridge_slave_1: entered allmulticast mode [ 992.799762][T14400] bridge_slave_1: entered promiscuous mode [ 992.813460][T13591] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.829456][T14408] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 992.856084][T13591] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 992.870321][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.887286][ T5856] usb 8-1: Using ep0 maxpacket: 16 [ 992.898422][ T5856] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 992.926837][ T5856] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 992.952213][T14400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.967983][ T5856] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 992.983305][ T5875] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 992.984808][T14400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.999426][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.007687][ T5856] usb 8-1: Product: 詻鎋顺鞶ꋺ譶瀀鈜늳홟㖖妤㨤脅㩯鍶棋践朹㖷痾㪉姛䛤坝Ꚋ僞梚앒ݞ됾鯾䍒븀녟ᘽ↩ㅫ嗡䄲劂쯄횀̭䜵螀횻㔍㲏缓뾎뫅锤ꖩ괛䣷⏒ꋫ䜖눩ꡟ쎗㾓✜ﴮ뽙獻罕문璥茱ᇐ蚱ꌓ焬祈ѳﮢ䐻뭪饌ꨥ陕එ藭坯낕猘⯲ᮖ톴蹽ꚣ槟쥁寢疛搴递ꖳꘉ庖 [ 993.043114][ T5856] usb 8-1: Manufacturer: ࠠ [ 993.048367][ T5856] usb 8-1: SerialNumber: ࠓ [ 993.100385][T14400] team0: Port device team_slave_0 added [ 993.112011][T14400] team0: Port device team_slave_1 added [ 993.139377][T13591] usb 9-1: USB disconnect, device number 8 [ 993.200770][T14400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.208846][T14400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.235311][T14400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.276023][ T12] bridge_slave_1: left allmulticast mode [ 993.282037][ T12] bridge_slave_1: left promiscuous mode [ 993.289436][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.299495][ T12] bridge_slave_0: left promiscuous mode [ 993.305470][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.362453][ T5856] cdc_ncm 8-1:1.0: bind() failure [ 993.371410][ T5856] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 993.378436][ T5856] cdc_ncm 8-1:1.1: bind() failure [ 993.387312][ T5856] usb 8-1: USB disconnect, device number 20 [ 993.530536][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.537199][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.602093][ T5875] gs_usb 10-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO) [ 993.616996][ T5875] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -121 [ 994.089740][ T5831] Bluetooth: hci0: command tx timeout [ 994.151623][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.164236][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.176977][ T12] bond0 (unregistering): Released all slaves [ 994.335518][ T12] bond1 (unregistering): Released all slaves [ 994.391636][T14364] usb 10-1: USB disconnect, device number 10 [ 994.768767][ T12] bond2 (unregistering): Released all slaves [ 995.629929][ T12] bond3 (unregistering): (slave bond4): Releasing backup interface [ 995.650657][ T12] bond3 (unregistering): Released all slaves [ 996.505687][ T5831] Bluetooth: hci0: command tx timeout [ 996.891934][ T12] bond4 (unregistering): Released all slaves [ 997.293603][ T12] bond5 (unregistering): Released all slaves [ 997.415827][T14400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.436603][T14400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.476705][T14400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.592762][T14450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2372'. [ 997.688345][ T12] tipc: Left network mode [ 997.744932][T14400] hsr_slave_0: entered promiscuous mode [ 997.763723][T14400] hsr_slave_1: entered promiscuous mode [ 997.782927][T14400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.790718][T14400] Cannot create hsr debugfs directory [ 997.966738][T12797] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 998.010073][T14364] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 998.076101][ T12] hsr_slave_0: left promiscuous mode [ 998.087295][ T5856] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 998.112767][ T12] hsr_slave_1: left promiscuous mode [ 998.119547][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.129400][T12797] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 998.139222][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.150041][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.156900][T12797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.157968][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.186071][T12797] usb 8-1: config 0 descriptor?? [ 998.187472][T14364] usb 9-1: Using ep0 maxpacket: 16 [ 998.202430][T14364] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 998.220161][T14364] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 998.261575][ T5856] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 998.269317][ T12] bridge_slave_0: left allmulticast mode [ 998.273991][ T5856] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 998.303178][T14465] netlink: 'syz.3.2377': attribute type 1 has an invalid length. [ 998.321199][T14364] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 998.355748][T14364] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.368038][ T12] veth1_macvtap: left promiscuous mode [ 998.379324][ T5856] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 998.397263][ T12] veth0_macvtap: left promiscuous mode [ 998.406773][T14364] usb 9-1: Product: 詻鎋顺鞶ꋺ譶瀀鈜늳홟㖖妤㨤脅㩯鍶棋践朹㖷痾㪉姛䛤坝Ꚋ僞梚앒ݞ됾鯾䍒븀녟ᘽ↩ㅫ嗡䄲劂쯄횀̭䜵螀횻㔍㲏缓뾎뫅锤ꖩ괛䣷⏒ꋫ䜖눩ꡟ쎗㾓✜ﴮ뽙獻罕문璥茱ᇐ蚱ꌓ焬祈ѳﮢ䐻뭪饌ꨥ陕එ藭坯낕猘⯲ᮖ톴蹽ꚣ槟쥁寢疛搴递ꖳꘉ庖 [ 998.442376][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.452685][ T12] veth1_vlan: left promiscuous mode [ 998.498912][ T12] veth0_vlan: left promiscuous mode [ 998.609972][T12797] kaweth 8-1:0.0: Firmware present in device. [ 998.610125][T14456] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 998.661960][ T5831] Bluetooth: hci0: command tx timeout [ 998.662292][T14364] usb 9-1: Manufacturer: ࠠ [ 998.683930][T14364] usb 9-1: SerialNumber: ࠓ [ 998.742519][ T5856] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 998.984219][T12797] kaweth 8-1:0.0: Statistics collection: 484ae794 [ 998.996831][T12797] kaweth 8-1:0.0: Multicast filter limit: 799a [ 999.024418][T12797] kaweth 8-1:0.0: MTU: 31661 [ 999.106680][T12797] kaweth 8-1:0.0: Read MAC address 2d:af:36:74:cf:6d [ 999.281046][ T5856] usb 10-1: USB disconnect, device number 11 [ 999.402575][T14364] cdc_ncm 9-1:1.0: bind() failure [ 999.411678][T14364] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 999.419313][T14364] cdc_ncm 9-1:1.1: bind() failure [ 999.433276][T14364] usb 9-1: USB disconnect, device number 9 [ 999.784201][T12797] kaweth 8-1:0.0: Error setting receive filter [ 999.791284][T12797] kaweth 8-1:0.0: probe with driver kaweth failed with error -5 [ 999.804342][T12797] usb 8-1: USB disconnect, device number 21 [ 1000.726974][ T5831] Bluetooth: hci0: command tx timeout [ 1001.690972][ T5856] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1001.700534][ T5916] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1001.904980][ T5856] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1001.914913][ T5856] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.925211][ T5916] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1001.938344][ T5916] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1001.949364][ T5856] usb 9-1: Product: syz [ 1001.966994][ T5856] usb 9-1: Manufacturer: syz [ 1001.971663][ T5856] usb 9-1: SerialNumber: syz [ 1001.976664][ T5916] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1001.985823][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.996467][ T5856] usb 9-1: config 0 descriptor?? [ 1002.006388][T14494] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1002.059457][ T5916] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1002.226097][T14492] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2384'. [ 1002.410067][ T5906] usb 10-1: USB disconnect, device number 12 [ 1002.505161][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2384'. [ 1002.540928][T14496] nbd: device at index 64 is going down [ 1002.816914][ T5916] usb 9-1: USB disconnect, device number 10 [ 1003.658702][ T5856] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1003.843543][ T5856] usb 8-1: Using ep0 maxpacket: 16 [ 1003.873347][ T5856] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1003.972361][ T5856] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1004.051483][ T12] IPVS: stop unused estimator thread 0... [ 1004.075485][ T5856] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1004.117803][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.125869][ T5856] usb 8-1: Product: 詻鎋顺鞶ꋺ譶瀀鈜늳홟㖖妤㨤脅㩯鍶棋践朹㖷痾㪉姛䛤坝Ꚋ僞梚앒ݞ됾鯾䍒븀녟ᘽ↩ㅫ嗡䄲劂쯄횀̭䜵螀횻㔍㲏缓뾎뫅锤ꖩ괛䣷⏒ꋫ䜖눩ꡟ쎗㾓✜ﴮ뽙獻罕문璥茱ᇐ蚱ꌓ焬祈ѳﮢ䐻뭪饌ꨥ陕එ藭坯낕猘⯲ᮖ톴蹽ꚣ槟쥁寢疛搴递ꖳꘉ庖 [ 1004.194074][ T5856] usb 8-1: Manufacturer: ࠠ [ 1004.207351][T14400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1004.239731][ T5856] usb 8-1: SerialNumber: ࠓ [ 1004.377545][T14400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1004.421274][T14400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1004.506765][T14400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1005.588877][T14400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.605774][T14400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.848847][ T3030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.856273][ T3030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.878885][ T5856] cdc_ncm 8-1:1.0: bind() failure [ 1005.893998][ T5856] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1005.954645][ T3030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.961895][ T3030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.158469][ T5856] cdc_ncm 8-1:1.1: bind() failure [ 1006.173784][ T5856] usb 8-1: USB disconnect, device number 22 [ 1006.246725][T14400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1006.257702][T14400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1006.978335][T14400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.209132][T14364] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1007.686281][T14364] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1007.731198][T14364] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1007.743264][T14364] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1007.754294][T14364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.802174][T14557] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2399'. [ 1007.812215][T14543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1007.825023][T14364] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1007.867730][T14557] bridge0: entered promiscuous mode [ 1007.891443][T14557] bridge0: left promiscuous mode [ 1008.283208][ T5875] usb 4-1: USB disconnect, device number 21 [ 1008.606154][T14400] veth0_vlan: entered promiscuous mode [ 1008.786205][T14400] veth1_vlan: entered promiscuous mode [ 1009.045496][T14400] veth0_macvtap: entered promiscuous mode [ 1009.054744][T14400] veth1_macvtap: entered promiscuous mode [ 1009.109101][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.133624][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.164156][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.209025][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.235470][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.256740][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.277394][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.322287][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.342636][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1009.363684][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.389167][T14400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.060548][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.125266][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.210778][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.373687][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.443934][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.464511][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.477065][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.493521][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.504519][T14400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1010.516170][T14400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1010.537913][T14400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.564281][T14400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.594509][T14400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.644726][T14400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.685627][T14400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.788291][ T5916] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1010.960374][ T5916] usb 10-1: Using ep0 maxpacket: 16 [ 1010.984963][ T5916] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1011.039610][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.047869][ T5916] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1011.074674][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.097915][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.105825][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.106961][ T5916] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1011.243556][T12797] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1011.757746][T12797] usb 8-1: Using ep0 maxpacket: 8 [ 1011.796282][T12797] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1011.826669][T12797] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1011.869525][T12797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1011.913870][T12797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1011.927013][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.935157][ T5916] usb 10-1: Product: 詻鎋顺鞶ꋺ譶瀀鈜늳홟㖖妤㨤脅㩯鍶棋践朹㖷痾㪉姛䛤坝Ꚋ僞梚앒ݞ됾鯾䍒븀녟ᘽ↩ㅫ嗡䄲劂쯄횀̭䜵螀횻㔍㲏缓뾎뫅锤ꖩ괛䣷⏒ꋫ䜖눩ꡟ쎗㾓✜ﴮ뽙獻罕문璥茱ᇐ蚱ꌓ焬祈ѳﮢ䐻뭪饌ꨥ陕එ藭坯낕猘⯲ᮖ톴蹽ꚣ槟쥁寢疛搴递ꖳꘉ庖 [ 1011.969346][ T5916] usb 10-1: Manufacturer: ࠠ [ 1011.974085][ T5916] usb 10-1: SerialNumber: ࠓ [ 1012.493815][ T5916] cdc_ncm 10-1:1.0: bind() failure [ 1012.504171][ T5916] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1012.511730][ T5916] cdc_ncm 10-1:1.1: bind() failure [ 1012.521434][T12797] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1012.521806][ T5916] usb 10-1: USB disconnect, device number 13 [ 1012.556702][T12797] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.575199][T12797] usb 8-1: Product: syz [ 1012.580826][T12797] usb 8-1: Manufacturer: syz [ 1012.590917][T12797] usb 8-1: SerialNumber: syz [ 1012.621460][T12797] usb 8-1: config 0 descriptor?? [ 1012.947193][T14587] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1013.718693][T12797] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1013.846081][T12797] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input23 [ 1014.076661][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1014.090968][ T29] audit: type=1326 audit(1736925521.256:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14609 comm="syz.4.2414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c93785d29 code=0x0 [ 1014.992606][ C1] powermate: config urb returned -71 [ 1014.993207][T14364] usb 8-1: USB disconnect, device number 23 [ 1014.997951][ C1] powermate: usb_submit_urb(config) failed [ 1014.997997][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1015.361710][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1015.376030][ T9] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1015.399121][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1015.423218][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.451006][T14608] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1015.464149][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1017.693720][ T5856] usb 9-1: USB disconnect, device number 11 [ 1018.209583][T14650] syzkaller0: entered promiscuous mode [ 1018.228329][T14650] syzkaller0: entered allmulticast mode [ 1018.471132][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2427'. [ 1018.493237][ T5877] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1018.626963][ T5856] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1018.676828][ T5877] usb 8-1: Using ep0 maxpacket: 16 [ 1018.685690][ T5877] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1018.713494][ T5877] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1018.727766][ T5877] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.743737][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.753805][ T5877] usb 8-1: Product: 詻鎋顺鞶ꋺ譶瀀鈜늳홟㖖妤㨤脅㩯鍶棋践朹㖷痾㪉姛䛤坝Ꚋ僞梚앒ݞ됾鯾䍒븀녟ᘽ↩ㅫ嗡䄲劂쯄횀̭䜵螀횻㔍㲏缓뾎뫅锤ꖩ괛䣷⏒ꋫ䜖눩ꡟ쎗㾓✜ﴮ뽙獻罕문璥茱ᇐ蚱ꌓ焬祈ѳﮢ䐻뭪饌ꨥ陕එ藭坯낕猘⯲ᮖ톴蹽ꚣ槟쥁寢疛搴递ꖳꘉ庖 [ 1018.787544][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.795744][ T5877] usb 8-1: Manufacturer: ࠠ [ 1018.800740][ T5877] usb 8-1: SerialNumber: ࠓ [ 1018.816975][ T5856] usb 10-1: Using ep0 maxpacket: 32 [ 1018.825083][ T5856] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1018.836426][ T5856] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1018.848036][ T5856] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.868481][ T5856] usb 10-1: Product: syz [ 1018.872834][ T5856] usb 10-1: Manufacturer: syz [ 1018.878525][ T5856] usb 10-1: SerialNumber: syz [ 1018.885991][ T5856] usb 10-1: config 0 descriptor?? [ 1019.157577][ T5877] cdc_ncm 8-1:1.0: bind() failure [ 1019.168845][ T5877] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1019.176866][ T5877] cdc_ncm 8-1:1.1: bind() failure [ 1019.186469][ T5877] usb 8-1: USB disconnect, device number 24 [ 1019.684770][ T5856] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1019.809915][T14664] syz.3.2429 (14664): attempted to duplicate a private mapping with mremap. This is not supported. [ 1020.154838][ T5856] gs_usb 10-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO) [ 1020.166778][ T5856] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -121 [ 1020.343102][ T5877] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1020.465109][ T5856] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1020.485417][ T5877] usb 8-1: device descriptor read/64, error -71 [ 1020.631267][ T5856] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 1020.640322][ T5856] usb 4-1: config 0 has no interface number 0 [ 1020.646522][ T5856] usb 4-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1020.670310][ T5856] usb 4-1: config 0 interface 250 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1020.681296][ T5856] usb 4-1: config 0 interface 250 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1020.693030][ T5856] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 1020.723774][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.742880][ T5877] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1020.761167][ T5856] usb 4-1: config 0 descriptor?? [ 1020.881203][ T5877] usb 8-1: device descriptor read/64, error -71 [ 1020.905896][T12797] usb 10-1: USB disconnect, device number 14 [ 1020.931363][ T5856] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 1021.000888][ T5877] usb usb8-port1: attempt power cycle [ 1021.596782][ T5877] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1021.616939][ T5856] usb 4-1: device descriptor read/64, error -71 [ 1021.648870][ T5877] usb 8-1: device descriptor read/8, error -71 [ 1022.393719][ T5877] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1022.401638][ T5856] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 1022.506314][ T5877] usb 8-1: device descriptor read/8, error -71 [ 1022.622534][ T5877] usb usb8-port1: unable to enumerate USB device [ 1023.656462][T14682] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2435'. [ 1023.728875][ T5856] usb 4-1: device not accepting address 22, error -71 [ 1024.609400][ T5875] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1024.618939][T13591] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1024.797169][T13591] usb 8-1: device descriptor read/64, error -71 [ 1024.848651][ T5875] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1024.878515][ T5875] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1025.172614][T13591] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1025.180327][ T5875] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1025.189706][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.326663][T13591] usb 8-1: device descriptor read/64, error -71 [ 1025.375005][T14688] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1025.406134][ T5875] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1025.437323][T13591] usb usb8-port1: attempt power cycle [ 1025.722661][ T5876] usb 10-1: USB disconnect, device number 15 [ 1025.776660][T13591] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1025.806058][T13591] usb 8-1: device descriptor read/8, error -71 [ 1025.933055][ T5856] usb 4-1: USB disconnect, device number 22 [ 1026.047006][T13591] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1026.077526][T13591] usb 8-1: device descriptor read/8, error -71 [ 1026.197403][T13591] usb usb8-port1: unable to enumerate USB device [ 1026.229748][T14656] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1026.388665][T14702] netlink: 'syz.8.2441': attribute type 29 has an invalid length. [ 1027.046966][T13591] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1027.206522][T13591] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1027.217139][T13591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.293501][T13591] usb 5-1: config 0 descriptor?? [ 1027.542093][T13591] cp210x 5-1:0.0: cp210x converter detected [ 1028.486998][T14702] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1028.511107][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 1028.791971][T13591] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1028.799795][T13591] cp210x 5-1:0.0: querying part number failed [ 1028.809748][T13591] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1028.833787][T13591] usb 5-1: USB disconnect, device number 15 [ 1028.857951][T13591] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1028.877406][T13591] cp210x 5-1:0.0: device disconnected [ 1029.167060][ T5906] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1029.337647][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1029.348442][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1029.358640][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1029.376761][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1029.387730][ T5906] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1029.670871][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.859152][ T5906] usb 4-1: config 0 descriptor?? [ 1029.907286][ T5856] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1030.096325][ T5856] usb 10-1: config 0 has an invalid interface number: 138 but max is 0 [ 1030.118277][ T5856] usb 10-1: config 0 has no interface number 0 [ 1030.124529][ T5856] usb 10-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1030.186824][ T5856] usb 10-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1030.225207][ T5856] usb 10-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1030.249865][ T5856] usb 10-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1030.268647][ T5856] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 1030.278360][ T5877] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1030.297331][ T5856] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.343229][ T5856] usb 10-1: config 0 descriptor?? [ 1030.452533][ T5877] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1030.485624][ T5877] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1030.516455][ T5877] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.555912][ T5906] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 1030.564954][ T5906] hdpvr 4-1:0.0: device init failed [ 1030.578849][ T5906] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1030.581096][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.589130][ T5906] usb 4-1: USB disconnect, device number 23 [ 1030.649360][T14733] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1030.761676][ T5877] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1031.065507][ T5906] usb 5-1: USB disconnect, device number 16 [ 1031.150180][T14749] vlan2: entered promiscuous mode [ 1031.160308][T14749] syz_tun: entered promiscuous mode [ 1031.206187][T14749] team0: Port device vlan2 added [ 1031.876176][T14761] netlink: 'syz.8.2459': attribute type 29 has an invalid length. [ 1034.123171][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 1034.130274][T14761] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1034.597462][ T5906] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1034.786716][ T5906] usb 8-1: Using ep0 maxpacket: 8 [ 1034.813175][ T5906] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1034.833030][ T5906] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1034.845870][ T5906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1034.874749][ T5906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1034.897291][ T5906] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1034.913944][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.925260][ T5906] usb 8-1: Product: syz [ 1034.933567][ T5906] usb 8-1: Manufacturer: syz [ 1034.942358][ T5906] usb 8-1: SerialNumber: syz [ 1034.968316][ T5906] usb 8-1: config 0 descriptor?? [ 1034.985224][T14773] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1035.225087][ T5906] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1035.259739][ T5906] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input24 [ 1035.385090][ T5856] usb 10-1: string descriptor 0 read error: -32 [ 1035.401749][ T5856] usbtest 10-1:0.138: Linux gadget zero [ 1035.417541][ T5856] usbtest 10-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt) [ 1035.512240][ C1] powermate: config urb returned -71 [ 1035.512574][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2466'. [ 1035.518091][ C1] powermate: config urb returned -71 [ 1035.536903][ C1] powermate: config urb returned -71 [ 1035.543061][ T5906] usb 8-1: USB disconnect, device number 33 [ 1035.549907][ C1] powermate: config urb returned -71 [ 1035.549958][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1037.142466][ T5906] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1037.288065][ T5875] kernel read not supported for file /newroot/10 (pid: 5875 comm: kworker/1:4) [ 1037.366948][ T5906] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1037.502572][ T5906] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1037.703341][ T5906] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1037.740018][ T5906] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.773967][T14797] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1037.809891][ T5906] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1037.976270][T14817] netlink: 'syz.3.2477': attribute type 29 has an invalid length. [ 1038.169285][ T5906] usb 9-1: USB disconnect, device number 12 [ 1038.177030][T14364] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1039.004539][T14824] loop2: detected capacity change from 0 to 7 [ 1039.036916][T14824] Dev loop2: unable to read RDB block 7 [ 1039.042985][T14824] loop2: unable to read partition table [ 1039.051573][T14824] loop2: partition table beyond EOD, truncated [ 1039.058180][T14824] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1039.165954][T14364] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.198549][T14364] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.268912][T14828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2479'. [ 1039.337308][T14364] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.358949][T14364] usb 8-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 1039.378653][T14364] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.609306][T14364] usb 8-1: config 0 descriptor?? [ 1040.137164][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 1040.336993][T14817] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1040.746868][ T5906] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1040.816663][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1040.915484][ T5906] usb 9-1: Using ep0 maxpacket: 16 [ 1040.922645][ T5906] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1040.930852][ T5906] usb 9-1: config 0 has no interface number 0 [ 1040.941372][ T5906] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1040.950977][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.960204][ T5906] usb 9-1: Product: syz [ 1040.966210][ T5906] usb 9-1: Manufacturer: syz [ 1040.973644][ T5906] usb 9-1: SerialNumber: syz [ 1040.985549][ T5906] usb 9-1: config 0 descriptor?? [ 1040.996951][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1041.002226][ T5906] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1041.013813][ T9] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=9b.5e [ 1041.028912][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.040994][ T9] usb 5-1: Product: syz [ 1041.045479][ T9] usb 5-1: Manufacturer: syz [ 1041.050287][ T9] usb 5-1: SerialNumber: syz [ 1041.057672][ T9] usb 5-1: config 0 descriptor?? [ 1041.068186][T14364] usbhid 8-1:0.0: can't add hid device: -71 [ 1041.075339][ T9] kalmia 5-1:0.0: probe with driver kalmia failed with error -22 [ 1041.086832][T14364] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1041.107073][T14364] usb 8-1: USB disconnect, device number 34 [ 1041.777713][ T5906] gspca_spca1528: reg_w err -110 [ 1041.797653][ T5906] spca1528 9-1:0.1: probe with driver spca1528 failed with error -110 [ 1043.666684][ T9] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1044.584362][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1044.597656][ T5916] usb 5-1: USB disconnect, device number 17 [ 1044.627064][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1044.666662][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1044.744088][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.395335][T14859] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1045.407558][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1045.717264][T13541] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1045.733578][T13541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1045.743366][T13541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1045.744103][ T5916] usb 8-1: USB disconnect, device number 35 [ 1045.769214][T13541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1045.780801][T13541] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1045.790575][T13541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1045.839349][T14877] netlink: 'syz.3.2495': attribute type 29 has an invalid length. [ 1045.904331][T14882] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1046.004159][T14874] chnl_net:caif_netlink_parms(): no params data found [ 1046.070508][T14874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.078058][T14874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.086420][T14874] bridge_slave_0: entered allmulticast mode [ 1046.093877][T14874] bridge_slave_0: entered promiscuous mode [ 1046.102153][T14874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.109817][T14874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.117138][T14874] bridge_slave_1: entered allmulticast mode [ 1046.124033][T14874] bridge_slave_1: entered promiscuous mode [ 1046.152425][T14874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.157039][ T5875] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1046.164808][T14874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.206252][T14874] team0: Port device team_slave_0 added [ 1046.214631][T14874] team0: Port device team_slave_1 added [ 1046.246013][T14874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.255194][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.281121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.289538][T14874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.296842][ T5875] usb 5-1: device descriptor read/64, error -71 [ 1046.318324][T14874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.325328][T14874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.357181][T14874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.420192][T14874] hsr_slave_0: entered promiscuous mode [ 1046.430596][T14874] hsr_slave_1: entered promiscuous mode [ 1046.438310][T14874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1046.446101][T14874] Cannot create hsr debugfs directory [ 1046.546848][ T5875] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1046.686711][ T5875] usb 5-1: device descriptor read/64, error -71 [ 1046.807173][ T5875] usb usb5-port1: attempt power cycle [ 1046.941440][T14874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1046.958097][T14874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1046.982111][T14874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1046.994437][T14874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1047.064999][T14874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.084624][T14874] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.102425][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.109655][ T8110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.131400][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.138547][ T8110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.156681][ T5875] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1047.176102][T14874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1047.186973][T14874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1047.197417][ T5856] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 1047.213494][ T5875] usb 5-1: device descriptor read/8, error -71 [ 1047.360239][ T5856] usb 8-1: config 0 has an invalid interface number: 109 but max is 0 [ 1047.369383][T14874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.376578][ T5856] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.397499][ T5856] usb 8-1: config 0 has no interface number 0 [ 1047.403759][ T5856] usb 8-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1047.417930][ T5856] usb 8-1: config 0 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1047.453273][ T5856] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 1047.465180][T14874] veth0_vlan: entered promiscuous mode [ 1047.466829][ T5875] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1047.472894][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.492839][T14874] veth1_vlan: entered promiscuous mode [ 1047.505056][ T5856] usb 8-1: Product: syz [ 1047.509815][ T5856] usb 8-1: Manufacturer: syz [ 1047.510352][ T5875] usb 5-1: device descriptor read/8, error -71 [ 1047.514436][ T5856] usb 8-1: SerialNumber: syz [ 1047.519147][ T5856] usb 8-1: config 0 descriptor?? [ 1047.564982][T14874] veth0_macvtap: entered promiscuous mode [ 1047.572141][T14894] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1047.591930][T14874] veth1_macvtap: entered promiscuous mode [ 1047.611019][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.624185][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.634675][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.636986][ T5875] usb usb5-port1: unable to enumerate USB device [ 1047.645721][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.664851][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.675776][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.685873][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.696921][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.707612][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.718500][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.731408][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1047.742625][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.754419][T14874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.774120][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.788318][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.798516][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.809289][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.819278][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.831197][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.841233][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.852882][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.857142][ T5831] Bluetooth: hci3: command tx timeout [ 1047.862862][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.885447][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.896119][T14874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1047.914434][T14874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1047.928734][ T5856] ath6kl: Failed to submit usb control message: -71 [ 1047.935416][ T5856] ath6kl: unable to send the bmi data to the device: -71 [ 1047.938727][T14874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.943023][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 1047.955930][T14877] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1047.966614][ T5856] ath6kl: Unable to send get target info: -71 [ 1047.973739][ T5856] ath6kl: Failed to init ath6kl core: -71 [ 1047.980658][ T5856] ath6kl_usb 8-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 1047.990537][T14874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.995028][ T5856] usb 8-1: USB disconnect, device number 36 [ 1048.014921][T14874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.025028][T14874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.035932][T14874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.136476][ T8110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.144920][ T8110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.173296][ T7654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.182536][ T7654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.033333][ T5831] Bluetooth: hci3: command tx timeout [ 1050.596135][T10642] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1051.857571][T10642] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1051.866908][T10642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.943505][T10642] usb 4-1: config 0 descriptor?? [ 1052.029391][T10642] cp210x 4-1:0.0: cp210x converter detected [ 1052.086761][T13541] Bluetooth: hci3: command tx timeout [ 1052.103034][T14923] sp0: Synchronizing with TNC [ 1052.347444][ T5875] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1052.537646][T10642] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1052.544341][T14913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.553862][T14913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.803830][ T5875] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1052.876714][ T5875] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1052.980066][ T5875] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1053.030890][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.541258][T14926] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1053.586932][T10642] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1053.593000][ T5875] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1053.594530][T10642] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1053.612591][T10642] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1053.623995][T10642] usb 4-1: USB disconnect, device number 24 [ 1053.638023][T10642] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1053.646347][T10642] cp210x 4-1:0.0: device disconnected [ 1054.217159][T13541] Bluetooth: hci3: command tx timeout [ 1054.518552][T10642] usb 3-1: USB disconnect, device number 36 [ 1054.570357][T14951] serio: Serial port ptm0 [ 1054.977769][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.984329][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.757463][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1056.769291][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1056.779312][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1056.790186][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1056.807039][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1056.819380][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1057.313842][T14983] tmpfs: Bad value for 'mpol' [ 1058.077282][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 1058.410664][T14990] ptrace attach of "./syz-executor exec"[13641] was attempted by ""[14990] [ 1058.454584][T14990] dvmrp0: entered allmulticast mode [ 1058.489054][T14990] pimreg: entered allmulticast mode [ 1059.157065][ T5831] Bluetooth: hci4: command tx timeout [ 1059.214210][T14969] chnl_net:caif_netlink_parms(): no params data found [ 1059.248258][T14993] overlayfs: missing 'workdir' [ 1059.918170][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.969230][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.983761][T14969] bridge_slave_0: entered allmulticast mode [ 1060.061626][T14969] bridge_slave_0: entered promiscuous mode [ 1060.069998][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.077200][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.084495][T14969] bridge_slave_1: entered allmulticast mode [ 1060.092846][T14969] bridge_slave_1: entered promiscuous mode [ 1060.116801][T13591] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1060.286361][T13591] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1060.305822][T13591] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1060.533551][T13591] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1060.807981][T13591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.869322][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.882629][T14995] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1060.926016][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.927570][T13591] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1061.030649][T15015] input: syz0 as /devices/virtual/input/input25 [ 1061.049880][T14969] team0: Port device team_slave_0 added [ 1061.070403][T14969] team0: Port device team_slave_1 added [ 1061.256648][ T5831] Bluetooth: hci4: command tx timeout [ 1061.272275][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.317100][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.343087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1061.353875][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.370708][ T5916] usb 3-1: USB disconnect, device number 37 [ 1061.379658][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.391190][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.421984][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.483002][T14969] hsr_slave_0: entered promiscuous mode [ 1061.493764][T14969] hsr_slave_1: entered promiscuous mode [ 1061.501552][T14969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.509289][T14969] Cannot create hsr debugfs directory [ 1061.546678][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1061.779146][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.789795][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1061.801702][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1061.830309][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1061.857392][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1062.734699][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1062.743909][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1062.752277][ T9] usb 4-1: Product: syz [ 1062.756486][ T9] usb 4-1: Manufacturer: syz [ 1062.761254][ T9] usb 4-1: SerialNumber: syz [ 1062.768388][ T9] usb 4-1: config 0 descriptor?? [ 1062.993403][ T9] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1063.033573][ T9] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1063.329278][ T5831] Bluetooth: hci4: command tx timeout [ 1063.657506][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.866994][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.942222][ T9] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1063.949968][ T9] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1063.959241][T14969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1063.962643][ T9] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1063.984792][ T9] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1064.053309][T14969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1064.073106][T14969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1064.117629][T14969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1064.246488][T15057] vlan2: entered promiscuous mode [ 1064.270341][T15057] vlan2: entered allmulticast mode [ 1064.275615][T15057] hsr_slave_1: entered allmulticast mode [ 1064.354245][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.507873][T15060] netlink: 'syz.7.2546': attribute type 1 has an invalid length. [ 1064.571324][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2547'. [ 1064.870455][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.078290][ T9] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1065.087244][ T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1065.128135][ T9] usb 4-1: USB disconnect, device number 25 [ 1065.152351][T15057] hsr_slave_1 (unregistering): left allmulticast mode [ 1065.197196][T15057] hsr_slave_1 (unregistering): left promiscuous mode [ 1065.230810][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.238207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.260135][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.267522][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1065.360644][T14969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.373676][ T5831] Bluetooth: hci4: command tx timeout [ 1065.456926][T10642] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1065.644350][T10642] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1065.733447][T15075] overlayfs: failed to resolve './file1': -2 [ 1065.739988][T13591] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1065.896984][T13591] usb 8-1: Using ep0 maxpacket: 32 [ 1065.992846][T13591] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1066.327610][T13591] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1066.353371][T13591] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.376631][T13591] usb 8-1: Product: syz [ 1066.380865][T13591] usb 8-1: Manufacturer: syz [ 1066.415718][T13591] usb 8-1: SerialNumber: syz [ 1066.433891][T15077] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2552'. [ 1066.445669][T13591] usb 8-1: config 0 descriptor?? [ 1066.450560][T10642] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1066.461572][T10642] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1066.471138][T10642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.483074][T15065] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1066.490442][T15077] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1066.495564][T10642] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1066.556266][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.895342][T10642] usb 3-1: USB disconnect, device number 38 [ 1067.003725][T13591] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1068.007613][T13591] gs_usb 8-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO) [ 1068.019428][T13591] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 1068.735930][ T5856] usb 8-1: USB disconnect, device number 37 [ 1068.792747][T14969] veth0_vlan: entered promiscuous mode [ 1068.809667][T14969] veth1_vlan: entered promiscuous mode [ 1068.916671][T15104] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2557'. [ 1069.136038][T14969] veth0_macvtap: entered promiscuous mode [ 1069.145939][T14969] veth1_macvtap: entered promiscuous mode [ 1069.185622][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.202600][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.309481][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.320261][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.330707][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.341744][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.351684][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.366812][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.377118][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.387728][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.397653][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.408197][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.418129][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.436716][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.498161][T14969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.528747][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.539753][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.550399][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.561305][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.571822][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.582589][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.592703][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.603447][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.613950][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.624577][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.634518][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.645684][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.656265][T14969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1069.666884][T14969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.677851][T14969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.722858][T15114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2559'. [ 1069.810154][T15113] netlink: 'syz.7.2560': attribute type 29 has an invalid length. [ 1069.946193][T14969] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.022448][T14969] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.104801][T14969] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.271328][T14969] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.507301][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.515446][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.721360][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.790836][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.908899][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 1072.176364][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 1072.176707][T15117] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1073.857840][T15142] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 1074.541533][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1075.012240][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1071, setting to 1024 [ 1075.035810][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1075.064746][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1075.083277][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.115277][T15147] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1075.129542][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1077.035524][ T51] usb 4-1: USB disconnect, device number 26 [ 1077.353570][T15182] netlink: 'syz.2.2578': attribute type 29 has an invalid length. [ 1077.443799][T15185] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1078.428593][T15189] overlayfs: missing 'lowerdir' [ 1079.564286][T15203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2584'. [ 1079.606793][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 1079.614460][T15182] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1080.262720][T15207] [U]  [ 1080.268930][T15207] devtmpfs: Bad value for 'nr_inodes' [ 1080.306014][T15205] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2583'. [ 1080.365925][ C0] ------------[ cut here ]------------ [ 1080.372083][ C0] WARNING: CPU: 0 PID: 15199 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xa08/0xce0 [ 1080.382003][ C0] Modules linked in: [ 1080.385932][ C0] CPU: 0 UID: 0 PID: 15199 Comm: syz.3.2583 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1080.396713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1080.406798][ C0] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 1080.413173][ C0] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 1e 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 1080.432879][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00010086 [ 1080.438962][ C0] RAX: dffffc0000000000 RBX: 1ffff1100fcd9da7 RCX: ffff888024cada00 [ 1080.446943][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1080.454941][ C0] RBP: ffffc90000007cf8 R08: ffffffff816463cc R09: ffffffff81646371 [ 1080.462921][ C0] R10: 0000000000000002 R11: ffff888024cada00 R12: ffff88807e6ced20 [ 1080.470903][ C0] R13: 1ffff1100fcd9db4 R14: ffff88807e6ced38 R15: ffff88807e6cede0 [ 1080.479058][ C0] FS: 0000555568530500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1080.487994][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1080.494594][ C0] CR2: 0000001b3311cff8 CR3: 000000007a4c0000 CR4: 00000000003526f0 [ 1080.502581][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1080.510559][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1080.518537][ C0] Call Trace: [ 1080.521824][ C0] [ 1080.524677][ C0] ? __warn+0x165/0x4d0 [ 1080.528849][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 1080.534583][ C0] ? report_bug+0x2b3/0x500 [ 1080.539102][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 1080.544838][ C0] ? handle_bug+0x60/0x90 [ 1080.549174][ C0] ? exc_invalid_op+0x1a/0x50 [ 1080.553855][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 1080.558900][ C0] ? prepare_signal+0x931/0xc90 [ 1080.563764][ C0] ? prepare_signal+0x98c/0xc90 [ 1080.568643][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 1080.574412][ C0] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 1080.580077][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 1080.586168][ C0] posix_timer_fn+0xe2/0x160 [ 1080.590772][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 1080.595991][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 1080.601231][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1080.606969][ C0] ? sched_clock+0x4a/0x70 [ 1080.611404][ C0] ? read_tsc+0x9/0x20 [ 1080.615485][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1080.621567][ C0] hrtimer_interrupt+0x403/0xa40 [ 1080.626553][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1080.632555][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1080.638291][ C0] [ 1080.641237][ C0] [ 1080.644177][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1080.650185][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1080.656007][ C0] Code: c9 50 e8 49 0c 0c 00 48 83 c4 08 4c 89 f7 e8 ed 39 00 00 e9 de 04 00 00 4c 89 f7 e8 e0 28 55 0a e8 6b 89 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1080.675631][ C0] RSP: 0018:ffffc9000c4bf968 EFLAGS: 00000286 [ 1080.681755][ C0] RAX: 6d95a12c7cc88900 RBX: ffff888024cada00 RCX: ffffffff9a378903 [ 1080.689736][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5edea0 [ 1080.697727][ C0] RBP: ffffc9000c4bf9b0 R08: ffffffff90185937 R09: 1ffffffff2030b26 [ 1080.705717][ C0] R10: dffffc0000000000 R11: fffffbfff2030b27 R12: 1ffff110170c7eac [ 1080.713703][ C0] R13: dffffc0000000000 R14: ffff8880b863e740 R15: ffff8880b863f560 [ 1080.721707][ C0] ? finish_task_switch+0x1e5/0x870 [ 1080.726966][ C0] __schedule+0x1803/0x4be0 [ 1080.731508][ C0] ? __pfx___schedule+0x10/0x10 [ 1080.736377][ C0] ? __pfx_lock_release+0x10/0x10 [ 1080.741414][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1080.747339][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1080.753244][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1080.759587][ C0] ? schedule+0x90/0x320 [ 1080.763865][ C0] schedule+0x14b/0x320 [ 1080.768057][ C0] do_nanosleep+0x197/0x600 [ 1080.772596][ C0] ? do_nanosleep+0x80/0x600 [ 1080.777313][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1080.782388][ C0] ? __asan_memset+0x23/0x50 [ 1080.787009][ C0] ? __hrtimer_init+0x170/0x250 [ 1080.791887][ C0] hrtimer_nanosleep+0x1ec/0x410 [ 1080.796868][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1080.802365][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1080.807599][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1080.812818][ C0] ? read_tsc+0x9/0x20 [ 1080.817014][ C0] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 1080.822579][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1080.828667][ C0] ? do_syscall_64+0x100/0x230 [ 1080.833462][ C0] ? do_syscall_64+0xb6/0x230 [ 1080.838425][ C0] do_syscall_64+0xf3/0x230 [ 1080.842950][ C0] ? clear_bhb_loop+0x35/0x90 [ 1080.847644][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.853557][ C0] RIP: 0033:0x7f6b65db85e5 [ 1080.857996][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1080.877626][ C0] RSP: 002b:00007fffe2b01fd0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1080.886060][ C0] RAX: ffffffffffffffda RBX: 00007f6b65f75fa0 RCX: 00007f6b65db85e5 [ 1080.894045][ C0] RDX: 00007fffe2b02010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1080.902039][ C0] RBP: 00007f6b65f77ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 1080.910029][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000107c3b [ 1080.918024][ C0] R13: 00007f6b65f76080 R14: 0000000000000032 R15: ffffffffffffffff [ 1080.926020][ C0] [ 1080.929064][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1080.936348][ C0] CPU: 0 UID: 0 PID: 15199 Comm: syz.3.2583 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1080.947115][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1080.957176][ C0] Call Trace: [ 1080.960460][ C0] [ 1080.963308][ C0] dump_stack_lvl+0x241/0x360 [ 1080.968011][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1080.973228][ C0] ? __pfx__printk+0x10/0x10 [ 1080.977830][ C0] ? _printk+0xd5/0x120 [ 1080.981996][ C0] ? __init_begin+0x41000/0x41000 [ 1080.987037][ C0] ? vscnprintf+0x5d/0x90 [ 1080.991383][ C0] panic+0x349/0x880 [ 1080.995413][ C0] ? __warn+0x174/0x4d0 [ 1080.999581][ C0] ? __pfx_panic+0x10/0x10 [ 1081.004033][ C0] __warn+0x344/0x4d0 [ 1081.008033][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 1081.013771][ C0] report_bug+0x2b3/0x500 [ 1081.018124][ C0] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 1081.023865][ C0] handle_bug+0x60/0x90 [ 1081.028030][ C0] exc_invalid_op+0x1a/0x50 [ 1081.032544][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1081.037448][ C0] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 1081.043793][ C0] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 1e 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 1081.063426][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00010086 [ 1081.069515][ C0] RAX: dffffc0000000000 RBX: 1ffff1100fcd9da7 RCX: ffff888024cada00 [ 1081.077498][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.085483][ C0] RBP: ffffc90000007cf8 R08: ffffffff816463cc R09: ffffffff81646371 [ 1081.093466][ C0] R10: 0000000000000002 R11: ffff888024cada00 R12: ffff88807e6ced20 [ 1081.101455][ C0] R13: 1ffff1100fcd9db4 R14: ffff88807e6ced38 R15: ffff88807e6cede0 [ 1081.109466][ C0] ? prepare_signal+0x931/0xc90 [ 1081.114352][ C0] ? prepare_signal+0x98c/0xc90 [ 1081.119236][ C0] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 1081.124900][ C0] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 1081.130989][ C0] posix_timer_fn+0xe2/0x160 [ 1081.135602][ C0] ? __pfx_posix_timer_fn+0x10/0x10 [ 1081.140816][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 1081.146048][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1081.151799][ C0] ? sched_clock+0x4a/0x70 [ 1081.156250][ C0] ? read_tsc+0x9/0x20 [ 1081.160340][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1081.166432][ C0] hrtimer_interrupt+0x403/0xa40 [ 1081.171450][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1081.177456][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1081.183113][ C0] [ 1081.186052][ C0] [ 1081.189062][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1081.195062][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1081.200886][ C0] Code: c9 50 e8 49 0c 0c 00 48 83 c4 08 4c 89 f7 e8 ed 39 00 00 e9 de 04 00 00 4c 89 f7 e8 e0 28 55 0a e8 6b 89 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1081.220517][ C0] RSP: 0018:ffffc9000c4bf968 EFLAGS: 00000286 [ 1081.226629][ C0] RAX: 6d95a12c7cc88900 RBX: ffff888024cada00 RCX: ffffffff9a378903 [ 1081.234621][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5edea0 [ 1081.242611][ C0] RBP: ffffc9000c4bf9b0 R08: ffffffff90185937 R09: 1ffffffff2030b26 [ 1081.250596][ C0] R10: dffffc0000000000 R11: fffffbfff2030b27 R12: 1ffff110170c7eac [ 1081.258576][ C0] R13: dffffc0000000000 R14: ffff8880b863e740 R15: ffff8880b863f560 [ 1081.266592][ C0] ? finish_task_switch+0x1e5/0x870 [ 1081.271814][ C0] __schedule+0x1803/0x4be0 [ 1081.276363][ C0] ? __pfx___schedule+0x10/0x10 [ 1081.281238][ C0] ? __pfx_lock_release+0x10/0x10 [ 1081.286279][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1081.292198][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1081.298107][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1081.304456][ C0] ? schedule+0x90/0x320 [ 1081.308724][ C0] schedule+0x14b/0x320 [ 1081.312907][ C0] do_nanosleep+0x197/0x600 [ 1081.317439][ C0] ? do_nanosleep+0x80/0x600 [ 1081.322042][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1081.327077][ C0] ? __asan_memset+0x23/0x50 [ 1081.331677][ C0] ? __hrtimer_init+0x170/0x250 [ 1081.336555][ C0] hrtimer_nanosleep+0x1ec/0x410 [ 1081.341614][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1081.347090][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1081.352306][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1081.357561][ C0] ? read_tsc+0x9/0x20 [ 1081.361666][ C0] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 1081.367230][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1081.373337][ C0] ? do_syscall_64+0x100/0x230 [ 1081.378122][ C0] ? do_syscall_64+0xb6/0x230 [ 1081.382858][ C0] do_syscall_64+0xf3/0x230 [ 1081.387381][ C0] ? clear_bhb_loop+0x35/0x90 [ 1081.392070][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.397982][ C0] RIP: 0033:0x7f6b65db85e5 [ 1081.402432][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1081.422065][ C0] RSP: 002b:00007fffe2b01fd0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1081.430497][ C0] RAX: ffffffffffffffda RBX: 00007f6b65f75fa0 RCX: 00007f6b65db85e5 [ 1081.438489][ C0] RDX: 00007fffe2b02010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1081.446470][ C0] RBP: 00007f6b65f77ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 1081.454453][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000107c3b [ 1081.462435][ C0] R13: 00007f6b65f76080 R14: 0000000000000032 R15: ffffffffffffffff [ 1081.470477][ C0] [ 1081.473857][ C0] Kernel Offset: disabled [ 1081.478602][ C0] Rebooting in 86400 seconds..