last executing test programs: 3m28.234311755s ago: executing program 3 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m28.123520612s ago: executing program 3 (id=556): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000100)={0x4, [[0x1, 0x1797, 0x81, 0x9f8], [0x0, 0x804, 0x2, 0x0, 0x0, 0x80000004], [0x3, 0x6, 0x40000000, 0xf, 0x0, 0x3bc9, 0x0, 0x80]], '\x00', [{0xffffffff, 0x400, 0x0, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x1}, {0x0, 0x4000e}, {0x5, 0x6}, {0x0, 0x4}, {}, {0x0, 0x8003}, {0x8}, {0xfffffffc, 0x400001}, {0x7, 0x400}, {0x88000000}], '\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339162471f40000000001"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 3m28.103887634s ago: executing program 3 (id=557): syz_emit_ethernet(0xb8, &(0x7f0000000180)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x26, 0xaa, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2, [0x3]}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "8196bf17e0dedac5d8a461442bb26c19557d3973fad67a8059e40f5e94eeee919c8198d9d210d5ad2922bf9f01ce66f8c26edafe1632bc7b5674159305583b4f3d9018cf82aafce9bbddbde9c44e2330"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x7, 0x3, 0x0, 0x1, 0x0, 0x1}, 0x2, {0x0, 0x12a, 0x3, 0x19, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)="0c9e7276573a9166425ce546fee41d04", 0x10) 3m27.547356343s ago: executing program 3 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f00000007c0)={0x24, 0xd, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, 0x24}}, 0x4) 3m27.431753109s ago: executing program 3 (id=560): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="b7020000020000027b2ac0ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000002850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x40401) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x10) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000140)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 3m27.165746787s ago: executing program 3 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\x01\x80linux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9\x8b\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x01\x00\x00\x00S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd5\xce\x88L\xf1\xf9[\x98\xd4+p\x05\xff\xf5\x00\x1b]x:\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\x03\x00\x00\x00V\xe5mU\x86<\x00'/229, 0x6e93ebbbcc0884f2, 0x11, 0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x26, 0x1}) mq_timedsend(r1, 0x0, 0x0, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, 0x0) 3m27.131885765s ago: executing program 32 (id=563): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\x01\x80linux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9\x8b\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x01\x00\x00\x00S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd5\xce\x88L\xf1\xf9[\x98\xd4+p\x05\xff\xf5\x00\x1b]x:\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\x03\x00\x00\x00V\xe5mU\x86<\x00'/229, 0x6e93ebbbcc0884f2, 0x11, 0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0x26, 0x1}) mq_timedsend(r1, 0x0, 0x0, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, 0x0) 2m36.262786249s ago: executing program 1 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0xfc83, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x57, 0x87, 0x40c}, 0x50) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r2 = socket$inet(0x2, 0x2, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0xb) 2m35.289703296s ago: executing program 1 (id=971): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000080)={0x0, 0xf, 0x3, {0x3, 0x25, '\b'}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x10, &(0x7f0000000340)={0x0, 0x8, 0x6e, "84df79e5282d126fa2c20ce2fde371e1ca9bd416bd6f31fc4dbf04244ba300aad164b5333f12aed5341e54daf3c619e28a502e3d4af003b71362d9494917a5d8f36dd2ab6350c6004c2e28605a8e055a4db801eb7bf2fec2a2cf75532ee0bdd6108cd9bc1568aaf95926dfa2c1ba"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x40000000, 0x0, 0x3}, 0x0, 0xf4240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000000300)=""/245, 0x0, 0xf5, 0x0, 0x100}, 0x28) r6 = syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x40402) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000240)={r4, 0xffffffff}, &(0x7f0000000280)=0x8) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x2, 0x4f23, @loopback}, 0x10) 2m31.526695026s ago: executing program 1 (id=991): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500001c000000006911a000000000007f1000dd02000000850001000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500001c000000006911a000000000007f1000dd02000000850001000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) shutdown(r0, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x101, 0x11, 0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000011000003000000000000000064010101000000000000000000000000000024d202006c000cf88af6", @ANYRES32=0x0, @ANYBLOB="030000001c00040002004e204e2000000000000000000000000000000000000010000a0025bd70002dbd70000700000008001e000b000000"], 0x68}}, 0x44071) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000011000003000000000000000064010101000000000000000000000000000024d202006c000cf88af6", @ANYRES32=0x0, @ANYBLOB="030000001c00040002004e204e2000000000000000000000000000000000000010000a0025bd70002dbd70000700000008001e000b000000"], 0x68}}, 0x44071) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) (async) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x4c, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) ioctl$VIDIOC_G_INPUT(r6, 0x80045626, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) io_setup(0xffff, &(0x7f0000000140)) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x6) ioctl$TCSETS(r8, 0x5402, 0x0) 2m31.31449951s ago: executing program 1 (id=998): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000100)={0x1, 0x303, 0x6}) sendfile(r2, r1, &(0x7f0000000040)=0xfbf, 0x312) ioctl$HIDIOCGUSAGE(r1, 0x5b01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00') read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r6 = socket$packet(0x11, 0x2, 0x300) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000480)={0x0, 0xdb49, 0x8, 0x3, 0xef, 0x0, r5}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x607d, 0x1000, 0x3, 0x123, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x783c, 0x1000, 0x2, 0x7b}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe821, 0x200a4, 0x1, 0x352, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6463, 0x20, 0x0, 0x123, 0x0, r5}}], 0x4, &(0x7f0000001980)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x146}, 0x0, 0x0, '\x00', {0x2, 0x9d0, 0x0, &(0x7f0000000980)=@buf_512="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"}}, &(0x7f0000001a00)) syz_io_uring_setup(0x6b51, &(0x7f0000000300)={0x0, 0x4b16, 0x400, 0x1, 0x9e, 0x0, r7}, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x3, 0x10000, 0xffffffff, 0x0, 0xfffffffd}, 0x1c) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0) 2m29.360409393s ago: executing program 1 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0xfc83, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x57, 0x87, 0x40c}, 0x50) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r2 = socket$inet(0x2, 0x2, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0xb) 2m29.32457181s ago: executing program 2 (id=1012): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) close(0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x4, 0x7}, 0x50) bpf$PROG_LOAD(0x2, 0x0, 0x0) 2m28.251379115s ago: executing program 2 (id=1019): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4024587b, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, &(0x7f0000000100)={0x1, 0x303, 0x6}) sendfile(r2, r1, &(0x7f0000000040)=0xfbf, 0x312) ioctl$HIDIOCGUSAGE(r1, 0x5b01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00') read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r6 = socket$packet(0x11, 0x2, 0x300) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000480)={0x0, 0xdb49, 0x8, 0x3, 0xef, 0x0, r5}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x607d, 0x1000, 0x3, 0x123, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x783c, 0x1000, 0x2, 0x7b}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe821, 0x200a4, 0x1, 0x352, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6463, 0x20, 0x0, 0x123, 0x0, r5}}], 0x4, &(0x7f0000001980)={0x2e, 0x12, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x146}, 0x0, 0x0, '\x00', {0x2, 0x9d0, 0x0, &(0x7f0000000980)=@buf_512="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"}}, &(0x7f0000001a00)) syz_io_uring_setup(0x6b51, &(0x7f0000000300)={0x0, 0x4b16, 0x400, 0x1, 0x9e, 0x0, r7}, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x3, 0x10000, 0xffffffff, 0x0, 0xfffffffd}, 0x1c) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0) 2m26.555015585s ago: executing program 2 (id=1026): ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0x40000, 0xfee01000, 0xa6, 0xf9, 0x5}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000040)={0x9, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4024587b, &(0x7f0000000ac0)={{r2, &(0x7f0000000140)='\x00', 0x404000, &(0x7f0000000180)={@align=0x10001, {0x3, 0x800, 0x7, 0x2}}, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0xcdf}, 0x9, &(0x7f00000009c0)=[{0x3, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000280)="1b8e4e1803e5d83e26bd130037e837f01cc03242b549eaae", 0x18, 0x30}, {0x2, 0x14000000, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="6dc3407daab4e5df61306cf3157b7062a04a463cae1b2c4c5838f033226bbaad37e162858c03ea8cdd448bfb202062f20f14370508569336b69d34ed41c1b20cc1576a2729f97a9fdd1a5a31d3e3d4c2c2f2128b7dbcbe08b969758dcec08309ffbae01871b14fc45f607b8e1b254d784fa3e6d3fa5dd3608f15845f6b38476f25b174740fa63cdc129b2e98c0210a3cfa4de1379e9990332708e7ce26a90a872831d69e904743f194d6eb118ef140bde5301c595a2b74d3163234f67079890dd987fdde9c3527a90c2556b971608b49c0c4e6858d6acbc224136d3e63e4ba2474411ffb5f5d9827f3625872011170088bba", 0xf2, 0x8}, {0x1, 0x3, &(0x7f0000000400)='\x00', &(0x7f0000000440), 0x0, 0x20}, {0x3, 0x98, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="c5a7881d3efc6b8b2cfb034a281a5d7b3f87ea11aee4cbbe83ebe0bb549d657ac7b3bec8a36ccb1653e9104069a87508e0c3bdc353bd5712d564b4d6b178b42419cbb7e33721c869835505254be27f8605b3734135b84de3f52be2886dd148c604321e71250a57ba9de7ffabe56d0e288b3de30b9e9735db22b4e081768842c69fd1d1ffac0e310f4cef4a7f76c99aa622a9ec50b62701c067ba2627eaf635c0cea8ec09425e841cf75bf49a647e9714332afe4d0481c66eab34c34cd7ab0d3dc79d9059b8daa1168ce061b2a8626ddbf80efaeff7cfcb109d0eb9", 0xdb, 0x20}, {0x2, 0xfd, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="dd78dcea447ad1e433ea93c3919601fd4ae55268e3b2a556cda1dec18356f9f7c377a3c6b74e784c41c234827e93e292e0a37443cc84933556ff42f7cec20ac5afa4aa5cfe9a5efaa48702ad2ce9f2b394a89d2484294a2851d41676fbbef1d335f8033c6f12fb8bee10b25d2d440513089dff1f79434903158ed59882094ecf5ac65528c33e45fc5f990b6d3cd7365284b883e8b9f266ae0588a344699ace435b8fdab91583bede0c73547f31a9b317d3f8b1b017a390dc8c089f778edd09bb2c7b4d9957e3e3882fa264bf16f30c24d967db5f9fb0", 0xd6, 0x44}, {0x3, 0x3, &(0x7f0000000700)='\x00', &(0x7f0000000740)="6b4051eb83cdbbdc9f8f4e77", 0xc, 0x2}, {0x3, 0x1, &(0x7f0000000780)='\x00', &(0x7f00000007c0)="9b334244bf335487781c8e6816a776", 0xf, 0x20}, {0x3, 0x100, &(0x7f0000000800)='\x00', &(0x7f0000000840)="e18b5557cd97a6fab1897e5ad514dfe86f4f405c86aef24ba115e0cb1e8824ae0258caac0d0fd683985b523600a7fb3ef78f3939cdbba9838dfd194ce3ea38c634e4d1e272fdfcd0018d236ac1f4da922e0ca003b3e245b7f90f470c4040ccc8ca63db3a1bf98db499fa3fc7fb817f0713e332bf37feb7ae668a142e69fdfa98bcbe147671bf54e13cd99da158f01281ca87db87d1cd3e7e4a07e40673947b", 0x9f, 0x20}, {0x2, 0x9, &(0x7f0000000900)='#]#],)[', &(0x7f0000000940)="de221aa2b5a448700686be5908a3af7d4768059196df61c540ba1ec2cf821892dcd16aed3028c0de9c5f5345536e6239adcf3360b7c5ebb4cda834bc50a5db23ab", 0x41, 0xa}]}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000b00)={0x63, 0x8001}) syz_io_uring_setup(0x3623, &(0x7f0000000b40)={0x0, 0x967, 0x2, 0x3, 0xb7}, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000001c00)={0x7, 0x9, 0x0, "ea63886307138d3958b991d238a5c17bbcda9679d59425d0f35915d4b1ffca84", 0x31435750}) 2m14.309316358s ago: executing program 33 (id=1010): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0xfc83, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x57, 0x87, 0x40c}, 0x50) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) r2 = socket$inet(0x2, 0x2, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001200)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0xb) 2m8.559269785s ago: executing program 34 (id=1026): ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000000)={0x40000, 0xfee01000, 0xa6, 0xf9, 0x5}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000040)={0x9, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4024587b, &(0x7f0000000ac0)={{r2, &(0x7f0000000140)='\x00', 0x404000, &(0x7f0000000180)={@align=0x10001, {0x3, 0x800, 0x7, 0x2}}, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0xcdf}, 0x9, &(0x7f00000009c0)=[{0x3, 0x4, &(0x7f0000000240)='\x00', &(0x7f0000000280)="1b8e4e1803e5d83e26bd130037e837f01cc03242b549eaae", 0x18, 0x30}, {0x2, 0x14000000, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="6dc3407daab4e5df61306cf3157b7062a04a463cae1b2c4c5838f033226bbaad37e162858c03ea8cdd448bfb202062f20f14370508569336b69d34ed41c1b20cc1576a2729f97a9fdd1a5a31d3e3d4c2c2f2128b7dbcbe08b969758dcec08309ffbae01871b14fc45f607b8e1b254d784fa3e6d3fa5dd3608f15845f6b38476f25b174740fa63cdc129b2e98c0210a3cfa4de1379e9990332708e7ce26a90a872831d69e904743f194d6eb118ef140bde5301c595a2b74d3163234f67079890dd987fdde9c3527a90c2556b971608b49c0c4e6858d6acbc224136d3e63e4ba2474411ffb5f5d9827f3625872011170088bba", 0xf2, 0x8}, {0x1, 0x3, &(0x7f0000000400)='\x00', &(0x7f0000000440), 0x0, 0x20}, {0x3, 0x98, &(0x7f0000000480)='\x00', &(0x7f00000004c0)="c5a7881d3efc6b8b2cfb034a281a5d7b3f87ea11aee4cbbe83ebe0bb549d657ac7b3bec8a36ccb1653e9104069a87508e0c3bdc353bd5712d564b4d6b178b42419cbb7e33721c869835505254be27f8605b3734135b84de3f52be2886dd148c604321e71250a57ba9de7ffabe56d0e288b3de30b9e9735db22b4e081768842c69fd1d1ffac0e310f4cef4a7f76c99aa622a9ec50b62701c067ba2627eaf635c0cea8ec09425e841cf75bf49a647e9714332afe4d0481c66eab34c34cd7ab0d3dc79d9059b8daa1168ce061b2a8626ddbf80efaeff7cfcb109d0eb9", 0xdb, 0x20}, {0x2, 0xfd, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="dd78dcea447ad1e433ea93c3919601fd4ae55268e3b2a556cda1dec18356f9f7c377a3c6b74e784c41c234827e93e292e0a37443cc84933556ff42f7cec20ac5afa4aa5cfe9a5efaa48702ad2ce9f2b394a89d2484294a2851d41676fbbef1d335f8033c6f12fb8bee10b25d2d440513089dff1f79434903158ed59882094ecf5ac65528c33e45fc5f990b6d3cd7365284b883e8b9f266ae0588a344699ace435b8fdab91583bede0c73547f31a9b317d3f8b1b017a390dc8c089f778edd09bb2c7b4d9957e3e3882fa264bf16f30c24d967db5f9fb0", 0xd6, 0x44}, {0x3, 0x3, &(0x7f0000000700)='\x00', &(0x7f0000000740)="6b4051eb83cdbbdc9f8f4e77", 0xc, 0x2}, {0x3, 0x1, &(0x7f0000000780)='\x00', &(0x7f00000007c0)="9b334244bf335487781c8e6816a776", 0xf, 0x20}, {0x3, 0x100, &(0x7f0000000800)='\x00', &(0x7f0000000840)="e18b5557cd97a6fab1897e5ad514dfe86f4f405c86aef24ba115e0cb1e8824ae0258caac0d0fd683985b523600a7fb3ef78f3939cdbba9838dfd194ce3ea38c634e4d1e272fdfcd0018d236ac1f4da922e0ca003b3e245b7f90f470c4040ccc8ca63db3a1bf98db499fa3fc7fb817f0713e332bf37feb7ae668a142e69fdfa98bcbe147671bf54e13cd99da158f01281ca87db87d1cd3e7e4a07e40673947b", 0x9f, 0x20}, {0x2, 0x9, &(0x7f0000000900)='#]#],)[', &(0x7f0000000940)="de221aa2b5a448700686be5908a3af7d4768059196df61c540ba1ec2cf821892dcd16aed3028c0de9c5f5345536e6239adcf3360b7c5ebb4cda834bc50a5db23ab", 0x41, 0xa}]}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000b00)={0x63, 0x8001}) syz_io_uring_setup(0x3623, &(0x7f0000000b40)={0x0, 0x967, 0x2, 0x3, 0xb7}, &(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000001c00)={0x7, 0x9, 0x0, "ea63886307138d3958b991d238a5c17bbcda9679d59425d0f35915d4b1ffca84", 0x31435750}) 1m37.414465813s ago: executing program 4 (id=1148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_int(r1, 0x0, 0x15, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@can_newroute={0x1c, 0x18, 0x1, 0x70bd2a, 0x0, {0x1d, 0x1, 0x5}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}}, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f000000c140)={&(0x7f000000bf80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x100000001}, [{0x8000000000000000, 0x4}, {0x9, 0x8000000000000001}, {0xb7, 0x6}, {0xffffffff, 0x3}, {0x2f4, 0x40}, {0x1000, 0x98e}, {0x1, 0x6}, {0x2, 0x2}, {0x7}, {0xc, 0xffffffff80000000}, {0x7ffffffffffc, 0x1c}, {0xffffffffffffffff, 0x4}, {0x9, 0x9}, {0xe8b0, 0x3aac00000000000}, {0x69b7, 0x5f}, {0x0, 0x5}, {0xa, 0x2}, {0x7fff}, {0x7, 0x4}, {0x7ff, 0x3}, {0x1ff, 0x100000001}, {0xa2e, 0xe}, {0x30fe, 0x1}, {0x8, 0x4}, {0xff, 0x2}, {0xfb9, 0x1}, {0x6, 0x8}, {0x1, 0xfffffffffffffffc}, {0x7, 0x5}, {0x2, 0xffffffffffff7fff}, {0x9, 0x8}, {0x59f, 0x5ff5}, {0x7fff, 0x7}, {0x8, 0x3}, {0xc1d, 0x4077d962}, {0xfffffffffffffff8, 0x1089}, {0x5, 0x81}, {0x0, 0x3}, {0x8, 0xb}, {0x5, 0x1}, {0x4a82, 0xb}, {0x200, 0x405}, {0x1c508f61, 0x1a5b5e17}, {0xc, 0x7fffffff}, {0xff, 0x7d71}, {0x8000000000000001}, {0x10, 0x6}, {0x7, 0x8}, {0x5, 0x200}, {0xfffffffffffffffb, 0x6}, {0x7f, 0x6}, {0x80000001, 0x1}, {0x70, 0x9}, {0x1, 0x1}, {0x3, 0x2}, {0x81, 0x5}, {0x5, 0x9}, {0x6, 0x101}, {0x3, 0x7}, {0x9, 0x3}, {0x180, 0x59f}, {0xffff, 0x2}, {0x5}, {0x7, 0x80000000}, {0x10, 0x7fffffff}, {0x9, 0x9}, {0x1, 0x6}, {0x76, 0xfffffffffffffffc}, {0x40, 0x6}, {0x100000000, 0x200}, {0x4, 0x8}, {0x0, 0xf}, {0xd9, 0x63da50e0}, {0x2, 0xa987}, {0xf, 0xf800000000000000}, {0x8, 0xf405}, {0x2, 0x4}, {0x0, 0x80000001}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x4}, {0x100000000005, 0x7}, {0x2, 0x80000000}, {0x400000000000, 0xdb6}, {0x34c0}, {0x94, 0xfffffffffffffffa}, {0x0, 0xead5}, {0x7ff, 0x8001}, {0x5, 0x2}, {0xffffffffffff7fff}, {0xa, 0x1}, {0x0, 0x99}, {0xb9, 0x8001}, {0x7, 0x6de}, {0x3}, {0xfffffffffffffff7, 0x99b1}, {0x6, 0x4}, {0xda, 0x5}, {0x2, 0x8}, {0xd8, 0x4}, {0x8, 0xb6ea}, {0x4, 0xc27}, {0x2, 0x8000000000000000}, {0x3, 0x1}, {0x4, 0x6}, {0x2125, 0xffffffffffffff14}, {0x0, 0x7}, {0x0, 0x80}, {0x2, 0xfffffc0000000000}, {0x4e9a, 0x7}, {0x10001, 0x9}, {0x7fff, 0x200}, {0x5, 0x3}, {0x7, 0x3}, {0x100, 0x3}, {0x8, 0x5}, {0x3, 0x8000000000000000}, {0x4, 0x200}, {0x9, 0x5}, {0x2, 0x6}, {0x9, 0x9}, {0xa, 0x5}, {0x7, 0xd97}, {0xff, 0x5173}, {0x2}, {0x1, 0x81}, {0x6, 0x1ff}, {0x0, 0x6}, {0x9, 0x140000000000}, {0x26, 0x7}, {0x4, 0x6}, {0x0, 0xa}, {0x3}, {0xb, 0x5}, {0x9, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x1e12, 0x5}, {0x5, 0x4}, {0x3, 0x6}, {0x5, 0x3}, {0x4003, 0xffffffff}, {0x1, 0x5}, {0x100000000, 0x3}, {0x90a6, 0x9}, {0x9, 0x107}, {0xf, 0x80000000}, {0x9, 0x101}, {0x9, 0x7fff}, {0x0, 0x1}, {0x6, 0x40}, {0x2, 0x10001}, {0x7, 0x6}, {0x200}, {0x3, 0xffff}, {0x5, 0x793}, {0x6, 0x100000000}, {0x3, 0xda}, {0xb0, 0xffffffff}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x6, 0xa}, {0x5d, 0x8001}, {0x38, 0x5f0}, {0x4, 0x7}, {0xffffffff, 0x5a2}, {0x1, 0x2}, {0x8, 0x1}, {0xe9, 0xfffffffffffff7b6}, {0x6, 0x7fff}, {0x80000000, 0x8000000000000001}, {0xffffffff, 0xfda9}, {0xe5, 0xffffffffffffff41}, {0x24, 0x8}, {0x5, 0x4}, {0x187, 0xa2}, {0xd6, 0x9}, {0x1, 0xa807}, {0x3723, 0x6}, {0xfffffffffffff801, 0xa9}, {}, {0x2, 0xfffffffffffffffa}, {0x10001, 0x8000000000}, {0xfffffffffffff000, 0x3}, {0x3, 0xf9e}, {0x2321, 0x8}, {0x7ff}, {0x10001, 0xffffffff}, {0x2, 0x3}, {0x7ff, 0x9}, {0x4, 0x3e}, {0x3bd14045, 0x8001}, {0xff, 0x7}, {0x8, 0xffff}, {0x575, 0x2}, {0x3, 0x2}, {0x1, 0xe}, {0x5, 0xe}, {0x7, 0x9c}, {0x3ff, 0x8001}, {0x8, 0xffffffffffff0001}, {0x0, 0x7}, {0x3, 0x1}, {0xfffffffffffffffb, 0x4}, {0x7, 0x9}, {0x7, 0x1649}, {0x3ff, 0x7}, {0xf, 0xe6a}, {0x8, 0x1}, {0x10000, 0x6}, {0x7, 0x6}, {0x1, 0xb5}, {0x7, 0xdd1}, {0xffff, 0x66e}, {0x0, 0x4}, {0x3, 0x30580c97}, {0x8001, 0xf6}, {0x6, 0x800}, {0xcaa}, {0x9, 0xb}, {0x0, 0xb12}, {0x7, 0x8}, {0xfaa, 0x6}, {0x8, 0x5}, {0xfffffffffffff801, 0x951}, {0x7, 0x101}, {0x7, 0x910000}, {0x2, 0x5b}, {0xa8, 0x8}, {0x619, 0x1}, {0x8, 0xfffffffffffff775}, {0x3, 0x3}, {0x1ff, 0x8}, {0x2000000000000, 0x80000000}, {0xfff, 0x1}, {0x2, 0x868}, {0x2ef, 0x2}, {0x0, 0x8000000000000000}, {0x3, 0xfffffffffffffffc}, {0x1, 0x1}, {0x7, 0x7}, {0x57, 0x7}, {0x401, 0x6}, {0x5, 0x73}, {0x80000001, 0xc91}, {0x800, 0x7ff}, {0x777b, 0x9}, {0xb3, 0x8}, {0x4, 0x1}, {0x7, 0x6}, {0xd5}, {0x3, 0x401}, {0x1, 0x2}, {0x2, 0xfffffffffffff27a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) (async, rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001d40)=ANY=[@ANYBLOB="581800004400010029bd7000040000000100000004004880401801"], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0xd0, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xbc, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0x8c, 0x1, 0x0, 0x0, {{0x9}, {0xfffffe99}, {0x5f, 0x6, "c8a3f13f92376ee23c4d59f7dc1f12df95e9c2bd1ca383c5ba9e7331246a703b94099c00dd462ecf6193036d1c87e708f07ab0fe2012a480f8c6179a46f1fe2d79778b0ce1b6953e3bbb1b8c41aefa61278679477ac33cfd14032a"}, {0xc, 0x7, {0xfd19f6aaa655c48e, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m36.233934978s ago: executing program 5 (id=1151): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @empty, @dev, @remote}}}}, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) (async) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x2, 0x2, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x9, 0x2}]}]}}, 0x0, 0x36, 0x0, 0x1, 0x9}, 0x28) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) (async) io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x1c) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352', 0x29) (async) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000530a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async) r9 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x19, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000001000000000000000101000018110000", @ANYRES32=r4, @ANYBLOB="0000000019fffff5b702000014000000b7030000000006008504000083000000bf090000000000005509010000000075f90000000000b52b7bab2fb85126cf1fc34100009500000000000000ceca4988bb379f199311af36784bf81e6709a42ca74cd9ff3715b8cb920d893feba1ac61b2bb07", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x42, &(0x7f0000000380)=""/66, 0x40f00, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x9, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000500)=[r7], &(0x7f0000000600)=[{0x3, 0x1, 0xf, 0xa}, {0x1, 0x5, 0xd}, {0x3, 0x3, 0xa, 0x8}, {0x1, 0x4, 0x6, 0xb}, {0x4, 0x5, 0xc, 0xc}, {0x2, 0x4, 0x8, 0xc}, {0x0, 0x1, 0x10, 0x1}, {0x1, 0x4, 0x8, 0x8}, {0x4, 0x2, 0xc}], 0x10, 0x6}, 0x94) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETLINK(r11, 0x400454cd, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 1m35.519224908s ago: executing program 5 (id=1153): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x6, 0xd8f9}) r1 = epoll_create1(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f00000000c0)={0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x2d516fba, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) close(0x3) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x80010, r0, 0x100000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) 1m35.263881309s ago: executing program 4 (id=1154): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f0000006680)=0xfd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semget$private(0x0, 0x4, 0x12) 1m34.211262643s ago: executing program 5 (id=1158): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000cc0)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000cc0)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2c, &(0x7f0000000980)={0x20, 0x9, 0x7}) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x2c, &(0x7f0000000980)={0x20, 0x9, 0x7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) (async) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, 0x0, 0x0, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000000c0)="d9a69e330693fa9d6975c29be3059847fff8d9f4514bcecb737acd0f25e823b33a0dad2178f30958765af090afefd52d22", 0x31}, {&(0x7f00000005c0)="98bbbe8199123b50ee8a84120994eb323318bbd35e6662305723ab410f842d2a1b48838b1add4824d236c3f46d026e13610ba6d64dccdb62f9b1a332c1acb5b52af295dc3410c68e26829588a6fd72bb96328ea3d22481cf3517ce1e7aa9e5897a666d564db6936cfc9cde522b50898ec634c4e02210ec7b7565ea67b0d1f67dc2f43f1d6a65426d7089e3fcfb7730", 0x8f}, {&(0x7f0000000680)="05be6016c6da65810a1e9678b38c98611c2c30d7aa4cfde8f510c24c5a6f00c9df2a35c496b64db388d14d475af0f9f532942617fd39079136ebe25eeafcda3d6db23628014c9ac66e10d811d60eb5899111132373da1cff175b9cf3e602c5c490ea", 0x62}, {&(0x7f0000000780)="1a943b0fecf16c2c5aad282eed0eddba2d4f67226f67f6cc2e332b0737db9ced91133fefe7e5c0b92ed212e78d83b1e9968111c9141cb9450a25b182d2e8ed549ee081489276be98616112060266538c731163adf18e67b9e5060ac32d5591f0bd6e38cf721297258dac2c2e35349edfd0b4f0825cb1407db7ddbddad2771a44b15a3499ac173234c0c647a12fb0a8e4e6e7510a2a75d06c4486ebb5abb3849609d00095286a4770171418d62a8b", 0xae}, {&(0x7f0000000a00)="77c20855bcc0bc3d98dbe553eebcbf40cc60b202e5cf98040f52bb85d01e6f102ef579859bfce5716373a58ba0c593008a2e88ee453cd242e52c650056c357e831d3aeae6f7178a3add7467832c3fc78381b5b261e90a4b58649d01a64ae4f1a0cced0c4b3c1564ab49b5decd3453760cfa5ba5d208453994a7c75a9aacd3f9873a771c88d84f4c0c2cdb05002454ccc9c1959c90df6ad9656f37df54cb6fc7a870435839f24df10546a6a7d5d57e43b63e691d07db2f752a0c48c5d4090e2df47f24ad906feca58a668ff8c9b97cf36f45f3291e1de6b98006048f5b0bf3f17e81e2907af", 0xe5}, {&(0x7f0000000b00)="cb6d1deffb8b0add978a84cbd62a8697361cc7e9bc7a13bc8b65883b26dd020749a2bca84f0da1bdfc46e082fea24a37a4053232098228bcdcabb3de526f5e5f38d332dd95bc9ae476185c2956927aa766a2910ff1e33304896e2b84657598f4a5ebebc6171d9ebc6a3bf2442723fd1004c903774fdd0ffa612d2b1e7378ffa47e667305dffa659dce959f1e0c0db24f40e6308304d1", 0x96}, {&(0x7f0000000bc0)="06919cbb0b802ed6b72fabd2ac1ad95ee1b749d96393a94a54dec374751f69cbb375f5bdf3f9725ae6de8556fad191b597f026f0cb7e8c398257785a188433a28556f8c649e02a7ea7fc67f92e22f51e36d9309ac02c9d6b8df5833d842d5048be744e4a27e9904a823331e2045d1f9831b0a0c547e7a8a8d26f844287ff1c41457b12338f0f8ca2fa4a1d7bac3781f45bd79bd34b6baf3377d8f0472ede55ae7ea392c27c5a27f57fd8a94c4d3383f17657ca10872f24a7da02e3857aa281358142d2fac3d600931b4d449487ec04051e9695ccd58cac0d7b1677979e02167e7390af05e36095ebea1cf2330f1edc5b1330", 0xf2}, {&(0x7f0000001600)="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", 0x1000}], 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="1c0000000189f2bc000051bc3b0001", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3], 0x4c, 0x40000000}, 0x4004000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r7, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)}, 0x2}], 0x1, 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0004ffb2b1e187b3dcc4ba76000000000600a31a7274530200aea27e5926f6dff10000000000000000000096aa0c3faa5d1c3396fa7de5b43c4ee7a7b39f3135023dddfead80d4e319bc3f66e4f7f43ac6ee3b59c724f73f975382679d6374e722e8f1e5d4"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0004ffb2b1e187b3dcc4ba76000000000600a31a7274530200aea27e5926f6dff10000000000000000000096aa0c3faa5d1c3396fa7de5b43c4ee7a7b39f3135023dddfead80d4e319bc3f66e4f7f43ac6ee3b59c724f73f975382679d6374e722e8f1e5d4"], 0x50) 1m32.0669393s ago: executing program 5 (id=1164): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, {0xcfe0, 0x4, 0x40000, 0x4}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) 1m31.976387833s ago: executing program 4 (id=1165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m31.661825561s ago: executing program 5 (id=1167): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x6, 0xd8f9}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000440)="100c06086332fb9c438c73a565bf", 0xe, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) 1m30.784599012s ago: executing program 4 (id=1170): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xb}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xa000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000a40)="d6cd556070a33e1be08c4850df9a88e31b882b78193dbf76e8030e41ae5ef8c4d3f2e410cb4e2f531fca9cdfb4bebea4ba76cd62a4cafaceba1ec5caa853050b65358c3f2ad043f9b5e0580a3e44fd3d8ae5a0777735fd5c5e4e3d57e110d0508509c50607a88796eb67133612f40dfbf9d8db9a79e4e3819ef4f390a18c495c1311829890b21283fba5b945686ac0fc06dc0d62d3edd2d8bfc4157e8b0be6601b3fdb925b6cb8636f0ca9176927bd85d8b375a3d264596f71bb60512f28f5cdad2af53b3bc42bdf5f6eae60e191988a131856b6", 0xd4) write(0xffffffffffffffff, &(0x7f00000002c0)='123456789', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x501, 0x2) write(r3, &(0x7f00000001c0)="9a03311c", 0x38) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='B', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000140), &(0x7f0000000300)={'U-', 0x9}, 0x16, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='none\x00', 0x109141, 0x0) write(r5, &(0x7f00000005c0)='rd_pages=327', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) 1m30.481165809s ago: executing program 5 (id=1172): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r4, 0x11}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)="1f7e", 0x2}], 0x1}, 0x20004011) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) (async) io_uring_setup(0x267, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x21, 0x7, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) (async) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000008000000000003"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r12, 0x0, 0x0}, 0x20) (async) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0x0, 0x346}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x2, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x1367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 1m29.744541722s ago: executing program 4 (id=1173): r0 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000380)={{&(0x7f0000000000)=[{0x6, 0x709a, 0x0, {0x7, 0x5}, 0x6, 0x4be, 0xa82}, {0x4, 0x7fffffffffffffff, 0x1, {0x1, 0x7}, 0xf48, 0x7, 0x8e}, {0xffffffffffffffff, 0x8f, 0xffffffffffffffff, {0x3, 0x7fffffffffffffff}, 0x2, 0x5, 0x9}, {0x9, 0xfffffffffffffff7, 0x2, {0x9, 0x3}, 0x0, 0xd40e, 0x9}, {0x8, 0x8, 0x6, {0x7, 0x5}, 0x3, 0x80, 0x4}, {0xa37, 0x8, 0x1, {0x8, 0x8}, 0x4, 0x5847, 0x3}, {0x81, 0x401, 0x7, {0x401, 0x7}, 0x10001, 0x8, 0x7ff}, {0x4, 0x2, 0x2, {0x9, 0x9}, 0xf, 0xfffffffffffffff7, 0x3}], 0x8, 0x40, 0x200, 0x5}, {&(0x7f0000000200)=[{0x100, 0xfffffffffffffffc}, {0x10000, 0x7}, {0x9, 0x7}, {0x8000000000000000, 0x6}], 0x4, 0x10, 0x4, 0x8}, {&(0x7f0000000240)=[0x2, 0x3, 0x80, 0x8], 0x4, 0x8, 0x607, 0x3}, {&(0x7f0000000280)=[{0x1, 0x3, 0x7b0203ea, 0x0, 0x7}, {0x6a5d, 0x4, 0xc8, 0x2, 0xf3a7}, {0xfffffffffffffffd, 0x9, 0x1, 0xe3, 0x7}, {0x8000000000000000, 0xa, 0xffff, 0x5, 0x400}], 0x4, 0x28, 0xff, 0x101}, {&(0x7f0000000340)=[0x8], 0x1, 0x8, 0x3, 0x9}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) fchown(r0, 0xee01, 0x0) (async, rerun: 64) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1101) (rerun: 64) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000480)=0xd) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x12, 0xff, 0x42, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0xd}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x66}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40090}, 0x4000000) (async) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000740)={0xb6, 0x3, 0xd31, 0x4, 0x1}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000780)) (rerun: 64) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000980)={r2}, 0x8) pwritev(r5, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="9e578edaf0f76effe9dc3d5e83c0cc6dc37117be068ad4ffe25a57325dff778bf74a7b657d2a9dee20c61262f348a03fec24d9c7dd3e4e1e0244bf72a7aa82f6e878e15f12ce9dcf4d5e8b5576485e9e59d863b82130fa", 0x57}, {&(0x7f0000000a40)="94b602371d567e0821441a70137dc2c9150e3c801be17db4a0b04b28eed5fb578d19c9f433a3267613fea7351cb5819b9c48e70eba3bcdc3fa56fcf045b51e514a179430b0a6e7bb47f49cda681b3c3f9f259b8449287f5af3b89b35040a7ad63728606734d49c3adaa8ddb27418efdd8c6e182e78d97dbbeb33", 0x7a}, {&(0x7f0000000ac0)="3ff62c9c73035d375399887ef5fd1045308f9cb07eaabf749e5eb723fefd", 0x1e}, {&(0x7f0000000b00)="5ea5aa578c7c334f8d5abe2e5dd60146842086907d2b213f009b3e873d0cd76e1af455e80d3f94d1b5393f61", 0x2c}, {&(0x7f0000000b40)="958a00bdffe0465e25d40e1c64867fd6a534a84c083313a826e511c30220408b1a00ca5c5e1a6974d004816c84b7eb67c482ea3c0614e09953415b9b6dd49c502cce55fb4a3c036a3e614d638418acc214ca9d93d0a3a3bbe40fb2e82350e45e36e31df7d7931a2ff1e1e6f837c35e07ebb308432518ed7d39d7b9a04a1547bd1225a30a240670993ee8f01583a837150b85308971ceac88a0058d71e6ef8c3b1d55c87d0f44140db41be23c75ccc163ad1d4447551cc8826b14e92f301c65ea36a667175ea72e694f0134f794d00a37ebe5ea09f3", 0xd5}, {&(0x7f0000000c40)="33f1ee66fa7477be8ff1c62536e64aafb66d22f1ecc650e3c7bfc333d39fcf65f387178bd6a2f3543b36a920ba21761fc34f8ad5060374ba0d51a73cff32e7e73bb957575d6d1efd", 0x48}, {&(0x7f0000000cc0)="9947c414a0cc6324d1efd73afb3b40928076836ac11328935c5c7b26eb51a1bf49c0c6e04d5dc45919a1f8a99c328726885849b4", 0x34}, {&(0x7f0000000d00)="ddb3e1afb59be3dbdcff871844e3a809e97ac5619e02617ba2909f8115101869c2450b05602e55493f5db96e768bd7123b71c17b0fc6f78db95a0c5b23c61846093430f3bbb4d8d49b3ec6f1e98d0655a53ebc0fdd613675e3e2460378b8332b2fe1e3abe976e449ba8d2f64d6034f2e0e3f2c21611b0988f07fac8f58d5500b4829936e3925742b85", 0x89}], 0x8, 0xc, 0x7) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000e40), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x68, r6, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x75680863d95dedce}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x4040411) r7 = openat$full(0xffffff9c, &(0x7f0000000f80), 0x80800, 0x0) connect$unix(r7, &(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e) (async) recvfrom$inet_nvme(r7, &(0x7f0000001040)=""/203, 0xcb, 0x40002160, &(0x7f0000001140)=@phonet={0x23, 0x0, 0xc, 0x8}, 0x80) (async, rerun: 32) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r7, 0xc0805841, &(0x7f00000011c0)={0x6, 0x5, 0x352, 0xfffffffa, 0x3}) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001240)={0x0, 0x4, 0x4}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001640)={r8, 0xff000000, 0x0, [0x400, 0x3, 0x4, 0x3ff, 0xd92], [0x5, 0x4, 0x8, 0x10000, 0x1ff, 0x8, 0x4, 0x5, 0x1, 0x1, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4, 0xe, 0xb, 0x2000000000, 0x7, 0x3, 0xb4b, 0x16, 0x3, 0x10, 0x10001, 0x100010000, 0x8001, 0x1, 0x2, 0xab, 0x6, 0x4, 0x3fb8e9d7, 0x7, 0xa026, 0x7, 0x1, 0x101, 0x4, 0x6, 0x1e, 0xe3, 0x3, 0x7f, 0x52d, 0xffff, 0xf, 0x8, 0x0, 0x6, 0x4, 0x2, 0xfff, 0x5, 0x40, 0x6388, 0x5, 0x4, 0x8e, 0x0, 0x5, 0x6, 0x3, 0x9, 0x5, 0xd4, 0xa6, 0x2, 0x41, 0x9, 0x9, 0x8, 0x4, 0xc3b, 0xffffffffffc00000, 0x3, 0x0, 0x75a7, 0x3, 0x7, 0x5, 0x3, 0x1ee0, 0x400, 0x8d3a, 0x3, 0x5, 0x400, 0xfffffffffffff001, 0x50b8, 0xfffffffffffffffb, 0xa, 0x80000000, 0x4, 0x9, 0x88b, 0x8, 0x5, 0x800, 0x5, 0x7, 0x8, 0x2, 0x7f, 0x1f, 0x5, 0x25d3, 0x7fffffffffffffff, 0x4, 0x9, 0x215, 0x2, 0x0, 0x10000, 0xfffffffffffffff7, 0x100000000, 0x0, 0x5, 0x7, 0x2, 0x1, 0x100000000]}) getsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000001a80)=""/4096, &(0x7f0000002a80)=0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002b40)={'syztnl2\x00', &(0x7f0000002ac0)={'ip6_vti0\x00', r4, 0x29, 0x7, 0x9, 0x7f, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x700, 0x20, 0x0, 0x8}}) bind$xdp(r5, &(0x7f0000002b80)={0x2c, 0x7, r9, 0x3e, r5}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002bc0)) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc091}, 0x48001) 1m29.423066232s ago: executing program 4 (id=1174): r0 = socket$inet(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x300}, {0xfffffffd, 0x80003}]}}) 1m15.211592014s ago: executing program 35 (id=1172): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r4, 0x11}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000480)="1f7e", 0x2}], 0x1}, 0x20004011) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) io_setup(0x9, 0x0) io_submit(0x0, 0x0, 0x0) (async) io_uring_setup(0x267, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x21, 0x7, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) (async) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000008000000000003"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r12, 0x0, 0x0}, 0x20) (async) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0x0, 0x346}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf912, 0x2, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x1367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 1m13.922514745s ago: executing program 36 (id=1174): r0 = socket$inet(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x300}, {0xfffffffd, 0x80003}]}}) 37.987881099s ago: executing program 7 (id=1272): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r0, 0x34da2000) syslog(0x2, 0x0, 0x0) syslog(0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004abee34a002471f4000000000000000005000200020000000800030005ac0f00"], 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 37.782428824s ago: executing program 7 (id=1274): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) r2 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x2001, 0x132) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000083b00000008000300", @ANYRES32=r7, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000301"], 0x44}, 0x1, 0x0, 0x0, 0x8084}, 0x0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) 37.353015682s ago: executing program 6 (id=1277): add_key(&(0x7f0000002340)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mknod(0x0, 0x8000, 0xd02) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000012c0)={0x0, 0xb04, 0x2, 0x2, 0x217c}, &(0x7f0000001280)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001340)=0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x5, 0x5) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x42020054, 0x0, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000001540), 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 36.331799728s ago: executing program 6 (id=1280): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xb}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xa000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000a40)="d6cd556070a33e1be08c4850df9a88e31b882b78193dbf76e8030e41ae5ef8c4d3f2e410cb4e2f531fca9cdfb4bebea4ba76cd62a4cafaceba1ec5caa853050b65358c3f2ad043f9b5e0580a3e44fd3d8ae5a0777735fd5c5e4e3d57e110d0508509c50607a88796eb67133612f40dfbf9d8db9a79e4e3819ef4f390a18c495c1311829890b21283fba5b945686ac0fc06dc0d62d3edd2d8bfc4157e8b0be6601b3fdb925b6cb8636f0ca9176927bd85d8b375a3d264596f71bb60512f28f5cdad2af53b3bc42bdf5f6eae60e191988a131856b6", 0xd4) write(0xffffffffffffffff, &(0x7f00000002c0)='123456789', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x501, 0x2) write(r3, &(0x7f00000001c0)="9a03311c", 0x38) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='B', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000140), &(0x7f0000000300)={'U-', 0x9}, 0x16, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x109141, 0x0) write(r5, &(0x7f00000005c0)='rd_pages=327', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) 35.868841192s ago: executing program 8 (id=1284): r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r0, 0x8004af79, &(0x7f0000000040)) (async) write$P9_RCLUNK(r0, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) (async) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f00000000c0)={0xccba, 0xc}) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000100)={0x8, 0xca8, 0x40, 0x5}) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@broadcast, @broadcast, 0x0}, &(0x7f0000000240)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r6, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4000001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xf, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044845}, 0x45) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2a8, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xa58, 0x56}}}}, [@NL80211_ATTR_TESTDATA={0x65, 0x45, "e7e2b82c93d1ab12c28dbc77d88511489a9ad9c0919245c56943ef55eb7a073f538cce1e445505a272fc57673894eb642a77a30158f9daa5fd18822976a4e9ea559f8165f673f86e253f6a6d32d5917732d2c450d5171d0422f8b190ab199ca77d"}, @NL80211_ATTR_TESTDATA={0xdc, 0x45, "f55f561ee84d0c2298289bb0246305cebad79c32bd1bf51ed2664acb4f776754a3ad4e26a144f9a9865d60908d98d474a1f25ffd306e02e3f95c22c26ed924718ca84baadec13ef3f1f4013fe2adca74b017d23ec5016ce287c9d797b72a9af2c39df069dc7bcf0a7e938b8828d095499fd6e679fe294a881e2996c44e20c98277ad3ec1017e261e8759bc8ae02d1eef2f4ed1491f0776fc7f6e6cc5da715dfca7ebb2f5b7381c67380b965d38fd8b1086a7912f3ed0f7e4a523678ad04e9238e6dea7720edb0cf56b19f5f930989c8c9e536e122aa6eaf1"}, @NL80211_ATTR_TESTDATA={0x7c, 0x45, "df2163776ad5f9617aa702b40825a36092a3e619734cf62db1859d40db6353f2fe97778aaea420c353a42110ba29a60deb101e1826bd04aaf4ec03e9a17849381d9e079214aea90f85ba21c25fe980ba83b1d957b4c613afd42605a40f7cde372fe7bd87211661aa8d399cc3b50b579cc73ec428d8898bd5"}, @NL80211_ATTR_TESTDATA={0x54, 0x45, "39ad543c8bf9fecce1b166253a3fe5d22c533620aa7f969dd083b6cc61b4b221143c3b780d39d4583326cc62a3bf53e54265a71c17eec099416aa1f3f78ad817125902d1b110cade4d7f4165c5d46803"}, @NL80211_ATTR_TESTDATA={0x35, 0x45, "3dc72673bfdb9f130d735317d07b01385f5540944bf5c3b5816a8d77fc91a1e56e0d102a35771e0b17fc695907563522e5"}, @NL80211_ATTR_TESTDATA={0x34, 0x45, "1c8d8137cc9001cd4ef436074087db8fe46c34b9740ba56674d6ea247c3efa2037199cf5e538c400bb7903909bca93f7"}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040050) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r9, 0x89e2, &(0x7f0000000b00)) (async) r10 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x0, 0x430040) ppoll(&(0x7f0000000b80)=[{r7, 0x3}, {r4, 0x1022}, {0xffffffffffffffff, 0x4100}, {r4, 0x8084}, {r10, 0x18}], 0x5, &(0x7f0000000bc0), &(0x7f0000000c00)={[0xfffffff9]}, 0x8) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000c40)=0x200080, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r0, {r7}}, './file0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000d40)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000001900)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000000d80)={0xb24, r5, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x32e, 0x6, 0xe6}, {0x9, 0x6, 0x0, 0x3}, {0x2, 0x1, 0x6, 0xfffffffd}, {0x1, 0xf, 0x3, 0xd}, {0xd0d, 0x2, 0xff, 0x8}, {0xfff4, 0x1, 0x5, 0x3}, {0x6, 0xf2, 0x0, 0x2}]}}}]}}, {{0x8, 0x1, r3}, {0xe4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x5, 0x6, 0x4, 0x8000}, {0x3, 0x2, 0x51, 0x5}, {0x4, 0x8, 0x4, 0x5}, {0x2, 0x1, 0x8, 0xf}, {0x4, 0xb, 0x80, 0x2}, {0x9, 0x1, 0x0, 0x5}]}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xffff, 0x1a, 0xa0, 0x45d8}, {0x4, 0x4, 0x60, 0xddfa}, {0x50be, 0x8, 0x3, 0x4}, {0x85dd, 0xf3, 0x9}, {0x8, 0x8, 0x8, 0x5}, {0x401, 0x6, 0x2, 0xfffffffc}, {0x8, 0x4, 0x7, 0x754}, {0x1, 0x3, 0x40, 0x677349fc}, {0xa0, 0xb, 0xa, 0x174d}]}}}]}}, {{0x8, 0x1, r14}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6a04}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8c}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd629}}}]}}, {{0x8, 0x1, r3}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x1b8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0xf, 0x84, 0x3}, {0xfeff, 0x8, 0xd, 0x8}, {0x0, 0xa, 0x4, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x28c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0xa9, 0x6, 0x101}, {0x7, 0x0, 0xeb, 0x3}, {0x0, 0x9, 0x10, 0x2}, {0xf256, 0x7, 0x3, 0x6}, {0xffff, 0x9, 0xb8, 0x10}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x81, 0x6, 0x6, 0x6}, {0x2, 0x7, 0x1, 0x59}, {0xd, 0x8, 0x7, 0xf}, {0x0, 0x9, 0x46, 0x2}, {0xcc4, 0x0, 0x2, 0x8}, {0x3, 0x40, 0x6, 0x7}, {0x2e1b, 0x6, 0xc, 0xa}, {0x8, 0xd6, 0x9, 0x3}]}}}]}}, {{0x8, 0x1, r3}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r2}}}]}}]}, 0xb24}, 0x1, 0x0, 0x0, 0x20044045}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r12, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, 0x140b, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004080) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 35.573496888s ago: executing program 8 (id=1285): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0xa25, 0x9, 0x2}, 0x7}, 0x20, 0x1, 0x0) (async) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x5400032e) 35.11140389s ago: executing program 6 (id=1286): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0xfffffffe}, 0x4) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4b, 0x0, 0x4) r3 = socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x2, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) (async) dup3(r4, r3, 0x0) 34.831528045s ago: executing program 0 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811ffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.713417588s ago: executing program 0 (id=1288): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x3b) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000010, 0x0, 0xa5e8}]}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x20000, 0x0, 0x0) 34.545702183s ago: executing program 8 (id=1289): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0xefb8, 0x0, 0x2, 0x3, 0x4}) r1 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0xffffffff, 0x40000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000080)={0x3, 0x1, 0x1, 0x13}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=""/78, 0x2000, 0x800, 0x10001, 0x1}, 0x1c) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bind$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x3c7) listen(r5, 0xe0d7) r6 = timerfd_create(0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010002000000fcdbdf25310000000c000180080001"], 0x20}}, 0x4000000) r9 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r9, 0x29, 0x5, 0x0, 0x0) (async) r10 = timerfd_create(0x0, 0x0) (async) ppoll(&(0x7f0000000700)=[{r6, 0x3041}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002160, 0x0) (rerun: 32) openat$fault_inject(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/failslab/probability\x00', 0x1, 0x0) (async) close(0x3) (async) timerfd_settime(r10, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) (async) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r11 = openat$ttyS3(0xffffff9c, &(0x7f0000000100), 0x109001, 0x0) syz_open_pts(r11, 0x48a841) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0xffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x2, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async, rerun: 64) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x325, 0x80, 0x8, 0x8, 0x10, @local}, 0x10) (async) connect$unix(r3, &(0x7f0000004d00)=@abs={0x0, 0x0, 0x4e23}, 0x6d) 34.483304351s ago: executing program 0 (id=1290): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket(0x10, 0x80002, 0x10001) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_MODE={{0x5}, 0x5}}}, 0x7) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000002", @ANYRES16=0x0, @ANYBLOB="010000000000fddbdf251900000008030000", @ANYRES32=r5, @ANYBLOB="ac287d3bbb09f61900e1822db085cf062071650501a897062ab91b669d80e75ced9a0513f7d620936f347bced77ea0f0b01c30b9439961a43ef36787517be3d4ff5009830792b083c8b25a801d5383656753b3c7cb44b394c83874fd8d5c139b7fc41326343b25eea87e178f82e3d4aa6ff9ff267da51c8bee8b1b06243670846210684a"], 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000005b89731952ac76be63f6cc512c491fb13e6b4015557ad58c4db164b4167c2433d15fc862697cd643d5b73b391997e188aafce67bde72dce40cb12c2386ca34342e72af89fc3cc8e865675e67395fc64dd6683a670f208e93653132f53652d8693739e9", @ANYRES16=r6, @ANYBLOB="01002cad7000000000000100000028000180060001000a00000014000400fe8800000000000000000000000001010800060003000000"], 0x3c}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) recvmmsg$unix(r7, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x25}}], 0x1, 0x34000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 34.399408507s ago: executing program 7 (id=1291): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x9, 0x3, 0xf, 0x3}]}) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 34.01068304s ago: executing program 6 (id=1292): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r0, 0x34da2000) syslog(0x2, 0x0, 0x0) syslog(0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004abee34a002471f4000000000000000005000200020000000800030005ac0f00"], 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 33.778844063s ago: executing program 6 (id=1293): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0x1, 0x20000000, 0x9, 0xb, 0x8, 0x6}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="b0010000", @ANYRES32=r3, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10200, 0x0, 0x26000, 0x2000, &(0x7f0000591000/0x2000)=nil}) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x6}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="3c04000000000000c20400000002040104000100050201000000050200070000"], 0x30) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000500)={0x3e57, r1, 'id0\x00'}) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000240)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000011}}], 0x1, 0x4080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 33.75844886s ago: executing program 0 (id=1294): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="b7020000020000027b2ac0ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000002850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x40401) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 33.368679043s ago: executing program 8 (id=1295): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xb}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x24}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xa000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000a40)="d6cd556070a33e1be08c4850df9a88e31b882b78193dbf76e8030e41ae5ef8c4d3f2e410cb4e2f531fca9cdfb4bebea4ba76cd62a4cafaceba1ec5caa853050b65358c3f2ad043f9b5e0580a3e44fd3d8ae5a0777735fd5c5e4e3d57e110d0508509c50607a88796eb67133612f40dfbf9d8db9a79e4e3819ef4f390a18c495c1311829890b21283fba5b945686ac0fc06dc0d62d3edd2d8bfc4157e8b0be6601b3fdb925b6cb8636f0ca9176927bd85d8b375a3d264596f71bb60512f28f5cdad2af53b3bc42bdf5f6eae60e191988a131856b6", 0xd4) write(0xffffffffffffffff, &(0x7f00000002c0)='123456789', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core/rd_mcp_0/ramdisk_0/control\x00', 0x501, 0x2) write(r3, &(0x7f00000001c0)="9a03311c", 0x38) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='B', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000140), &(0x7f0000000300)={'U-', 0x9}, 0x16, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk_0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x109141, 0x0) write(r5, &(0x7f00000005c0)='rd_pages=327', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000640)='1', 0x1) 33.29007597s ago: executing program 0 (id=1296): ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000000)) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "db0786b48e39e214", "131ee8894de3fedce313f6b2e799a16f", "97d844d7", "82ad57cd63b434c7"}, 0x28) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000440)={0x5, 0x0, [{0x4, 0x90, 0x2, 0x0, 0x3}, {0x80000006, 0x80000000, 0x8405, 0xcb, 0x10000}, {0xa, 0x5280000, 0x3f, 0x9, 0x851}, {0x40000001, 0x2, 0x7fd, 0x80000000, 0x7}, {0x80000000, 0x1, 0x3e3, 0x6, 0x7c}]}) (async, rerun: 64) r2 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x1000, 0x202) (rerun: 64) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000500)={0x6, 0x14000, 0x8, 0xc, 0xa3}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x7, 0x40}, 0x88) (async, rerun: 64) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000640)={"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"}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000a40)={0x9c5f, 0x2}) (async, rerun: 32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x7fffffff, @rand_addr=' \x01\x00', 0x7}}}, 0x3a) (async, rerun: 32) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000ac0)='veth0_to_hsr\x00') setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000b00)={0x0, 0x2710}, 0x8) (async) r4 = openat$autofs(0xffffff9c, &(0x7f0000000b40), 0x24000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000bc0), &(0x7f0000000c40)=0x60) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000c80)) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000cc0)=0x8001, 0x4) (async) r6 = fcntl$getown(r1, 0x9) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000d00)=r6) r7 = openat$autofs(0xffffff9c, &(0x7f0000000d40), 0x290800, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r8 = syz_open_dev$audion(&(0x7f0000000dc0), 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) r10 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000e40)={r10}) (async, rerun: 64) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r9, 0xc0805841, &(0x7f0000000e80)={0x3, 0xc500, 0x6, 0x3ff, 0x36}) (async, rerun: 64) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bind$inet6(r9, &(0x7f0000001140)={0xa, 0x4e24, 0x8, @remote, 0x1}, 0x1c) 33.220073857s ago: executing program 7 (id=1297): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r3, 0x25, 0x2, @void}, 0x10) r4 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@newsa={0x2c8, 0x10, 0x633, 0x70bd2c, 0xfffffffe, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x3, 0x0, 0x23}, [@algo_crypt={0xcc, 0x2, {{'ecb(cipher_null)\x00'}, 0x420, "7de9dd299962ab02bb80b1463153f931516315fff1b3a329676cc9e343d6beeb6e6fdb520167cbfb76d224d83c79e3c07279a7f8688d733d17e30f4215770830a24fe8fd5a959184216a120c4e76155c3e325245df6fb132bfa1db1fea3f3a38e49d5393128c47d5f21e15f92804de8913591a3bb8cedaeef3c52197b1fd349c87c7bd24"}}, @tfcpad={0x8, 0x16, 0x10000}, @proto={0x5, 0x19, 0x32}, @sa={0xe0, 0x6, {{@in=@local, @in=@loopback, 0x4e20, 0x40, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x3c, r3, r4}, {@in=@remote, 0x4d5, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x280000000000, 0x2, 0x4, 0x81, 0x9, 0x7, 0x400, 0xb}, {0x100000000, 0x1, 0x1, 0x401}, {0x1, 0x8, 0x400}, 0x70bd28, 0x34ff, 0xa, 0x5, 0x0, 0x8}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd25, 0x6}}, @extra_flags={0x8, 0x18, 0x400}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) openat$tun(0xffffff9c, &(0x7f0000000040), 0x201, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000020900001d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="010000000300000000"], 0x50) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x6, 0x50, r6, 0x56aab000) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r6, 0x0) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r5, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a766118ff5aa329fa94da4900", 0xfdef) 32.511237273s ago: executing program 7 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x80800, 0x0, {0x2, 0x20, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40010) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 32.164012203s ago: executing program 6 (id=1299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xd07, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20945, 0x6c101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x10}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@multicast1]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x6}, 0x0) (async) r1 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3b, 0x2, 0x1, 0x80213}) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup2(r1, r3) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000240)={{0xa000, 0x60000, 0xb, 0x0, 0x9, 0x4, 0x9f, 0x6, 0xae, 0x5, 0x4, 0x9}, {0x41000, 0xc000, 0x0, 0x9, 0x1, 0x8, 0x3, 0xc, 0x2, 0x0, 0x1, 0x8}, {0xe000, 0x9000, 0xc, 0x4, 0x6, 0x0, 0x7, 0x5, 0x36, 0xf8, 0x97, 0x6}, {0x10002, 0x8080000, 0x0, 0x6, 0x0, 0x9, 0x6c, 0x7f, 0x4, 0x5, 0x5, 0x4}, {0xa000, 0x60000, 0x13, 0x18, 0x9, 0x6, 0xf, 0x5, 0x10, 0x0, 0xaf, 0xf}, {0xffff1000, 0x2000, 0xc, 0x6, 0x7f, 0xa4, 0x7, 0xf4, 0x2, 0x81, 0x2, 0x4}, {0x70000, 0xddcd8000, 0xe, 0x7, 0x81, 0xf, 0x6, 0xfb, 0x0, 0x81, 0x3, 0x2}, {0x10000, 0xe000, 0x10, 0x1, 0xfd, 0xe, 0x9, 0x70, 0x6, 0xd, 0x2, 0x7}, {0x3000, 0x3}, {0x70000, 0x6}, 0x40010006, 0x0, 0xeeee0000, 0x40000, 0xd, 0x5000, 0x2, [0x9, 0x81, 0x0, 0x5]}) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x26) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f0000000380)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, @in6={0xa, 0x4e21, 0x100, @mcast2, 0x200}, @in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000004c0)={r5, @in6={{0xa, 0x4e24, 0x1, @loopback, 0xdd}}, [0x0, 0x9, 0x81, 0x401, 0x1000, 0x1ff, 0x2, 0x5, 0x2, 0x4, 0x3, 0x4, 0x4, 0x80000001, 0x10001]}, &(0x7f00000005c0)=0xfc) 31.673077325s ago: executing program 37 (id=1299): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xd07, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20945, 0x6c101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x10}, @IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@multicast1]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x6}, 0x0) (async) r1 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3b, 0x2, 0x1, 0x80213}) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup2(r1, r3) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000240)={{0xa000, 0x60000, 0xb, 0x0, 0x9, 0x4, 0x9f, 0x6, 0xae, 0x5, 0x4, 0x9}, {0x41000, 0xc000, 0x0, 0x9, 0x1, 0x8, 0x3, 0xc, 0x2, 0x0, 0x1, 0x8}, {0xe000, 0x9000, 0xc, 0x4, 0x6, 0x0, 0x7, 0x5, 0x36, 0xf8, 0x97, 0x6}, {0x10002, 0x8080000, 0x0, 0x6, 0x0, 0x9, 0x6c, 0x7f, 0x4, 0x5, 0x5, 0x4}, {0xa000, 0x60000, 0x13, 0x18, 0x9, 0x6, 0xf, 0x5, 0x10, 0x0, 0xaf, 0xf}, {0xffff1000, 0x2000, 0xc, 0x6, 0x7f, 0xa4, 0x7, 0xf4, 0x2, 0x81, 0x2, 0x4}, {0x70000, 0xddcd8000, 0xe, 0x7, 0x81, 0xf, 0x6, 0xfb, 0x0, 0x81, 0x3, 0x2}, {0x10000, 0xe000, 0x10, 0x1, 0xfd, 0xe, 0x9, 0x70, 0x6, 0xd, 0x2, 0x7}, {0x3000, 0x3}, {0x70000, 0x6}, 0x40010006, 0x0, 0xeeee0000, 0x40000, 0xd, 0x5000, 0x2, [0x9, 0x81, 0x0, 0x5]}) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x26) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x58, &(0x7f0000000380)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, @in6={0xa, 0x4e21, 0x100, @mcast2, 0x200}, @in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000004c0)={r5, @in6={{0xa, 0x4e24, 0x1, @loopback, 0xdd}}, [0x0, 0x9, 0x81, 0x401, 0x1000, 0x1ff, 0x2, 0x5, 0x2, 0x4, 0x3, 0x4, 0x4, 0x80000001, 0x10001]}, &(0x7f00000005c0)=0xfc) 31.618650109s ago: executing program 8 (id=1300): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f00000016c0)={{r1, &(0x7f00000000c0)='GPL\x00', 0x42003, &(0x7f0000000100)={@_ha_fsid={[0x7, 0x5]}, {0x4, 0x5, 0x9}}, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x3}, {[0xc, 0xec, 0x7, 0x9]}, 0x5, 0x1000, &(0x7f00000006c0)=""/4096}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30.678841405s ago: executing program 0 (id=1301): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x47, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = syz_open_dev$cec(0x0, 0x0, 0x103000) r2 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26044028}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x2, 0x2, 0x379, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x316, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x2, 0x2, 0x379, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x316, 0x7}}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x4c, 0x66, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff1}, {0xd, 0xffe0}, {0x4, 0x6}}, [{0x8, 0xb, 0xfffffc00}, {0x8, 0xb, 0x403}, {0x8, 0xb, 0xce31fe1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4000044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) (async) syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00db8a1d05570f88f02d9b6d97028821773d4f8d2a0000da80e57f0500418ffe7a5340bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00f54e000000000000007d990000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.460072365s ago: executing program 38 (id=1301): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x47, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000140)=':', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = syz_open_dev$cec(0x0, 0x0, 0x103000) r2 = epoll_create1(0x80000) syz_clone3(&(0x7f0000000540)={0x901400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x26044028}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x2, 0x2, 0x379, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x316, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x2, 0x2, 0x379, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x316, 0x7}}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x7fff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x4c, 0x66, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff1}, {0xd, 0xffe0}, {0x4, 0x6}}, [{0x8, 0xb, 0xfffffc00}, {0x8, 0xb, 0x403}, {0x8, 0xb, 0xce31fe1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4000044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) (async) syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00db8a1d05570f88f02d9b6d97028821773d4f8d2a0000da80e57f0500418ffe7a5340bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00f54e000000000000007d990000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.390784175s ago: executing program 7 (id=1302): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r0, 0x34da2000) syslog(0x2, 0x0, 0x0) syslog(0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004abee34a002471f4000000000000000005000200020000000800030005ac0f00"], 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 30.39049014s ago: executing program 39 (id=1302): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r0, 0x34da2000) syslog(0x2, 0x0, 0x0) syslog(0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004abee34a002471f4000000000000000005000200020000000800030005ac0f00"], 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 30.251628373s ago: executing program 8 (id=1303): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r3, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r1, &(0x7f0000000000)='3', 0x4e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r3, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) (async) bpf$PROG_LOAD(0x2, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) (async) 29.949961018s ago: executing program 40 (id=1303): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r3, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r1, &(0x7f0000000000)='3', 0x4e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, r3, 0x711, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) (async) bpf$PROG_LOAD(0x2, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) (async) 13.357639295s ago: executing program 9 (id=1307): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x57da, &(0x7f00000003c0)={0x0, 0x3e49, 0x40, 0x2000002, 0x17}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r4, r2}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 13.074600327s ago: executing program 2 (id=1304): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000e060263f00000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000030000000060a010400000000000000000200000a0900010073797a30000000000900020073797a300000000004020480140000001100010008000000000000000200000a"], 0xb8}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000e060263f00000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000030000000060a010400000000000000000200000a0900010073797a30000000000900020073797a300000000004020480140000001100010008000000000000000200000a"], 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) gettid() (async) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) readv(r0, 0x0, 0x0) (async) readv(r0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) (async) connect$unix(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003070103ff2505a8a44000010203010902240001010810010904bbe112a7000104090501024010050a18090582020002060408"], 0x0) ioctl$EVIOCRMFF(r3, 0x5509, 0x0) 12.370150213s ago: executing program 9 (id=1305): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="b7020000020000027b2ac0ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000002850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x40401) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 11.872270498s ago: executing program 2 (id=1306): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x4000010000, 0x18, 0x3}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f00006a8000/0x1000)=nil) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x2, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r7, r8, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r9 = getpgrp(r2) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x2, 0xee01, r4, 0xee00, r8, 0x98, 0x1}, 0x76b7, 0x8000, 0x9, 0x80, r9, r2, 0xb3}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x6, 0x3cb1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r11, &(0x7f0000000000)='7', 0x1) fcntl$lock(r0, 0x26, 0x0) 11.193830752s ago: executing program 9 (id=1308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40789440, &(0x7f00000014c0)={&(0x7f0000001480)=[{&(0x7f0000001400)="6467bb31b789afe34e7c0ca545a7e73c282fc7f3fe6f45cfa97728473a17cc07efc11442aed8ea790429c6de5e4797aef3cd1e31b675ef0da2b2305ec339220bd6912060790c690b116a3a37fd18990bebd1", 0x52}], 0x1, 0x100000001, 0x0, 0x4000000000000000, 0x4, 0x3, 0x4, 0xc093}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = syz_io_uring_setup(0x2a71, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x10408c8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0xffffff8a, @private1, 0x10000}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xbaf3, 0x4b, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000020000000c000000180001801400020076657468305f746f5f626f6e64000000140003800400050004000400080002"], 0x40}}, 0x40) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff53761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fdff01000000000000549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3d3c6f0d17be3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa", 0xb6}, {&(0x7f0000000140)="de21cf0a0000000000000009f45357ff6cc0848e8bdfe13b6da3724e6fb7ef168cc77b41daf55a", 0x27}, {&(0x7f0000000540)="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", 0xdc0}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 10.943074084s ago: executing program 41 (id=1308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40789440, &(0x7f00000014c0)={&(0x7f0000001480)=[{&(0x7f0000001400)="6467bb31b789afe34e7c0ca545a7e73c282fc7f3fe6f45cfa97728473a17cc07efc11442aed8ea790429c6de5e4797aef3cd1e31b675ef0da2b2305ec339220bd6912060790c690b116a3a37fd18990bebd1", 0x52}], 0x1, 0x100000001, 0x0, 0x4000000000000000, 0x4, 0x3, 0x4, 0xc093}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = syz_io_uring_setup(0x2a71, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x10408c8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0xffffff8a, @private1, 0x10000}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xbaf3, 0x4b, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000020000000c000000180001801400020076657468305f746f5f626f6e64000000140003800400050004000400080002"], 0x40}}, 0x40) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001340)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff53761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fdff01000000000000549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3d3c6f0d17be3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa", 0xb6}, {&(0x7f0000000140)="de21cf0a0000000000000009f45357ff6cc0848e8bdfe13b6da3724e6fb7ef168cc77b41daf55a", 0x27}, {&(0x7f0000000540)="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", 0xdc0}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 10.893701821s ago: executing program 2 (id=1312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$char_usb(r2, 0x0, 0xb3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r7, 0x5, 0x70bd29, 0x0, {0x22}}, 0x14}}, 0x4000000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4430, 0x80000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 10.477815025s ago: executing program 42 (id=1312): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$char_usb(r2, 0x0, 0xb3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r7, 0x5, 0x70bd29, 0x0, {0x22}}, 0x14}}, 0x4000000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4430, 0x80000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) 0s ago: executing program 1 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x920, 0x12) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000980)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$cgroup_pressure(r0, &(0x7f00000000c0)={'full', 0x20, 0x8}, 0x2f) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') kernel console output (not intermixed with test programs): point 0x5 has invalid maxpacket 0 [ 190.644881][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.644900][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.644932][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.857537][ T9] usb 6-1: usb_control_msg returned -32 [ 190.857577][ T9] usbtmc 6-1:16.0: can't read capabilities [ 191.227371][ T9867] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 191.417059][ T44] audit: type=1804 audit(1789312874.677:303): pid=9867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.998" name="/newroot/259/file0" dev="tmpfs" ino=1457 res=1 errno=0 [ 191.435523][ T9877] FAULT_INJECTION: forcing a failure. [ 191.435523][ T9877] name failslab, interval 1, probability 0, space 0, times 0 [ 191.435554][ T9877] CPU: 3 UID: 0 PID: 9877 Comm: syz.2.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.435579][ T9877] Tainted: [L]=SOFTLOCKUP [ 191.435586][ T9877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.435597][ T9877] Call Trace: [ 191.435603][ T9877] [ 191.435611][ T9877] dump_stack_lvl+0x100/0x190 [ 191.435645][ T9877] should_fail_ex.cold+0x5/0xa [ 191.435684][ T9877] should_failslab+0xc2/0x120 [ 191.435708][ T9877] kmem_cache_alloc_noprof+0x92/0x6a0 [ 191.435729][ T9877] ? do_getname+0x35/0x390 [ 191.435759][ T9877] do_getname+0x35/0x390 [ 191.435785][ T9877] __ia32_sys_symlinkat+0x8a/0xe0 [ 191.435809][ T9877] __do_fast_syscall_32+0x13a/0x8b0 [ 191.435835][ T9877] ? lockdep_hardirqs_on+0x7d/0x110 [ 191.435859][ T9877] do_fast_syscall_32+0x32/0x70 [ 191.435898][ T9877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.435920][ T9877] RIP: 0023:0xf7f28fec [ 191.435939][ T9877] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 191.435947][ T9877] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 191.435965][ T9877] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 00000000ffffff9c [ 191.435977][ T9877] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.435988][ T9877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.435999][ T9877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 191.436009][ T9877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.436034][ T9877] [ 191.485047][ T9879] binder: 9878:9879 ioctl c0306201 0 returned -14 [ 191.537270][ T9881] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 191.538356][ T9882] binder: 9878:9882 ioctl c0306201 0 returned -14 [ 191.569127][ T25] usb 6-1: USB disconnect, device number 15 [ 192.239445][ T9897] FAULT_INJECTION: forcing a failure. [ 192.239445][ T9897] name fail_futex, interval 1, probability 0, space 0, times 0 [ 192.239480][ T9897] CPU: 2 UID: 0 PID: 9897 Comm: syz.2.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.239506][ T9897] Tainted: [L]=SOFTLOCKUP [ 192.239513][ T9897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.239524][ T9897] Call Trace: [ 192.239531][ T9897] [ 192.239539][ T9897] dump_stack_lvl+0x100/0x190 [ 192.239568][ T9897] should_fail_ex.cold+0x5/0xa [ 192.239592][ T9897] get_futex_key+0x1d0/0x14f0 [ 192.239624][ T9897] ? __pfx_get_futex_key+0x10/0x10 [ 192.239650][ T9897] ? trace_ipi_send_cpu.constprop.0+0x73/0x220 [ 192.239678][ T9897] ? __smp_call_single_queue+0x17e/0x450 [ 192.239706][ T9897] ? __pfx___smp_call_single_queue+0x10/0x10 [ 192.239735][ T9897] futex_wait_setup+0x91/0x540 [ 192.239763][ T9897] __futex_wait+0x19f/0x300 [ 192.239786][ T9897] ? __pfx___futex_wait+0x10/0x10 [ 192.239806][ T9897] ? __pfx_try_to_wake_up+0x10/0x10 [ 192.239832][ T9897] ? futex_hash+0x311/0x400 [ 192.239862][ T9897] ? __pfx_futex_wake_mark+0x10/0x10 [ 192.239888][ T9897] ? find_held_lock+0x2b/0x80 [ 192.239907][ T9897] ? futex_wake+0x4ea/0x5e0 [ 192.239934][ T9897] futex_wait+0xe6/0x370 [ 192.239956][ T9897] ? __pfx_futex_wait+0x10/0x10 [ 192.239990][ T9897] do_futex+0x265/0x440 [ 192.240010][ T9897] ? __pfx_do_futex+0x10/0x10 [ 192.240035][ T9897] __ia32_sys_futex_time32+0x2f4/0x470 [ 192.240060][ T9897] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 192.240079][ T9897] ? __task_pid_nr_ns+0x1ca/0x510 [ 192.240098][ T9897] ? __task_pid_nr_ns+0x1ca/0x510 [ 192.240124][ T9897] __do_fast_syscall_32+0x13a/0x8b0 [ 192.240156][ T9897] do_fast_syscall_32+0x32/0x70 [ 192.240185][ T9897] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.240208][ T9897] RIP: 0023:0xf7f28fec [ 192.240229][ T9897] Code: Unable to access opcode bytes at 0xf7f28fc2. [ 192.240238][ T9897] RSP: 002b:00000000f53e65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 192.240256][ T9897] RAX: ffffffffffffffda RBX: 00000000f73e4f88 RCX: 0000000000000080 [ 192.240274][ T9897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e4f8c [ 192.240285][ T9897] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 192.240296][ T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.240307][ T9897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.240333][ T9897] [ 192.637132][ T9901] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.656212][ T9901] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.760079][ T9901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.760159][ T9901] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.786481][ T9901] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 192.788785][ T9901] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.801704][ T9901] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 192.935186][ T9908] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 192.986255][ T9907] loop9: detected capacity change from 0 to 7 [ 192.986715][ T9907] buffer_io_error: 10 callbacks suppressed [ 192.986728][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992620][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992651][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992674][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992711][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992744][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992766][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992778][ T9907] ldm_validate_partition_table(): Disk read failed. [ 192.992799][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992822][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992843][ T9907] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.992867][ T9907] Dev loop9: unable to read RDB block 0 [ 192.992913][ T9907] loop9: unable to read partition table [ 192.995010][ T9907] loop9: partition table beyond EOD, truncated [ 192.995038][ T9907] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 192.995038][ T9907] ) failed (rc=-5) [ 193.142147][ T9920] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'. [ 193.533253][ T8840] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 193.683769][ T8840] usb 7-1: Using ep0 maxpacket: 8 [ 193.684356][ T8840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.685304][ T8840] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 193.685327][ T8840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.685338][ T8840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.685350][ T8840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.685361][ T8840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.685381][ T8840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.704952][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.704982][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.897709][ T8840] usb 7-1: usb_control_msg returned -32 [ 193.897744][ T8840] usbtmc 7-1:16.0: can't read capabilities [ 194.121251][ T9938] binder: 9937:9938 ioctl 4018620d 0 returned -22 [ 194.256461][ T9941] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 194.367864][ T44] audit: type=1804 audit(1789312877.627:304): pid=9928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1019" name="/newroot/243/file0" dev="tmpfs" ino=1371 res=1 errno=0 [ 194.489478][ T9] usb 7-1: USB disconnect, device number 18 [ 194.663609][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 194.765145][ T9946] netlink: 'syz.4.1024': attribute type 1 has an invalid length. [ 194.823359][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.823386][ T5748] Bluetooth: hci3: command 0x0406 tx timeout [ 194.952693][ T9938] binder: 9937:9938 ioctl c0306201 80000180 returned -14 [ 195.066657][ T9953] xt_policy: output policy not valid in PREROUTING and INPUT [ 195.126046][ T9954] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 195.126073][ T9954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.127327][ T9954] vhci_hcd vhci_hcd.0: Device attached [ 195.204162][ T9958] jffs2: notice: (9958) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 195.363170][ T8840] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 195.886049][ T9955] vhci_hcd: connection reset by peer [ 195.887952][ T8254] vhci_hcd vhci_hcd.0: stop threads [ 195.887977][ T8254] vhci_hcd vhci_hcd.0: release socket [ 195.888017][ T8254] vhci_hcd vhci_hcd.0: disconnect device [ 195.943239][ T5819] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 196.103204][ T5819] usb 9-1: Using ep0 maxpacket: 8 [ 196.104005][ T5819] usb 9-1: New USB device found, idVendor=0499, idProduct=1041, bcdDevice= 0.40 [ 196.105099][ T5819] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 196.107119][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.107140][ T5819] usb 9-1: Product: syz [ 196.107148][ T5819] usb 9-1: Manufacturer: Ñ‹ [ 196.107155][ T5819] usb 9-1: SerialNumber: syz [ 196.329838][ T5819] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.330339][ T5819] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 196.336631][ T5819] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.336812][ T5819] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 196.340578][ T5819] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 196.366739][ T5819] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 196.369928][ T5819] usb 9-1: USB disconnect, device number 5 [ 196.382574][ T8329] udevd[8329]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.743278][ T5738] Bluetooth: hci1: command 0x0406 tx timeout [ 196.873287][ T5819] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 196.904948][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.913146][ T5738] Bluetooth: hci3: command 0x0406 tx timeout [ 197.013211][ T5819] usb 5-1: device descriptor read/64, error -71 [ 197.273127][ T5819] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.413141][ T5819] usb 5-1: device descriptor read/64, error -71 [ 197.533326][ T5819] usb usb5-port1: attempt power cycle [ 197.893335][ T5819] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 197.923940][ T5819] usb 5-1: device descriptor read/8, error -71 [ 198.173245][ T5819] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 198.193857][ T5819] usb 5-1: device descriptor read/8, error -71 [ 198.303532][ T5819] usb usb5-port1: unable to enumerate USB device [ 198.987058][ T5738] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.513325][ T8840] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 200.528453][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.534916][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.627994][ T6140] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 201.793231][ T6140] usb 5-1: Using ep0 maxpacket: 8 [ 201.794132][ T6140] usb 5-1: New USB device found, idVendor=0499, idProduct=1041, bcdDevice= 0.40 [ 201.795495][ T6140] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 201.797567][ T6140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.797593][ T6140] usb 5-1: Product: syz [ 201.797607][ T6140] usb 5-1: Manufacturer: Ñ‹ [ 201.797623][ T6140] usb 5-1: SerialNumber: syz [ 202.059355][ T6140] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.059756][ T6140] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 202.063830][ T6140] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.064187][ T6140] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 202.067996][ T6140] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.242375][ T6140] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 202.301352][ T6140] usb 5-1: USB disconnect, device number 19 [ 202.366927][ T7933] udevd[7933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.714816][T10017] jffs2: notice: (10017) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 203.772211][T10035] fuse: Unknown parameter 'FºK—:_%' [ 204.044701][T10040] FAULT_INJECTION: forcing a failure. [ 204.044701][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 204.044733][T10040] CPU: 1 UID: 0 PID: 10040 Comm: syz.4.1050 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.044757][T10040] Tainted: [L]=SOFTLOCKUP [ 204.044764][T10040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.044774][T10040] Call Trace: [ 204.044781][T10040] [ 204.044788][T10040] dump_stack_lvl+0x100/0x190 [ 204.044818][T10040] should_fail_ex.cold+0x5/0xa [ 204.044843][T10040] should_failslab+0xc2/0x120 [ 204.044866][T10040] kmem_cache_alloc_noprof+0x92/0x6a0 [ 204.044889][T10040] ? __kernfs_new_node+0xd2/0xa10 [ 204.044916][T10040] __kernfs_new_node+0xd2/0xa10 [ 204.044943][T10040] ? __pfx___kernfs_new_node+0x10/0x10 [ 204.044969][T10040] ? lock_acquire+0x1d1/0x380 [ 204.044988][T10040] ? kernfs_root+0x23/0x2a0 [ 204.045008][T10040] ? find_held_lock+0x2b/0x80 [ 204.045026][T10040] ? kernfs_root+0xee/0x2a0 [ 204.045046][T10040] ? kernfs_root+0xee/0x2a0 [ 204.045081][T10040] kernfs_new_node+0x117/0x150 [ 204.045111][T10040] __kernfs_create_file+0x53/0x350 [ 204.045142][T10040] sysfs_add_file_mode_ns+0x207/0x3c0 [ 204.045168][T10040] internal_create_group+0x593/0xfb0 [ 204.045198][T10040] ? __pfx_internal_create_group+0x10/0x10 [ 204.045221][T10040] ? kernfs_create_link+0x1bd/0x240 [ 204.045241][T10040] internal_create_groups+0x9d/0x150 [ 204.045265][T10040] device_add+0xf60/0x1970 [ 204.045295][T10040] ? __pfx_device_add+0x10/0x10 [ 204.045319][T10040] ? lockdep_init_map_type+0x5c/0x250 [ 204.045343][T10040] ? __init_waitqueue_head+0xca/0x150 [ 204.045373][T10040] wakeup_source_device_create+0x243/0x2e0 [ 204.045402][T10040] wakeup_source_sysfs_add+0x1c/0x90 [ 204.045458][T10040] wakeup_source_register+0x154/0x3e0 [ 204.045483][T10040] ep_create_wakeup_source+0x1df/0x2e0 [ 204.045505][T10040] ? __mutex_unlock_slowpath+0x35d/0x930 [ 204.045533][T10040] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 204.045560][T10040] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 204.045583][T10040] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 204.045613][T10040] do_epoll_ctl_file+0x1e26/0x36e0 [ 204.045644][T10040] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 204.045665][T10040] ? lock_acquire+0x1d1/0x380 [ 204.045685][T10040] ? __fget_files+0x34/0x3d0 [ 204.045704][T10040] ? find_held_lock+0x2b/0x80 [ 204.045723][T10040] ? __fget_files+0x215/0x3d0 [ 204.045746][T10040] ? __fget_files+0x21f/0x3d0 [ 204.045771][T10040] ? do_epoll_ctl+0xfd/0x1a0 [ 204.045792][T10040] do_epoll_ctl+0xfd/0x1a0 [ 204.045815][T10040] ? __pfx_do_epoll_ctl+0x10/0x10 [ 204.045846][T10040] __ia32_sys_epoll_ctl+0x15b/0x1e0 [ 204.045871][T10040] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 204.045902][T10040] __do_fast_syscall_32+0x13a/0x8b0 [ 204.045928][T10040] ? lockdep_hardirqs_on+0x7d/0x110 [ 204.045956][T10040] do_fast_syscall_32+0x32/0x70 [ 204.045983][T10040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.046006][T10040] RIP: 0023:0xf7ff3fec [ 204.046028][T10040] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 204.046036][T10040] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ff [ 204.046056][T10040] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000001 [ 204.046067][T10040] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000000 [ 204.046088][T10040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.046100][T10040] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 204.046112][T10040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.046138][T10040] [ 204.396800][T10046] xt_policy: output policy not valid in PREROUTING and INPUT [ 205.633381][ T6140] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 205.799609][ T6140] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 205.800602][ T6140] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 205.800628][ T6140] usb 5-1: config 0 has no interface number 0 [ 205.800659][ T6140] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.800678][ T6140] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 205.800696][ T6140] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 205.800717][ T6140] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 205.800739][ T6140] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 205.800771][ T6140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.898604][ T6140] usb 5-1: config 0 descriptor?? [ 205.899577][T10051] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.935751][ T6140] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 207.697024][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.752213][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.778953][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.836306][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.837955][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.392361][T10073] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 208.480025][ T1477] usb 5-1: USB disconnect, device number 20 [ 208.506116][ T1477] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 209.606890][T10068] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.607022][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.607134][T10068] bridge_slave_0: entered allmulticast mode [ 209.608434][T10068] bridge_slave_0: entered promiscuous mode [ 209.610932][T10068] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.611009][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.611291][T10068] bridge_slave_1: entered allmulticast mode [ 209.615921][T10068] bridge_slave_1: entered promiscuous mode [ 209.693467][T10068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.699668][T10068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.756854][T10068] team0: Port device team_slave_0 added [ 209.759510][T10068] team0: Port device team_slave_1 added [ 209.788789][T10068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.788808][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.788829][T10068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.790954][T10068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.791050][T10068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.791074][T10068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.851520][T10068] hsr_slave_0: entered promiscuous mode [ 209.852384][T10068] hsr_slave_1: entered promiscuous mode [ 209.852952][T10068] debugfs: 'hsr0' already exists in 'hsr' [ 209.852982][T10068] Cannot create hsr debugfs directory [ 209.941770][T10098] FAULT_INJECTION: forcing a failure. [ 209.941770][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 209.941807][T10098] CPU: 3 UID: 0 PID: 10098 Comm: syz.4.1060 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.941833][T10098] Tainted: [L]=SOFTLOCKUP [ 209.941839][T10098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.941850][T10098] Call Trace: [ 209.941857][T10098] [ 209.941865][T10098] dump_stack_lvl+0x100/0x190 [ 209.941894][T10098] should_fail_ex.cold+0x5/0xa [ 209.941917][T10098] should_failslab+0xc2/0x120 [ 209.941940][T10098] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 209.941969][T10098] ? __alloc_skb+0x5b7/0x710 [ 209.941994][T10098] ? __alloc_skb+0x140/0x710 [ 209.942020][T10098] __alloc_skb+0x140/0x710 [ 209.942041][T10098] ? __alloc_skb+0x5b7/0x710 [ 209.942063][T10098] ? __pfx___alloc_skb+0x10/0x10 [ 209.942091][T10098] netlink_ack+0x117/0xb80 [ 209.942120][T10098] netlink_rcv_skb+0x333/0x420 [ 209.942141][T10098] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.942169][T10098] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.942198][T10098] ? netlink_deliver_tap+0x1ae/0xcc0 [ 209.942223][T10098] netlink_unicast+0x585/0x850 [ 209.942247][T10098] ? __pfx_netlink_unicast+0x10/0x10 [ 209.942276][T10098] netlink_sendmsg+0x8b0/0xda0 [ 209.942302][T10098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.942327][T10098] ? apparmor_socket_sendmsg+0x165/0x280 [ 209.942356][T10098] ____sys_sendmsg+0xa4d/0xbe0 [ 209.942374][T10098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.942398][T10098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.958505][T10098] ? plist_check_list+0x1b8/0x280 [ 209.958543][T10098] ? plist_del+0x308/0x510 [ 209.958570][T10098] ___sys_sendmsg+0x190/0x1e0 [ 209.958591][T10098] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.958612][T10098] ? futex_wake+0x220/0x5e0 [ 209.958644][T10098] ? find_held_lock+0x2b/0x80 [ 209.958680][T10098] __sys_sendmsg+0x160/0x210 [ 209.958703][T10098] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.958737][T10098] __do_fast_syscall_32+0x13a/0x8b0 [ 209.958768][T10098] do_fast_syscall_32+0x32/0x70 [ 209.958794][T10098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.958816][T10098] RIP: 0023:0xf7ff3fec [ 209.958839][T10098] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 209.958848][T10098] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 209.958868][T10098] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800004c0 [ 209.958879][T10098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.958889][T10098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.958899][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.958909][T10098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.958932][T10098] [ 210.046150][ T5748] Bluetooth: hci4: command tx timeout [ 212.103272][ T5748] Bluetooth: hci4: command tx timeout [ 212.797001][T10068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.949858][T10068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.958150][T10068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.416502][T10068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.417403][T10068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 213.461350][T10068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.499753][T10068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.552777][T10068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.960248][T10121] FAULT_INJECTION: forcing a failure. [ 213.960248][T10121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 213.960291][T10121] CPU: 0 UID: 0 PID: 10121 Comm: syz.0.1062 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.960321][T10121] Tainted: [L]=SOFTLOCKUP [ 213.960329][T10121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 213.960341][T10121] Call Trace: [ 213.960349][T10121] [ 213.960358][T10121] dump_stack_lvl+0x100/0x190 [ 213.960393][T10121] should_fail_ex.cold+0x5/0xa [ 213.960418][T10121] ? prepare_alloc_pages+0x16d/0x5b0 [ 213.960449][T10121] should_fail_alloc_page+0xeb/0x140 [ 213.960505][T10121] prepare_alloc_pages+0x1f0/0x5b0 [ 213.960545][T10121] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 213.960572][T10121] ? vma_set_page_prot+0x13e/0x1c0 [ 213.960601][T10121] ? __pfx_vma_set_page_prot+0x10/0x10 [ 213.960635][T10121] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 213.960662][T10121] ? __pfx___mmap_region+0x10/0x10 [ 213.960701][T10121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.960733][T10121] ? mas_next_node+0x29c/0x1020 [ 213.960772][T10121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 213.960801][T10121] ? policy_nodemask+0xed/0x4f0 [ 213.960854][T10121] alloc_pages_mpol+0x201/0x550 [ 213.960885][T10121] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 213.960922][T10121] alloc_pages_noprof+0x1a/0x160 [ 213.960955][T10121] pte_alloc_one+0x1c/0x3d0 [ 213.960983][T10121] do_fault+0x960/0x1830 [ 213.961011][T10121] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 213.961044][T10121] ? __pfx_do_fault+0x10/0x10 [ 213.961069][T10121] ? pgd_none+0x9f/0xe0 [ 213.961098][T10121] ? __pfx_pgd_none+0x10/0x10 [ 213.961131][T10121] ? find_held_lock+0x2b/0x80 [ 213.961159][T10121] __handle_mm_fault+0x150b/0x2f60 [ 213.961198][T10121] ? __pfx___handle_mm_fault+0x10/0x10 [ 213.961228][T10121] ? __pfx_mt_find+0x10/0x10 [ 213.961272][T10121] handle_mm_fault+0x363/0xa20 [ 213.961309][T10121] __get_user_pages+0x8ae/0x2c30 [ 213.961341][T10121] ? __pfx_mt_find+0x10/0x10 [ 213.961358][T10121] ? __pfx___get_user_pages+0x10/0x10 [ 213.961391][T10121] populate_vma_page_range+0x267/0x3f0 [ 213.961416][T10121] ? __pfx_populate_vma_page_range+0x10/0x10 [ 213.961438][T10121] ? __pfx_find_vma_intersection+0x10/0x10 [ 213.961467][T10121] __mm_populate+0x107/0x3a0 [ 213.961491][T10121] ? __pfx___mm_populate+0x10/0x10 [ 213.961515][T10121] ? up_write+0x2dc/0x5b0 [ 213.961549][T10121] vm_mmap_pgoff+0x441/0x470 [ 213.961577][T10121] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 213.961598][T10121] ? __mutex_unlock_slowpath+0x35d/0x930 [ 213.961631][T10121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.961662][T10121] ksys_mmap_pgoff+0xe4/0x610 [ 213.961686][T10121] ? fput+0x7c/0x100 [ 213.961708][T10121] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 213.961728][T10121] ? ksys_write+0x1ac/0x250 [ 213.961748][T10121] ? __pfx_ksys_write+0x10/0x10 [ 213.961771][T10121] __do_fast_syscall_32+0x13a/0x8b0 [ 213.961799][T10121] ? lockdep_hardirqs_on+0x7d/0x110 [ 213.961828][T10121] do_fast_syscall_32+0x32/0x70 [ 213.961856][T10121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.961879][T10121] RIP: 0023:0xf702efec [ 213.961902][T10121] Code: Unable to access opcode bytes at 0xf702efc2. [ 213.961910][T10121] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 213.961928][T10121] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 213.961940][T10121] RDX: 0000000000000003 RSI: 0000000000008031 RDI: 00000000ffffffff [ 213.961952][T10121] RBP: 00000000fdffa000 R08: 0000000000000000 R09: 0000000000000000 [ 213.961962][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.961973][T10121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.961996][T10121] [ 214.161355][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.225371][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.226919][ T5738] Bluetooth: hci4: command tx timeout [ 214.229773][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.272537][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.273008][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.684253][T10068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.800651][T10068] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.825539][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.825684][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.089697][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.089792][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.171455][T10068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.449439][T10096] syz.0.1058 (10096) used greatest stack depth: 18736 bytes left [ 215.573657][T10152] loop8: detected capacity change from 0 to 16384 [ 215.578607][T10152] netlink: 'syz.4.1066': attribute type 11 has an invalid length. [ 215.578630][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 215.655478][T10155] FAULT_INJECTION: forcing a failure. [ 215.655478][T10155] name failslab, interval 1, probability 0, space 0, times 0 [ 215.655512][T10155] CPU: 3 UID: 0 PID: 10155 Comm: syz.0.1067 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.655542][T10155] Tainted: [L]=SOFTLOCKUP [ 215.655548][T10155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 215.655558][T10155] Call Trace: [ 215.655564][T10155] [ 215.655571][T10155] dump_stack_lvl+0x100/0x190 [ 215.655615][T10155] should_fail_ex.cold+0x5/0xa [ 215.655635][T10155] should_failslab+0xc2/0x120 [ 215.655660][T10155] __kmalloc_noprof+0xfc/0x840 [ 215.655678][T10155] ? rcu_is_watching+0x13/0xc0 [ 215.655694][T10155] ? tomoyo_realpath_from_path+0xb6/0x690 [ 215.655719][T10155] tomoyo_realpath_from_path+0xb6/0x690 [ 215.655744][T10155] tomoyo_path_perm+0x276/0x460 [ 215.655766][T10155] ? tomoyo_path_perm+0x262/0x460 [ 215.655794][T10155] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 215.655815][T10155] ? do_raw_spin_lock+0x128/0x260 [ 215.655840][T10155] ? d_splice_alias_ops+0x626/0x15b0 [ 215.655865][T10155] ? d_splice_alias_ops+0x62b/0x15b0 [ 215.655897][T10155] ? configfs_lookup+0x6e/0x7d0 [ 215.655926][T10155] ? lookup_one_qstr_excl+0xaf/0x250 [ 215.655955][T10155] tomoyo_path_symlink+0x97/0xe0 [ 215.655976][T10155] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 215.655998][T10155] ? lock_acquire+0x1d1/0x380 [ 215.656025][T10155] security_path_symlink+0x152/0x2d0 [ 215.656050][T10155] filename_symlinkat+0x122/0x560 [ 215.656077][T10155] ? __pfx_filename_symlinkat+0x10/0x10 [ 215.656101][T10155] ? strncpy_from_user+0x19d/0x2d0 [ 215.656127][T10155] ? do_getname+0x191/0x390 [ 215.656155][T10155] __ia32_sys_symlinkat+0x9b/0xe0 [ 215.656180][T10155] __do_fast_syscall_32+0x13a/0x8b0 [ 215.656207][T10155] ? lockdep_hardirqs_on+0x7d/0x110 [ 215.656234][T10155] do_fast_syscall_32+0x32/0x70 [ 215.656262][T10155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.656284][T10155] RIP: 0023:0xf702efec [ 215.656302][T10155] Code: Unable to access opcode bytes at 0xf702efc2. [ 215.656310][T10155] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 215.656328][T10155] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 00000000ffffff9c [ 215.656339][T10155] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.656349][T10155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.656359][T10155] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.656369][T10155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.656394][T10155] [ 215.659891][T10155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.886548][T10153] loop8: detected capacity change from 16384 to 16380 [ 215.917655][ T8254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.282959][ T5748] Bluetooth: hci4: command tx timeout [ 216.424500][ T5748] Bluetooth: hci1: command tx timeout [ 216.597558][ T8254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.928968][ T8254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.013699][T10068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.183951][ T8254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.423992][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.424140][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.424288][T10122] bridge_slave_0: entered allmulticast mode [ 217.425764][T10122] bridge_slave_0: entered promiscuous mode [ 217.428213][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.428334][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.428434][T10122] bridge_slave_1: entered allmulticast mode [ 217.429592][T10122] bridge_slave_1: entered promiscuous mode [ 217.555285][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.620173][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.728456][T10122] team0: Port device team_slave_0 added [ 217.730968][T10122] team0: Port device team_slave_1 added [ 217.935167][T10068] veth0_vlan: entered promiscuous mode [ 217.941614][T10068] veth1_vlan: entered promiscuous mode [ 217.981139][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.981156][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.981175][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.351107][ T8254] bond3 (unregistering): (slave bond0): Releasing active interface [ 218.352935][ T8254] bond0 (unregistering): Released all slaves [ 218.371637][ T8254] bond1 (unregistering): Released all slaves [ 218.381897][ T8254] bond2 (unregistering): Released all slaves [ 218.392094][ T8254] bond3 (unregistering): Released all slaves [ 218.451149][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.451166][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.451186][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.525499][T10068] veth0_macvtap: entered promiscuous mode [ 218.528532][T10068] veth1_macvtap: entered promiscuous mode [ 218.531079][ T5748] Bluetooth: hci1: command tx timeout [ 218.717487][T10068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.721009][T10068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.867496][ T8254] tipc: Disabling bearer [ 218.869289][ T8254] tipc: Left network mode [ 218.913097][T10122] hsr_slave_0: entered promiscuous mode [ 218.913838][T10122] hsr_slave_1: entered promiscuous mode [ 218.914337][T10122] debugfs: 'hsr0' already exists in 'hsr' [ 218.914354][T10122] Cannot create hsr debugfs directory [ 218.917236][ T5783] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.917373][ T5783] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.917416][ T5783] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.917456][ T5783] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.247374][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 219.897786][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 219.943921][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.943943][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.336956][ T8254] hsr_slave_0: left promiscuous mode [ 220.337500][ T8254] hsr_slave_1: left promiscuous mode [ 220.402988][ T8254] veth1_macvtap: left promiscuous mode [ 220.405864][ T8254] veth0_macvtap: left promiscuous mode [ 220.406072][ T8254] veth1_vlan: left promiscuous mode [ 220.406228][ T8254] veth0_vlan: left promiscuous mode [ 220.585584][ T5748] Bluetooth: hci1: command tx timeout [ 221.374045][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.374066][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.383346][T10122] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 221.402670][T10122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.415398][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 221.416039][T10122] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 221.457432][T10122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.459212][T10122] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 221.486069][T10122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.510970][T10122] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 221.572571][T10122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.414174][T10122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.655163][T10122] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.709343][ T5748] Bluetooth: hci1: command tx timeout [ 222.761815][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.761906][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.775333][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.775435][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.607359][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9 [ 224.071949][T10232] FAULT_INJECTION: forcing a failure. [ 224.071949][T10232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.071983][T10232] CPU: 2 UID: 0 PID: 10232 Comm: syz.4.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.072005][T10232] Tainted: [L]=SOFTLOCKUP [ 224.072011][T10232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.072021][T10232] Call Trace: [ 224.072026][T10232] [ 224.072033][T10232] dump_stack_lvl+0x100/0x190 [ 224.072060][T10232] should_fail_ex.cold+0x5/0xa [ 224.072077][T10232] ? prepare_alloc_pages+0x16d/0x5b0 [ 224.072100][T10232] should_fail_alloc_page+0xeb/0x140 [ 224.072122][T10232] prepare_alloc_pages+0x1f0/0x5b0 [ 224.072146][T10232] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 224.072166][T10232] ? __lock_acquire+0x5c0/0x1f40 [ 224.072193][T10232] ? __lock_acquire+0x5c0/0x1f40 [ 224.072216][T10232] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.072240][T10232] ? __lock_acquire+0x5c0/0x1f40 [ 224.073078][T10232] ? lock_acquire+0x1d1/0x380 [ 224.073107][T10232] ? unwind_next_frame+0xbd/0x2090 [ 224.073134][T10232] ? lock_acquire+0x1d1/0x380 [ 224.073156][T10232] ? is_bpf_text_address+0x25/0x1a0 [ 224.073181][T10232] ? find_held_lock+0x2b/0x80 [ 224.073198][T10232] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.073223][T10232] ? policy_nodemask+0xed/0x4f0 [ 224.073248][T10232] alloc_pages_mpol+0x201/0x550 [ 224.073273][T10232] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 224.073295][T10232] ? unwind_get_return_address+0x59/0xa0 [ 224.073316][T10232] ? arch_stack_walk+0xa6/0xf0 [ 224.073342][T10232] folio_alloc_mpol_noprof+0x36/0x260 [ 224.073369][T10232] shmem_alloc_folio+0x135/0x160 [ 224.073402][T10232] shmem_alloc_and_add_folio+0x371/0xd40 [ 224.073436][T10232] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 224.073463][T10232] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 224.073494][T10232] shmem_get_folio_gfp+0x75b/0x1980 [ 224.073525][T10232] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 224.073554][T10232] ? filemap_map_pages+0x114a/0x2100 [ 224.073583][T10232] shmem_fault+0x1fb/0xa30 [ 224.073608][T10232] ? __pfx_shmem_fault+0x10/0x10 [ 224.073633][T10232] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 224.073656][T10232] ? __pfx_filemap_map_pages+0x10/0x10 [ 224.073682][T10232] ? find_held_lock+0x2b/0x80 [ 224.073703][T10232] ? __pfx_filemap_map_pages+0x10/0x10 [ 224.073729][T10232] __do_fault+0x10b/0x440 [ 224.086488][T10232] do_fault+0xb3f/0x1830 [ 224.086509][T10232] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 224.086534][T10232] ? __pfx_do_fault+0x10/0x10 [ 224.086552][T10232] ? pgd_none+0x9f/0xe0 [ 224.086573][T10232] ? __pfx_pgd_none+0x10/0x10 [ 224.086595][T10232] ? find_held_lock+0x2b/0x80 [ 224.086616][T10232] __handle_mm_fault+0x150b/0x2f60 [ 224.086645][T10232] ? __pfx___handle_mm_fault+0x10/0x10 [ 224.086667][T10232] ? __pfx_mt_find+0x10/0x10 [ 224.086702][T10232] handle_mm_fault+0x363/0xa20 [ 224.086731][T10232] __get_user_pages+0x8ae/0x2c30 [ 224.086757][T10232] ? __pfx_mt_find+0x10/0x10 [ 224.086773][T10232] ? __pfx___get_user_pages+0x10/0x10 [ 224.086802][T10232] populate_vma_page_range+0x267/0x3f0 [ 224.086826][T10232] ? __pfx_populate_vma_page_range+0x10/0x10 [ 224.086845][T10232] ? __pfx_find_vma_intersection+0x10/0x10 [ 224.086871][T10232] __mm_populate+0x107/0x3a0 [ 224.086894][T10232] ? __pfx___mm_populate+0x10/0x10 [ 224.086916][T10232] ? up_write+0x2dc/0x5b0 [ 224.086943][T10232] vm_mmap_pgoff+0x441/0x470 [ 224.086965][T10232] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 224.086985][T10232] ? __mutex_unlock_slowpath+0x35d/0x930 [ 224.087014][T10232] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.087043][T10232] ksys_mmap_pgoff+0xe4/0x610 [ 224.087065][T10232] ? fput+0x7c/0x100 [ 224.087085][T10232] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 224.087102][T10232] ? ksys_write+0x1ac/0x250 [ 224.087118][T10232] ? __pfx_ksys_write+0x10/0x10 [ 224.087139][T10232] __do_fast_syscall_32+0x13a/0x8b0 [ 224.087164][T10232] ? lockdep_hardirqs_on+0x7d/0x110 [ 224.087190][T10232] do_fast_syscall_32+0x32/0x70 [ 224.087215][T10232] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.087236][T10232] RIP: 0023:0xf7ff3fec [ 224.087258][T10232] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 224.087265][T10232] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 224.087284][T10232] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 224.087295][T10232] RDX: 0000000000000003 RSI: 0000000000008031 RDI: 00000000ffffffff [ 224.087306][T10232] RBP: 00000000fdffa000 R08: 0000000000000000 R09: 0000000000000000 [ 224.087316][T10232] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 224.087326][T10232] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.087349][T10232] [ 224.987390][ T5748] Bluetooth: hci3: unexpected event 0x2f length: 763 > 255 [ 225.339761][T10255] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 225.339761][T10255] [ 225.496736][T10257] tc_dump_action: action bad kind [ 225.631167][T10122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.442296][T10122] veth0_vlan: entered promiscuous mode [ 226.494083][T10122] veth1_vlan: entered promiscuous mode [ 226.610708][T10122] veth0_macvtap: entered promiscuous mode [ 226.614624][T10122] veth1_macvtap: entered promiscuous mode [ 226.630817][T10122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.640572][T10122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.835610][ T5783] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.835738][ T5783] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.883195][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.883242][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.284447][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.284467][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.368987][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.369009][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.592033][T10291] FAULT_INJECTION: forcing a failure. [ 227.592033][T10291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.592073][T10291] CPU: 3 UID: 0 PID: 10291 Comm: syz.4.1081 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.592101][T10291] Tainted: [L]=SOFTLOCKUP [ 227.592108][T10291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.592119][T10291] Call Trace: [ 227.592126][T10291] [ 227.592134][T10291] dump_stack_lvl+0x100/0x190 [ 227.592167][T10291] should_fail_ex.cold+0x5/0xa [ 227.592189][T10291] ? prepare_alloc_pages+0x16d/0x5b0 [ 227.592219][T10291] should_fail_alloc_page+0xeb/0x140 [ 227.592246][T10291] prepare_alloc_pages+0x1f0/0x5b0 [ 227.592277][T10291] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 227.592301][T10291] ? __lock_acquire+0x5c0/0x1f40 [ 227.592335][T10291] ? __lock_acquire+0x5c0/0x1f40 [ 227.592364][T10291] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 227.592392][T10291] ? __lock_acquire+0x5c0/0x1f40 [ 227.592422][T10291] ? lock_acquire+0x1d1/0x380 [ 227.592447][T10291] ? unwind_next_frame+0xbd/0x2090 [ 227.592474][T10291] ? lock_acquire+0x1d1/0x380 [ 227.592498][T10291] ? is_bpf_text_address+0x25/0x1a0 [ 227.592525][T10291] ? find_held_lock+0x2b/0x80 [ 227.592543][T10291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.592569][T10291] ? policy_nodemask+0xed/0x4f0 [ 227.592597][T10291] alloc_pages_mpol+0x201/0x550 [ 227.592624][T10291] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 227.592647][T10291] ? unwind_get_return_address+0x59/0xa0 [ 227.592670][T10291] ? arch_stack_walk+0xa6/0xf0 [ 227.592695][T10291] folio_alloc_mpol_noprof+0x36/0x260 [ 227.592726][T10291] shmem_alloc_folio+0x135/0x160 [ 227.592754][T10291] shmem_alloc_and_add_folio+0x371/0xd40 [ 227.592789][T10291] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 227.592821][T10291] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 227.592857][T10291] shmem_get_folio_gfp+0x75b/0x1980 [ 227.592902][T10291] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 227.592933][T10291] ? filemap_map_pages+0x114a/0x2100 [ 227.592966][T10291] shmem_fault+0x1fb/0xa30 [ 227.592995][T10291] ? __pfx_shmem_fault+0x10/0x10 [ 227.593075][T10291] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 227.593102][T10291] ? __pfx_filemap_map_pages+0x10/0x10 [ 227.593131][T10291] ? find_held_lock+0x2b/0x80 [ 227.593156][T10291] ? __pfx_filemap_map_pages+0x10/0x10 [ 227.593181][T10291] __do_fault+0x10b/0x440 [ 227.593205][T10291] do_fault+0xb3f/0x1830 [ 227.593228][T10291] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 227.593259][T10291] ? __pfx_do_fault+0x10/0x10 [ 227.593281][T10291] ? pgd_none+0x9f/0xe0 [ 227.593309][T10291] ? __pfx_pgd_none+0x10/0x10 [ 227.593336][T10291] ? find_held_lock+0x2b/0x80 [ 227.593356][T10291] __handle_mm_fault+0x150b/0x2f60 [ 227.593385][T10291] ? __pfx___handle_mm_fault+0x10/0x10 [ 227.593406][T10291] ? __pfx_mt_find+0x10/0x10 [ 227.593442][T10291] handle_mm_fault+0x363/0xa20 [ 227.593470][T10291] __get_user_pages+0x8ae/0x2c30 [ 227.593498][T10291] ? __pfx_mt_find+0x10/0x10 [ 227.593513][T10291] ? __pfx___get_user_pages+0x10/0x10 [ 227.593539][T10291] populate_vma_page_range+0x267/0x3f0 [ 227.593561][T10291] ? __pfx_populate_vma_page_range+0x10/0x10 [ 227.593581][T10291] ? __pfx_find_vma_intersection+0x10/0x10 [ 227.593607][T10291] __mm_populate+0x107/0x3a0 [ 227.593628][T10291] ? __pfx___mm_populate+0x10/0x10 [ 227.593651][T10291] ? up_write+0x2dc/0x5b0 [ 227.593679][T10291] vm_mmap_pgoff+0x441/0x470 [ 227.593702][T10291] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 227.593723][T10291] ? __mutex_unlock_slowpath+0x35d/0x930 [ 227.593756][T10291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.593786][T10291] ksys_mmap_pgoff+0xe4/0x610 [ 227.593808][T10291] ? fput+0x7c/0x100 [ 227.593829][T10291] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 227.593849][T10291] ? ksys_write+0x1ac/0x250 [ 227.593866][T10291] ? __pfx_ksys_write+0x10/0x10 [ 227.593918][T10291] __do_fast_syscall_32+0x13a/0x8b0 [ 227.593942][T10291] ? lockdep_hardirqs_on+0x7d/0x110 [ 227.593966][T10291] do_fast_syscall_32+0x32/0x70 [ 227.593991][T10291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.594012][T10291] RIP: 0023:0xf7ff3fec [ 227.594031][T10291] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 227.594039][T10291] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 227.594056][T10291] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 227.594066][T10291] RDX: 0000000000000003 RSI: 0000000000008031 RDI: 00000000ffffffff [ 227.594076][T10291] RBP: 00000000fdffa000 R08: 0000000000000000 R09: 0000000000000000 [ 227.594087][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.594096][T10291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.594118][T10291] [ 229.075394][T10323] FAULT_INJECTION: forcing a failure. [ 229.075394][T10323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.075442][T10323] CPU: 3 UID: 0 PID: 10323 Comm: syz.4.1088 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.075467][T10323] Tainted: [L]=SOFTLOCKUP [ 229.075473][T10323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.075483][T10323] Call Trace: [ 229.075489][T10323] [ 229.075497][T10323] dump_stack_lvl+0x100/0x190 [ 229.075524][T10323] should_fail_ex.cold+0x5/0xa [ 229.075546][T10323] _copy_to_user+0x32/0xd0 [ 229.075569][T10323] simple_read_from_buffer+0xcb/0x170 [ 229.075592][T10323] proc_fail_nth_read+0x1af/0x230 [ 229.075611][T10323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.075630][T10323] ? rw_verify_area+0xce/0x6d0 [ 229.075655][T10323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.075673][T10323] vfs_read+0x1e4/0xb40 [ 229.075691][T10323] ? lock_acquire+0x1d1/0x380 [ 229.075713][T10323] ? __fget_files+0x34/0x3d0 [ 229.075730][T10323] ? __pfx_vfs_read+0x10/0x10 [ 229.075745][T10323] ? find_held_lock+0x2b/0x80 [ 229.075763][T10323] ? __fget_files+0x215/0x3d0 [ 229.075785][T10323] ? __fget_files+0x21f/0x3d0 [ 229.075810][T10323] ksys_read+0x12a/0x250 [ 229.075827][T10323] ? __pfx_ksys_read+0x10/0x10 [ 229.075852][T10323] do_int80_emulation+0x166/0x650 [ 229.075880][T10323] asm_int80_emulation+0x1a/0x20 [ 229.075897][T10323] RIP: 0023:0xf71f75ab [ 229.075911][T10323] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 229.075927][T10323] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 229.075945][T10323] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54b65d0 [ 229.075956][T10323] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 229.075967][T10323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.075977][T10323] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.075987][T10323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.076009][T10323] [ 229.394669][T10325] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1089'. [ 230.044765][T10335] lo speed is unknown, defaulting to 1000 [ 230.044839][T10335] lo speed is unknown, defaulting to 1000 [ 230.049825][T10335] lo speed is unknown, defaulting to 1000 [ 230.234031][T10335] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 230.234065][T10335] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 230.234105][T10335] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 230.260699][T10335] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.375603][T10335] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 230.390819][T10347] FAULT_INJECTION: forcing a failure. [ 230.390819][T10347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 230.390855][T10347] CPU: 2 UID: 0 PID: 10347 Comm: syz.6.1091 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.390879][T10347] Tainted: [L]=SOFTLOCKUP [ 230.390885][T10347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.390895][T10347] Call Trace: [ 230.390903][T10347] [ 230.390910][T10347] dump_stack_lvl+0x100/0x190 [ 230.390937][T10347] should_fail_ex.cold+0x5/0xa [ 230.390955][T10347] ? prepare_alloc_pages+0x16d/0x5b0 [ 230.390980][T10347] should_fail_alloc_page+0xeb/0x140 [ 230.391003][T10347] prepare_alloc_pages+0x1f0/0x5b0 [ 230.391030][T10347] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 230.391050][T10347] ? __lock_acquire+0x5c0/0x1f40 [ 230.391082][T10347] ? __lock_acquire+0x5c0/0x1f40 [ 230.391105][T10347] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 230.391125][T10347] ? __css_rstat_updated+0x1ce/0x590 [ 230.391151][T10347] ? lock_acquire+0x1d1/0x380 [ 230.391173][T10347] ? do_raw_spin_lock+0x128/0x260 [ 230.391197][T10347] ? look_up_lock_class+0x55/0x120 [ 230.391221][T10347] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 230.391246][T10347] ? register_lock_class+0x3f/0x7b0 [ 230.391274][T10347] ? __lock_acquire+0x5c0/0x1f40 [ 230.391298][T10347] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 230.391323][T10347] ? policy_nodemask+0xed/0x4f0 [ 230.391348][T10347] alloc_pages_mpol+0x201/0x550 [ 230.391371][T10347] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 230.391428][T10347] folio_alloc_mpol_noprof+0x36/0x260 [ 230.391455][T10347] shmem_alloc_folio+0x135/0x160 [ 230.391479][T10347] shmem_alloc_and_add_folio+0x371/0xd40 [ 230.391517][T10347] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 230.391543][T10347] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 230.391573][T10347] shmem_get_folio_gfp+0x75b/0x1980 [ 230.391603][T10347] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 230.391631][T10347] ? filemap_map_pages+0x114a/0x2100 [ 230.391659][T10347] shmem_fault+0x1fb/0xa30 [ 230.391685][T10347] ? __pfx_shmem_fault+0x10/0x10 [ 230.391712][T10347] ? __pfx_filemap_map_pages+0x10/0x10 [ 230.391737][T10347] ? find_held_lock+0x2b/0x80 [ 230.391757][T10347] ? __pfx_filemap_map_pages+0x10/0x10 [ 230.391778][T10347] __do_fault+0x10b/0x440 [ 230.391798][T10347] do_fault+0xb3f/0x1830 [ 230.391822][T10347] ? __pfx_do_fault+0x10/0x10 [ 230.391841][T10347] ? rcu_read_unlock+0x2d/0xb0 [ 230.391865][T10347] ? rcu_read_unlock+0x2d/0xb0 [ 230.391888][T10347] ? __pte_offset_map+0x179/0x310 [ 230.391912][T10347] __handle_mm_fault+0x150b/0x2f60 [ 230.391942][T10347] ? __pfx___handle_mm_fault+0x10/0x10 [ 230.391967][T10347] ? pte_offset_map_lock+0x174/0x320 [ 230.391987][T10347] ? find_held_lock+0x2b/0x80 [ 230.392003][T10347] ? find_held_lock+0x2b/0x80 [ 230.392020][T10347] ? follow_page_pte+0x536/0x1050 [ 230.392052][T10347] handle_mm_fault+0x363/0xa20 [ 230.392081][T10347] __get_user_pages+0x8ae/0x2c30 [ 230.392108][T10347] ? __pfx_mt_find+0x10/0x10 [ 230.392126][T10347] ? __pfx___get_user_pages+0x10/0x10 [ 230.392154][T10347] populate_vma_page_range+0x267/0x3f0 [ 230.392178][T10347] ? __pfx_populate_vma_page_range+0x10/0x10 [ 230.392199][T10347] ? __pfx_find_vma_intersection+0x10/0x10 [ 230.392226][T10347] __mm_populate+0x107/0x3a0 [ 230.392248][T10347] ? __pfx___mm_populate+0x10/0x10 [ 230.392270][T10347] ? up_write+0x2dc/0x5b0 [ 230.392297][T10347] vm_mmap_pgoff+0x441/0x470 [ 230.392318][T10347] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 230.392338][T10347] ? __mutex_unlock_slowpath+0x35d/0x930 [ 230.392367][T10347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 230.392394][T10347] ksys_mmap_pgoff+0xe4/0x610 [ 230.392414][T10347] ? fput+0x7c/0x100 [ 230.392435][T10347] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 230.392453][T10347] ? ksys_write+0x1ac/0x250 [ 230.392468][T10347] ? __pfx_ksys_write+0x10/0x10 [ 230.392488][T10347] __do_fast_syscall_32+0x13a/0x8b0 [ 230.392521][T10347] ? lockdep_hardirqs_on+0x7d/0x110 [ 230.392547][T10347] do_fast_syscall_32+0x32/0x70 [ 230.392571][T10347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.392592][T10347] RIP: 0023:0xf708efec [ 230.392614][T10347] Code: Unable to access opcode bytes at 0xf708efc2. [ 230.392622][T10347] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 230.392640][T10347] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000b36000 [ 230.392651][T10347] RDX: 0000000000000003 RSI: 0000000000008031 RDI: 00000000ffffffff [ 230.392661][T10347] RBP: 00000000fdffa000 R08: 0000000000000000 R09: 0000000000000000 [ 230.392671][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.392682][T10347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.392705][T10347] [ 230.775808][T10335] lo speed is unknown, defaulting to 1000 [ 230.843474][T10335] lo speed is unknown, defaulting to 1000 [ 230.844866][T10335] lo speed is unknown, defaulting to 1000 [ 230.846865][T10335] lo speed is unknown, defaulting to 1000 [ 230.850194][T10335] lo speed is unknown, defaulting to 1000 [ 231.169110][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1096'. [ 231.922658][T10368] fuse: Bad value for 'fd' [ 231.928842][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 231.929281][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1097'. [ 232.794378][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 232.794405][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 232.794420][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 232.983624][T10402] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 232.983646][T10402] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1101'. [ 232.990309][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 232.990374][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 233.597622][T10422] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.734821][T10431] 9pnet_virtio: no channels available for device syz [ 233.953281][ T5099] Bluetooth: hci1: command 0x0405 tx timeout [ 235.240366][ T5099] Bluetooth: hci0: unexpected event 0x2f length: 763 > 255 [ 235.551553][T10458] tc_dump_action: action bad kind [ 236.338815][T10473] bridge0: port 3(team0) entered blocking state [ 236.338891][T10473] bridge0: port 3(team0) entered disabled state [ 236.341989][T10473] team0: entered allmulticast mode [ 236.342011][T10473] team_slave_0: entered allmulticast mode [ 236.342030][T10473] team_slave_1: entered allmulticast mode [ 236.345241][T10473] team0: entered promiscuous mode [ 236.345260][T10473] team_slave_0: entered promiscuous mode [ 236.345407][T10473] team_slave_1: entered promiscuous mode [ 236.346032][T10473] bridge0: port 3(team0) entered blocking state [ 236.346123][T10473] bridge0: port 3(team0) entered forwarding state [ 239.287657][T10515] __nla_validate_parse: 4 callbacks suppressed [ 239.287676][T10515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1124'. [ 239.906212][T10521] syzkaller0: entered promiscuous mode [ 239.906242][T10521] syzkaller0: entered allmulticast mode [ 239.951037][T10521] tipc: Enabled bearer , priority 0 [ 239.956537][T10520] tipc: Resetting bearer [ 240.079032][T10520] tipc: Disabling bearer [ 240.772176][T10547] xt_cluster: you have exceeded the maximum number of cluster nodes (64 > 32) [ 240.895533][T10554] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1134'. [ 241.023994][T10549] CacheFiles: mkdir cache failed with error -122 [ 241.024078][T10549] CacheFiles: Failed to register: -122 [ 241.801777][T10566] jffs2: notice: (10566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 242.041850][T10566] bond1: entered allmulticast mode [ 242.042477][T10566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.473866][ T855] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 242.584986][T10577] bond0: option slaves: invalid value (-veth0) [ 242.663492][ T855] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.664538][ T855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 242.664564][ T855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 242.664581][ T855] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 242.667241][ T855] usb 9-1: string descriptor 0 read error: -22 [ 242.667344][ T855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.670177][T10575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.713995][T10575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.714164][T10575] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.716115][ T855] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 242.965143][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.965448][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.967714][ T10] usb 9-1: USB disconnect, device number 6 [ 243.217722][ T5881] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 243.364959][ T5881] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 243.366155][ T5881] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 243.367281][ T5881] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 33, changing to 9 [ 243.369418][ T5881] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.369437][ T5881] usb 11-1: Product: syz [ 243.369629][ T5881] usb 11-1: Manufacturer: syz [ 243.369642][ T5881] usb 11-1: SerialNumber: syz [ 243.398253][ T5881] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 243.401761][ T5881] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 243.575498][ T5881] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 244.189400][T10597] netlink: zone id is out of range [ 244.189582][T10597] netlink: zone id is out of range [ 244.189863][T10597] netlink: zone id is out of range [ 244.190006][T10597] netlink: zone id is out of range [ 244.190330][T10597] netlink: zone id is out of range [ 244.190706][T10597] netlink: zone id is out of range [ 244.190941][T10597] netlink: zone id is out of range [ 244.190975][T10597] netlink: zone id is out of range [ 244.191291][T10597] netlink: zone id is out of range [ 244.191427][T10597] netlink: zone id is out of range [ 244.381357][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1144'. [ 244.410409][T10594] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1148'. [ 244.410443][T10594] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1148'. [ 244.450707][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 246.028959][T10582] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 246.078849][ T5881] usb 11-1: USB disconnect, device number 2 [ 246.100844][ T5881] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 246.135907][ T5881] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 246.136537][ T5881] ti_usb_3410_5052 11-1:2.0: device disconnected [ 246.197768][T10618] netlink: 'syz.0.1152': attribute type 2 has an invalid length. [ 248.673373][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1158'. [ 249.453564][T10664] lo speed is unknown, defaulting to 1000 [ 249.453635][T10664] lo speed is unknown, defaulting to 1000 [ 249.455174][T10664] lo speed is unknown, defaulting to 1000 [ 249.459243][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.471097][T10664] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 249.471134][T10664] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 249.471168][T10664] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 249.726531][T10664] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.896546][T10664] lo speed is unknown, defaulting to 1000 [ 249.898079][T10664] lo speed is unknown, defaulting to 1000 [ 249.917524][T10664] lo speed is unknown, defaulting to 1000 [ 249.919329][T10664] lo speed is unknown, defaulting to 1000 [ 249.921651][T10664] lo speed is unknown, defaulting to 1000 [ 250.144712][T10676] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 250.144730][T10676] PKCS7: Only support pkcs7_signedData type [ 250.817334][T10685] syzkaller0: entered promiscuous mode [ 250.817360][T10685] syzkaller0: entered allmulticast mode [ 253.147496][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 255.180678][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.180732][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.629890][T10702] syzkaller0: entered promiscuous mode [ 260.629914][T10702] syzkaller0: entered allmulticast mode [ 260.903255][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.050532][T10733] ip6t_hbh: unknown flags 58 [ 262.331961][T10738] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1180'. [ 267.875159][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.921193][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.933533][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.965786][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.987399][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.034197][ T5748] Bluetooth: hci2: command tx timeout [ 271.510273][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.536732][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.550705][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.571504][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.572003][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.122899][ T5099] Bluetooth: hci2: command tx timeout [ 272.163191][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.044964][T10747] lo speed is unknown, defaulting to 1000 [ 273.048719][T10747] lo speed is unknown, defaulting to 1000 [ 273.323633][T10779] netlink: 'syz.6.1184': attribute type 1 has an invalid length. [ 273.323654][T10779] netlink: 756 bytes leftover after parsing attributes in process `syz.6.1184'. [ 273.603505][T10740] lo speed is unknown, defaulting to 1000 [ 273.604755][T10740] lo speed is unknown, defaulting to 1000 [ 273.730514][ T5099] Bluetooth: hci5: command tx timeout [ 274.194767][ T5099] Bluetooth: hci2: command tx timeout [ 274.571311][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.019222][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.064401][ T47] rpcbind: server 127.0.0.1 not responding, timed out [ 275.362405][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.635837][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 275.796242][ T5099] Bluetooth: hci5: command tx timeout [ 275.898192][T10804] Option 'ä&7¢f¡%›R(¨¢ﮘ­†ÇW›Oç]иÖmA (²ÞBœÎeTv_Àb¿ºÇJ€qQ¥-™I:' to dns_resolver key: bad/missing value [ 275.910521][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.998950][ T44] audit: type=1804 audit(1789312959.247:305): pid=10808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1189" name="bus" dev="ramfs" ino=40052 res=1 errno=0 [ 275.999004][ T44] audit: type=1804 audit(1789312959.247:306): pid=10808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1189" name="bus" dev="ramfs" ino=40052 res=1 errno=0 [ 276.011607][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.011697][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.011839][T10747] bridge_slave_0: entered allmulticast mode [ 276.021820][T10747] bridge_slave_0: entered promiscuous mode [ 276.037352][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.037474][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.037586][T10747] bridge_slave_1: entered allmulticast mode [ 276.039222][T10747] bridge_slave_1: entered promiscuous mode [ 276.180704][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.180778][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.180883][T10740] bridge_slave_0: entered allmulticast mode [ 276.187739][T10740] bridge_slave_0: entered promiscuous mode [ 276.216582][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.216659][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.216791][T10740] bridge_slave_1: entered allmulticast mode [ 276.231392][T10740] bridge_slave_1: entered promiscuous mode [ 276.263599][ T5099] Bluetooth: hci2: command tx timeout [ 276.304493][T10747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.333602][T10747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.376553][T10747] team0: Port device team_slave_0 added [ 276.385886][T10740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.404089][T10747] team0: Port device team_slave_1 added [ 276.545710][T10740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.711628][T10747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.711645][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.711666][T10747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.747301][T10747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.747317][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.747336][T10747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.815207][T10740] team0: Port device team_slave_0 added [ 276.917877][T10740] team0: Port device team_slave_1 added [ 276.923447][T10747] hsr_slave_0: entered promiscuous mode [ 276.924295][T10747] hsr_slave_1: entered promiscuous mode [ 276.924991][T10747] debugfs: 'hsr0' already exists in 'hsr' [ 276.925018][T10747] Cannot create hsr debugfs directory [ 277.101604][ T12] team0: left allmulticast mode [ 277.101627][ T12] team_slave_0: left allmulticast mode [ 277.101640][ T12] team_slave_1: left allmulticast mode [ 277.107105][ T12] team0: left promiscuous mode [ 277.107125][ T12] team_slave_0: left promiscuous mode [ 277.107285][ T12] team_slave_1: left promiscuous mode [ 277.107592][ T12] bridge0: port 3(team0) entered disabled state [ 277.140660][ T12] bridge_slave_1: left allmulticast mode [ 277.140690][ T12] bridge_slave_1: left promiscuous mode [ 277.145493][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.158106][ T12] bridge_slave_0: left allmulticast mode [ 277.158155][ T12] bridge_slave_0: left promiscuous mode [ 277.158336][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.185521][T10819] misc userio: The device must be registered before sending interrupts [ 277.600689][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.625419][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.627315][ T12] bond0 (unregistering): Released all slaves [ 277.774116][T10832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.834742][T10832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.863720][ T5099] Bluetooth: hci5: command tx timeout [ 277.904602][T10740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.904618][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.904639][T10740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.906453][T10740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.906468][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.906489][T10740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.952019][T10825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.257831][ T5453] 8021q: adding VLAN 0 to HW filter on device eth10 [ 278.542764][T10740] hsr_slave_0: entered promiscuous mode [ 278.544397][T10740] hsr_slave_1: entered promiscuous mode [ 278.544970][T10740] debugfs: 'hsr0' already exists in 'hsr' [ 278.544988][T10740] Cannot create hsr debugfs directory [ 278.784572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 278.822309][T10849] blktrace: Concurrent blktraces are not allowed on sg0 [ 278.910440][ T12] hsr_slave_0: left promiscuous mode [ 278.934174][ T12] hsr_slave_1: left promiscuous mode [ 278.935006][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.935024][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.935931][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.935948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.959946][ T12] veth1_macvtap: left promiscuous mode [ 278.960019][ T12] veth0_macvtap: left promiscuous mode [ 278.960163][ T12] veth1_vlan: left promiscuous mode [ 278.960256][ T12] veth0_vlan: left promiscuous mode [ 279.911166][ T12] team0 (unregistering): Port device team_slave_1 removed [ 279.934929][ T12] team0 (unregistering): Port device team_slave_0 removed [ 279.955190][ T5099] Bluetooth: hci5: command tx timeout [ 280.203174][T10852] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1196'. [ 280.215826][ T47] smbdirect: ib_dev[syz0] removed [ 280.298099][ T35] lo speed is unknown, defaulting to 1000 [ 280.298178][ T35] infiniband syz0: ib_query_port failed (-19) [ 281.212472][ T5453] 8021q: adding VLAN 0 to HW filter on device eth11 [ 281.341767][T10747] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 281.452848][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.461021][T10747] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 281.472701][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.516971][T10747] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 281.596006][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.596909][T10747] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 281.674619][T10874] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1201'. [ 281.832716][T10747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.134642][T10887] net_ratelimit: 142 callbacks suppressed [ 282.134665][T10887] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 282.164142][T10381] IPVS: starting estimator thread 0... [ 282.261271][T10889] IPVS: using max 28 ests per chain, 67200 per kthread [ 282.333768][T10893] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 1056, id = 0 [ 282.492076][ T5453] 8021q: adding VLAN 0 to HW filter on device eth12 [ 282.533785][T10897] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.533979][T10898] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 282.593755][T10895] team0: Mode changed to "random" [ 282.594382][T10895] vlan0: entered promiscuous mode [ 283.025829][T10896] tipc: Started in network mode [ 283.025852][T10896] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 283.025976][T10896] tipc: Enabled bearer , priority 0 [ 283.064147][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1204'. [ 283.218425][T10747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.245050][T10747] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.275023][ T5453] 8021q: adding VLAN 0 to HW filter on device eth13 [ 283.279973][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.280078][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.282022][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.282134][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.353946][T10740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 283.432972][T10740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.436047][T10740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 283.492783][T10740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.503655][T10740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 283.581538][T10740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.609391][T10740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 283.630505][T10740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.669938][T10747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.669961][T10747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.142055][ T8840] tipc: Node number set to 11578026 [ 284.227818][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.287808][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.294346][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.294430][T10381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.355311][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.355399][T10382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.982669][T10747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.421646][ T77] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 285.621154][ T77] usb 11-1: Using ep0 maxpacket: 32 [ 285.631147][ T77] usb 11-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 285.678010][ T77] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.678027][ T77] usb 11-1: Product: syz [ 285.678035][ T77] usb 11-1: Manufacturer: syz [ 285.678042][ T77] usb 11-1: SerialNumber: syz [ 285.681551][ T77] usb 11-1: config 0 descriptor?? [ 285.712652][T10747] veth0_vlan: entered promiscuous mode [ 285.857522][T10747] veth1_vlan: entered promiscuous mode [ 285.930409][ T77] ums-onetouch 11-1:0.0: USB Mass Storage device detected [ 285.968727][T10747] veth0_macvtap: entered promiscuous mode [ 285.985381][T10747] veth1_macvtap: entered promiscuous mode [ 286.001770][ T77] usb 11-1: USB disconnect, device number 3 [ 286.017497][T10747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.032391][T10747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.094239][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.164954][ T8147] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.165008][ T8147] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.165044][ T8147] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.231729][T10740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.449642][T10980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.566664][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.566685][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.717972][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.717997][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.312995][T10740] veth0_vlan: entered promiscuous mode [ 287.325810][T10740] veth1_vlan: entered promiscuous mode [ 287.475911][T10740] veth0_macvtap: entered promiscuous mode [ 287.500413][T10740] veth1_macvtap: entered promiscuous mode [ 287.549850][T10740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.595435][T10740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.613946][ T8147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.614004][ T8147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.619049][ T8147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.619089][ T8147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.312233][T10372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.312253][T10372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.663124][T11012] 9pnet_virtio: no channels available for device syz [ 288.670227][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.670250][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.686874][T11009] netlink: 'syz.6.1216': attribute type 2 has an invalid length. [ 289.033509][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1218'. [ 289.033539][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1218'. [ 289.587774][T11025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1220'. [ 293.825496][T11059] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1230'. [ 294.536757][T11063] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1232'. [ 294.653018][ T9] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 294.826759][ T9] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.829021][ T9] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.829048][ T9] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.829080][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.073409][ T9] usb 12-1: usb_control_msg returned -32 [ 295.073456][ T9] usbtmc 12-1:16.0: can't read capabilities [ 295.558952][T11058] batman_adv: batadv0: Adding interface: syzkaller0 [ 295.558972][T11058] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.559000][T11058] batman_adv: batadv0: Interface activated: syzkaller0 [ 295.579097][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1227'. [ 295.847878][T11054] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 296.018778][T11054] batman_adv: batadv0: Removing interface: syzkaller0 [ 296.358503][T11106] jffs2: notice: (11106) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 296.511987][ T5818] usb 12-1: USB disconnect, device number 2 [ 296.837650][T11119] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 296.837674][T11119] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 296.837796][T11119] vhci_hcd vhci_hcd.0: Device attached [ 297.197250][T11137] FAULT_INJECTION: forcing a failure. [ 297.197250][T11137] name failslab, interval 1, probability 0, space 0, times 0 [ 297.197288][T11137] CPU: 3 UID: 0 PID: 11137 Comm: syz.6.1244 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.197318][T11137] Tainted: [L]=SOFTLOCKUP [ 297.197326][T11137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.197339][T11137] Call Trace: [ 297.197347][T11137] [ 297.197354][T11137] dump_stack_lvl+0x100/0x190 [ 297.197385][T11137] should_fail_ex.cold+0x5/0xa [ 297.197411][T11137] should_failslab+0xc2/0x120 [ 297.197440][T11137] __kmalloc_cache_noprof+0x91/0x6d0 [ 297.197469][T11137] ? __kasan_kmalloc+0xaa/0xb0 [ 297.197491][T11137] ? nci_allocate_device+0x105/0x410 [ 297.197519][T11137] nci_allocate_device+0x105/0x410 [ 297.197547][T11137] virtual_ncidev_open+0x6f/0x220 [ 297.197576][T11137] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 297.197604][T11137] misc_open+0x26d/0x450 [ 297.197627][T11137] ? __pfx_misc_open+0x10/0x10 [ 297.197647][T11137] chrdev_open+0x234/0x6a0 [ 297.197671][T11137] ? __pfx_apparmor_file_open+0x10/0x10 [ 297.197700][T11137] ? __pfx_chrdev_open+0x10/0x10 [ 297.197723][T11137] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 297.197751][T11137] do_dentry_open+0x6ab/0x14d0 [ 297.197772][T11137] ? __pfx_chrdev_open+0x10/0x10 [ 297.197807][T11137] vfs_open+0x82/0x3f0 [ 297.197838][T11137] path_openat+0x19fa/0x2440 [ 297.197866][T11137] ? __pfx_path_openat+0x10/0x10 [ 297.197896][T11137] do_file_open+0x20e/0x430 [ 297.197922][T11137] ? __pfx_do_file_open+0x10/0x10 [ 297.197964][T11137] ? _raw_spin_unlock+0x28/0x50 [ 297.197988][T11137] ? alloc_fd+0x471/0x7a0 [ 297.198015][T11137] do_sys_openat2+0x10f/0x1e0 [ 297.198063][T11137] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.198092][T11137] ? find_held_lock+0x2b/0x80 [ 297.198114][T11137] ? __fget_files+0x215/0x3d0 [ 297.198142][T11137] __ia32_compat_sys_openat+0x12d/0x210 [ 297.198171][T11137] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 297.198210][T11137] __do_fast_syscall_32+0x13a/0x8b0 [ 297.198242][T11137] do_fast_syscall_32+0x32/0x70 [ 297.198270][T11137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.198292][T11137] RIP: 0023:0xf708efec [ 297.198314][T11137] Code: Unable to access opcode bytes at 0xf708efc2. [ 297.198321][T11137] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 297.198341][T11137] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 297.198351][T11137] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.198363][T11137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.198373][T11137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.198383][T11137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.198408][T11137] [ 297.204771][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1238'. [ 297.204797][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1238'. [ 297.222507][ T5842] usb 54-1: SetAddress Request (2) to port 0 [ 297.222554][ T5842] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 297.227213][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1238'. [ 297.227230][T11139] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1238'. [ 297.357540][T11119] rdma_rxe: rxe_newlink: failed to add wg2 [ 297.445987][T11123] vhci_hcd: connection reset by peer [ 297.498698][ T5810] vhci_hcd vhci_hcd.8: stop threads [ 297.498728][ T5810] vhci_hcd vhci_hcd.8: release socket [ 297.498775][ T5810] vhci_hcd vhci_hcd.8: disconnect device [ 299.379515][T11186] dummy0: left allmulticast mode [ 299.487356][T11186] lapb0: left allmulticast mode [ 299.679351][T11195] 9pnet_fd: Insufficient options for proto=fd [ 301.045611][ T10] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 301.203453][ T10] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 301.204460][ T10] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 301.204500][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.205485][ T10] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 301.205504][ T10] usb 12-1: Manufacturer: syz [ 301.207755][ T10] usb 12-1: config 0 descriptor?? [ 301.408513][ T10] rc_core: IR keymap rc-hauppauge not found [ 301.408529][ T10] Registered IR keymap rc-empty [ 301.409852][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 301.412145][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input16 [ 301.473836][ T5881] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 301.618767][ T5881] usb 11-1: device descriptor read/64, error -71 [ 301.886383][ T5881] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 301.948942][T11255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.077041][ T5881] usb 11-1: device descriptor read/64, error -71 [ 302.217191][ T5881] usb usb11-port1: attempt power cycle [ 302.241918][ T35] usb 12-1: USB disconnect, device number 3 [ 302.353267][ T5842] usb 54-1: device descriptor read/8, error -110 [ 302.631878][ T5881] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 302.647117][ T5881] usb 11-1: device descriptor read/8, error -71 [ 302.882307][ T5842] usb usb54-port1: attempt power cycle [ 302.897239][ T5881] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 302.918734][ T5881] usb 11-1: device descriptor read/8, error -71 [ 303.028146][ T5881] usb usb11-port1: unable to enumerate USB device [ 303.460429][ T5842] usb usb54-port1: unable to enumerate USB device [ 303.690663][ T5099] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 304.302194][T11310] fuse: Bad value for 'fd' [ 304.524994][T11317] netlink: 292 bytes leftover after parsing attributes in process `syz.8.1278'. [ 304.525025][T11317] netlink: 292 bytes leftover after parsing attributes in process `syz.8.1278'. [ 304.922124][T11304] Console: switching to colour dummy device 80x25 [ 305.066351][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.150671][T11321] ntfs3(nullb0): Primary boot signature is not NTFS. [ 305.172886][T11321] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 307.129957][T11354] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 308.646151][ T44] audit: type=1326 audit(7510805059.508:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11379 comm="syz.7.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 308.646318][ T44] audit: type=1326 audit(7510805059.508:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11379 comm="syz.7.1297" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2fec code=0x7ffc0000 [ 309.806046][ T8147] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.202864][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 310.258436][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 310.321087][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 310.341376][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.342568][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.011657][ T8147] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.210000][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.258365][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.268389][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.332412][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.349670][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.500683][ T8147] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.728975][T11387] lo speed is unknown, defaulting to 1000 [ 311.766504][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.817327][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.851428][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.877598][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.878082][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.880630][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.906161][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.908430][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.909274][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.909865][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.938222][ T8147] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.455355][T11396] lo speed is unknown, defaulting to 1000 [ 312.584015][ T5099] Bluetooth: hci0: command tx timeout [ 312.995844][ T8147] bridge_slave_1: left allmulticast mode [ 312.995879][ T8147] bridge_slave_1: left promiscuous mode [ 312.997854][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.123139][ T8147] bridge_slave_0: left allmulticast mode [ 313.123167][ T8147] bridge_slave_0: left promiscuous mode [ 313.123360][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.393677][ T5099] Bluetooth: hci1: command tx timeout [ 313.556464][ T8147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.578980][ T8147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.585288][ T8147] bond0 (unregistering): Released all slaves [ 313.591126][ T8147] bond1 (unregistering): Released all slaves [ 313.686419][T11406] lo speed is unknown, defaulting to 1000 [ 313.759819][T11410] lo speed is unknown, defaulting to 1000 [ 314.037493][ T5099] Bluetooth: hci2: command tx timeout [ 314.193341][ T5099] Bluetooth: hci3: command tx timeout [ 314.412799][ T5453] 8021q: adding VLAN 0 to HW filter on device eth14 [ 314.425852][T11387] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.425995][T11387] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.426097][T11387] bridge_slave_0: entered allmulticast mode [ 314.427650][T11387] bridge_slave_0: entered promiscuous mode [ 314.457890][T11387] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.457992][T11387] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.458120][T11387] bridge_slave_1: entered allmulticast mode [ 314.459460][T11387] bridge_slave_1: entered promiscuous mode [ 314.611856][ T8147] hsr_slave_0: left promiscuous mode [ 314.622356][ T8147] hsr_slave_1: left promiscuous mode [ 314.623510][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.623528][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.638047][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.638075][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.670056][ T8147] veth1_macvtap: left promiscuous mode [ 314.670129][ T8147] veth0_macvtap: left promiscuous mode [ 314.670255][ T8147] veth1_vlan: left promiscuous mode [ 314.670616][ T8147] veth0_vlan: left promiscuous mode [ 314.681739][ T5099] Bluetooth: hci0: command tx timeout [ 315.408783][ T8147] team0 (unregistering): Port device team_slave_1 removed [ 315.429451][ T8147] team0 (unregistering): Port device team_slave_0 removed [ 315.463272][ T5099] Bluetooth: hci1: command tx timeout [ 315.739512][T11387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.770292][T11387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.865886][T11387] team0: Port device team_slave_0 added [ 315.907704][T11387] team0: Port device team_slave_1 added [ 316.081062][T11387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.081079][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.081100][T11387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.127192][ T5099] Bluetooth: hci2: command tx timeout [ 316.177085][T11387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.177101][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.177119][T11387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.275222][ T5099] Bluetooth: hci3: command tx timeout [ 316.349348][ T5453] 8021q: adding VLAN 0 to HW filter on device eth15 [ 316.452023][T11387] hsr_slave_0: entered promiscuous mode [ 316.452757][T11387] hsr_slave_1: entered promiscuous mode [ 316.453534][T11387] debugfs: 'hsr0' already exists in 'hsr' [ 316.453551][T11387] Cannot create hsr debugfs directory [ 316.614047][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.614111][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.620728][T11396] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.620879][T11396] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.620994][T11396] bridge_slave_0: entered allmulticast mode [ 316.622524][T11396] bridge_slave_0: entered promiscuous mode [ 316.733208][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.733303][T11396] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.733414][T11396] bridge_slave_1: entered allmulticast mode [ 316.735652][T11396] bridge_slave_1: entered promiscuous mode [ 316.754343][ T5099] Bluetooth: hci0: command tx timeout [ 316.876336][T11396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.136601][T11396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.370878][T11410] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.371010][T11410] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.371123][T11410] bridge_slave_0: entered allmulticast mode [ 317.372538][T11410] bridge_slave_0: entered promiscuous mode [ 317.530540][ T8147] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.543678][ T5099] Bluetooth: hci1: command tx timeout [ 317.550254][ T5453] 8021q: adding VLAN 0 to HW filter on device eth16 [ 317.550582][T11406] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.550675][T11406] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.550790][T11406] bridge_slave_0: entered allmulticast mode [ 317.552193][T11406] bridge_slave_0: entered promiscuous mode [ 317.593852][T11396] team0: Port device team_slave_0 added [ 317.594206][T11410] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.594356][T11410] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.594495][T11410] bridge_slave_1: entered allmulticast mode [ 317.595957][T11410] bridge_slave_1: entered promiscuous mode [ 317.607653][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.607729][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.607831][T11406] bridge_slave_1: entered allmulticast mode [ 317.609196][T11406] bridge_slave_1: entered promiscuous mode [ 317.722999][T11396] team0: Port device team_slave_1 added [ 317.886980][ T8147] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.947696][T11406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.950106][T11406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.978793][T11410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.010039][T11396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.010058][T11396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.010091][T11396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.203445][ T5099] Bluetooth: hci2: command tx timeout [ 318.218993][T11410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.219934][T11396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.219953][T11396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.219979][T11396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.287511][T11406] team0: Port device team_slave_0 added [ 318.290976][T11406] team0: Port device team_slave_1 added [ 318.360453][ T5099] Bluetooth: hci3: command tx timeout [ 318.464459][ T8147] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.479599][ T5453] 8021q: adding VLAN 0 to HW filter on device eth17 [ 318.482208][T11410] team0: Port device team_slave_0 added [ 318.489533][T11396] hsr_slave_0: entered promiscuous mode [ 318.490351][T11396] hsr_slave_1: entered promiscuous mode [ 318.490913][T11396] debugfs: 'hsr0' already exists in 'hsr' [ 318.490935][T11396] Cannot create hsr debugfs directory [ 318.566045][T11406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.566063][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.566086][T11406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.567885][T11406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.567897][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.567917][T11406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.584736][T11410] team0: Port device team_slave_1 added [ 318.759015][T11410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.759032][T11410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.759053][T11410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.874664][ T5099] Bluetooth: hci0: command tx timeout [ 318.981686][ T8147] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.008160][T11410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.008177][T11410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.008198][T11410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.024622][T11406] hsr_slave_0: entered promiscuous mode [ 319.025398][T11406] hsr_slave_1: entered promiscuous mode [ 319.025904][T11406] debugfs: 'hsr0' already exists in 'hsr' [ 319.025923][T11406] Cannot create hsr debugfs directory [ 319.175174][T11387] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 319.267780][T11387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.323769][T11410] hsr_slave_0: entered promiscuous mode [ 319.324616][T11410] hsr_slave_1: entered promiscuous mode [ 319.325145][T11410] debugfs: 'hsr0' already exists in 'hsr' [ 319.325162][T11410] Cannot create hsr debugfs directory [ 319.401463][T11387] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 319.419885][T11387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.512399][T11387] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 319.520057][T11387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.520879][T11387] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 319.540283][T11387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.626446][ T5099] Bluetooth: hci1: command tx timeout [ 320.266042][ T5099] Bluetooth: hci2: command tx timeout [ 320.436919][ T5099] Bluetooth: hci3: command tx timeout [ 320.631446][ T8147] bridge_slave_1: left allmulticast mode [ 320.631471][ T8147] bridge_slave_1: left promiscuous mode [ 320.631660][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.672955][ T8147] bridge_slave_0: left allmulticast mode [ 320.672980][ T8147] bridge_slave_0: left promiscuous mode [ 320.673706][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.991302][ T8147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.000759][ T8147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.002812][ T8147] bond0 (unregistering): Released all slaves [ 321.052758][ T5453] 8021q: adding VLAN 0 to HW filter on device eth18 [ 321.517267][ T5453] 8021q: adding VLAN 0 to HW filter on device eth19 [ 321.584332][T11387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.848569][T11387] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.857906][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.858039][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.889776][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.889863][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.117183][ T5453] 8021q: adding VLAN 0 to HW filter on device eth20 [ 322.389769][ T8147] hsr_slave_0: left promiscuous mode [ 322.391411][ T8147] hsr_slave_1: left promiscuous mode [ 322.392252][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.392272][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.407292][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.407313][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.448254][ T8147] veth1_macvtap: left promiscuous mode [ 322.448300][ T8147] veth0_macvtap: left promiscuous mode [ 322.448479][ T8147] veth1_vlan: left promiscuous mode [ 322.448581][ T8147] veth0_vlan: left promiscuous mode [ 323.161456][ T8147] team0 (unregistering): Port device team_slave_1 removed [ 323.184949][ T8147] team0 (unregistering): Port device team_slave_0 removed [ 323.415487][ T5453] 8021q: adding VLAN 0 to HW filter on device eth21 [ 323.515224][T11406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.546003][T11406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.546961][T11406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.628557][T11406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.629486][T11406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.695467][T11406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.698720][T11406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.774814][T11406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.668826][T11406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.681411][T11406] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.723336][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.723421][T10382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.730253][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.730353][T10382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.909313][T11406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.909334][T11406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.208582][T11387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.177764][T11387] veth0_vlan: entered promiscuous mode [ 326.196168][T11387] veth1_vlan: entered promiscuous mode [ 326.305549][T11406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.319736][T11387] veth0_macvtap: entered promiscuous mode [ 326.324022][T11387] veth1_macvtap: entered promiscuous mode [ 326.356472][T11387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.507338][T11387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.760129][T11410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.933721][T11406] veth0_vlan: entered promiscuous mode [ 326.934193][ T8147] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.934251][ T8147] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.006360][T11406] veth1_vlan: entered promiscuous mode [ 327.066081][T11410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.240853][T11406] veth0_macvtap: entered promiscuous mode [ 327.285442][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.285466][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.305262][ T8147] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.306131][ T8147] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.315146][T11406] veth1_macvtap: entered promiscuous mode [ 327.349721][T11406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.428455][T11406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.588928][T11410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.615532][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.615552][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.657476][ T8147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.657531][ T8147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.657560][ T8147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.657589][ T8147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.042829][ T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.042850][ T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.238875][T11410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.371750][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.371771][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.572529][T11396] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.660954][T11396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.662321][T11396] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.796781][T11396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.159471][T11396] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.210341][T11396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.481385][T11396] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.512857][T11396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.847331][ T5738] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.878669][ T5738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.911016][ T5738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.971027][ T5738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.002454][ T5738] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.059748][ T8254] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.413141][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.430047][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.457262][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.514692][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.548235][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.630944][T11410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.650165][T11410] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.651103][T11410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.732282][T11410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.845827][ T8254] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.867149][T11410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.896326][T11410] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.898844][T11410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 331.976147][T11410] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.423737][ T8254] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.659936][T11641] lo speed is unknown, defaulting to 1000 [ 332.724303][T11410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.845584][ T8254] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.977751][T11396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.981857][T11652] lo speed is unknown, defaulting to 1000 [ 333.023482][T11410] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.049797][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.049914][T10381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.051822][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.051913][T10381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.206749][T11396] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.234839][ T5099] Bluetooth: hci0: command tx timeout [ 333.393659][T11410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 333.393682][T11410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.582266][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.582380][T10382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.654423][ T5099] Bluetooth: hci2: command tx timeout [ 333.693823][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.693940][T10382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.766344][ T8254] bridge_slave_1: left allmulticast mode [ 333.766368][ T8254] bridge_slave_1: left promiscuous mode [ 333.766550][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.771851][ T8254] bridge_slave_0: left allmulticast mode [ 333.771880][ T8254] bridge_slave_0: left promiscuous mode [ 333.772040][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.388179][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.506546][ T8254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.515143][ T8254] bond0 (unregistering): Released all slaves [ 334.677317][T11396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.179677][T11641] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.179755][T11641] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.179895][T11641] bridge_slave_0: entered allmulticast mode [ 335.181259][T11641] bridge_slave_0: entered promiscuous mode [ 335.188369][T11641] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.188471][T11641] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.188568][T11641] bridge_slave_1: entered allmulticast mode [ 335.189781][T11641] bridge_slave_1: entered promiscuous mode [ 335.376468][ T5099] Bluetooth: hci0: command tx timeout [ 335.566220][T11641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.649419][T11641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.703257][ T5099] Bluetooth: hci2: command tx timeout [ 335.792814][T11410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.813979][T11641] team0: Port device team_slave_0 added [ 335.851079][T11641] team0: Port device team_slave_1 added [ 335.884694][ T8254] hsr_slave_0: left promiscuous mode [ 335.910851][ T8254] hsr_slave_1: left promiscuous mode [ 335.911972][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.911998][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.925145][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.925166][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.940174][ T8254] veth1_macvtap: left promiscuous mode [ 335.940223][ T8254] veth0_macvtap: left promiscuous mode [ 335.940315][ T8254] veth1_vlan: left promiscuous mode [ 335.940391][ T8254] veth0_vlan: left promiscuous mode [ 336.458901][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 336.517355][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 336.765379][T11641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.765398][T11641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.765427][T11641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.767038][T11641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.767053][T11641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.767073][T11641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.000264][T11641] hsr_slave_0: entered promiscuous mode [ 337.002285][T11641] hsr_slave_1: entered promiscuous mode [ 337.004208][T11641] debugfs: 'hsr0' already exists in 'hsr' [ 337.004234][T11641] Cannot create hsr debugfs directory [ 337.056118][T11652] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.056203][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.056308][T11652] bridge_slave_0: entered allmulticast mode [ 337.058317][T11652] bridge_slave_0: entered promiscuous mode [ 337.061169][T11652] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.061250][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.061360][T11652] bridge_slave_1: entered allmulticast mode [ 337.062868][T11652] bridge_slave_1: entered promiscuous mode [ 337.177816][T11396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.182467][T11652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.312351][T11652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.384080][ T5099] Bluetooth: hci0: command tx timeout [ 337.513828][T11652] team0: Port device team_slave_0 added [ 337.517102][T11652] team0: Port device team_slave_1 added [ 337.802336][ T5099] Bluetooth: hci2: command tx timeout [ 337.805901][T11410] veth0_vlan: entered promiscuous mode [ 337.845282][T11652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.845301][T11652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.845325][T11652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.847272][T11652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.847290][T11652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.847318][T11652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.856379][T11396] veth0_vlan: entered promiscuous mode [ 337.864454][T11410] veth1_vlan: entered promiscuous mode [ 337.995829][T11396] veth1_vlan: entered promiscuous mode [ 338.080527][T11652] hsr_slave_0: entered promiscuous mode [ 338.081476][T11652] hsr_slave_1: entered promiscuous mode [ 338.082173][T11652] debugfs: 'hsr0' already exists in 'hsr' [ 338.082194][T11652] Cannot create hsr debugfs directory [ 338.282211][T11410] veth0_macvtap: entered promiscuous mode [ 338.287012][T11410] veth1_macvtap: entered promiscuous mode [ 338.525593][ T8254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.359039][T11396] veth0_macvtap: entered promiscuous mode [ 339.449492][ T8254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.463239][ T5099] Bluetooth: hci0: command tx timeout [ 339.496726][T11410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.498850][T11396] veth1_macvtap: entered promiscuous mode [ 339.660252][T11410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.742599][ T8254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.826870][T11396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.839440][T11396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.873623][ T5099] Bluetooth: hci2: command tx timeout [ 340.065767][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065813][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065862][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065892][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065920][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065949][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.065977][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.066005][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.424949][ T8254] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.828287][T10381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.828309][T10381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.978205][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.978225][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.279379][T11652] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.340460][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.340480][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.659199][T11652] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.747650][T11795] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 341.747912][T11795] block device autoloading is deprecated and will be removed. [ 341.783315][T11795] [ 341.784479][T11795] ====================================================== [ 341.788454][T11795] WARNING: possible circular locking dependency detected [ 341.791803][T11795] syzkaller #0 Tainted: G L [ 341.804286][T11795] ------------------------------------------------------ [ 341.807425][T11795] syz.1.1310/11795 is trying to acquire lock: [ 341.810440][T11795] ffff88806bad0c50 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 341.819857][T11795] [ 341.819857][T11795] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 341.842659][T11795] ffff88805dd35480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 341.872771][T11795] [ 341.872771][T11795] which lock already depends on the new lock. [ 341.872771][T11795] [ 341.877811][T11795] [ 341.877811][T11795] the existing dependency chain (in reverse order) is: [ 341.883069][T11795] [ 341.883069][T11795] -> #4 (&of->mutex){+.+.}-{4:4}: [ 341.910356][T11795] lock_acquire+0x1d1/0x380 [ 341.912601][T11795] __mutex_lock+0x1a4/0x1bd0 [ 341.914907][T11795] kernfs_seq_start+0x4f/0x2a0 [ 341.936310][T11795] seq_read_iter+0x2c1/0x1270 [ 341.938685][T11795] kernfs_fop_read_iter+0x46c/0x610 [ 341.941344][T11795] copy_splice_read+0x4ba/0xbb0 [ 341.944342][T11795] do_splice_read+0x285/0x370 [ 341.948608][T11795] splice_file_to_pipe+0x82/0x120 [ 341.951078][T11795] do_sendfile+0x366/0xe20 [ 341.953216][T11795] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 341.976040][T11795] __do_fast_syscall_32+0x13a/0x8b0 [ 341.992073][T11795] do_fast_syscall_32+0x32/0x70 [ 341.994577][T11795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.997907][T11795] [ 341.997907][T11795] -> #3 (&p->lock){+.+.}-{4:4}: [ 342.000421][T11795] lock_acquire+0x1d1/0x380 [ 342.002143][T11795] __mutex_lock+0x1a4/0x1bd0 [ 342.004803][T11795] seq_read_iter+0xe1/0x1270 [ 342.023153][T11795] kernfs_fop_read_iter+0x46c/0x610 [ 342.026005][T11795] copy_splice_read+0x4ba/0xbb0 [ 342.028630][T11795] do_splice_read+0x285/0x370 [ 342.030665][T11795] splice_file_to_pipe+0x82/0x120 [ 342.033061][T11795] do_sendfile+0x366/0xe20 [ 342.035679][T11795] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 342.039241][T11795] __do_fast_syscall_32+0x13a/0x8b0 [ 342.043574][T11795] do_fast_syscall_32+0x32/0x70 [ 342.047455][T11795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.052286][T11795] [ 342.052286][T11795] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 342.058518][T11795] lock_acquire+0x1d1/0x380 [ 342.062186][T11795] __mutex_lock+0x1a4/0x1bd0 [ 342.065517][T11795] pipe_lock+0x69/0x80 [ 342.067934][T11795] iter_file_splice_write+0x1fd/0x10b0 [ 342.071176][T11795] do_splice+0x109c/0x1fa0 [ 342.074020][T11795] __do_splice+0x33b/0x370 [ 342.076859][T11795] __ia32_sys_splice+0x189/0x250 [ 342.079674][T11795] __do_fast_syscall_32+0x13a/0x8b0 [ 342.082627][T11795] do_fast_syscall_32+0x32/0x70 [ 342.085449][T11795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.088947][T11795] [ 342.088947][T11795] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 342.093255][T11795] lock_acquire+0x1d1/0x380 [ 342.096799][T11795] mnt_want_write+0x6f/0x420 [ 342.099812][T11795] ovl_create_object+0x130/0x3b0 [ 342.102678][T11795] lookup_open+0x1255/0x1990 [ 342.105199][T11795] path_openat+0xa2c/0x2440 [ 342.107528][T11795] do_file_open+0x20e/0x430 [ 342.109455][T11795] do_sys_openat2+0x10f/0x1e0 [ 342.111239][T11795] __ia32_compat_sys_openat+0x12d/0x210 [ 342.113323][T11795] __do_fast_syscall_32+0x13a/0x8b0 [ 342.115463][T11795] do_fast_syscall_32+0x32/0x70 [ 342.117671][T11795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.120860][T11795] [ 342.120860][T11795] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 342.124215][T11795] check_prev_add+0xeb/0xe60 [ 342.126229][T11795] __lock_acquire+0x1528/0x1f40 [ 342.129662][T11795] lock_acquire+0x1d1/0x380 [ 342.133287][T11795] down_read+0x99/0x4c0 [ 342.136209][T11795] lookup_slow+0x42/0x70 [ 342.138574][T11795] path_lookupat+0x5e8/0xc40 [ 342.141376][T11795] filename_lookup+0x202/0x590 [ 342.144372][T11795] kern_path+0x37/0x50 [ 342.147586][T11795] lookup_bdev+0xd8/0x2a0 [ 342.149808][T11795] resume_store+0x1d6/0x460 [ 342.152964][T11795] kobj_attr_store+0x58/0x80 [ 342.155795][T11795] sysfs_kf_write+0xf2/0x150 [ 342.158401][T11795] kernfs_fop_write_iter+0x3e0/0x5f0 [ 342.161510][T11795] vfs_write+0x6af/0x1050 [ 342.164171][T11795] ksys_write+0x12a/0x250 [ 342.167370][T11795] __do_fast_syscall_32+0x13a/0x8b0 [ 342.170354][T11795] do_fast_syscall_32+0x32/0x70 [ 342.173553][T11795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.177513][T11795] [ 342.177513][T11795] other info that might help us debug this: [ 342.177513][T11795] [ 342.183056][T11795] Chain exists of: [ 342.183056][T11795] &ovl_i_mutex_dir_key[depth] --> &p->lock --> &of->mutex [ 342.183056][T11795] [ 342.190831][T11795] Possible unsafe locking scenario: [ 342.190831][T11795] [ 342.195390][T11795] CPU0 CPU1 [ 342.198956][T11795] ---- ---- [ 342.202059][T11795] lock(&of->mutex); [ 342.204277][T11795] lock(&p->lock); [ 342.207491][T11795] lock(&of->mutex); [ 342.211121][T11795] rlock(&ovl_i_mutex_dir_key[depth]); [ 342.214536][T11795] [ 342.214536][T11795] *** DEADLOCK *** [ 342.214536][T11795] [ 342.220353][T11795] locks held by syz.1.1310/11795: 4, last CPU#0: [ 342.223765][T11795] #0: ffff888024f02630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 342.228964][T11795] #1: ffff888028578460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 342.233327][T11795] #2: ffff88805dd35480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 342.237129][T11795] #3: ffff88801d79b698 (kn->active#96){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 342.246934][T11795] [ 342.246934][T11795] stack backtrace: [ 342.249685][T11795] CPU: 0 UID: 0 PID: 11795 Comm: syz.1.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.258567][T11795] Tainted: [L]=SOFTLOCKUP [ 342.260138][T11795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.268860][T11795] Call Trace: [ 342.270355][T11795] [ 342.271626][T11795] dump_stack_lvl+0x100/0x190 [ 342.290353][T11795] print_circular_bug.cold+0x178/0x1be [ 342.292865][T11795] check_noncircular+0x146/0x160 [ 342.294822][T11795] check_prev_add+0xeb/0xe60 [ 342.296602][T11795] ? __lock_acquire+0x5c0/0x1f40 [ 342.298234][T11795] __lock_acquire+0x1528/0x1f40 [ 342.299829][T11795] lock_acquire+0x1d1/0x380 [ 342.301323][T11795] ? lookup_slow+0x42/0x70 [ 342.302805][T11795] ? __pfx___might_resched+0x10/0x10 [ 342.304574][T11795] ? try_to_unlazy+0x296/0x910 [ 342.322552][T11795] down_read+0x99/0x4c0 [ 342.324204][T11795] ? lookup_slow+0x42/0x70 [ 342.325986][T11795] ? __pfx_down_read+0x10/0x10 [ 342.327804][T11795] lookup_slow+0x42/0x70 [ 342.329312][T11795] path_lookupat+0x5e8/0xc40 [ 342.330914][T11795] filename_lookup+0x202/0x590 [ 342.332469][T11795] ? __pfx_filename_lookup+0x10/0x10 [ 342.334765][T11795] ? do_getname_kernel+0x5d/0x250 [ 342.350279][T11795] ? __asan_memcpy+0x3c/0x60 [ 342.351997][T11795] kern_path+0x37/0x50 [ 342.353530][T11795] lookup_bdev+0xd8/0x2a0 [ 342.355435][T11795] ? __pfx_lookup_bdev+0x10/0x10 [ 342.357478][T11795] ? __asan_memcpy+0x3c/0x60 [ 342.360154][T11795] resume_store+0x1d6/0x460 [ 342.363467][T11795] ? __pfx_resume_store+0x10/0x10 [ 342.368126][T11795] ? lock_acquire+0x1d1/0x380 [ 342.372452][T11795] ? sysfs_file_kobj+0x21/0x290 [ 342.376766][T11795] ? find_held_lock+0x2b/0x80 [ 342.380165][T11795] ? sysfs_file_kobj+0xe4/0x290 [ 342.383448][T11795] ? sysfs_file_kobj+0xe4/0x290 [ 342.385529][T11795] ? __pfx_resume_store+0x10/0x10 [ 342.387638][T11795] kobj_attr_store+0x58/0x80 [ 342.389196][T11795] ? __pfx_kobj_attr_store+0x10/0x10 [ 342.390982][T11795] sysfs_kf_write+0xf2/0x150 [ 342.393953][T11795] kernfs_fop_write_iter+0x3e0/0x5f0 [ 342.397094][T11795] ? __pfx_sysfs_kf_write+0x10/0x10 [ 342.400531][T11795] vfs_write+0x6af/0x1050 [ 342.403134][T11795] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 342.406472][T11795] ? __pfx_vfs_write+0x10/0x10 [ 342.408763][T11795] ? find_held_lock+0x2b/0x80 [ 342.411565][T11795] ksys_write+0x12a/0x250 [ 342.414176][T11795] ? __pfx_ksys_write+0x10/0x10 [ 342.417262][T11795] __do_fast_syscall_32+0x13a/0x8b0 [ 342.420722][T11795] do_fast_syscall_32+0x32/0x70 [ 342.423118][T11795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.425736][T11795] RIP: 0023:0xf7fd3fec [ 342.439286][T11795] Code: Unable to access opcode bytes at 0xf7fd3fc2. [ 342.442098][T11795] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 342.445359][T11795] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 342.448573][T11795] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 [ 342.465893][T11795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.469057][T11795] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.472487][T11795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.476247][T11795] [ 342.524451][ T8254] bridge_slave_1: left allmulticast mode [ 342.524476][ T8254] bridge_slave_1: left promiscuous mode [ 342.524610][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.584117][ T8254] bridge_slave_0: left allmulticast mode [ 342.584141][ T8254] bridge_slave_0: left promiscuous mode [ 342.584268][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.910628][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.922695][ T8254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.932093][ T8254] bond0 (unregistering): Released all slaves [ 343.068002][T11652] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.221331][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 343.452714][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 343.528125][ T8254] hsr_slave_0: left promiscuous mode [ 343.528515][ T8254] hsr_slave_1: left promiscuous mode [ 343.528897][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.528912][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.529345][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.529357][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.574680][ T8254] veth1_macvtap: left promiscuous mode [ 343.574728][ T8254] veth0_macvtap: left promiscuous mode [ 343.574796][ T8254] veth1_vlan: left promiscuous mode [ 343.574861][ T8254] veth0_vlan: left promiscuous mode [ 343.872622][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 343.887388][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 344.340642][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 344.718958][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5 [ 345.594831][ T8254] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.757790][ T8254] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.845293][ T8254] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.991337][ T8254] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.202142][ T8254] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.275532][ T8254] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.386274][ T8254] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.449091][ T8254] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.590856][ T8254] bridge_slave_1: left allmulticast mode [ 346.590882][ T8254] bridge_slave_1: left promiscuous mode [ 346.591031][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.591943][ T8254] bridge_slave_0: left allmulticast mode [ 346.591961][ T8254] bridge_slave_0: left promiscuous mode [ 346.592087][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.606788][ T8254] bridge_slave_1: left allmulticast mode [ 346.606810][ T8254] bridge_slave_1: left promiscuous mode [ 346.606934][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.620810][ T8254] bridge_slave_0: left allmulticast mode [ 346.620831][ T8254] bridge_slave_0: left promiscuous mode [ 346.620958][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.657789][ T8254] bridge_slave_1: left allmulticast mode [ 346.657836][ T8254] bridge_slave_1: left promiscuous mode [ 346.657960][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.659065][ T8254] bridge_slave_0: left allmulticast mode [ 346.659081][ T8254] bridge_slave_0: left promiscuous mode [ 346.659176][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.704519][ T8254] bridge_slave_1: left allmulticast mode [ 346.704546][ T8254] bridge_slave_1: left promiscuous mode [ 346.704667][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.705729][ T8254] bridge_slave_0: left allmulticast mode [ 346.705741][ T8254] bridge_slave_0: left promiscuous mode [ 346.705796][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.846822][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.863620][ T8254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.868781][ T8254] bond0 (unregistering): Released all slaves [ 346.919319][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.925827][ T8254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.946870][ T8254] bond0 (unregistering): Released all slaves [ 346.988429][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.000642][ T8254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.009612][ T8254] bond0 (unregistering): Released all slaves [ 347.107543][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.128090][ T8254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.145934][ T8254] bond0 (unregistering): Released all slaves [ 347.964684][ T8254] hsr_slave_0: left promiscuous mode [ 347.965253][ T8254] hsr_slave_1: left promiscuous mode [ 347.965721][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.975903][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.002701][ T8254] hsr_slave_0: left promiscuous mode [ 348.026120][ T8254] hsr_slave_1: left promiscuous mode [ 348.026594][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.054582][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.058855][ T8254] hsr_slave_0: left promiscuous mode [ 348.059238][ T8254] hsr_slave_1: left promiscuous mode [ 348.059647][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.059662][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.060066][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.060079][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.111126][ T8254] hsr_slave_0: left promiscuous mode [ 348.114409][ T8254] hsr_slave_1: left promiscuous mode [ 348.115065][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.115086][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.115844][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.115862][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.195582][ T8254] veth1_macvtap: left promiscuous mode [ 348.195633][ T8254] veth0_macvtap: left promiscuous mode [ 348.195751][ T8254] veth1_vlan: left promiscuous mode [ 348.195810][ T8254] veth0_vlan: left promiscuous mode [ 348.196811][ T8254] veth1_macvtap: left promiscuous mode [ 348.197670][ T8254] veth0_macvtap: left promiscuous mode [ 348.197752][ T8254] veth1_vlan: left promiscuous mode [ 348.197836][ T8254] veth0_vlan: left promiscuous mode [ 348.455769][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 348.460275][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 348.574733][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 348.578606][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 348.863961][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 348.873476][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 349.066789][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 349.072442][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 350.071040][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6 [ 350.409954][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7 [ 350.636344][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8 [ 350.872479][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9 [ 351.541471][ T5453] 8021q: adding VLAN 0 to HW filter on device eth12