last executing test programs: 31m4.320267682s ago: executing program 0 (id=2554): socketpair(0x1, 0x100000005, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x2, 0x8000009, 0x0, 0x0, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x80000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) (fail_nth: 6) 31m4.112632288s ago: executing program 0 (id=2557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180100000100a7d900000000fd1fb300850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000300)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='tlb_flush\x00', r3, 0x0, 0x1}, 0x18) fsopen(&(0x7f0000000280)='befs\x00', 0x0) 31m4.009210469s ago: executing program 0 (id=2558): socketpair(0x1, 0x100000005, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x2, 0x8000009, 0x0, 0x0, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x80000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r2, 0x351e, 0x483, 0x3e00, 0x0, 0x0) 31m3.809354472s ago: executing program 0 (id=2559): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x400000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000680)={0x3, @pix_mp={0x6, 0x20006, 0x3447504d, 0x9, 0x7, [{0x2, 0x3ff}, {0x7ff, 0x2}, {0x6, 0x6}, {0x6, 0xff}, {0x8000, 0x95d1}, {0xa706, 0x7}, {0xe3b, 0x42f70ce4}, {0x800000, 0x10007ff}], 0x0, 0x1, 0x4, 0x1, 0x5}}) r2 = openat(r0, &(0x7f0000000400)='./file1\x00', 0x32c80, 0x0) fcntl$setlease(r2, 0x403, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x90009427, &(0x7f0000000640)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, 0x7, 0x2, @tick=0x5, {}, {}, @raw32={[0x9, 0x8, 0x8]}}, {0xfb, 0x0, 0x1, 0x81, @time={0x83f0, 0x8}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}], 0x38) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) write(r3, &(0x7f00000000c0)="822a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES8=r1, @ANYBLOB, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x2004c000) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000280), 0x2840002, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="26ca198e2879279564d8d06f8c7fbd58af00000000000001000000000000"]) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRESOCT=r0], 0x710}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x4040000) mount(&(0x7f0000000080)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000000)='ext4\x00', 0x4000, 0x0) fcntl$getownex(r5, 0x10, &(0x7f00000005c0)) getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000081fb5e57434977c12d6e69c53f86e1ec7e770d0cc4d1c6ca658d07379a1f02e637c982571e4d5ac9c7b1d11016658321e0c270bc305c808aaa5dcd24d2af3771246b48708d86581adb755c553eb0766083a293fe851c7569919eed57113b094a579bd60b7b7eedb02f0c6cceed89d2ce43dde2a611738653f3926fd049b7f4985b90db28f7389b709e5c0c869f03bf3c3121adf10f28aae44de7b4720a59dcdbf74b49ad7c81e8cd65d78b9aaeb0fa81d5277014cf053405d153173059e6ea6f02d10e11583f03480f00", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000086670200060000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3}, 0x94) socket$packet(0x11, 0x3, 0x300) 31m3.589484197s ago: executing program 0 (id=2560): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x17, 0x2, @thr={&(0x7f0000000440)="d5db83aa1d3451ccd13675a34859f629b37e1cc1d1885d9213e4128b7bdde2aa1011891b81c2c5e608e9d48f0f4a61499b8d7460e32c02d3a7f88239f2e5c5cf01a73f452ad29571", &(0x7f0000000300)="f13f85c335d58261f2c54cab712971ce51a321deac849f0a9d848e363b72ca217f30c015b5d7998a794b052586f54bb094b4fb17500a55f496d5e3"}}, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f00000013c0)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9z#\xf4\xf0\x96\x8e\xaa\x04[j\x9f\xa6\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x04\x00\x00\x00\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<\xad\xd9\xefiN\xf3\xba\x80\xf7\xc2\x93\xa4{\xe1|\xc0;k\x031\xa7{\xff\x93\x19$\xa5\xd3\xd6`\x990m\x95\x9f\xf0\xff\x80\xcc\x9b\xa3\xbd\xa1\x00\x01\xb5\x15?]vI\xe4|M\xabjtB\x98:\xb8b>@\xca\r\xfa\xba- \x99\x9f\xe9h%\xac\x10\x06\xec\f\v\xee\x9dj+\xe0\xf5\xf5\x9d\xb1\xce\r\xced5K\xfe\xe3E\'\xba\xa0\r7\xbc\xda\x1b\x0eqn;\xef;28\xeb\x14\xff\xc9\xcf\x8e\x8c|\xc3\xe5\x15\xfc\xc2\xb7\xfa\x86f\x048\x14\xd9\x9fS\xec\xea\xb5\x92~Q\xb6c\x82m\xe2\xb2+,H\x9d6') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 31m2.199257555s ago: executing program 0 (id=2561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x7, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x812c}}]}, &(0x7f0000000080)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20044880) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r5}, 0xc) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r9, 0x0, 0x1}, 0x18) 30m46.976233497s ago: executing program 32 (id=2561): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x7, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x812c}}]}, &(0x7f0000000080)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20044880) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r5}, 0xc) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r9, 0x0, 0x1}, 0x18) 19m23.573618539s ago: executing program 2 (id=6897): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='uid_map\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x0, 0x0, 0x8000, 0x460, r1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x27, 0xe, 0x0, &(0x7f00000005c0)="f8adda3fa41900000000c1c20261", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000180), 0x254202, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x7f) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) getsockname$ax25(r4, &(0x7f0000000280)={{0x3, @default}, [@netrom, @remote, @bcast, @remote, @netrom, @bcast, @remote, @netrom]}, &(0x7f00000001c0)=0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40046201, &(0x7f0000000040)='/dev/dma_heap/system\x00') ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086201, &(0x7f0000000080)=0x20) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}], 0x1, &(0x7f0000000200), 0x0, 0x0) 19m23.463009898s ago: executing program 2 (id=6901): io_uring_setup(0x58c1, &(0x7f0000001240)={0x0, 0xbbee, 0x1, 0x2, 0xd1}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x1, 0x0, [{0x80000008, 0x6, 0x4, 0x5cd, 0x9, 0x6a, 0x4a}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x709, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r4, 0x9, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000046c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x3, 'pimreg0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000040000000000003000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r9 = fspick(0xffffffffffffffff, &(0x7f0000004600)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000004640)='!\x00', &(0x7f0000004680)='sample\x00', 0x0) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)=""/69) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x61901, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r11, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r10, 0x0}]) 19m16.797831244s ago: executing program 2 (id=6905): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x12) 19m15.889167434s ago: executing program 2 (id=6960): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 19m15.72077967s ago: executing program 2 (id=6961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x170, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x82ee}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88be}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x106, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @device_a, @random="00c073e7f09d", {0xd, 0xff}, @value=@ver_80211n={0x0, 0xc, 0x2, 0x3, 0x0, 0x3}}, @void, @val={0x1, 0x1, [{0x16, 0x1}]}, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x4, 0x0, {0x5, 0x0, 0x0, 0x80, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x809, 0xffffff00, 0xe}}, @void, [{0xdd, 0xc5, "51c84cc856562b24d953a7e4fc787779b539368436513503865ef9aa1ffa54d2a66d24aa4d469becfb0631a51fe48c44f975b1e372c22b9f7f2a1ab1ad85747d19e481444dd9e53c1e059b958c1f1bf8bc8678247aef91d4c25fef40bf915f2d73107577d4eac5187302722e9aa2ca44179c3ab474e7e99f1b2d217655736ff90e8ebefb51e8ddaee1c20cbd1840b600e0afb3ce69706e6ea799dbeb70e2cb426176d7f93dfc4c91040465192b680e171bceb9997695a6d8dfef8ad0928dc6a665994550d1"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x2}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x11}]}, 0x170}, 0x1, 0x0, 0x0, 0x48801}, 0x4008804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf251300000008000300", @ANYRES32=r2, @ANYBLOB="040013000a000600080211000001000006001200830000000600b500670600001c0011"], 0x58}, 0x1, 0x0, 0x0, 0x24000012}, 0x4814) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 19m14.341834085s ago: executing program 2 (id=6966): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x13, r0, 0xf46a5000) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="d22d13583d77b75f9a5a73cc9fbf857db6379fbb6fb22622b26bf1d074aaa369f53fa50544602c127a1bed61444b47bae1c6bef1f0cd47721c840449fef82ce329932b5e5e47a3ede21495f933dd742eff70cd309feb0f824b385c0cf1c3aa9bd243aa747714ec2b2b32b79daa507ca9a5072cf3c30a7ae12d87469b693497666744dc8c4bd48180d69babf904ec0e294cbffc034e96984b1f8c30dbee7687bf9fa357c164be8d84df9702926d4f186a3b17f6a07536290e14b53ad50d3ed145eef333f9f8a0c8b1350542f761364dd3303365714361d63b9249ebab53") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x41, 0x6, 0xc7, 0x4}, {0x2, 0x2, 0x2, 0x6}, {0x73e, 0x67, 0xc, 0x3}, {0x800, 0xb, 0x8, 0x707f52a7}, {0xa, 0x4, 0x4, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={r2, 0x2, r0, 0x40, 0x80000}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x10001, 0x9df7, 0x3, 0x4}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x10001, 0x5ef4, 0x401, 0x380, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340)={0x1, 0x74, 0x180000}, 0x20) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000380)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000003c0)={0x68, 0x97a7df8, 0x8, 0x8, 0x5}) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x4, 0x101002) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000480)={r5, 0x1}) r6 = openat$ipvs(0xffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x9, 0x1b, 0x100, 0x2, "2793e349dca4b46285c02a07a5dc4b583556c6ebd97affbcc36786680d9c3932"}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/132, 0x84, 0x0, &(0x7f0000000600)=""/206, 0xce}, &(0x7f0000000740)=0x40) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000780)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000007c0)={0x50000003}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r6, r6, 0x18, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000001940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001900)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0xcc, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x9c, 0xc, "7c437d686f6f1d543ae8588ab005fd23fbfaa0afdf04e4032bfe83f40abda6c266335d55272a8b61d9774d1cfd0c248c7ef6acbb5496604d8d09ede54f7f1e04d9f54384607552a0538d33b5b76c19c12da324c38bff56254b17871ab33a47dae70b021c704043019270dcc7cb4a7da6105b399e83e101b885c49940dab1f24c967a3a03e096949e291bbd2729047ad003582f3ec6e236fa"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}}, @NFT_MSG_DELOBJ={0xe0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0x7d, 0x8, "b1b3b530a0cd9b000550e479ea8e1a569353bf47bacd070cf14eca350cad8a600fdab2574d7b532ee2f5fa24d5ad78b975737eaa11480e9febf12dff4cc45a51a1149a5eddb272140d384c2c9fe6e35dbc7da7f5b2f83ffcf5c58880d0b161179602adfe54ef23d025befac406ac4f8e2d8f1dc510e20ea601"}, @NFTA_OBJ_USERDATA={0x35, 0x8, "1aaf7b079d1563aaab08b80bb7fc74e4c686424305d5a9c0052ce0e22ff83e42b0564b47f554b5d20e12ee869282ee186e"}]}, @NFT_MSG_DELOBJ={0xa8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x87, 0x8, "8fbf2121609feb0aa5c57cf096fdf0656e3faa48791d41bc684bf1325471f9d96eb5e1f8f1116545e0d462b02a9831695b9a017991471327579b1c8bdc4df63db441bd947e3ce666be87aaa87e534a2c1a121230b510a26fe82efc9f1ec2b5cf9bd4fa42692bfa9fb122431cc7c0bbf34c3acf88f3744917bc686bb0ec29b7eba165b3"}]}, @NFT_MSG_DELSETELEM={0xddc, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xdc0, 0x3, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x128, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x14, 0x1, "7f3921e4190eb939ad607c96080130e2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "cb65fa2eab15937364d832d67b4c231b2ee812c6013ea488e4f771ee7888f6853c16581ba4958d3406273d222ffde82ce968b0b621b58e19dff21df404438953cf3409ffc52c3535088e7798d19e1f1b16e016e42d91eef17b68639290b8efd824e6ceeee3e2b355752ff6c805234ecf3ed9b5eb12466d4e237b63dcf7a0c1d5be60e19668b434868c9cf5c52e02c50958ebab969531819ee6e4c744fb040b807614da6f3fdf"}, @NFTA_DATA_VALUE={0x3d, 0x1, "166772471326b0c6cd1cdd1df02b7d9c10335c1ce2116460a4157b0710ea43363fa0dd8036ebd8cf4e5b48b204165a145cab6662516bd1d4c9"}]}]}, {0x3e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd3, 0x1, "c97a779269d9d83647a88d4965f6405228a4941c49dd93faba88ca546a10587a1028c1030b6ae92c11f6b9c7c24b3fbed9dc08082804fd23527903c6ad4d98eb029b21e8b6402b31bf1271bb4e957048d73060a45a8fd04923eadb0dd81abcc78a7c90063560ee6cae3e30c52a768f3d1ec9656e62babe56577f615ea7a8979105ee17e966c23ad9e39f31dba9445eb492ba0d2570bd029126abd3c9bd262e5ffb51d6bd20142a4f39c00d46bfcab307427ec8bd8c4b1ea7cdaff6fb1c2d81da751c9ace95a358aed1ae5b6e4c6f28"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "015a35435295f1a14c7e95f961f8dc2a518fd67e743f6f6ab25a86af0d41ee64e8f7d4af7223f7ecdbafbecf271e15d192aca38a99c1e669c22350d186be51aec48c379b2571fffff22fbcd7932274dd3b2a0b651ded9f35b1461c6bd40e81ad"}, @NFTA_SET_ELEM_KEY_END={0x204, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x97, 0x1, "a3ade7352f8d9b015f6d61a816334a64cdcc71ee413eb223c2cb7ea34d6db402e76e954b2ea8cf96c4547d141d0f53e40778c751f5bb227e34332382084a4bc51d0eb0578c7084742e99eaa085ba237b1e3e5e970a9bc66939f06b764a60959d8f94ea530d0e1d9bfa7d35b9fa76274e319983bdb9d6857829cbf859df5ff5adfaaa7c6bf12ca471d73c515d17d5bc22345759"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "95986ae63a4f255dbb0da5ed902d280b402a653c62a95f1ea32f0e5669015c82d9c5631821bc44663753d77ac77764734a79304b912e5a231396e79814d050e38e92ce787294d05b9d7d1dd06f103f6dfbe9635debfb27dd7cd741d573e751480c578c66633ceee0be87a32dbe97a9cebbb96f1ea3c3dc6b27cc9724e407d5deb76586b45186c2400490d38349d9fcd2ac90798208b64a8cc118c0f4bce5973dad2689997b339d861f631f4dd5c0df91cc3ab36316696a2f24da2d4b300d8f185fbd00ae75b4cc8ae144db0fe591867f67db"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "89054dca6f4b9e7227bea75a333f6a39a8cf07153104d2d0befef8192dfac85f937c022d0a8b21ab1c0cbb697ac7c84d7c3f2a576c1f81f241180d498074677a7078fa145f3d271975b8003dea"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "1542b890cc0ab8d1ce7da0"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "d0eb59c440694bab842cec3073c483eb27e3d8c9c203ab3ca3bd1c87baa3193af860c0b0d17a6e947397910058f77772e772324a9cfd26f4a824ccb4875ef6d503b3f7871f360ac787da2c713ce9cf3e154bc7b0dbb24802ededdeb1b3c45ad987723e1df55c6f5f48f6d2707f81bcced7dc7fb18c01bce52bd4ba31301651725eaab76acd5e270e6e80348cd829076f5f898ac0f73ca4af568891b10a667c8e1d7279148cdd"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xc3, 0x6, 0x1, 0x0, "fd5e878ebf03c423f85ce6f36bf8b150c63a41a66ea697e2e8c0cc510b8a3f18caa60e17a9ba3073fdc536b99be5f9d9becb7b4e805721d76bc9db157ef556b98c954f72e6fdadb1e2d70466f7ea28f736a113245bf05dcf4f3aa4b49b8af4fdc98b2f3823664ac932f0b4616f6936e56ed1d58f36972504718065a2286eb03ee15a3f5eea5b25eb850f7d5930d4939ef9cfbae5539f8eb329b9850396ba993890edf8f36e7b1eb063d8ca55ba597d8e7b675502b9434c49a74395afed15ae"}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x39c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "95edda72288a41a96d3f08bca23987631817a08482806a0a5f0416395029eec72ea0a8555ff236c5418a2d5144537b18a64602ac52fe0ba1374ab6044127aa63ebf9954257d7727968a0e6b8e67f05539eac46a83b2234dbdc8f0981a03462ad4756fdf5d3baa0d8131983d72595f35cd129049063d22324c6269ad74150c4d948fd5ac9b6129df0f61420eef02ee1bf01a1f9fa994339a9025afefa6d323ee7d6fb7fef8351ef5fbfd03096599b5e2181293b1f80c73606a917713ff01eb4bfba81d2987de8fedb327145403fa6b0f59298519dca6ddd109147f4d9224c31cc6401adb2f100e037f46d73f81c0de3ebb142170c52"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x290, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "a13cf07d072cf86884f9a0f26311783c23f6563bf4975111833d503534bf476a677b6026d8581223bd194534c1beba2a6d5aea7730d1c3a38ea2bbf7c0dc680ea7a439805e72aace34bad03d48333bafc318b618534f3e857528402eb2c5f7bb175e4cedc81e57dbe5"}, @NFTA_DATA_VALUE={0x75, 0x1, "b016eeb1592fb192506696471c230d8e423a02149f833f01375daa7fd8b6e172f97b6efa8aa8b011a35374aca6c791b895532c17a5a176cd6fda73c6ca89ab45154ef218ae1679ad057d75e7e8801bd837db47abf65b95f6f36e46cd2b6d15fadcca9aadbe1dc889c031b8a74281fc5549"}, @NFTA_DATA_VALUE={0xdb, 0x1, "3de88926e4a975d315208bbe21cc0b8175f7aeacdb4e9306b374b0ffcfd0ed9ee89db82fd38d4d45b577243b74816b001f67e4a2aa03ca2d673295a185d1a34a990b55cf86f779c96e3580150a80ac0ca8f823bac8730661411bc376f326106dc09a0434758f2877ba4a259d39265bd09b340fdd27104505d675372731ceb9d7d1bff07f884545ec1521a9df8ced951e7d4911aa2283eff2f7c52b2e95f75cdb03915c08ce92d3274eb5ed9ded0e35c596d9aad7121fbf6fc7f2ffce0da7d050ec33d82f513cb04931ecf801746ea3974a880fb387df4d"}, @NFTA_DATA_VALUE={0xc7, 0x1, "42b3a7dc8029a23b0e83585c28fbb590a851254c09915e3ce24c5b0528be8a9c4fb81761cdfadaba01417c6a8887735912b9245a8fd7e9e5b5d90b2cb17fad3f4b072a023c2db556f2c0d3f7d22870ba50a2861bd19c946244d28e855c2719cd0dd209cb8d44f434f2f7a450b3646105867e553c99eb8cc4f36b71e67c186bc64c97b85f30e8ec3e51cd4a3ead4d9a95d629598661ba67c8364209e15b86161b415253391f2eb0cf8b22be41f96b8d6326650be955fc40b4bd048c577c9c0a056545a8"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x130, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0xbe, 0x6, 0x1, 0x0, "fb722f6908752792bf10e7c9b903f3f445f7431670bf5f1c119b962b105414e7525ca9b31037f3c3bf548197b9144400c9bbb542a6818292fa12bdb59f19fb88879435029eb36f611e207ba3975c56c4b53080b1159ed70e980ad319d46716e5997a891769bfcf59cc6b4ff7d5d8ead55ccafd45eb36b5ee4deedd367b9c3b5ebc3ec5c0d0353ac78191723a3a38d2cd0cb00ddcc43ad25780bfeeac1c6a827512f73f918df4167cf8810597fb97864272ba1dc2d8b39ab889f0"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x3a, 0x6, 0x1, 0x0, "b171eea065f52bcae54683c5e0db133cb63389b983c7a9a7280529855b93934d7a1d1b14a4a7bb8b5960287055b33c83a138c8cfc6e1"}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x17c, 0xb, 0x0, 0x1, [{0x128, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x11c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfa, 0x1, "638bb15350a460e495ecfd93e493e331cbc4e70bbe2a0ebd92d210a4e8897e01cf32f9292566da0ffda1355922ed24212f6bc10588a97cb83b31a20be8544c0c2a5ff529d9942490023729c4d800ed783259d675518f8d5660b84b15afa5860f45f432101f7a8640fdd049ddc332b6faa64f52e85f676d0d0990e393d3f3d2c7a50155a91f64086a8f0effff12f6caab3f093c5439a178dd5cac9903cbea76a39f6ceeda4358f2216ad01e8851347d97308430127a71ea660fbaeb73eb90dfea32e6850c71aed5a0cd563b42547746ad17a222dce31762e9ac211ecb0696a2632f479465b82e3e782b9d45a8dbb970cd0e37efa452bc"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xb}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14}}, 0x106c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r7 = openat$snapshot(0xffffff9c, &(0x7f0000001980), 0x8000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r7, 0x40043311, &(0x7f00000019c0)) recvmmsg(r6, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001a80)=""/36, 0x24}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/20, 0x14}], 0x4, &(0x7f0000002b40)=""/46, 0x2e}, 0xe}, {{&(0x7f0000002b80)=@nfc_llcp, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c00)=""/6, 0x6}, {&(0x7f0000002c40)=""/1, 0x1}, {&(0x7f0000002c80)=""/91, 0x5b}], 0x3, &(0x7f0000002d40)=""/28, 0x1c}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/55, 0x37}, {&(0x7f0000003dc0)=""/190, 0xbe}, {&(0x7f0000003e80)=""/29, 0x1d}, {&(0x7f0000003ec0)=""/196, 0xc4}, {&(0x7f0000003fc0)=""/78, 0x4e}, {&(0x7f0000004040)=""/40, 0x28}, {&(0x7f0000004080)=""/30, 0x1e}, {&(0x7f00000040c0)=""/67, 0x43}], 0x9, &(0x7f00000041c0)=""/204, 0xcc}, 0x5944}, {{&(0x7f00000042c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)}, {&(0x7f0000005380)=""/84, 0x54}, {&(0x7f0000005400)=""/180, 0xb4}], 0x4, &(0x7f0000005500)=""/187, 0xbb}, 0x3}, {{&(0x7f00000055c0)=@nfc_llcp, 0x80, &(0x7f0000006800)=[{&(0x7f0000005640)=""/195, 0xc3}, {&(0x7f0000005740)=""/63, 0x3f}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/126, 0x7e}], 0x4}, 0x80}, {{&(0x7f0000006840)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000068c0)}, 0x2}], 0x6, 0x10110, &(0x7f00000069c0)) openat$cgroup_procs(r6, &(0x7f0000006a00)='cgroup.procs\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000006a40)=0x3) syz_open_dev$usbfs(&(0x7f0000006a80), 0x81, 0x80801) 19m14.220976399s ago: executing program 33 (id=6966): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000003, 0x13, r0, 0xf46a5000) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)="d22d13583d77b75f9a5a73cc9fbf857db6379fbb6fb22622b26bf1d074aaa369f53fa50544602c127a1bed61444b47bae1c6bef1f0cd47721c840449fef82ce329932b5e5e47a3ede21495f933dd742eff70cd309feb0f824b385c0cf1c3aa9bd243aa747714ec2b2b32b79daa507ca9a5072cf3c30a7ae12d87469b693497666744dc8c4bd48180d69babf904ec0e294cbffc034e96984b1f8c30dbee7687bf9fa357c164be8d84df9702926d4f186a3b17f6a07536290e14b53ad50d3ed145eef333f9f8a0c8b1350542f761364dd3303365714361d63b9249ebab53") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x41, 0x6, 0xc7, 0x4}, {0x2, 0x2, 0x2, 0x6}, {0x73e, 0x67, 0xc, 0x3}, {0x800, 0xb, 0x8, 0x707f52a7}, {0xa, 0x4, 0x4, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000200)={r2, 0x2, r0, 0x40, 0x80000}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000240)={0x0, r0, 0x10001, 0x9df7, 0x3, 0x4}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x10001, 0x5ef4, 0x401, 0x380, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000340)={0x1, 0x74, 0x180000}, 0x20) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000380)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000003c0)={0x68, 0x97a7df8, 0x8, 0x8, 0x5}) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x4, 0x101002) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000480)={r5, 0x1}) r6 = openat$ipvs(0xffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000500)={0x9, 0x1b, 0x100, 0x2, "2793e349dca4b46285c02a07a5dc4b583556c6ebd97affbcc36786680d9c3932"}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/132, 0x84, 0x0, &(0x7f0000000600)=""/206, 0xce}, &(0x7f0000000740)=0x40) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000780)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000007c0)={0x50000003}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r6, r6, 0x18, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000001940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001900)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0xcc, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x9c, 0xc, "7c437d686f6f1d543ae8588ab005fd23fbfaa0afdf04e4032bfe83f40abda6c266335d55272a8b61d9774d1cfd0c248c7ef6acbb5496604d8d09ede54f7f1e04d9f54384607552a0538d33b5b76c19c12da324c38bff56254b17871ab33a47dae70b021c704043019270dcc7cb4a7da6105b399e83e101b885c49940dab1f24c967a3a03e096949e291bbd2729047ad003582f3ec6e236fa"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}}, @NFT_MSG_DELOBJ={0xe0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_USERDATA={0x7d, 0x8, "b1b3b530a0cd9b000550e479ea8e1a569353bf47bacd070cf14eca350cad8a600fdab2574d7b532ee2f5fa24d5ad78b975737eaa11480e9febf12dff4cc45a51a1149a5eddb272140d384c2c9fe6e35dbc7da7f5b2f83ffcf5c58880d0b161179602adfe54ef23d025befac406ac4f8e2d8f1dc510e20ea601"}, @NFTA_OBJ_USERDATA={0x35, 0x8, "1aaf7b079d1563aaab08b80bb7fc74e4c686424305d5a9c0052ce0e22ff83e42b0564b47f554b5d20e12ee869282ee186e"}]}, @NFT_MSG_DELOBJ={0xa8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x87, 0x8, "8fbf2121609feb0aa5c57cf096fdf0656e3faa48791d41bc684bf1325471f9d96eb5e1f8f1116545e0d462b02a9831695b9a017991471327579b1c8bdc4df63db441bd947e3ce666be87aaa87e534a2c1a121230b510a26fe82efc9f1ec2b5cf9bd4fa42692bfa9fb122431cc7c0bbf34c3acf88f3744917bc686bb0ec29b7eba165b3"}]}, @NFT_MSG_DELSETELEM={0xddc, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xdc0, 0x3, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x128, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x14, 0x1, "7f3921e4190eb939ad607c96080130e2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "cb65fa2eab15937364d832d67b4c231b2ee812c6013ea488e4f771ee7888f6853c16581ba4958d3406273d222ffde82ce968b0b621b58e19dff21df404438953cf3409ffc52c3535088e7798d19e1f1b16e016e42d91eef17b68639290b8efd824e6ceeee3e2b355752ff6c805234ecf3ed9b5eb12466d4e237b63dcf7a0c1d5be60e19668b434868c9cf5c52e02c50958ebab969531819ee6e4c744fb040b807614da6f3fdf"}, @NFTA_DATA_VALUE={0x3d, 0x1, "166772471326b0c6cd1cdd1df02b7d9c10335c1ce2116460a4157b0710ea43363fa0dd8036ebd8cf4e5b48b204165a145cab6662516bd1d4c9"}]}]}, {0x3e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd3, 0x1, "c97a779269d9d83647a88d4965f6405228a4941c49dd93faba88ca546a10587a1028c1030b6ae92c11f6b9c7c24b3fbed9dc08082804fd23527903c6ad4d98eb029b21e8b6402b31bf1271bb4e957048d73060a45a8fd04923eadb0dd81abcc78a7c90063560ee6cae3e30c52a768f3d1ec9656e62babe56577f615ea7a8979105ee17e966c23ad9e39f31dba9445eb492ba0d2570bd029126abd3c9bd262e5ffb51d6bd20142a4f39c00d46bfcab307427ec8bd8c4b1ea7cdaff6fb1c2d81da751c9ace95a358aed1ae5b6e4c6f28"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "015a35435295f1a14c7e95f961f8dc2a518fd67e743f6f6ab25a86af0d41ee64e8f7d4af7223f7ecdbafbecf271e15d192aca38a99c1e669c22350d186be51aec48c379b2571fffff22fbcd7932274dd3b2a0b651ded9f35b1461c6bd40e81ad"}, @NFTA_SET_ELEM_KEY_END={0x204, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x97, 0x1, "a3ade7352f8d9b015f6d61a816334a64cdcc71ee413eb223c2cb7ea34d6db402e76e954b2ea8cf96c4547d141d0f53e40778c751f5bb227e34332382084a4bc51d0eb0578c7084742e99eaa085ba237b1e3e5e970a9bc66939f06b764a60959d8f94ea530d0e1d9bfa7d35b9fa76274e319983bdb9d6857829cbf859df5ff5adfaaa7c6bf12ca471d73c515d17d5bc22345759"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "95986ae63a4f255dbb0da5ed902d280b402a653c62a95f1ea32f0e5669015c82d9c5631821bc44663753d77ac77764734a79304b912e5a231396e79814d050e38e92ce787294d05b9d7d1dd06f103f6dfbe9635debfb27dd7cd741d573e751480c578c66633ceee0be87a32dbe97a9cebbb96f1ea3c3dc6b27cc9724e407d5deb76586b45186c2400490d38349d9fcd2ac90798208b64a8cc118c0f4bce5973dad2689997b339d861f631f4dd5c0df91cc3ab36316696a2f24da2d4b300d8f185fbd00ae75b4cc8ae144db0fe591867f67db"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x58, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x51, 0x1, "89054dca6f4b9e7227bea75a333f6a39a8cf07153104d2d0befef8192dfac85f937c022d0a8b21ab1c0cbb697ac7c84d7c3f2a576c1f81f241180d498074677a7078fa145f3d271975b8003dea"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "1542b890cc0ab8d1ce7da0"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "d0eb59c440694bab842cec3073c483eb27e3d8c9c203ab3ca3bd1c87baa3193af860c0b0d17a6e947397910058f77772e772324a9cfd26f4a824ccb4875ef6d503b3f7871f360ac787da2c713ce9cf3e154bc7b0dbb24802ededdeb1b3c45ad987723e1df55c6f5f48f6d2707f81bcced7dc7fb18c01bce52bd4ba31301651725eaab76acd5e270e6e80348cd829076f5f898ac0f73ca4af568891b10a667c8e1d7279148cdd"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, {0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xc3, 0x6, 0x1, 0x0, "fd5e878ebf03c423f85ce6f36bf8b150c63a41a66ea697e2e8c0cc510b8a3f18caa60e17a9ba3073fdc536b99be5f9d9becb7b4e805721d76bc9db157ef556b98c954f72e6fdadb1e2d70466f7ea28f736a113245bf05dcf4f3aa4b49b8af4fdc98b2f3823664ac932f0b4616f6936e56ed1d58f36972504718065a2286eb03ee15a3f5eea5b25eb850f7d5930d4939ef9cfbae5539f8eb329b9850396ba993890edf8f36e7b1eb063d8ca55ba597d8e7b675502b9434c49a74395afed15ae"}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x39c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x100, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "95edda72288a41a96d3f08bca23987631817a08482806a0a5f0416395029eec72ea0a8555ff236c5418a2d5144537b18a64602ac52fe0ba1374ab6044127aa63ebf9954257d7727968a0e6b8e67f05539eac46a83b2234dbdc8f0981a03462ad4756fdf5d3baa0d8131983d72595f35cd129049063d22324c6269ad74150c4d948fd5ac9b6129df0f61420eef02ee1bf01a1f9fa994339a9025afefa6d323ee7d6fb7fef8351ef5fbfd03096599b5e2181293b1f80c73606a917713ff01eb4bfba81d2987de8fedb327145403fa6b0f59298519dca6ddd109147f4d9224c31cc6401adb2f100e037f46d73f81c0de3ebb142170c52"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x290, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "a13cf07d072cf86884f9a0f26311783c23f6563bf4975111833d503534bf476a677b6026d8581223bd194534c1beba2a6d5aea7730d1c3a38ea2bbf7c0dc680ea7a439805e72aace34bad03d48333bafc318b618534f3e857528402eb2c5f7bb175e4cedc81e57dbe5"}, @NFTA_DATA_VALUE={0x75, 0x1, "b016eeb1592fb192506696471c230d8e423a02149f833f01375daa7fd8b6e172f97b6efa8aa8b011a35374aca6c791b895532c17a5a176cd6fda73c6ca89ab45154ef218ae1679ad057d75e7e8801bd837db47abf65b95f6f36e46cd2b6d15fadcca9aadbe1dc889c031b8a74281fc5549"}, @NFTA_DATA_VALUE={0xdb, 0x1, "3de88926e4a975d315208bbe21cc0b8175f7aeacdb4e9306b374b0ffcfd0ed9ee89db82fd38d4d45b577243b74816b001f67e4a2aa03ca2d673295a185d1a34a990b55cf86f779c96e3580150a80ac0ca8f823bac8730661411bc376f326106dc09a0434758f2877ba4a259d39265bd09b340fdd27104505d675372731ceb9d7d1bff07f884545ec1521a9df8ced951e7d4911aa2283eff2f7c52b2e95f75cdb03915c08ce92d3274eb5ed9ded0e35c596d9aad7121fbf6fc7f2ffce0da7d050ec33d82f513cb04931ecf801746ea3974a880fb387df4d"}, @NFTA_DATA_VALUE={0xc7, 0x1, "42b3a7dc8029a23b0e83585c28fbb590a851254c09915e3ce24c5b0528be8a9c4fb81761cdfadaba01417c6a8887735912b9245a8fd7e9e5b5d90b2cb17fad3f4b072a023c2db556f2c0d3f7d22870ba50a2861bd19c946244d28e855c2719cd0dd209cb8d44f434f2f7a450b3646105867e553c99eb8cc4f36b71e67c186bc64c97b85f30e8ec3e51cd4a3ead4d9a95d629598661ba67c8364209e15b86161b415253391f2eb0cf8b22be41f96b8d6326650be955fc40b4bd048c577c9c0a056545a8"}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x130, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0xbe, 0x6, 0x1, 0x0, "fb722f6908752792bf10e7c9b903f3f445f7431670bf5f1c119b962b105414e7525ca9b31037f3c3bf548197b9144400c9bbb542a6818292fa12bdb59f19fb88879435029eb36f611e207ba3975c56c4b53080b1159ed70e980ad319d46716e5997a891769bfcf59cc6b4ff7d5d8ead55ccafd45eb36b5ee4deedd367b9c3b5ebc3ec5c0d0353ac78191723a3a38d2cd0cb00ddcc43ad25780bfeeac1c6a827512f73f918df4167cf8810597fb97864272ba1dc2d8b39ab889f0"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_USERDATA={0x3a, 0x6, 0x1, 0x0, "b171eea065f52bcae54683c5e0db133cb63389b983c7a9a7280529855b93934d7a1d1b14a4a7bb8b5960287055b33c83a138c8cfc6e1"}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x19c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x17c, 0xb, 0x0, 0x1, [{0x128, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x11c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfa, 0x1, "638bb15350a460e495ecfd93e493e331cbc4e70bbe2a0ebd92d210a4e8897e01cf32f9292566da0ffda1355922ed24212f6bc10588a97cb83b31a20be8544c0c2a5ff529d9942490023729c4d800ed783259d675518f8d5660b84b15afa5860f45f432101f7a8640fdd049ddc332b6faa64f52e85f676d0d0990e393d3f3d2c7a50155a91f64086a8f0effff12f6caab3f093c5439a178dd5cac9903cbea76a39f6ceeda4358f2216ad01e8851347d97308430127a71ea660fbaeb73eb90dfea32e6850c71aed5a0cd563b42547746ad17a222dce31762e9ac211ecb0696a2632f479465b82e3e782b9d45a8dbb970cd0e37efa452bc"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xb}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14}}, 0x106c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r7 = openat$snapshot(0xffffff9c, &(0x7f0000001980), 0x8000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r7, 0x40043311, &(0x7f00000019c0)) recvmmsg(r6, &(0x7f0000006900)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001a00)=""/89, 0x59}, {&(0x7f0000001a80)=""/36, 0x24}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/20, 0x14}], 0x4, &(0x7f0000002b40)=""/46, 0x2e}, 0xe}, {{&(0x7f0000002b80)=@nfc_llcp, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002c00)=""/6, 0x6}, {&(0x7f0000002c40)=""/1, 0x1}, {&(0x7f0000002c80)=""/91, 0x5b}], 0x3, &(0x7f0000002d40)=""/28, 0x1c}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/55, 0x37}, {&(0x7f0000003dc0)=""/190, 0xbe}, {&(0x7f0000003e80)=""/29, 0x1d}, {&(0x7f0000003ec0)=""/196, 0xc4}, {&(0x7f0000003fc0)=""/78, 0x4e}, {&(0x7f0000004040)=""/40, 0x28}, {&(0x7f0000004080)=""/30, 0x1e}, {&(0x7f00000040c0)=""/67, 0x43}], 0x9, &(0x7f00000041c0)=""/204, 0xcc}, 0x5944}, {{&(0x7f00000042c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000054c0)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)}, {&(0x7f0000005380)=""/84, 0x54}, {&(0x7f0000005400)=""/180, 0xb4}], 0x4, &(0x7f0000005500)=""/187, 0xbb}, 0x3}, {{&(0x7f00000055c0)=@nfc_llcp, 0x80, &(0x7f0000006800)=[{&(0x7f0000005640)=""/195, 0xc3}, {&(0x7f0000005740)=""/63, 0x3f}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/126, 0x7e}], 0x4}, 0x80}, {{&(0x7f0000006840)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000068c0)}, 0x2}], 0x6, 0x10110, &(0x7f00000069c0)) openat$cgroup_procs(r6, &(0x7f0000006a00)='cgroup.procs\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000006a40)=0x3) syz_open_dev$usbfs(&(0x7f0000006a80), 0x81, 0x80801) 19m11.922509963s ago: executing program 5 (id=6967): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) getrlimit(0x5, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read$msr(r1, &(0x7f0000001600)=""/102390, 0xfffffffffffffce2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, 0x0, 0x25, 0x8, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)=[0x1], &(0x7f0000000540)=[0x3, 0x2, 0x0, 0x4, 0x7], 0x3, 0x1}}, 0x3c) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="03030064cb0a2cbb26c55e9c5b3100000000002a0093000843"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = eventfd(0xfffffff9) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000f6f1c9fdffffff0000fc", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0xc0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_open_dev$midi(&(0x7f0000000080), 0x1, 0x440900) syz_usb_disconnect(r7) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r6) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x800) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000800)=""/87, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) 18m56.83831842s ago: executing program 34 (id=6967): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) getrlimit(0x5, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read$msr(r1, &(0x7f0000001600)=""/102390, 0xfffffffffffffce2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r0, 0x0, 0x25, 0x8, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0)=[0x1], &(0x7f0000000540)=[0x3, 0x2, 0x0, 0x4, 0x7], 0x3, 0x1}}, 0x3c) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="03030064cb0a2cbb26c55e9c5b3100000000002a0093000843"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = eventfd(0xfffffff9) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000f6f1c9fdffffff0000fc", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0xc0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_open_dev$midi(&(0x7f0000000080), 0x1, 0x440900) syz_usb_disconnect(r7) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r6) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x800) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000800)=""/87, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) 12m27.810827124s ago: executing program 3 (id=8420): mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xfa9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}], 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004801}, 0x24004880) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x1, r0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd16e, 0x48021) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8010550e, &(0x7f00000001c0)={0xd55, 0x0}) write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB="00000000020000000079078a9900000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r7}, 0x38) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, &(0x7f00000001c0)) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x800, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 12m25.752518376s ago: executing program 3 (id=8424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x700, 0x40, 0x8, 0x35d0eab2, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@ssrr={0x89, 0x17, 0x77, [@local, @remote, @multicast2, @local, @empty]}, @timestamp_addr={0x44, 0x3c, 0x3c, 0x1, 0x1, [{@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9}, {@private=0xa010102, 0x6}, {@empty, 0x7}, {@multicast2, 0xffffff01}, {@private=0xa010101, 0xdf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb0c0}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x10, 0x1, 0x10001, {{0x18, 0x4, 0x3, 0x1b, 0x60, 0x66, 0x0, 0xa6, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x24}, {[@generic={0x88, 0x7, "59b38bdaf2"}, @cipso={0x86, 0x1d, 0x0, [{0xb, 0x5, "f923d6"}, {0x1, 0x10, "11989bf3912d64b72fd15ea18705"}, {0x0, 0x2}]}, @ssrr={0x89, 0xf, 0x37, [@rand_addr=0x64010101, @private=0xa010100, @loopback]}, @lsrr={0x83, 0x7, 0x5d, [@multicast2]}, @generic={0x88, 0x10, "1e9f4c695463c6cf2da660bb4131"}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8, 0x7, 0xe}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r5}}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000800}, 0x48040) socket$phonet(0x23, 0x2, 0x1) (async) r6 = syz_clone(0x180000, &(0x7f0000000500)="d936ca279a67e2d295d7194cf500416459abe0e62f2449473b6c434eba9a118002404487", 0x24, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="54192dcda49fd42609f5f5b1a76ba997feed8181e3bba795b2ef8438adf75859025c247a1324fcd35e4fc6058bcde0d7038c3146f336f6d6d3a2a6a73ede7e6b5e4b6a94071c1e11849fbe9894ef355cec729046b0eb6d61a521a49ac6c308611f855ac22e90bc11231b5fbc3b306684c4b85c8e9667dbaf2b692066e8736679ece8332e604c26eae4d35bed504b4142ce78bee4") sched_setscheduler(r6, 0x1, &(0x7f0000000680)=0xef29) (async) r7 = openat$nvram(0xffffff9c, &(0x7f00000006c0), 0x80000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000700)={0x1, 0x8000, 0x25f, 0x199, 0x1}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x41104) (async) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000880)=0x3, 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000008c0)='highspeed', 0x9) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000900)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) (rerun: 32) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000940)='htcp', 0x4) setsockopt$WPAN_WANTACK(r10, 0x0, 0x0, &(0x7f0000000980)=0x1, 0x4) (async, rerun: 32) r11 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) getsockopt$MRT6(r11, 0x29, 0xd0, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x38) (async) openat$tun(0xffffff9c, &(0x7f0000000a40), 0x400, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r10, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd28, 0x25dfdbfe, 0xeba, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40c4) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000b80)='cubic', 0x5) (async) syz_open_dev$evdev(&(0x7f0000000bc0), 0xffff, 0x2900) ioctl$SNDCTL_MIDI_PRETIME(r10, 0xc0046d00, &(0x7f0000000c00)=0x2) (async) read(r7, &(0x7f0000000c40)=""/45, 0x2d) 12m25.497079042s ago: executing program 3 (id=8426): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 12m25.434603499s ago: executing program 3 (id=8427): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x194c}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 12m25.194714567s ago: executing program 3 (id=8429): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 12m24.886230299s ago: executing program 3 (id=8431): io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0xc, 0x115}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4004040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x50}}, 0x20000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 12m24.789241419s ago: executing program 35 (id=8431): io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e9, 0x1c410, 0xc, 0x115}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4004040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x50}}, 0x20000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4m37.882226102s ago: executing program 7 (id=10245): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000001c0)={'\x00', 0xf, 0xffff, 0x6, 0x2, 0xe, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r5 = dup(r4) write$uinput_user_dev(r5, 0x0, 0x36) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000000280)) preadv(r6, 0x0, 0x0, 0x0, 0x0) ioctl$CDROMREADRAW(r5, 0x5314, &(0x7f0000000500)={0x1, 0x3, 0x7, 0x1, 0x1, 0x8}) fsopen(0x0, 0x1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x6}, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2180, 0x0) 4m37.470444108s ago: executing program 7 (id=10246): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = io_uring_setup(0x4505, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002400)={0x1, 0xa07591455de6853f, 0x0, &(0x7f0000002340)=[{0x0}], 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 4m37.22532872s ago: executing program 7 (id=10247): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f00000004c0), 0x10}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0x9, 0x1, 0x9, 0x7fc}, 0x50) 4m36.930049642s ago: executing program 7 (id=10249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xfffffffffffffd68, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) setpriority(0x0, 0x0, 0x10000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) 4m36.852497594s ago: executing program 7 (id=10250): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000140)='./file0/file0\x00') setpgid(r0, r0) setpgid(0x0, r0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, 0x0) open(&(0x7f0000000040)='.\x00', 0x3000000, 0x28) 4m36.84280313s ago: executing program 7 (id=10251): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) socket(0x10, 0x80002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xfffffffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x17, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x8004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000200000000000009000000000600150005000000400016803c0002006706040304000900fe880000000000000000000000000101fc00000000e90000000000000000000100000000000002000000ffffac1e0101"], 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES16=r1, @ANYRES64=0x0, @ANYBLOB='g('], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ap_ssid, 0xfffffffffffffff2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000140)={0x0, "fc51620330dfc4536d7ae0257e5d07b15b112f495e1eb3291759e4e4ade8d52cb7d906f4da6e117989740a458a317c56f10755875efe7939ad7a23a8fd263c0885ebeae5910fc386bf61e776b00c983ed01bf9542b28ce546ebc56a05564b5705bbc884d64fbad597225093ce604ffa41783a9bc50e2c366938794f0fdd8da658784ecfac1ab9e7c2f6b8caaa11f3a1b799c9f227c57e07f4673f3119e1925b350b6e76ae1b001263a91e5f9b06ab664c976fbb11157382406f3793c2484c16989530b8becd66799e0376ca198a954ad29742c38af6af66da6da49ce52b07bb16508dabcdd5caa352d8dca7d6767a468ac1768dcc6cf4b91ba5f372bc32bce85"}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c8203bd70b0000000000000e0a0100070000000000ff800204400600080b070006100702020004000000b408000005000000f23d27de7a32fc8d3a7db73ace52580314529804cdbdc8c159a8e0e3028dd195d5c449d1cb00000000010c0a0027882975972708bb300ebab397dc6689d45a46ecb766592725c63daa0bab5cc7add8aba64e35c6afa9e31d0900018000175bbc9acd3697be440d4c3fac5d9f18c7a7b7d152c808afdc7ef9a102fe6fac46ac377debb092dfee8be194d92d46f7e0f5bfcaa5c22367b3c6f0b41046763e02f1fd1e6a7d816d3645fec18f541cf472ee967be5218fe46676bbf94d09e603cc7d3de6330ecb"], 0x40) 4m21.692739169s ago: executing program 36 (id=10251): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) socket(0x10, 0x80002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xfffffffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x17, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x8004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001800010000000000000000000200000000000009000000000600150005000000400016803c0002006706040304000900fe880000000000000000000000000101fc00000000e90000000000000000000100000000000002000000ffffac1e0101"], 0x64}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES16=r1, @ANYRES64=0x0, @ANYBLOB='g('], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ap_ssid, 0xfffffffffffffff2, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_GETDRIVER(r6, 0x41045508, &(0x7f0000000140)={0x0, "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"}) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c8203bd70b0000000000000e0a0100070000000000ff800204400600080b070006100702020004000000b408000005000000f23d27de7a32fc8d3a7db73ace52580314529804cdbdc8c159a8e0e3028dd195d5c449d1cb00000000010c0a0027882975972708bb300ebab397dc6689d45a46ecb766592725c63daa0bab5cc7add8aba64e35c6afa9e31d0900018000175bbc9acd3697be440d4c3fac5d9f18c7a7b7d152c808afdc7ef9a102fe6fac46ac377debb092dfee8be194d92d46f7e0f5bfcaa5c22367b3c6f0b41046763e02f1fd1e6a7d816d3645fec18f541cf472ee967be5218fe46676bbf94d09e603cc7d3de6330ecb"], 0x40) 2m19.491989165s ago: executing program 1 (id=10921): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=0x8, 0x8, 0x1) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(0xffffffffffffffff, &(0x7f0000002d40)=""/4104, 0x1008) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4000006, 0x24080000, 0x2d63, 0x6c2, 0x1, 0x0, 0x0, 0x0, 0x8}}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m18.52374625s ago: executing program 1 (id=10926): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ip6erspan0\x00', 0x0}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)=' ', 0x1, 0x8000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setparam(0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRESDEC=r3], 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000b, 0x59033, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) (rerun: 64) r7 = mq_open(&(0x7f0000000000)='{\xe5', 0x40, 0x85, &(0x7f0000000240)={0x2, 0x5, 0x1, 0xb7e}) mq_notify(r7, &(0x7f0000000280)={0x0, 0x6, 0x0, @thr={&(0x7f0000000480)="c51392569e417f34a477108dd0e6961824d7094965692b9083ae2718ce952f7bcb18ca56c625faef9ac4344eadf0c87a18e3cb8d72c407d14f962859867a488efb56732d24a710615b1e1b232099d1962dcba29fc824a023cbceae17ac7c78d32f4afb9bfd61dc44e73398ffe52a6bff8c7aa010f5c341dde78e0b1885545bcd848eae1f3657f9a09e23c3268744fe39699e334d82ad599e47e637c4fe041d17ff0ac73bf69be807936bf692197ee25c285c867f88e3587a8fccbb2a2c93e1515852b1c91fbcb44d15c2dca20ff9f4609c60ef2975e176606f4aa01523a2dfe58799934cb0cb17450b8dd4", &(0x7f00000006c0)="f0250cd2daf4ec3f3fc8b6eb71aa76e1d993caf451fec320653c9cc2c55a877051473a1e96eb3e6ffd0ae320c205be69f871ced0453787177d2dc09a045d63dbbb1121e3f9434619e346a85a75be693ec490036555ebd93d62b637c01082ef62ace41048e034fbe11d1a8ed6497017b92eb32553237cb53a26a8e1e0fefd2c257972478bb69e8ef848a383302b6a89ee76a05aff9c480a8a907ddf399d066e3b07e55a8bc80f5deaebc02450214e8fb2dfff331dda03f3cd5d82d34ae41f817238e1a7d52d55a23512b405d5f06c"}}) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00060000", @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x4044010) 2m18.358511884s ago: executing program 1 (id=10929): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0xc2}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x18, 0x8000}, 0x2800c051) bind$unix(r0, 0x0, 0x0) 2m18.251062569s ago: executing program 1 (id=10931): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x15e) lstat(&(0x7f0000002f00)='./bus\x00', &(0x7f0000002f40)) 2m18.194285786s ago: executing program 1 (id=10933): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m17.949627745s ago: executing program 1 (id=10934): syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000300)) set_mempolicy(0x8000, &(0x7f0000000080)=0x51e1, 0x3ff) r2 = socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX=r2, @ANYRES32=0x41424344, @ANYRES32=r2], 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) 2m17.812264081s ago: executing program 37 (id=10934): syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000300)) set_mempolicy(0x8000, &(0x7f0000000080)=0x51e1, 0x3ff) r2 = socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESHEX=r2, @ANYRES32=0x41424344, @ANYRES32=r2], 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xcf, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) 5.369495478s ago: executing program 9 (id=11595): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000240)=0xc) r2 = socket(0x10, 0x803, 0x6) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000140)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8a, 0xa) 5.261096194s ago: executing program 8 (id=11597): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000380), 0x800, 0x0) statx(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x100, 0x7ff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000540)={[{@redirect_dir_off}, {@userxattr}]}) unshare(0x62000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c0005800c00010070619fb1b04964001c000280080004400000005608000340000000b908000240000000040900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r5 = openat$dma_heap(0xffffff9c, &(0x7f0000000200), 0x41200, 0x0) r6 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x6a, 0x3, 0x20000004, 0xffb3) r7 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x6, 0x22000) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000300)={0x3dd9, r7}) lstat64(&(0x7f0000000080)='./cgroup\x00', 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f00000005c0)={0x0, 0x38415262, 0x120, 0x0, 0x3, @discrete={0x800, 0x7fffffff}}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000400)=0x3) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"/30752], 0x7820}, 0x1, 0x0, 0x0, 0x4004}, 0x10) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000340)=0x8) r10 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000008240)='q\xbeZ\xb8\xb4nbC\x8c\xc4v\xe9g(9~\xa5\x12u\xc2\xdf\xe2>\xa6G)\xc4g\xbc\x0e\x02\xb07t@\xfa\xe2\xfbc\x9b\x96\xaf\x9d{RLg-gS)\x8c\x9e\x0f\x15\"\x97\xe6c=\x10\x87\xa8\x18\xbe\x9e\xae\x9b\x99\xb1\xaa\xc0HVd\'g\x94\xe482\x9c\xb4e\v\xc8\x89\f\xed\x17\xe4*;\'`\xa9HG\xec\x82\xa6\xd9W\x81\xac:\xa6=\x90\x89\xf5\xba\xf1\x98\xda\xe1\xcb\\\xd7\x89\x9e\t\x1f#o\xd3\x12\xb6f\xb8w\xf2\xde\x98q\x80\x8c\xf2K\xcd\x1b\xa9\x9d\xc3\x9f6(\xcb\xe1W\x88\xe1n\x9e\xfaO\xcc\x8c\xd9\xb3\xdcV\x15J\x83\xfb\x83H\x89\r\x05\xbb\x9d\xd7\xc1\xc7\xbb\xd0\xd7\xbeZ\xed\xb0=R\xb7\xff\b\xc8 2l\x1ecZ\x18T\vTI\xf0\xd3\x03GsM#A\xdcC\xa5S\xfc\x06\xf3\x9f3\xe4J\x80I21o\xb4\xd3\xcb\x00\xc3`Hi\xd0\xbd\x12\xe4X|\x04n\x06\xfa#\x15\xfc\x80\xabTR\xf4\xeb\xbf\x96B\b\x1b\x9bL\xeaH\x1eu\x03\'\xd5\xb2\xf6E#2\xbf\x04\xd2\x0e', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mmap(&(0x7f00000f4000/0x2000)=nil, 0x2000, 0x5000000, 0x11, r0, 0xffffd000) 5.222174195s ago: executing program 9 (id=11598): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000002240)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0013d305000000030000000000000f02000000bf3d0b0000000000000f02000000d8100000511eca5ad0ccb5b4aa05a88b82d6defa94da639ccc92f9fe7d7e"], 0x0, 0x39, 0x0, 0x1, 0x10}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r5, 0x80785659, &(0x7f00000000c0)={0x0, @frame_sync}) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="1e", 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x3a, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r7, &(0x7f0000001300)='7', 0x1) write$char_usb(r7, &(0x7f0000000bc0), 0x0) syz_usb_disconnect(r1) 4.987995617s ago: executing program 8 (id=11600): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) (fail_nth: 4) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x800000}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x9, {0x1, 0x1, 0x0, 0x0, 0x237, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xd, 0x10000, 0x1000, 0x2, 0x0, 0x1000, 0x5, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.785221822s ago: executing program 8 (id=11601): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x4, 0x1, 0x5, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 3.72034852s ago: executing program 8 (id=11605): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) r1 = getpgid(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa10000000000008de61c3f1d07010000f8ffffffb702000008000000b70300000000000085000000730000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0xffffffffffffff51}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4, 0x6, "82c08342160ff3df3181c2b30a04002a1642b385bb3ace03"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1f, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x1}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 3.571934686s ago: executing program 6 (id=11606): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000440000000900000001"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x10000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400003500028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000580080001400000891708000d4000000002140000001100010000000000000000000100000a"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='{p\t\x00\x00\x00', &(0x7f0000020240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x4, r4, {0x1, 0x5}}, './file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x2, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.96503769s ago: executing program 6 (id=11608): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) ioctl$TIOCCBRK(r8, 0x5428) r9 = dup2(r8, r4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001043, r10, 0x0) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000100)) splice(0xffffffffffffffff, 0x0, r11, 0x0, 0x6, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r12, 0xffffffffffffffff, 0x0) connect(r9, &(0x7f0000000340)=@nl=@unspec, 0x80) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000280)={'filter\x00', 0x0, [0x7, 0xffffbffc, 0x401, 0x6, 0x2]}, &(0x7f0000000200)=0x54) 2.82362007s ago: executing program 4 (id=11610): r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x4080, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) 2.769913138s ago: executing program 4 (id=11611): r0 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x4080, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) (fail_nth: 1) 2.570009803s ago: executing program 4 (id=11612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) unshare(0x2c020400) r2 = socket$rds(0x15, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000002100)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/179, 0xb3}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000001500)=""/218, 0xda}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001800)=""/28, 0x1c}, {&(0x7f0000001600)=""/70, 0x46}, {&(0x7f0000000440)=""/1, 0x1}, {&(0x7f0000001680)=""/181, 0xb5}, {&(0x7f0000001740)=""/166, 0xa6}, {&(0x7f0000002200)=""/251, 0xfb}], 0x6, &(0x7f0000001840)=""/208, 0xd0}, 0x6}, {{&(0x7f0000001940)=@ax25={{0x3, @null}, [@remote, @default, @bcast, @rose, @remote, @default, @default, @default]}, 0x80, &(0x7f0000001c80)=[{&(0x7f00000019c0)=""/100, 0x64}, {&(0x7f0000001a40)=""/73, 0x49}, {&(0x7f0000001ac0)=""/171, 0xab}, {&(0x7f0000001b80)=""/249, 0xf9}], 0x4, &(0x7f0000001cc0)=""/167, 0xa7}, 0x3}, {{&(0x7f0000001d80)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e00)=""/250, 0xfa}, {&(0x7f0000001f00)=""/37, 0x25}, {&(0x7f0000001f40)=""/98, 0x62}], 0x3, &(0x7f0000002000)=""/209, 0xd1}, 0x7fff}], 0x4, 0x40012001, &(0x7f00000021c0)={r3, r4+60000000}) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000000080)={@hyper}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 2.551462369s ago: executing program 8 (id=11613): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=0x8, 0x8, 0x1) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) read(0xffffffffffffffff, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4000006, 0x24080000, 0x2d63, 0x6c2, 0x1, 0x0, 0x0, 0x0, 0x8}}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.492466163s ago: executing program 8 (id=11614): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_open_dev$media(&(0x7f0000000000), 0xf7, 0xa01) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000040)) 2.359780422s ago: executing program 4 (id=11615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x10020}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x4, &(0x7f0000000180)={0x80, 0xc7}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x70) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000480)}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b8791e09e4a38e1f0f3c7de180ffe20ac20e80f97e9e54415f6ff5999b3c974ec962a60", 0x50}], 0x2, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) socketpair(0x23, 0x2, 0x1, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.12819115s ago: executing program 9 (id=11616): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00'], 0xfe33) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8000}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x401}]}, &(0x7f0000000280)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x1, 0x3, 0xb, 0x9}, {0x0, 0x3, 0xa, 0x4}, {0x0, 0x5, 0x3, 0x4}, {0x4, 0x4, 0x10, 0x8}], 0x10, 0x9}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39a8b7102609f852ca6192e57466b36d248e5d7034551876f8823ee4395368bca72621f33d99aa1379e8e98e555c4db5eabe"], 0x54}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x53, 0x3, 0x8, 0x2, 0xb, 0x0, 0x1}, 0x0, &(0x7f0000000280)={0x3fd, 0x252c, 0x2000000000000, 0x2, 0x0, 0x9, 0x466}, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 1.746456752s ago: executing program 6 (id=11617): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000240)=0xc) r2 = socket(0x10, 0x803, 0x6) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8a, 0xa) 1.546855042s ago: executing program 6 (id=11618): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000084000030004000000080002000500000006000b0002000000"], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x48081) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x24044040) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000800000400fdffffffe80a000000000000000000000a0002007000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080e2d4f793599ae385e6b39fc67ab942b400"/220], 0x124}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES8=r0], 0x104}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000000)=0x3) 1.515752223s ago: executing program 6 (id=11619): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1eb482, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x4000c0, 0x0) read$dsp(r1, &(0x7f0000000200)=""/241, 0xf1) 1.394438172s ago: executing program 4 (id=11620): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x8089, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 1.07648429s ago: executing program 9 (id=11621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000016c0)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x1002, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)='`', 0x2, 0x0, 0x6}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) io_submit(0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) 859.383921ms ago: executing program 6 (id=11622): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) r1 = getpgid(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020732500000000002020207b1af8ff00000000bfa10000000000008de61c3f1d07010000f8ffffffb702000008000000b70300000000000085000000730000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0xffffffffffffff51}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4, 0x6, "82c08342160ff3df3181c2b30a04002a1642b385bb3ace03"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1f, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x1}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 428.858621ms ago: executing program 4 (id=11623): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$hpet(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f0000000005000000000000", @ANYRES32, @ANYBLOB="b551230d72231adfa9b2f96b019f7417d09d34cda5fe279aca5dc8861c39971c4c2eec5b2fd2c1f973b92c149e582b28e3fe14cc942d25e95b9c7b4eb218713d94224d788f230d52aaeab2e1800ecc76fb2a2e16346668282a37dffdc1ce9c06548bf9b00db56da0192f7ea9f8afffb0404abc30fa12c38d74624237b1e0079b6508b700"/154, @ANYRES64=0x0], 0x20) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) write$sndseq(r5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 58.971734ms ago: executing program 9 (id=11624): r0 = io_uring_setup(0x5491, &(0x7f00000001c0)={0x0, 0xf04d, 0x1, 0xfffffffc, 0x211}) close(r0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = io_uring_setup(0x108c, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x19, &(0x7f0000000300), 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0xc0045003, &(0x7f0000001100)) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r1, &(0x7f0000014140)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="a3", 0x1}], 0x1}}], 0x1, 0x20) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/145, 0x91}], 0x1) 0s ago: executing program 9 (id=11625): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0xfd, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x300}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x43, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x94, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x2}, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0x443cb02e, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r3 = geteuid() sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r4, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) mount$nfs4(&(0x7f0000000140)='}#-\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x200401, &(0x7f0000000880)={[{'&*'}, {'\xff\xff\xff\xff\xff\xff'}, {'\xff\xff\xff\xff\xff\xff'}, {']'}, {')&-*!'}], [{@dont_measure}, {@flag='lazytime'}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, '+!\\\xfd+}&}'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '\x03\x03\x03\x03\x03\x03'}}, {@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@euid_gt={'euid>', r3}}, {@dont_measure}]}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x40a02, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) kernel console output (not intermixed with test programs): 7672][T13219] Call Trace: [ 2183.567677][T13219] [ 2183.567682][T13219] dump_stack_lvl+0x16c/0x1f0 [ 2183.567702][T13219] should_fail_ex+0x512/0x640 [ 2183.567721][T13219] _copy_from_user+0x2e/0xd0 [ 2183.567739][T13219] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 2183.567754][T13219] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 2183.567773][T13219] do_ip_getsockopt+0x27f/0x2100 [ 2183.567789][T13219] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 2183.567801][T13219] ? cmp_ex_search+0x8b/0xb0 [ 2183.567815][T13219] ? bsearch+0x9e/0xc0 [ 2183.567833][T13219] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2183.567846][T13219] ? search_extable+0x82/0xb0 [ 2183.567860][T13219] ? copy_from_user_nofault+0xe3/0x190 [ 2183.567874][T13219] ? __lock_acquire+0x62e/0x1ce0 [ 2183.567893][T13219] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2183.567906][T13219] ? ex_handler_uaccess+0xfa/0x230 [ 2183.567921][T13219] ? fixup_exception+0x10c/0xbf0 [ 2183.567940][T13219] ? __pfx___might_resched+0x10/0x10 [ 2183.567958][T13219] ? get_pid_task+0xfc/0x250 [ 2183.568016][T13219] ip_getsockopt+0x9b/0x1e0 [ 2183.568041][T13219] ? __pfx_ip_getsockopt+0x10/0x10 [ 2183.568068][T13219] raw_getsockopt+0x4d/0x1f0 [ 2183.568083][T13219] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2183.568095][T13219] do_sock_getsockopt+0x34a/0x440 [ 2183.568108][T13219] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2183.568120][T13219] ? __fget_files+0x204/0x3c0 [ 2183.568140][T13219] __sys_getsockopt+0x123/0x1b0 [ 2183.568159][T13219] __ia32_sys_getsockopt+0xbc/0x160 [ 2183.568175][T13219] ? syscall_trace_enter+0xee/0x240 [ 2183.568188][T13219] __do_fast_syscall_32+0x7c/0x300 [ 2183.568205][T13219] do_fast_syscall_32+0x32/0x80 [ 2183.568219][T13219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2183.568236][T13219] RIP: 0023:0xf70fe579 [ 2183.568246][T13219] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2183.568257][T13219] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 2183.568269][T13219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2183.568276][T13219] RDX: 0000000000000053 RSI: 0000000080000000 RDI: 0000000080000240 [ 2183.568283][T13219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2183.568290][T13219] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2183.568297][T13219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2183.568311][T13219] [ 2183.669368][ C0] vkms_vblank_simulate: vblank timer overrun [ 2183.774860][ T9660] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 2183.996693][ T9660] usb 13-1: Using ep0 maxpacket: 16 [ 2184.004579][ T9660] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2184.010926][ T9660] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2184.023431][ T9660] usb 13-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2184.031333][ T9660] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.091414][ T9660] usb 13-1: config 0 descriptor?? [ 2184.512057][ T9660] usbhid 13-1:0.0: can't add hid device: -32 [ 2184.512371][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11046'. [ 2184.533170][T13217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2184.553716][T13217] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2184.562836][T13217] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 2184.572608][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11046'. [ 2184.625365][T13234] binder: 13216:13234 ioctl c0306201 80000180 returned -14 [ 2184.840936][ T9660] usbhid 13-1:0.0: probe with driver usbhid failed with error -32 [ 2185.177922][T13217] bond4 (unregistering): (slave batadv1): Releasing backup interface [ 2185.183399][T13217] bond4 (unregistering): Released all slaves [ 2185.265321][ T6043] usb 13-1: USB disconnect, device number 18 [ 2185.938544][ T34] usb 11-1: new high-speed USB device number 113 using dummy_hcd [ 2186.107354][ T34] usb 11-1: Using ep0 maxpacket: 32 [ 2186.111954][ T34] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 2186.115321][ T34] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2186.120573][ T34] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2186.126034][ T34] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2186.133109][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2186.141375][ T34] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2186.148206][ T34] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2186.152628][ T34] usb 11-1: Product: syz [ 2186.154491][ T34] usb 11-1: Manufacturer: syz [ 2186.166833][ T34] usb 11-1: SerialNumber: syz [ 2186.171017][T13254] veth1_to_batadv: entered allmulticast mode [ 2186.171056][ T34] usb 11-1: config 0 descriptor?? [ 2186.173346][T13254] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 2186.176451][ T34] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2186.185266][ T34] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2186.194295][T13258] FAULT_INJECTION: forcing a failure. [ 2186.194295][T13258] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.202037][T13258] CPU: 2 UID: 0 PID: 13258 Comm: syz.8.11060 Not tainted syzkaller #0 PREEMPT(full) [ 2186.202065][T13258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2186.202076][T13258] Call Trace: [ 2186.202082][T13258] [ 2186.202089][T13258] dump_stack_lvl+0x16c/0x1f0 [ 2186.202115][T13258] should_fail_ex+0x512/0x640 [ 2186.202141][T13258] ? __kmalloc_noprof+0xca/0x880 [ 2186.202161][T13258] should_failslab+0xc2/0x120 [ 2186.202194][T13258] __kmalloc_noprof+0xdd/0x880 [ 2186.202212][T13258] ? alloc_pipe_info+0x1ec/0x590 [ 2186.202237][T13258] ? alloc_pipe_info+0x1ec/0x590 [ 2186.202259][T13258] alloc_pipe_info+0x1ec/0x590 [ 2186.202286][T13258] splice_direct_to_actor+0x77d/0xa30 [ 2186.202308][T13258] ? __lock_acquire+0x62e/0x1ce0 [ 2186.202334][T13258] ? __pfx_direct_splice_actor+0x10/0x10 [ 2186.202355][T13258] ? __pfx_aa_file_perm+0x10/0x10 [ 2186.202378][T13258] ? find_held_lock+0x2b/0x80 [ 2186.202461][T13258] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2186.202478][T13258] ? get_pid_task+0xfc/0x250 [ 2186.202508][T13258] do_splice_direct+0x174/0x240 [ 2186.202526][T13258] ? __pfx_do_splice_direct+0x10/0x10 [ 2186.202542][T13258] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2186.202565][T13258] ? rw_verify_area+0xcf/0x6c0 [ 2186.202586][T13258] do_sendfile+0xb06/0xe50 [ 2186.202614][T13258] ? __pfx_do_sendfile+0x10/0x10 [ 2186.202634][T13258] ? __fget_files+0x20e/0x3c0 [ 2186.202660][T13258] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 2186.202684][T13258] ? ksys_write+0x1ac/0x250 [ 2186.202703][T13258] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 2186.202730][T13258] ? rcu_is_watching+0x12/0xc0 [ 2186.202757][T13258] __do_fast_syscall_32+0x7c/0x300 [ 2186.202781][T13258] do_fast_syscall_32+0x32/0x80 [ 2186.202804][T13258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2186.202828][T13258] RIP: 0023:0xf706e579 [ 2186.202844][T13258] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2186.202860][T13258] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2186.202879][T13258] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 2186.202890][T13258] RDX: 0000000000000000 RSI: 00000000003fffff RDI: 0000000000000000 [ 2186.202900][T13258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2186.202909][T13258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2186.202919][T13258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2186.202943][T13258] [ 2186.379494][T13247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2186.383464][T13247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2186.533104][T13265] netlink: 'syz.8.11063': attribute type 1 has an invalid length. [ 2186.766649][T13267] /dev/nullb0: Can't open blockdev [ 2187.124904][T13274] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2187.128613][ T904] usb 11-1: USB disconnect, device number 113 [ 2187.128710][ C0] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 2187.164907][T13277] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2187.214643][T13263] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2187.500112][ T904] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 2187.606801][T13283] netlink: 'syz.8.11067': attribute type 1 has an invalid length. [ 2187.739853][T13287] binder: 13286:13287 ioctl 4008662c 80000080 returned -22 [ 2187.748947][T13287] binder: 13286:13287 ioctl c0306201 80000540 returned -22 [ 2188.724361][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2188.786288][T13316] binder: 13315:13316 ioctl c0306201 80000640 returned -22 [ 2189.092481][ T6043] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2189.268690][ T6043] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2189.295648][ T6043] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2189.312915][ T6043] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2189.316509][ T6043] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2189.322283][ T6043] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2189.333375][ T6043] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.363816][ T6043] usb 9-1: config 0 descriptor?? [ 2189.786332][ T6043] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2190.097257][T13346] netlink: 'syz.4.11078': attribute type 1 has an invalid length. [ 2190.119309][T13346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2190.284754][ T6011] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 2190.434549][ T6011] usb 14-1: Using ep0 maxpacket: 32 [ 2190.438723][ T6011] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 2190.441951][ T6011] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2190.445937][ T6011] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2190.449611][ T6011] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2190.454106][ T6011] usb 14-1: config 0 interface 0 has no altsetting 0 [ 2190.459378][ T6011] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2190.462828][ T6011] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2190.465822][ T6011] usb 14-1: Product: syz [ 2190.467477][ T6011] usb 14-1: Manufacturer: syz [ 2190.469043][ T6011] usb 14-1: SerialNumber: syz [ 2190.473074][ T6011] usb 14-1: config 0 descriptor?? [ 2190.482814][ T6011] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2190.488404][ T6011] ldusb 14-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 2190.666927][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11087'. [ 2190.691846][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.695817][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.881722][ T9660] usb 14-1: USB disconnect, device number 5 [ 2190.907887][T13355] bond0: (slave batadv0): Releasing backup interface [ 2190.926447][T13355] bridge_slave_0: left allmulticast mode [ 2190.928329][T13355] bridge_slave_0: left promiscuous mode [ 2190.930765][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.945569][T13355] bridge_slave_1: left allmulticast mode [ 2190.947446][T13355] bridge_slave_1: left promiscuous mode [ 2190.949892][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.985549][ C0] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 2190.994007][ T9660] ldusb 14-1:0.0: LD USB Device #1 now disconnected [ 2191.145980][T13355] bond0: (slave bond_slave_0): Releasing backup interface [ 2191.186608][T13357] netlink: 'syz.8.11088': attribute type 10 has an invalid length. [ 2191.193253][T13355] bond0: (slave bond_slave_1): Releasing backup interface [ 2191.219943][T13355] team0: Port device team_slave_0 removed [ 2191.229198][T13355] team0: Port device team_slave_1 removed [ 2191.232967][T13355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2191.240871][T13355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2191.247700][T13355] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2191.266821][T13356] team0: Mode changed to "loadbalance" [ 2191.271091][T13357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2191.278441][T13357] team0: Port device bond0 added [ 2191.903451][T13359] tipc: Enabled bearer , priority 0 [ 2191.920550][T13359] syzkaller0: entered promiscuous mode [ 2191.922850][T13359] syzkaller0: entered allmulticast mode [ 2191.985952][T13359] tipc: Resetting bearer [ 2191.999797][ T7198] usb 9-1: USB disconnect, device number 9 [ 2192.159015][T13358] tipc: Resetting bearer [ 2192.240448][T13358] tipc: Disabling bearer [ 2192.828817][ T7198] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2192.846147][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11093'. [ 2192.871305][T13372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11093'. [ 2193.162159][T13376] FAULT_INJECTION: forcing a failure. [ 2193.162159][T13376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2193.167000][T13376] CPU: 2 UID: 0 PID: 13376 Comm: syz.8.11095 Not tainted syzkaller #0 PREEMPT(full) [ 2193.167018][T13376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2193.167025][T13376] Call Trace: [ 2193.167035][T13376] [ 2193.167039][T13376] dump_stack_lvl+0x16c/0x1f0 [ 2193.167057][T13376] should_fail_ex+0x512/0x640 [ 2193.167075][T13376] _copy_to_user+0x32/0xd0 [ 2193.167092][T13376] simple_read_from_buffer+0xcb/0x170 [ 2193.167112][T13376] proc_fail_nth_read+0x197/0x240 [ 2193.167126][T13376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2193.167139][T13376] ? rw_verify_area+0xcf/0x6c0 [ 2193.167150][T13376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2193.167168][T13376] vfs_read+0x1e1/0xcf0 [ 2193.167183][T13376] ? __pfx_vfs_read+0x10/0x10 [ 2193.167194][T13376] ? find_held_lock+0x2b/0x80 [ 2193.167211][T13376] ? __fget_files+0x20e/0x3c0 [ 2193.167226][T13376] ksys_read+0x12a/0x250 [ 2193.167238][T13376] ? __pfx_ksys_read+0x10/0x10 [ 2193.167251][T13376] ? rcu_is_watching+0x12/0xc0 [ 2193.167267][T13376] __do_fast_syscall_32+0x7c/0x300 [ 2193.167282][T13376] do_fast_syscall_32+0x32/0x80 [ 2193.167295][T13376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2193.167308][T13376] RIP: 0023:0xf706e579 [ 2193.167320][T13376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2193.167331][T13376] RSP: 002b:00000000f545e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2193.167342][T13376] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f545e620 [ 2193.167348][T13376] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 2193.167354][T13376] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2193.167360][T13376] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2193.167367][T13376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2193.167380][T13376] [ 2193.313448][T13378] syzkaller1: entered promiscuous mode [ 2193.315437][T13378] syzkaller1: entered allmulticast mode [ 2194.360821][T13383] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2194.487707][T13396] /dev/nullb0: Can't open blockdev [ 2194.810841][ T6011] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 2194.971069][ T6011] usb 13-1: Using ep0 maxpacket: 32 [ 2194.975442][ T6011] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 2194.978318][ T6011] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2194.982365][ T6011] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2194.985939][ T6011] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2194.991681][ T6011] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2195.003247][ T6011] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2195.006846][ T6011] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2195.010101][ T6011] usb 13-1: Product: syz [ 2195.012591][ T6011] usb 13-1: Manufacturer: syz [ 2195.014238][ T6011] usb 13-1: SerialNumber: syz [ 2195.018193][ T6011] usb 13-1: config 0 descriptor?? [ 2195.022882][ T6011] ldusb 13-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2195.033112][ T6011] ldusb 13-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2195.047451][T13396] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2195.228680][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2195.237611][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.854972][ C3] ldusb 13-1:0.0: usb_submit_urb failed (-19) [ 2195.866822][T29982] usb 13-1: USB disconnect, device number 19 [ 2195.952445][T13417] ldusb 13-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2195.956252][T13421] ldusb 13-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2195.959756][T29982] ldusb 13-1:0.0: LD USB Device #0 now disconnected [ 2197.063373][T13429] netlink: 'syz.6.11112': attribute type 1 has an invalid length. [ 2198.440718][T13440] loop9: detected capacity change from 0 to 7 [ 2198.449226][ T2210] Dev loop9: unable to read RDB block 7 [ 2198.451078][ T2210] loop9: unable to read partition table [ 2198.453094][ T2210] loop9: partition table beyond EOD, truncated [ 2198.462201][T13442] autofs: Bad value for 'fd' [ 2198.519835][T13445] program syz.4.11117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2198.545649][T13440] Dev loop9: unable to read RDB block 7 [ 2198.549645][T13440] loop9: unable to read partition table [ 2198.551688][T13440] loop9: partition table beyond EOD, truncated [ 2198.554129][T13440] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2198.795456][T13448] autofs: Unknown parameter '0x00000000ffffffff' [ 2199.447152][T13472] netlink: 'syz.6.11125': attribute type 1 has an invalid length. [ 2199.918020][ T6011] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 2200.099058][ T6011] usb 14-1: Using ep0 maxpacket: 32 [ 2200.102991][ T6011] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 2200.106076][ T6011] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2200.110565][ T6011] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2200.114808][ T6011] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2200.120391][ T6011] usb 14-1: config 0 interface 0 has no altsetting 0 [ 2200.148370][ T6011] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2200.158539][ T6011] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2200.161526][ T6011] usb 14-1: Product: syz [ 2200.163016][ T6011] usb 14-1: Manufacturer: syz [ 2200.164837][ T6011] usb 14-1: SerialNumber: syz [ 2200.177941][ T6011] usb 14-1: config 0 descriptor?? [ 2200.196973][ T6011] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2200.204817][ T6011] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2200.296935][T13513] netlink: 'syz.6.11135': attribute type 15 has an invalid length. [ 2200.399808][T13517] FAULT_INJECTION: forcing a failure. [ 2200.399808][T13517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2200.404175][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2200.405073][T13517] CPU: 3 UID: 0 PID: 13517 Comm: syz.4.11136 Not tainted syzkaller #0 PREEMPT(full) [ 2200.405089][T13517] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2200.405096][T13517] Call Trace: [ 2200.405100][T13517] [ 2200.405105][T13517] dump_stack_lvl+0x16c/0x1f0 [ 2200.405123][T13517] should_fail_ex+0x512/0x640 [ 2200.405142][T13517] _copy_to_user+0x32/0xd0 [ 2200.405159][T13517] simple_read_from_buffer+0xcb/0x170 [ 2200.405180][T13517] proc_fail_nth_read+0x197/0x240 [ 2200.405193][T13517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2200.405206][T13517] ? rw_verify_area+0xcf/0x6c0 [ 2200.405218][T13517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2200.405230][T13517] vfs_read+0x1e1/0xcf0 [ 2200.405245][T13517] ? __pfx_vfs_read+0x10/0x10 [ 2200.405256][T13517] ? find_held_lock+0x2b/0x80 [ 2200.405274][T13517] ? __fget_files+0x20e/0x3c0 [ 2200.405289][T13517] ksys_read+0x12a/0x250 [ 2200.405301][T13517] ? __pfx_ksys_read+0x10/0x10 [ 2200.405315][T13517] ? rcu_is_watching+0x12/0xc0 [ 2200.405330][T13517] __do_fast_syscall_32+0x7c/0x300 [ 2200.405367][T13517] do_fast_syscall_32+0x32/0x80 [ 2200.405381][T13517] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2200.405394][T13517] RIP: 0023:0xf703e579 [ 2200.405403][T13517] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2200.405414][T13517] RSP: 002b:00000000f540d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2200.405423][T13517] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f540d620 [ 2200.405430][T13517] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 2200.405436][T13517] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2200.405442][T13517] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2200.405448][T13517] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2200.405461][T13517] [ 2200.481994][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11138'. [ 2200.482223][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.508917][T13522] kvm: MONITOR instruction emulated as NOP! [ 2200.525035][T13527] lo speed is unknown, defaulting to 1000 [ 2200.693237][T13531] input: syz0 as /devices/virtual/input/input81 [ 2200.739909][T13532] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2200.746089][T13533] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2200.752547][ T6011] usb 14-1: USB disconnect, device number 6 [ 2200.754774][ C0] ldusb 14-1:0.0: usb_submit_urb failed (-19) [ 2200.771710][ T6011] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 2201.069691][T29982] usb 11-1: new high-speed USB device number 114 using dummy_hcd [ 2201.199890][T29982] usb 11-1: device descriptor read/64, error -71 [ 2201.440267][T29982] usb 11-1: new high-speed USB device number 115 using dummy_hcd [ 2201.570418][T29982] usb 11-1: device descriptor read/64, error -71 [ 2201.681540][T29982] usb usb11-port1: attempt power cycle [ 2202.021036][T29982] usb 11-1: new high-speed USB device number 116 using dummy_hcd [ 2202.041681][T29982] usb 11-1: device descriptor read/8, error -71 [ 2202.281539][T29982] usb 11-1: new high-speed USB device number 117 using dummy_hcd [ 2202.302695][T29982] usb 11-1: device descriptor read/8, error -71 [ 2202.412015][T29982] usb usb11-port1: unable to enumerate USB device [ 2202.816526][T13546] netlink: 'syz.8.11142': attribute type 1 has an invalid length. [ 2203.356200][T13560] overlayfs: overlapping lowerdir path [ 2203.411542][T13569] Device name cannot be null; rc = [-22] [ 2203.712723][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11154'. [ 2204.084872][ T6043] usb 11-1: new high-speed USB device number 118 using dummy_hcd [ 2204.131607][T13581] random: crng reseeded on system resumption [ 2204.264269][ T6043] usb 11-1: Using ep0 maxpacket: 32 [ 2204.267563][ T6043] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 2204.270195][ T6043] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2204.273734][ T6043] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2204.279921][ T6043] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2204.285927][ T6043] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2204.290676][ T6043] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2204.293597][ T6043] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2204.297064][ T6043] usb 11-1: Product: syz [ 2204.298527][ T6043] usb 11-1: Manufacturer: syz [ 2204.300539][ T6043] usb 11-1: SerialNumber: syz [ 2204.314830][ T6043] usb 11-1: config 0 descriptor?? [ 2204.332900][ T6043] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2204.353889][T13587] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11158'. [ 2204.368682][ T6043] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2204.640631][T13580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2204.649630][T13580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2204.780490][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11161'. [ 2204.794641][T13592] kvm: pic: non byte read [ 2204.818592][T13592] kvm: pic: level sensitive irq not supported [ 2204.838663][T13592] kvm: pic: non byte read [ 2204.895740][T13592] kvm: pic: level sensitive irq not supported [ 2204.905758][T13592] kvm: pic: non byte read [ 2204.933597][T13592] kvm: pic: level sensitive irq not supported [ 2204.934828][T13592] kvm: pic: non byte read [ 2205.007274][T13592] kvm: pic: level sensitive irq not supported [ 2205.012805][T13592] kvm: pic: non byte read [ 2205.031165][T13592] kvm: pic: level sensitive irq not supported [ 2205.035767][T13592] kvm: pic: non byte read [ 2205.051338][T13592] kvm: pic: level sensitive irq not supported [ 2205.125100][ C0] vkms_vblank_simulate: vblank timer overrun [ 2205.152011][T13592] kvm: pic: non byte read [ 2205.367716][T13592] kvm: pic: level sensitive irq not supported [ 2205.368647][T13592] kvm: pic: non byte read [ 2205.388922][T13592] kvm: pic: level sensitive irq not supported [ 2205.390486][T13592] kvm: pic: non byte read [ 2205.411662][T13603] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2205.415267][T13604] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2205.891157][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11163'. [ 2205.951938][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11163'. [ 2205.959820][T13610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11163'. [ 2205.963071][T13610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11163'. [ 2206.008805][ T7198] usb 11-1: USB disconnect, device number 118 [ 2206.008855][ C3] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 2206.421878][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11166'. [ 2206.928637][ T7198] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 2207.043770][T13628] autofs: Unknown parameter '0x0000000000000000' [ 2207.099203][T13631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11170'. [ 2207.102350][T13632] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 2207.104753][T13632] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2207.108742][T13632] vhci_hcd vhci_hcd.0: Device attached [ 2207.419050][ T9660] usb 56-1: SetAddress Request (2) to port 0 [ 2207.422012][ T9660] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2207.551091][T13633] vhci_hcd: connection closed [ 2207.733539][ T8573] vhci_hcd: stop threads [ 2207.738242][ T8573] vhci_hcd: release socket [ 2207.740458][ T8573] vhci_hcd: disconnect device [ 2207.764971][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11172'. [ 2208.045032][T13645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2208.430122][ T7957] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 2208.594472][ T7957] usb 9-1: config 5 has an invalid interface number: 24 but max is 3 [ 2208.598071][ T7957] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2208.602639][ T7957] usb 9-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 2208.606587][ T7957] usb 9-1: config 5 has no interface number 0 [ 2208.609159][ T7957] usb 9-1: config 5 interface 24 altsetting 3 endpoint 0x6 has invalid maxpacket 9222, setting to 64 [ 2208.614145][ T7957] usb 9-1: config 5 interface 24 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 2208.620071][ T7957] usb 9-1: config 5 interface 24 has no altsetting 0 [ 2208.634628][ T7957] usb 9-1: New USB device found, idVendor=13d3, idProduct=3284, bcdDevice=a6.bd [ 2208.644700][ T7957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.648197][ T7957] usb 9-1: Product: ࠧ [ 2208.650173][ T7957] usb 9-1: Manufacturer: 踅ᕾ马䗖岶ॵꦱ괌봁宊梮妀桙㦍멕ﭠ疌쟴鐠徿䈲ꥤ鈔﫥琀櫾潁授桹ᯋ쟔꼹⊒䗺ত⑜貥璠䄿季钹䥨崁㝥ᐯ㶬笘榺凃凮ᰋ税숽頿ᨯ펁鲑 [ 2208.660032][ T7957] usb 9-1: SerialNumber: ബ㥮碸幢踹쀾π㙤鱢입稆䓫颶Å庿얐⋒ꗴ愆蔳꠻霔㣣‏腤半荗૪剩捌뤩塮 [ 2208.712342][T13656] autofs: Unknown parameter 'fd0x0000000000000000' [ 2208.785591][T13658] netlink: 'syz.8.11177': attribute type 1 has an invalid length. [ 2208.847182][ T40] audit: type=1326 audit(2721.112:13973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.856420][ T40] audit: type=1326 audit(2721.112:13974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.863306][T13660] pim6reg: entered allmulticast mode [ 2208.866161][ T40] audit: type=1326 audit(2721.112:13975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.876180][ T40] audit: type=1326 audit(2721.122:13976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.884602][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11173'. [ 2208.891777][ T40] audit: type=1326 audit(2721.122:13977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.898428][ T7957] usb 9-1: USB disconnect, device number 10 [ 2208.898974][ T40] audit: type=1326 audit(2721.122:13978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.899001][ T40] audit: type=1326 audit(2721.122:13979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.899022][ T40] audit: type=1326 audit(2721.122:13980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.926322][ T40] audit: type=1326 audit(2721.122:13981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2208.933974][ T40] audit: type=1326 audit(2721.122:13982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13652 comm="syz.6.11176" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2209.538457][T13675] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 2209.540843][T13675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2209.543725][T13675] vhci_hcd vhci_hcd.0: Device attached [ 2209.775112][T13652] pim6reg: left allmulticast mode [ 2209.982299][ T7957] usb 45-1: new low-speed USB device number 6 using vhci_hcd [ 2210.281536][T13676] vhci_hcd: connection reset by peer [ 2210.286295][ T8573] vhci_hcd: stop threads [ 2210.288103][ T8573] vhci_hcd: release socket [ 2210.290958][ T8573] vhci_hcd: disconnect device [ 2210.838160][T13688] autofs: Unknown parameter 'fd0x0000000000000000' [ 2210.964255][T13689] bridge_slave_0: left allmulticast mode [ 2210.967063][T13689] bridge_slave_0: left promiscuous mode [ 2210.970046][T13689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2210.996663][T13689] bridge_slave_1: left allmulticast mode [ 2210.999457][T13689] bridge_slave_1: left promiscuous mode [ 2211.002194][T13689] bridge0: port 2(bridge_slave_1) entered disabled state [ 2211.022600][T13689] bond0: (slave bond_slave_0): Releasing backup interface [ 2211.037885][T13689] bond0: (slave bond_slave_1): Releasing backup interface [ 2211.047547][T13689] team0: Port device team_slave_0 removed [ 2211.065861][T13689] team0: Port device team_slave_1 removed [ 2211.068916][T13689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2211.086250][T13689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2211.096667][T13689] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2211.129978][T13692] team0: Mode changed to "loadbalance" [ 2211.158352][T13693] syz.9.11186 (13693): drop_caches: 2 [ 2211.381767][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11191'. [ 2211.584688][ T2423] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 2211.734837][ T2423] usb 13-1: Using ep0 maxpacket: 16 [ 2211.738860][ T2423] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2211.743841][ T2423] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2211.747746][ T2423] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.750638][ T2423] usb 13-1: Product: syz [ 2211.752337][ T2423] usb 13-1: Manufacturer: syz [ 2211.754264][ T2423] usb 13-1: SerialNumber: syz [ 2211.759271][ T2423] usb 13-1: config 0 descriptor?? [ 2211.766639][ T2423] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2211.770719][ T2423] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 2212.025626][ T2423] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 2212.091279][ T2423] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2212.094773][ T2423] em28xx 13-1:0.0: board has no eeprom [ 2212.155435][ T2423] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2212.158099][ T2423] em28xx 13-1:0.0: dvb set to bulk mode. [ 2212.160000][ T7198] em28xx 13-1:0.0: Binding DVB extension [ 2212.170810][ T2423] usb 13-1: USB disconnect, device number 20 [ 2212.174110][ T2423] em28xx 13-1:0.0: Disconnecting em28xx [ 2212.193583][ T7198] em28xx 13-1:0.0: Registering input extension [ 2212.198080][ T2423] em28xx 13-1:0.0: Closing input extension [ 2212.205779][ T2423] em28xx 13-1:0.0: Freeing device [ 2212.476608][ T9660] usb 56-1: device descriptor read/8, error -110 [ 2212.940916][ T9660] usb usb56-port1: attempt power cycle [ 2213.299969][T13728] netlink: 'syz.8.11196': attribute type 10 has an invalid length. [ 2213.302983][T13728] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11196'. [ 2213.306129][T13728] dummy0: entered promiscuous mode [ 2213.317996][T13728] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 2213.393317][T13723] Bluetooth: MGMT ver 1.23 [ 2213.426997][T13730] misc userio: No port type given on /dev/userio [ 2213.546000][ T9660] usb usb56-port1: unable to enumerate USB device [ 2214.375155][T13743] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11201'. [ 2214.383555][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11201'. [ 2215.130246][ T7957] vhci_hcd: vhci_device speed not set [ 2215.552641][T13752] program syz.6.11206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2215.556649][T13749] wg1: entered promiscuous mode [ 2215.560746][T13749] wg1: entered allmulticast mode [ 2215.569056][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2215.827628][T13764] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 2215.900616][ T9660] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 2216.030804][ T9660] usb 13-1: device descriptor read/64, error -71 [ 2216.275887][ T9660] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 2216.411344][ T9660] usb 13-1: device descriptor read/64, error -71 [ 2216.522247][ T9660] usb usb13-port1: attempt power cycle [ 2216.861970][ T9660] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 2216.882628][ T9660] usb 13-1: device descriptor read/8, error -71 [ 2217.122495][ T9660] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 2217.143485][ T9660] usb 13-1: device descriptor read/8, error -71 [ 2217.253549][ T9660] usb usb13-port1: unable to enumerate USB device [ 2217.316748][T13736] Set syz1 is full, maxelem 65536 reached [ 2217.787007][T13778] netlink: 'syz.6.11214': attribute type 10 has an invalid length. [ 2217.790446][T13778] bond0: (slave wlan1): Opening slave failed [ 2217.797519][T13778] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11214'. [ 2218.553642][T13776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2218.594400][ T7957] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 2218.724662][ T7957] usb 14-1: device descriptor read/64, error -71 [ 2218.984977][ T7957] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 2219.115383][ T7957] usb 14-1: device descriptor read/64, error -71 [ 2219.236240][ T7957] usb usb14-port1: attempt power cycle [ 2219.292233][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 2219.292250][ T40] audit: type=1326 audit(2731.547:14010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2219.309639][ T40] audit: type=1326 audit(2731.547:14011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70fe5a7 code=0x7ffc0000 [ 2219.319059][ T40] audit: type=1326 audit(2731.547:14012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2219.328683][ T40] audit: type=1326 audit(2731.547:14013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2219.338249][ T40] audit: type=1326 audit(2731.557:14014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2219.347098][ T40] audit: type=1326 audit(2731.557:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70fe5a7 code=0x7ffc0000 [ 2219.356815][ T40] audit: type=1326 audit(2731.557:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2219.365536][ T40] audit: type=1326 audit(2731.557:14017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2219.374834][ T40] audit: type=1326 audit(2731.557:14018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 2219.383563][ T40] audit: type=1326 audit(2731.557:14019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz.6.11223" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70fe5a7 code=0x7ffc0000 [ 2219.397558][T13806] ubi: mtd0 is already attached to ubi31 [ 2219.490523][T13809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11224'. [ 2219.575818][ T7957] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 2219.606452][ T7957] usb 14-1: device descriptor read/8, error -71 [ 2219.761966][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11227'. [ 2219.856288][ T7957] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 2219.887298][ T7957] usb 14-1: device descriptor read/8, error -71 [ 2219.996877][ T7957] usb usb14-port1: unable to enumerate USB device [ 2220.217016][ T8106] usb 13-1: new full-speed USB device number 25 using dummy_hcd [ 2220.346975][ T8106] usb 13-1: device descriptor read/64, error -71 [ 2220.617577][ T8106] usb 13-1: new full-speed USB device number 26 using dummy_hcd [ 2220.757518][ T8106] usb 13-1: device descriptor read/64, error -71 [ 2220.878309][ T8106] usb usb13-port1: attempt power cycle [ 2220.974198][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2220.976360][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.238082][ T8106] usb 13-1: new full-speed USB device number 27 using dummy_hcd [ 2221.270051][ T8106] usb 13-1: device descriptor read/8, error -71 [ 2221.508571][ T8106] usb 13-1: new full-speed USB device number 28 using dummy_hcd [ 2221.539907][ T8106] usb 13-1: device descriptor read/8, error -71 [ 2221.649569][ T8106] usb usb13-port1: unable to enumerate USB device [ 2221.807374][T13850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2222.489635][T13863] netlink: 'syz.4.11240': attribute type 1 has an invalid length. [ 2222.716145][T13870] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 2222.718564][T13870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2222.721419][T13870] vhci_hcd vhci_hcd.0: Device attached [ 2222.910380][ T7957] usb 11-1: new high-speed USB device number 119 using dummy_hcd [ 2223.020500][ T34] usb 45-1: new low-speed USB device number 7 using vhci_hcd [ 2223.060676][ T7957] usb 11-1: Using ep0 maxpacket: 32 [ 2223.065005][ T7957] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 2223.068138][ T7957] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2223.072917][ T7957] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2223.078109][ T7957] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2223.083051][ T7957] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2223.088157][ T7957] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2223.091706][ T7957] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2223.094780][ T7957] usb 11-1: Product: syz [ 2223.096256][ T7957] usb 11-1: Manufacturer: syz [ 2223.097870][ T7957] usb 11-1: SerialNumber: syz [ 2223.105267][ T7957] usb 11-1: config 0 descriptor?? [ 2223.111721][ T7957] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2223.116875][ T7957] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2223.321038][T13869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2223.325031][T13869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2223.479717][T13871] vhci_hcd: connection reset by peer [ 2223.485799][ T8570] vhci_hcd: stop threads [ 2223.491009][ T8570] vhci_hcd: release socket [ 2223.498524][ T8570] vhci_hcd: disconnect device [ 2223.577437][ T7957] usb 11-1: USB disconnect, device number 119 [ 2223.577568][ C3] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 2223.583805][T13880] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2223.586801][T13881] ldusb 11-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2223.641956][ T7957] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 2223.682348][T30909] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 2223.844513][T30909] usb 14-1: config index 0 descriptor too short (expected 23569, got 27) [ 2223.848039][T30909] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2223.860616][T13882] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2223.863520][T30909] usb 14-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2223.866455][T30909] usb 14-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2223.868917][T30909] usb 14-1: Manufacturer: syz [ 2223.882619][T30909] usb 14-1: config 0 descriptor?? [ 2223.942354][T30909] rc_core: IR keymap rc-hauppauge not found [ 2223.945372][T30909] Registered IR keymap rc-empty [ 2223.950006][T30909] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0 [ 2223.956562][T30909] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0/input85 [ 2224.046251][T13890] loop2: detected capacity change from 0 to 7 [ 2224.050660][ T3427] Dev loop2: unable to read RDB block 7 [ 2224.054459][ T3427] loop2: unable to read partition table [ 2224.057644][ T3427] loop2: partition table beyond EOD, truncated [ 2224.129438][T13895] netlink: 'syz.8.11249': attribute type 1 has an invalid length. [ 2224.197524][ T8106] usb 14-1: USB disconnect, device number 11 [ 2224.276299][T13890] Dev loop2: unable to read RDB block 7 [ 2224.279599][T13890] loop2: unable to read partition table [ 2224.281772][T13890] loop2: partition table beyond EOD, truncated [ 2224.284064][T13890] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2224.794614][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11254'. [ 2225.076694][T13923] KVM: debugfs: duplicate directory 13923-5 [ 2225.551339][T13931] netlink: 'syz.4.11259': attribute type 1 has an invalid length. [ 2225.627713][T13933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2225.718939][T13935] FAULT_INJECTION: forcing a failure. [ 2225.718939][T13935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.724862][T13935] CPU: 0 UID: 0 PID: 13935 Comm: syz.6.11261 Not tainted syzkaller #0 PREEMPT(full) [ 2225.724879][T13935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2225.724886][T13935] Call Trace: [ 2225.724890][T13935] [ 2225.724894][T13935] dump_stack_lvl+0x16c/0x1f0 [ 2225.724932][T13935] should_fail_ex+0x512/0x640 [ 2225.724960][T13935] _copy_from_iter+0x29f/0x1720 [ 2225.724978][T13935] ? __alloc_skb+0x200/0x380 [ 2225.724993][T13935] ? __pfx__copy_from_iter+0x10/0x10 [ 2225.725009][T13935] ? netlink_autobind.isra.0+0x158/0x370 [ 2225.725031][T13935] netlink_sendmsg+0x820/0xdd0 [ 2225.725050][T13935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2225.725068][T13935] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2225.725087][T13935] ____sys_sendmsg+0xa95/0xc70 [ 2225.725129][T13935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2225.725147][T13935] ? get_compat_msghdr+0x11a/0x170 [ 2225.725171][T13935] ___sys_sendmsg+0x134/0x1d0 [ 2225.725189][T13935] ? __pfx____sys_sendmsg+0x10/0x10 [ 2225.725211][T13935] ? find_held_lock+0x2b/0x80 [ 2225.725234][T13935] __sys_sendmsg+0x16d/0x220 [ 2225.725251][T13935] ? __pfx___sys_sendmsg+0x10/0x10 [ 2225.725273][T13935] ? rcu_is_watching+0x12/0xc0 [ 2225.725289][T13935] __do_fast_syscall_32+0x7c/0x300 [ 2225.725377][T13935] do_fast_syscall_32+0x32/0x80 [ 2225.725391][T13935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2225.725406][T13935] RIP: 0023:0xf70fe579 [ 2225.725416][T13935] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2225.725427][T13935] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2225.725438][T13935] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2225.725445][T13935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2225.725452][T13935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2225.725458][T13935] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2225.725464][T13935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2225.725478][T13935] [ 2225.821578][ C0] vkms_vblank_simulate: vblank timer overrun [ 2226.205540][T13946] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 2226.371318][T13949] random: crng reseeded on system resumption [ 2226.378746][T13949] IPv6: NLM_F_CREATE should be specified when creating new route [ 2226.406945][T13946] /dev/sr0: Can't open blockdev [ 2226.875630][T30909] IPVS: starting estimator thread 0... [ 2226.956003][T13963] IPVS: using max 40 ests per chain, 96000 per kthread [ 2227.356608][T30909] usb 11-1: new low-speed USB device number 120 using dummy_hcd [ 2227.468587][T13971] FAULT_INJECTION: forcing a failure. [ 2227.468587][T13971] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.474230][T13971] CPU: 3 UID: 0 PID: 13971 Comm: syz.4.11271 Not tainted syzkaller #0 PREEMPT(full) [ 2227.474256][T13971] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2227.474265][T13971] Call Trace: [ 2227.474272][T13971] [ 2227.474280][T13971] dump_stack_lvl+0x16c/0x1f0 [ 2227.474307][T13971] should_fail_ex+0x512/0x640 [ 2227.474332][T13971] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2227.474354][T13971] should_failslab+0xc2/0x120 [ 2227.474376][T13971] __kmalloc_cache_noprof+0x72/0x780 [ 2227.474389][T13971] ? request_key_and_link+0xdfb/0x1370 [ 2227.474407][T13971] ? request_key_auth_new+0x107/0xa20 [ 2227.474429][T13971] ? request_key_auth_new+0x107/0xa20 [ 2227.474446][T13971] request_key_auth_new+0x107/0xa20 [ 2227.474466][T13971] ? __pfx_request_key_auth_new+0x10/0x10 [ 2227.474494][T13971] request_key_and_link+0xe27/0x1370 [ 2227.474512][T13971] ? __pfx_request_key_and_link+0x10/0x10 [ 2227.474536][T13971] ? __pfx___might_resched+0x10/0x10 [ 2227.474560][T13971] ? find_held_lock+0x2b/0x80 [ 2227.474584][T13971] ? __pfx_asymmetric_key_cmp+0x10/0x10 [ 2227.474611][T13971] ? __pfx_keyring_search_iterator+0x10/0x10 [ 2227.474630][T13971] ? _copy_from_user+0x59/0xd0 [ 2227.474660][T13971] __do_sys_request_key+0x23a/0x3d0 [ 2227.474684][T13971] ? __pfx___do_sys_request_key+0x10/0x10 [ 2227.474705][T13971] ? ksys_write+0x1ac/0x250 [ 2227.474729][T13971] ? rcu_is_watching+0x12/0xc0 [ 2227.474762][T13971] __do_fast_syscall_32+0x7c/0x300 [ 2227.474786][T13971] do_fast_syscall_32+0x32/0x80 [ 2227.474808][T13971] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2227.474831][T13971] RIP: 0023:0xf703e579 [ 2227.474845][T13971] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2227.474859][T13971] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 000000000000011f [ 2227.474876][T13971] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080001ffb [ 2227.474887][T13971] RDX: 0000000080001fee RSI: 0000000000000000 RDI: 0000000000000000 [ 2227.474898][T13971] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2227.474908][T13971] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2227.474918][T13971] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2227.474941][T13971] [ 2227.586938][T30909] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2227.597212][T30909] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2227.617309][T30909] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2227.638731][T30909] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2227.661704][T30909] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2227.677998][T30909] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2227.697152][T30909] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2227.721645][T30909] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2227.744290][T30909] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 2227.760881][T30909] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2227.783240][T30909] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2227.804503][T30909] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2227.831583][T30909] usb 11-1: string descriptor 0 read error: -22 [ 2227.842419][T30909] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2227.860259][T30909] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.959161][T30909] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2228.167741][ T34] vhci_hcd: vhci_device speed not set [ 2228.217747][T29982] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 2228.392235][T29982] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2228.397369][T29982] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2228.401136][T29982] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2228.404936][T29982] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.414446][T13978] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2228.430194][T29982] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 2228.632460][T29982] usb 13-1: USB disconnect, device number 29 [ 2228.646920][ T5953] Bluetooth: hci2: Malformed LE Event: 0x0d [ 2228.682271][T13993] netlink: 'syz.9.11278': attribute type 1 has an invalid length. [ 2228.684890][T13993] netlink: 'syz.9.11278': attribute type 3 has an invalid length. [ 2228.687359][T13993] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11278'. [ 2229.534475][T14001] : entered promiscuous mode [ 2230.093568][ T5953] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 2230.303209][T14014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2230.467125][ T8106] usb 11-1: USB disconnect, device number 120 [ 2230.593850][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11286'. [ 2230.702231][T14029] input: syz1 as /devices/virtual/input/input86 [ 2230.704470][T14029] input: failed to attach handler leds to device input86, error: -6 [ 2231.312138][T29982] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 2231.462255][T29982] usb 13-1: Using ep0 maxpacket: 8 [ 2231.466965][T29982] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.471103][T29982] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2231.474521][T29982] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.839926][ T8570] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2231.844289][ T8570] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2231.847178][ T8570] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2231.849821][ T8570] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2231.868531][T14048] netlink: 'syz.6.11297': attribute type 1 has an invalid length. [ 2232.080643][T14060] FAULT_INJECTION: forcing a failure. [ 2232.080643][T14060] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.084998][T14060] CPU: 0 UID: 0 PID: 14060 Comm: syz.6.11301 Not tainted syzkaller #0 PREEMPT(full) [ 2232.085024][T14060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2232.085057][T14060] Call Trace: [ 2232.085063][T14060] [ 2232.085068][T14060] dump_stack_lvl+0x16c/0x1f0 [ 2232.085086][T14060] should_fail_ex+0x512/0x640 [ 2232.085102][T14060] ? fs_reclaim_acquire+0xae/0x150 [ 2232.085119][T14060] should_failslab+0xc2/0x120 [ 2232.085134][T14060] __kmalloc_noprof+0xdd/0x880 [ 2232.085145][T14060] ? tomoyo_encode2+0x100/0x3e0 [ 2232.085160][T14060] ? tomoyo_encode2+0x100/0x3e0 [ 2232.085170][T14060] tomoyo_encode2+0x100/0x3e0 [ 2232.085184][T14060] tomoyo_encode+0x29/0x50 [ 2232.085195][T14060] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2232.085208][T14060] ? tomoyo_profile+0x47/0x60 [ 2232.085223][T14060] tomoyo_path_number_perm+0x245/0x580 [ 2232.085239][T14060] ? tomoyo_path_number_perm+0x237/0x580 [ 2232.085257][T14060] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2232.085288][T14060] ? find_held_lock+0x2b/0x80 [ 2232.085302][T14060] ? hook_file_ioctl_common+0x145/0x410 [ 2232.085316][T14060] ? __fget_files+0x20e/0x3c0 [ 2232.085330][T14060] security_file_ioctl_compat+0x9b/0x240 [ 2232.085342][T14060] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2232.085361][T14060] __do_fast_syscall_32+0x7c/0x300 [ 2232.085375][T14060] do_fast_syscall_32+0x32/0x80 [ 2232.085389][T14060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2232.085402][T14060] RIP: 0023:0xf70fe579 [ 2232.085411][T14060] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2232.085422][T14060] RSP: 002b:00000000f54ee55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2232.085432][T14060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040049366 [ 2232.085440][T14060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2232.085446][T14060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2232.085452][T14060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2232.085458][T14060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2232.085472][T14060] [ 2232.085546][T14060] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2232.207308][T14062] netlink: 564 bytes leftover after parsing attributes in process `syz.6.11302'. [ 2232.453699][ T7198] usb 11-1: new high-speed USB device number 121 using dummy_hcd [ 2232.583897][ T7198] usb 11-1: device descriptor read/64, error -71 [ 2232.844435][ T7198] usb 11-1: new high-speed USB device number 122 using dummy_hcd [ 2232.984341][ T7198] usb 11-1: device descriptor read/64, error -71 [ 2233.104924][ T7198] usb usb11-port1: attempt power cycle [ 2233.535276][ T7198] usb 11-1: new high-speed USB device number 123 using dummy_hcd [ 2233.556306][ T7198] usb 11-1: device descriptor read/8, error -71 [ 2233.815526][ T7198] usb 11-1: new high-speed USB device number 124 using dummy_hcd [ 2233.836803][ T7198] usb 11-1: device descriptor read/8, error -71 [ 2233.960439][ T7198] usb usb11-port1: unable to enumerate USB device [ 2233.981678][T14080] netlink: 'syz.9.11307': attribute type 1 has an invalid length. [ 2234.194491][ T8106] usb 13-1: USB disconnect, device number 30 [ 2234.448351][T14099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2234.451364][T14099] 8021q: adding VLAN 0 to HW filter on device team0 [ 2234.456817][T14099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2234.907112][T29982] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 2235.067202][T29982] usb 14-1: Using ep0 maxpacket: 16 [ 2235.077232][T29982] usb 14-1: too many configurations: 141, using maximum allowed: 8 [ 2235.088659][T29982] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 2235.091191][T29982] usb 14-1: can't read configurations, error -61 [ 2235.227528][T29982] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 2235.349545][T14110] netlink: 'syz.4.11315': attribute type 1 has an invalid length. [ 2235.397749][T29982] usb 14-1: Using ep0 maxpacket: 16 [ 2235.401656][T29982] usb 14-1: too many configurations: 141, using maximum allowed: 8 [ 2235.407069][T29982] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 2235.410738][T29982] usb 14-1: can't read configurations, error -61 [ 2235.413263][T29982] usb usb14-port1: attempt power cycle [ 2235.598169][T14118] netlink: 'syz.4.11317': attribute type 1 has an invalid length. [ 2235.733888][T14121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11319'. [ 2235.738413][T14121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11319'. [ 2235.758417][T29982] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 2235.780299][T29982] usb 14-1: Using ep0 maxpacket: 16 [ 2235.782537][T29982] usb 14-1: too many configurations: 141, using maximum allowed: 8 [ 2235.789538][T29982] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 2235.792391][T29982] usb 14-1: can't read configurations, error -61 [ 2235.908616][ T40] kauditd_printk_skb: 194 callbacks suppressed [ 2235.908640][ T40] audit: type=1800 audit(2748.134:14214): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11320" name="file0" dev="overlay" ino=2302 res=0 errno=0 [ 2235.958472][T29982] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 2235.979153][T29982] usb 14-1: Using ep0 maxpacket: 16 [ 2235.982277][T29982] usb 14-1: too many configurations: 141, using maximum allowed: 8 [ 2235.987741][T29982] usb 14-1: unable to read config index 0 descriptor/start: -61 [ 2235.991452][T29982] usb 14-1: can't read configurations, error -61 [ 2235.997145][T29982] usb usb14-port1: unable to enumerate USB device [ 2236.343966][T14132] lo speed is unknown, defaulting to 1000 [ 2237.191825][T14145] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11324'. [ 2237.195437][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11324'. [ 2237.690746][ T2423] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 2237.709162][T14145] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2237.723436][T14145] team0: Mode changed to "loadbalance" [ 2237.808629][T14156] netlink: 'syz.6.11328': attribute type 1 has an invalid length. [ 2237.864078][ T2423] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2237.867780][ T2423] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2237.871841][ T2423] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2237.875306][ T2423] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.880634][T14148] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2237.889457][ T2423] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 2238.081463][T14163] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2238.098281][ T2423] usb 14-1: USB disconnect, device number 16 [ 2238.772638][T14169] netlink: 'syz.9.11332': attribute type 1 has an invalid length. [ 2238.832878][T14169] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 2238.836454][ T8610] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 2238.848884][ T8610] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 2238.851782][ T8610] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 2238.880159][ T8610] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 2239.153468][ T8106] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 2239.638658][ T8106] usb 13-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2239.641656][ T8106] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2239.644787][ T8106] usb 13-1: Product: syz [ 2239.646279][ T8106] usb 13-1: Manufacturer: syz [ 2239.647874][ T8106] usb 13-1: SerialNumber: syz [ 2239.651180][ T8106] usb 13-1: config 0 descriptor?? [ 2239.675056][ T8106] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2239.678873][ T8106] dvb-usb: bulk message failed: -22 (2/0) [ 2239.685738][ T8106] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2239.689633][ T8106] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2239.692354][ T8106] usb 13-1: media controller created [ 2239.704328][ T8106] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2239.866580][T14178] dvb-usb: bulk message failed: -22 (4/0) [ 2239.871040][T14178] cxusb: i2c read failed [ 2240.063954][ T904] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 2240.214501][ T904] usb 14-1: Using ep0 maxpacket: 8 [ 2240.222324][ T904] usb 14-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.226483][ T904] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2240.229536][ T904] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.381728][ T8106] cxusb: set interface failed [ 2240.383446][ T8106] dvb-usb: bulk message failed: -22 (1/0) [ 2240.412591][ T8106] DVB: Unable to find symbol mt352_attach() [ 2240.414818][ T8106] dvb-usb: bulk message failed: -22 (5/0) [ 2240.419050][ T8106] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2240.421667][ T8106] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2240.484915][ T8106] rc_core: IR keymap rc-dvico-mce not found [ 2240.487178][ T8106] Registered IR keymap rc-empty [ 2240.490277][ T8106] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 2240.495400][ T8106] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input87 [ 2240.500008][ T8106] dvb-usb: schedule remote query interval to 100 msecs. [ 2240.502559][ T8106] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2240.507619][ T8106] usb 13-1: USB disconnect, device number 31 [ 2240.545811][ T8106] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2241.079788][T14206] netlink: 'syz.8.11343': attribute type 1 has an invalid length. [ 2241.740421][T14220] netlink: 'syz.4.11347': attribute type 1 has an invalid length. [ 2241.979683][T14224] sp0: Synchronizing with TNC [ 2241.992369][T14223] [U] [ 2242.815141][T29982] usb 14-1: USB disconnect, device number 17 [ 2242.925217][T14257] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 2243.190086][T14263] netlink: 'syz.4.11359': attribute type 39 has an invalid length. [ 2243.525431][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11358'. [ 2243.552913][T14272] /dev/nullb0: Can't open blockdev [ 2244.065150][T14278] overlayfs: overlapping lowerdir path [ 2244.242714][T14269] Process accounting resumed [ 2244.459944][ T8106] usb 11-1: new high-speed USB device number 125 using dummy_hcd [ 2244.610080][ T8106] usb 11-1: Using ep0 maxpacket: 8 [ 2244.613151][ T8106] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2244.616495][ T8106] usb 11-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2244.625488][ T8106] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2244.630198][ T8106] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.636733][ T8106] usbtmc 11-1:16.0: bulk endpoints not found [ 2244.924576][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11367'. [ 2244.934005][T14292] input: syz0 as /devices/virtual/input/input88 [ 2245.079837][T14298] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11369'. [ 2245.129880][T14299] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 2245.132320][T14299] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2245.136230][T14299] vhci_hcd vhci_hcd.0: Device attached [ 2245.401751][ T9660] usb 56-1: SetAddress Request (6) to port 0 [ 2245.404426][ T9660] usb 56-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2245.758267][T14300] vhci_hcd: connection reset by peer [ 2245.760339][ T8571] vhci_hcd: stop threads [ 2245.762315][ T8571] vhci_hcd: release socket [ 2245.764314][ T8571] vhci_hcd: disconnect device [ 2245.936882][T14327] overlayfs: overlapping lowerdir path [ 2246.693115][ T2423] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2246.843119][ T2423] usb 9-1: Using ep0 maxpacket: 16 [ 2246.848305][ T2423] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2246.864075][ T2423] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2246.867814][ T2423] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.871115][ T2423] usb 9-1: Product: syz [ 2246.872844][ T2423] usb 9-1: Manufacturer: syz [ 2246.877284][ T2423] usb 9-1: SerialNumber: syz [ 2246.884291][ T2423] usb 9-1: config 0 descriptor?? [ 2246.987305][T14342] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11382'. [ 2247.093181][ T2423] usb 9-1: USB disconnect, device number 11 [ 2247.242102][T30909] usb 11-1: USB disconnect, device number 125 [ 2247.584934][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11385'. [ 2247.597295][T14357] macvlan2: entered allmulticast mode [ 2247.599500][T14357] veth1_vlan: entered allmulticast mode [ 2247.605204][T14357] veth1_vlan: left allmulticast mode [ 2247.634949][ T2423] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2247.652451][T14359] /dev/nullb0: Can't open blockdev [ 2247.785028][ T2423] usb 9-1: Using ep0 maxpacket: 8 [ 2247.793594][ T2423] usb 9-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 159, changing to 11 [ 2247.800250][ T2423] usb 9-1: config 1 interface 0 altsetting 93 endpoint 0x2 has an invalid bInterval 243, changing to 11 [ 2247.803993][ T2423] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2247.814832][ T2423] usb 9-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 2247.818211][ T2423] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.820990][ T2423] usb 9-1: Product: ᠉ [ 2247.822627][ T2423] usb 9-1: Manufacturer: ࠊ [ 2247.825537][ T2423] usb 9-1: SerialNumber: 撫日ꅳ❊粮䇉س伄ɢᅺꅏ፡옋姾ᆵ슺闄扎魣뎆⿜흒ᦦꆂ鍟腀ꅐ㾡됾Ꝇ䴣ꃯ茻僰䊫ꠎ⡗鉺踨殳 [ 2248.089169][ T2423] usbhid 9-1:1.0: can't add hid device: -71 [ 2248.094231][ T2423] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 2248.111748][ T2423] usb 9-1: USB disconnect, device number 12 [ 2248.148812][T14355] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2248.545472][T24210] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 2248.715620][T24210] usb 13-1: Using ep0 maxpacket: 32 [ 2248.719272][T24210] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 2248.722006][T24210] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.725338][T24210] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2248.730639][T24210] usb 13-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 2248.736936][T24210] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2248.743057][T24210] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2248.747481][T24210] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2248.751138][T24210] usb 13-1: Product: syz [ 2248.753205][T24210] usb 13-1: Manufacturer: syz [ 2248.755382][T24210] usb 13-1: SerialNumber: syz [ 2248.759740][T24210] usb 13-1: config 0 descriptor?? [ 2248.764323][T24210] ldusb 13-1:0.0: Interrupt in endpoint not found [ 2248.971581][T14366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2248.975340][T14366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2249.036220][T30909] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2249.157589][T24210] usb 13-1: USB disconnect, device number 32 [ 2249.432113][T30909] usb 9-1: Using ep0 maxpacket: 32 [ 2249.666331][T30909] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 2250.206101][T30909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2250.209632][T30909] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2250.214396][T30909] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2250.217447][T30909] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2250.220380][T30909] usb 9-1: Product: syz [ 2250.221734][T30909] usb 9-1: Manufacturer: syz [ 2250.223213][T30909] usb 9-1: SerialNumber: syz [ 2250.227024][T30909] usb 9-1: config 0 descriptor?? [ 2250.233190][T30909] ldusb 9-1:0.0: Interrupt in endpoint not found [ 2250.502462][T14386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.506261][T14386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.666020][ T34] usb 9-1: USB disconnect, device number 13 [ 2250.910109][ T9660] usb 56-1: device descriptor read/8, error -110 [ 2251.310266][ T9660] usb usb56-port1: attempt power cycle [ 2251.456549][T14397] /dev/nullb0: Can't open blockdev [ 2251.716763][ T8578] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2251.723321][ T8578] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2251.726064][T14402] netlink: 'syz.9.11398': attribute type 1 has an invalid length. [ 2251.727188][ T8578] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2251.734502][ T8578] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 2251.770245][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11397'. [ 2251.852170][ C0] vkms_vblank_simulate: vblank timer overrun [ 2251.871483][ T9660] usb usb56-port1: unable to enumerate USB device [ 2251.911913][T14401] lo speed is unknown, defaulting to 1000 [ 2251.951222][T14410] fuse: Bad value for 'group_id' [ 2251.952944][T14410] fuse: Bad value for 'group_id' [ 2251.982370][T14410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2252.010905][T14397] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2252.118456][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11402'. [ 2252.154422][T14424] FAULT_INJECTION: forcing a failure. [ 2252.154422][T14424] name failslab, interval 1, probability 0, space 0, times 0 [ 2252.161402][T14424] CPU: 1 UID: 0 PID: 14424 Comm: syz.4.11404 Not tainted syzkaller #0 PREEMPT(full) [ 2252.161428][T14424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2252.161436][T14424] Call Trace: [ 2252.161441][T14424] [ 2252.161447][T14424] dump_stack_lvl+0x16c/0x1f0 [ 2252.161467][T14424] should_fail_ex+0x512/0x640 [ 2252.161484][T14424] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2252.161500][T14424] should_failslab+0xc2/0x120 [ 2252.161518][T14424] __kmalloc_cache_noprof+0x72/0x780 [ 2252.161533][T14424] ? vkms_plane_duplicate_state+0x87/0x130 [ 2252.161551][T14424] ? vkms_plane_duplicate_state+0x87/0x130 [ 2252.161563][T14424] vkms_plane_duplicate_state+0x87/0x130 [ 2252.161577][T14424] drm_atomic_get_plane_state+0x20e/0x590 [ 2252.161592][T14424] drm_atomic_set_property+0xa29/0x34d0 [ 2252.161611][T14424] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 2252.161625][T14424] ? __might_fault+0xe3/0x190 [ 2252.161637][T14424] ? __might_fault+0xe3/0x190 [ 2252.161649][T14424] ? __might_fault+0x13b/0x190 [ 2252.161668][T14424] drm_mode_atomic_ioctl+0x66f/0x2600 [ 2252.161692][T14424] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2252.161707][T14424] ? __lock_acquire+0xb97/0x1ce0 [ 2252.161737][T14424] ? drm_is_current_master+0x2c/0x40 [ 2252.161752][T14424] ? do_raw_spin_unlock+0x172/0x230 [ 2252.161767][T14424] drm_ioctl_kernel+0x1f1/0x3e0 [ 2252.161779][T14424] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2252.161794][T14424] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 2252.161811][T14424] drm_ioctl+0x5c9/0xc30 [ 2252.161824][T14424] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2252.161840][T14424] ? __pfx_drm_ioctl+0x10/0x10 [ 2252.161863][T14424] drm_compat_ioctl+0x327/0x460 [ 2252.161880][T14424] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 2252.161895][T14424] __ia32_compat_sys_ioctl+0x23f/0x370 [ 2252.161917][T14424] __do_fast_syscall_32+0x7c/0x300 [ 2252.161934][T14424] do_fast_syscall_32+0x32/0x80 [ 2252.161949][T14424] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2252.161965][T14424] RIP: 0023:0xf703e579 [ 2252.161975][T14424] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2252.161986][T14424] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2252.161998][T14424] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00000000c03864bc [ 2252.162006][T14424] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 2252.162013][T14424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2252.162019][T14424] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2252.162026][T14424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2252.162042][T14424] [ 2252.363744][T14434] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11408'. [ 2252.390061][T14434] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 2252.530199][T14440] random: crng reseeded on system resumption [ 2252.535391][T14434] infiniband syz1: set down [ 2252.538119][T14434] infiniband syz1: added syz_tun [ 2252.581300][T14434] RDS/IB: syz1: added [ 2252.671098][ T2423] usb 11-1: new high-speed USB device number 126 using dummy_hcd [ 2252.825191][ T2423] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2252.829810][ T2423] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2252.834794][ T2423] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2252.838967][ T2423] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.846251][T14438] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2252.850794][ T2423] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 2253.057344][ T9660] usb 11-1: USB disconnect, device number 126 [ 2253.223514][T14444] netlink: 'syz.9.11410': attribute type 1 has an invalid length. [ 2253.340535][T14453] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 2253.502096][ T34] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 2253.666756][ T34] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2253.670553][ T34] usb 9-1: config 0 has no interface number 0 [ 2253.673467][ T34] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2253.678098][ T34] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2253.683476][ T34] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2253.687699][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.694443][ T34] usb 9-1: config 0 descriptor?? [ 2253.702536][T14447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2253.712428][ T34] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2253.782536][ T2423] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 2253.935133][T14447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11411'. [ 2253.940382][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11411'. [ 2253.948694][ T2423] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2253.953254][ T2423] usb 13-1: config 0 has no interfaces? [ 2253.955850][ T2423] usb 13-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2253.959654][ T2423] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.970037][ T2423] usb 13-1: config 0 descriptor?? [ 2254.158005][ T34] usb 9-1: USB disconnect, device number 14 [ 2254.158655][ C2] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2254.192186][ T2423] usb 13-1: USB disconnect, device number 33 [ 2254.239222][T14470] sp0: Synchronizing with TNC [ 2254.361167][T14473] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(13) [ 2254.363308][T14473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2254.366500][T14473] vhci_hcd vhci_hcd.0: Device attached [ 2254.483586][ T8106] usb 11-1: new high-speed USB device number 127 using dummy_hcd [ 2254.543499][T24210] vhci_hcd: vhci_device speed not set [ 2254.604592][T24210] usb 55-1: new full-speed USB device number 2 using vhci_hcd [ 2254.633528][ T8106] usb 11-1: Using ep0 maxpacket: 32 [ 2254.641293][ T8106] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 2254.652035][ T8106] usb 11-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2254.655747][ T8106] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.658825][ T8106] usb 11-1: Product: syz [ 2254.661140][ T8106] usb 11-1: Manufacturer: syz [ 2254.663302][ T8106] usb 11-1: SerialNumber: syz [ 2254.671703][ T8106] usb 11-1: config 0 descriptor?? [ 2254.675229][T14468] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2254.680300][ T8106] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 2254.842904][T14481] netlink: 'syz.8.11422': attribute type 1 has an invalid length. [ 2254.999216][T14485] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11423'. [ 2255.070889][T14474] vhci_hcd: connection reset by peer [ 2255.072991][ T8569] vhci_hcd: stop threads [ 2255.074508][ T8569] vhci_hcd: release socket [ 2255.079473][ T8569] vhci_hcd: disconnect device [ 2255.234536][ T34] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2255.424786][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 2255.428992][ T34] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 2255.432986][ T40] audit: type=1800 audit(2767.638:14215): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.11426" name="/" dev="9p" ino=2 res=0 errno=0 [ 2255.441632][ T34] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2255.446164][ T34] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2255.450252][ T34] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2255.456482][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2255.460649][ T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2255.463801][ T34] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2255.466927][ T34] usb 9-1: Product: syz [ 2255.468584][ T34] usb 9-1: Manufacturer: syz [ 2255.470271][ T34] usb 9-1: SerialNumber: syz [ 2255.475242][ T34] usb 9-1: config 0 descriptor?? [ 2255.479806][ T34] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2255.484170][ T34] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2255.684268][T14488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2255.691649][T14488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2255.765374][ T34] usb 13-1: new low-speed USB device number 34 using dummy_hcd [ 2255.879701][T14500] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2255.938546][ T34] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 2255.963704][ T34] usb 13-1: config 0 has no interface number 0 [ 2255.968649][ T34] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2255.972448][ T34] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 2255.977558][ T34] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2255.981703][ T34] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2255.986038][ T34] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 2255.992304][ T34] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2255.997360][ T34] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2256.000357][ T34] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.004732][ T34] usb 13-1: config 0 descriptor?? [ 2256.012399][T14495] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2256.023945][T14495] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2256.041876][ T34] ldusb 13-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 2256.173542][T30909] usb 9-1: USB disconnect, device number 15 [ 2256.173641][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 2256.424146][ T2423] usb 13-1: USB disconnect, device number 34 [ 2256.450565][ T2423] ldusb 13-1:0.55: LD USB Device #1 now disconnected [ 2256.890080][T30909] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 2256.897665][ T34] usb 11-1: USB disconnect, device number 127 [ 2257.251076][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11430'. [ 2257.377322][T14510] input: syz0 as /devices/virtual/input/input91 [ 2257.384967][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11431'. [ 2257.773460][ T8602] bridge_slave_1: left allmulticast mode [ 2257.775669][ T8602] bridge_slave_1: left promiscuous mode [ 2257.778295][ T8602] bridge0: port 2(bridge_slave_1) entered disabled state [ 2257.786550][ T8602] bridge_slave_0: left allmulticast mode [ 2257.790763][ T8602] bridge_slave_0: left promiscuous mode [ 2257.793788][ T8602] bridge0: port 1(bridge_slave_0) entered disabled state [ 2258.067864][T30909] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 2258.075497][ T8602] dvmrp0 (unregistering): left allmulticast mode [ 2258.230984][T30909] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2258.235774][T30909] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2258.240272][T30909] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2258.244016][T30909] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.251040][T14526] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2258.256366][T30909] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 2258.423443][ T8602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2258.430125][ T8602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2258.434912][ T8602] bond0 (unregistering): Released all slaves [ 2258.466426][ T904] usb 14-1: USB disconnect, device number 18 [ 2258.589776][T29982] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 2258.738006][T29982] usb 13-1: Using ep0 maxpacket: 8 [ 2258.749677][T29982] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2258.752994][T29982] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2258.757037][T29982] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2258.761070][T29982] usb 13-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2258.766686][T29982] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2258.772575][T29982] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.779933][T29982] usbtmc 13-1:16.0: bulk endpoints not found [ 2258.996088][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11441'. [ 2258.996527][ T8602] hsr_slave_0: left promiscuous mode [ 2259.021080][ T8602] hsr_slave_1: left promiscuous mode [ 2259.023407][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2259.031741][ T8602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2259.095366][T14555] input: syz0 as /devices/virtual/input/input93 [ 2259.741264][T24210] vhci_hcd: vhci_device speed not set [ 2259.966258][T14566] random: crng reseeded on system resumption [ 2260.772620][ T8602] team0 (unregistering): Port device team_slave_1 removed [ 2260.965713][ T8602] team0 (unregistering): Port device team_slave_0 removed [ 2261.370780][T24210] usb 13-1: USB disconnect, device number 35 [ 2261.425140][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11446'. [ 2262.148959][ T904] lo speed is unknown, defaulting to 1000 [ 2262.151580][ T904] syz2: Port: 1 Link DOWN [ 2262.154757][T14568] macvlan2: entered promiscuous mode [ 2262.224864][T14585] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2262.272221][T14584] netlink: 'syz.8.11449': attribute type 1 has an invalid length. [ 2262.383985][T14592] overlayfs: overlapping lowerdir path [ 2262.778696][T14603] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11454'. [ 2262.782747][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11454'. [ 2262.817668][ T34] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2262.823824][T14603] netlink: 56 bytes leftover after parsing attributes in process `syz.8.11454'. [ 2262.967737][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 2262.970981][ T34] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.974444][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2262.977664][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2262.981004][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2262.985316][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2262.989103][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.998132][ T34] usbtmc 9-1:16.0: bulk endpoints not found [ 2264.203899][T14629] netlink: 'syz.6.11461': attribute type 1 has an invalid length. [ 2264.496905][T14639] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2265.605640][ T904] usb 9-1: USB disconnect, device number 16 [ 2266.875991][T14669] netlink: 'syz.9.11473': attribute type 1 has an invalid length. [ 2267.672128][ T904] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 2267.867889][ T904] usb 13-1: Using ep0 maxpacket: 8 [ 2267.872014][ T904] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2267.876262][ T904] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2267.897909][ T904] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2267.911989][ T904] usb 13-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2267.917242][ T904] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2267.927847][ T904] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.952850][ T904] usbtmc 13-1:16.0: bulk endpoints not found [ 2268.071545][T14686] netlink: 'syz.9.11479': attribute type 1 has an invalid length. [ 2268.225485][T14691] netlink: 'syz.9.11481': attribute type 4 has an invalid length. [ 2268.304988][T14696] netlink: 'syz.9.11482': attribute type 1 has an invalid length. [ 2268.308617][T14696] netlink: 'syz.9.11482': attribute type 3 has an invalid length. [ 2268.312095][T14696] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11482'. [ 2268.501608][T14700] netlink: 'syz.9.11483': attribute type 1 has an invalid length. [ 2268.671139][T14704] macvlan3: entered promiscuous mode [ 2268.699360][T14706] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2268.702385][T14706] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 1th superblock [ 2268.705079][T14706] F2FS-fs (nbd9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2268.707878][T14706] F2FS-fs (nbd9): Can't find valid F2FS filesystem in 2th superblock [ 2268.713054][T14693] /dev/nullb0: Can't open blockdev [ 2268.821240][T14698] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 2269.103823][ T34] usb 14-1: new full-speed USB device number 19 using dummy_hcd [ 2269.231643][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11490'. [ 2269.237690][ T34] usb 14-1: device descriptor read/64, error -71 [ 2269.316495][T14723] input: syz0 as /devices/virtual/input/input94 [ 2269.478258][ T34] usb 14-1: new full-speed USB device number 20 using dummy_hcd [ 2269.607706][ T34] usb 14-1: device descriptor read/64, error -71 [ 2269.717971][ T34] usb usb14-port1: attempt power cycle [ 2270.043711][T14732] loop2: detected capacity change from 0 to 7 [ 2270.046890][ T2210] Dev loop2: unable to read RDB block 7 [ 2270.049236][ T2210] loop2: AHDI p1 p2 p3 [ 2270.050614][ T2210] loop2: partition table partially beyond EOD, truncated [ 2270.053522][ T2210] loop2: p1 start 1835360114 is beyond EOD, truncated [ 2270.056234][ T2210] loop2: p3 start 335544320 is beyond EOD, truncated [ 2270.062477][ T34] usb 14-1: new full-speed USB device number 21 using dummy_hcd [ 2270.066307][T14732] Dev loop2: unable to read RDB block 7 [ 2270.069136][T14732] loop2: AHDI p1 p2 p3 [ 2270.070532][T14732] loop2: partition table partially beyond EOD, truncated [ 2270.073065][T14732] loop2: p1 start 1835360114 is beyond EOD, truncated [ 2270.075379][T14732] loop2: p3 start 335544320 is beyond EOD, truncated [ 2270.089149][ T34] usb 14-1: device descriptor read/8, error -71 [ 2270.265674][ T2423] usb 13-1: USB disconnect, device number 36 [ 2270.337894][ T34] usb 14-1: new full-speed USB device number 22 using dummy_hcd [ 2270.378251][ T34] usb 14-1: device descriptor read/8, error -71 [ 2270.488141][ T34] usb usb14-port1: unable to enumerate USB device [ 2271.400926][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11500'. [ 2271.477861][T14760] input: syz0 as /devices/virtual/input/input95 [ 2271.570345][T14764] overlayfs: overlapping lowerdir path [ 2271.908004][ T904] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 2271.974857][T14773] input: syz1 as /devices/virtual/input/input96 [ 2272.057925][ T904] usb 13-1: Using ep0 maxpacket: 8 [ 2272.071452][ T904] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2272.075972][ T904] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2272.081005][ T904] usb 13-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2272.088636][ T904] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2272.096856][ T904] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2272.100819][ T904] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.151322][ T904] usbtmc 13-1:16.0: bulk endpoints not found [ 2272.949614][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11507'. [ 2273.223710][T14792] netlink: 340 bytes leftover after parsing attributes in process `syz.6.11510'. [ 2273.647605][ T34] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2273.807690][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 2273.812750][ T34] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 2273.815403][ T34] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2273.819112][ T34] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2273.822233][ T34] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2273.827392][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2273.833685][ T34] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2273.836769][ T34] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2273.839814][ T34] usb 9-1: Product: syz [ 2273.841421][ T34] usb 9-1: Manufacturer: syz [ 2273.843179][ T34] usb 9-1: SerialNumber: syz [ 2273.846533][ T34] usb 9-1: config 0 descriptor?? [ 2273.851087][ T34] ldusb 9-1:0.0: Interrupt in endpoint not found [ 2274.062890][T14797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.073938][T14797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.222260][ T7957] usb 9-1: USB disconnect, device number 17 [ 2274.327339][ T34] usb 14-1: new high-speed USB device number 23 using dummy_hcd [ 2274.477707][ T34] usb 14-1: Using ep0 maxpacket: 32 [ 2274.492171][ T34] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 2274.495688][T14813] overlayfs: overlapping lowerdir path [ 2274.496857][ T34] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2274.503233][ T34] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2274.509263][ T34] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2274.515254][ T34] usb 14-1: config 0 interface 0 has no altsetting 0 [ 2274.527681][ T34] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2274.531810][ T34] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2274.535771][ T34] usb 14-1: Product: syz [ 2274.537876][ T34] usb 14-1: Manufacturer: syz [ 2274.540077][ T34] usb 14-1: SerialNumber: syz [ 2274.568743][ T34] usb 14-1: config 0 descriptor?? [ 2274.590363][ T34] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2274.606610][ T34] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2274.683248][T30909] usb 13-1: USB disconnect, device number 37 [ 2274.724801][T14815] kvm: emulating exchange as write [ 2274.814413][T14807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.826973][T14807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2275.032008][T14822] FAULT_INJECTION: forcing a failure. [ 2275.032008][T14822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2275.037908][T14822] CPU: 0 UID: 0 PID: 14822 Comm: syz.8.11518 Not tainted syzkaller #0 PREEMPT(full) [ 2275.037933][T14822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2275.037942][T14822] Call Trace: [ 2275.037948][T14822] [ 2275.037954][T14822] dump_stack_lvl+0x16c/0x1f0 [ 2275.037981][T14822] should_fail_ex+0x512/0x640 [ 2275.038009][T14822] _copy_from_user+0x2e/0xd0 [ 2275.038036][T14822] move_addr_to_kernel+0x65/0x170 [ 2275.038057][T14822] __get_compat_msghdr+0x3f1/0x4d0 [ 2275.038080][T14822] get_compat_msghdr+0xd2/0x170 [ 2275.038103][T14822] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2275.038128][T14822] ? bsearch+0x9e/0xc0 [ 2275.038152][T14822] ? __pfx_cmp_ex_search+0x10/0x10 [ 2275.038177][T14822] ___sys_sendmsg+0x1ae/0x1d0 [ 2275.038200][T14822] ? __pfx____sys_sendmsg+0x10/0x10 [ 2275.038256][T14822] __sys_sendmmsg+0x2f9/0x420 [ 2275.038284][T14822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2275.038335][T14822] ? __might_fault+0xe3/0x190 [ 2275.038353][T14822] ? __might_fault+0xe3/0x190 [ 2275.038370][T14822] ? __might_fault+0x13b/0x190 [ 2275.038395][T14822] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2275.038420][T14822] __do_fast_syscall_32+0x7c/0x300 [ 2275.038441][T14822] do_fast_syscall_32+0x32/0x80 [ 2275.038462][T14822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2275.038483][T14822] RIP: 0023:0xf706e579 [ 2275.038496][T14822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2275.038513][T14822] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 2275.038546][T14822] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001e40 [ 2275.038556][T14822] RDX: 0000000000000002 RSI: 0000000000001010 RDI: 0000000000000000 [ 2275.038566][T14822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2275.038576][T14822] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2275.038586][T14822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2275.038610][T14822] [ 2275.080551][T14820] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2275.082565][ C0] vkms_vblank_simulate: vblank timer overrun [ 2275.917271][ C2] ldusb 14-1:0.0: usb_submit_urb failed (-19) [ 2275.919467][T24210] usb 14-1: USB disconnect, device number 23 [ 2276.499593][T24210] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 2276.543484][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11524'. [ 2276.651767][T14854] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:0 [ 2276.656839][T14852] input: syz0 as /devices/virtual/input/input97 [ 2276.658570][T14854] hpfs: Unknown parameter 'd4sbM &;xG!cd8*6'wf0F'/Z@Ԇkc:RU3' [ 2276.859400][T14860] netlink: 'syz.4.11528': attribute type 1 has an invalid length. [ 2277.690806][T14880] veth1_to_bond: entered allmulticast mode [ 2277.694520][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11532'. [ 2277.854900][T14880] bond0: (slave bond_slave_1): Releasing backup interface [ 2277.884116][T30909] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 2277.944857][T14880] veth1_to_bond (unregistering): left allmulticast mode [ 2278.037654][T30909] usb 11-1: Using ep0 maxpacket: 32 [ 2278.041155][T30909] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 2278.047635][T30909] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2278.057952][T30909] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2278.062767][T30909] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2278.068745][T30909] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2278.074804][T30909] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2278.083090][T30909] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2278.097856][T30909] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2278.101889][T30909] usb 11-1: Product: syz [ 2278.104745][T30909] usb 11-1: Manufacturer: syz [ 2278.106503][T30909] usb 11-1: SerialNumber: syz [ 2278.118554][T30909] usb 11-1: config 0 descriptor?? [ 2278.131006][T30909] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2278.141200][T30909] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2278.338405][T14878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.342676][T14878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.347352][T14878] ldusb 11-1:0.0: Couldn't submit interrupt_in_urb -90 [ 2278.536407][T14893] ldusb 11-1:0.0: Couldn't submit interrupt_in_urb -90 [ 2278.979602][T30909] usb 11-1: USB disconnect, device number 2 [ 2278.991617][T30909] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 2279.498184][T14900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11537'. [ 2280.406262][ T9660] libceph: connect (1)[c::]:6789 error -101 [ 2280.434617][ T9660] libceph: mon0 (1)[c::]:6789 connect error [ 2280.449938][T14905] ceph: No mds server is up or the cluster is laggy [ 2280.454443][ T9660] libceph: connect (1)[c::]:6789 error -101 [ 2280.461578][ T9660] libceph: mon0 (1)[c::]:6789 connect error [ 2280.672955][T14916] fuse: Bad value for 'rootmode' [ 2280.716634][T14918] tipc: Started in network mode [ 2280.719743][T14918] tipc: Node identity ff003a000000003a000000000000002d, cluster identity 4711 [ 2280.723580][T14918] tipc: Enabling of bearer rejected, failed to enable media [ 2280.814518][T14921] netlink: 'syz.9.11542': attribute type 1 has an invalid length. [ 2281.188481][ T7957] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2281.337758][ T7957] usb 9-1: Using ep0 maxpacket: 8 [ 2281.341165][ T7957] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2281.344513][ T7957] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2281.347826][ T7957] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2281.351470][ T7957] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2281.355706][ T7957] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2281.363560][ T7957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.371273][ T7957] usbtmc 9-1:16.0: bulk endpoints not found [ 2281.892147][T14937] fuse: Unknown parameter 'gvP}' [ 2282.139221][ T9660] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 2282.310665][T14897] Set syz1 is full, maxelem 65536 reached [ 2282.317727][ T9660] usb 14-1: Using ep0 maxpacket: 32 [ 2282.321094][ T9660] usb 14-1: config 0 has no interfaces? [ 2282.322940][ T9660] usb 14-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2282.326141][ T9660] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.336042][ T9660] usb 14-1: config 0 descriptor?? [ 2282.437735][T24210] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 2282.462858][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.465702][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 2282.602156][T24210] usb 11-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2282.605971][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11551'. [ 2282.606806][T24210] usb 11-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2282.606846][T24210] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2282.619136][T24210] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.626119][T14940] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 2282.628043][ T5953] Bluetooth: hci1: unexpected event for opcode 0x0004 [ 2282.635945][T24210] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 2282.644888][ T904] usb 14-1: USB disconnect, device number 24 [ 2282.838031][ T7957] usb 11-1: USB disconnect, device number 3 [ 2283.967955][ T904] usb 9-1: USB disconnect, device number 18 [ 2283.995932][ T40] audit: type=1326 audit(2000000026.305:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.4.11557" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x3fff0000 [ 2284.736665][ T904] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 2284.799903][T14978] netlink: 'syz.4.11560': attribute type 1 has an invalid length. [ 2284.908210][ T904] usb 13-1: Using ep0 maxpacket: 32 [ 2284.915105][ T904] usb 13-1: config index 0 descriptor too short (expected 156, got 27) [ 2284.920940][ T904] usb 13-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2284.925243][ T904] usb 13-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2284.946533][ T904] usb 13-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2284.951747][ T904] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2284.957284][ T904] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2285.032477][ T904] usb 13-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2285.036524][ T904] usb 13-1: Product: syz [ 2285.038529][ T904] usb 13-1: Manufacturer: syz [ 2285.040035][ T904] usb 13-1: SerialNumber: syz [ 2285.043369][ T904] usb 13-1: config 0 descriptor?? [ 2285.046788][ T904] ldusb 13-1:0.0: Interrupt in endpoint not found [ 2285.253761][T14972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2285.257246][T14972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2285.392084][T24210] usb 13-1: USB disconnect, device number 38 [ 2285.771817][T14994] befs: (nbd6): No write support. Marking filesystem read-only [ 2285.776894][T14994] befs: (nbd6): unable to read superblock [ 2286.157682][ T9660] usb 14-1: new full-speed USB device number 25 using dummy_hcd [ 2286.326627][ T9660] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2286.335954][ T9660] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2286.344784][ T9660] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 2286.355814][ T9660] usb 14-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2286.362628][ T9660] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.490253][T14993] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2286.522551][ T9660] hub 14-1:1.0: bad descriptor, ignoring hub [ 2286.526331][ T9660] hub 14-1:1.0: probe with driver hub failed with error -5 [ 2286.534035][ T9660] cdc_wdm 14-1:1.0: skipping garbage [ 2286.536795][ T9660] cdc_wdm 14-1:1.0: skipping garbage [ 2286.556173][ T9660] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 2286.583410][ T9660] cdc_wdm 14-1:1.0: Unknown control protocol [ 2286.697888][ T5953] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2286.702060][ T5953] Bluetooth: hci1: Injecting HCI hardware error event [ 2286.708933][T13709] Bluetooth: hci1: hardware error 0x00 [ 2287.067690][ T7957] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 2287.227705][ T7957] usb 11-1: Using ep0 maxpacket: 32 [ 2287.231578][ T7957] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 2287.234567][ T7957] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2287.238520][ T7957] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2287.242066][ T7957] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2287.246439][ T7957] usb 11-1: config 0 interface 0 has no altsetting 0 [ 2287.250746][ T7957] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2287.254096][ T7957] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2287.256805][ T7957] usb 11-1: Product: syz [ 2287.258353][ T7957] usb 11-1: Manufacturer: syz [ 2287.259965][ T7957] usb 11-1: SerialNumber: syz [ 2287.262960][ T7957] usb 11-1: config 0 descriptor?? [ 2287.266700][ T7957] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2287.432705][T14993] usb 14-1: reset full-speed USB device number 25 using dummy_hcd [ 2287.485516][T15009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.490291][T15009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2287.589836][T14993] usb 14-1: device firmware changed [ 2287.594149][T14993] cdc_wdm 14-1:1.0: Error autopm - -16 [ 2287.594296][ T34] usb 14-1: USB disconnect, device number 25 [ 2287.606040][ T7957] ldusb 11-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 2287.642039][ T904] usb 11-1: USB disconnect, device number 4 [ 2287.712983][ T904] ldusb 11-1:0.0: LD USB Device #1 now disconnected [ 2287.747677][ T34] usb 14-1: new full-speed USB device number 26 using dummy_hcd [ 2287.909645][ T34] usb 14-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 2287.915616][ T34] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2287.920373][ T34] usb 14-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2287.926527][ T34] usb 14-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2287.933965][ T34] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.948233][T15002] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2287.965445][ T34] hub 14-1:1.0: bad descriptor, ignoring hub [ 2287.968906][ T34] hub 14-1:1.0: probe with driver hub failed with error -5 [ 2287.972350][ T34] cdc_wdm 14-1:1.0: skipping garbage [ 2287.974592][ T34] cdc_wdm 14-1:1.0: skipping garbage [ 2287.976955][ T34] cdc_wdm 14-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2288.483404][T15029] netlink: 'syz.8.11575': attribute type 1 has an invalid length. [ 2288.528665][ T904] usb 14-1: USB disconnect, device number 26 [ 2288.632010][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11576'. [ 2288.777756][T13709] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2289.403711][T15043] /dev/nullb0: Can't open blockdev [ 2290.072704][T15043] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2290.438546][ T904] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2290.598577][ T904] usb 9-1: Using ep0 maxpacket: 32 [ 2290.606551][ T904] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 2290.613829][ T904] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2290.619702][ T904] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2290.625468][ T904] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2290.630613][ T904] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2290.642284][ T904] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2290.650092][ T904] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2290.656948][ T904] usb 9-1: Product: syz [ 2290.658536][ T904] usb 9-1: Manufacturer: syz [ 2290.659989][ T904] usb 9-1: SerialNumber: syz [ 2290.672418][ T904] usb 9-1: config 0 descriptor?? [ 2290.679281][ T904] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2290.689355][ T904] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2290.796238][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11588'. [ 2290.883582][T15066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2290.888961][T15066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2291.187182][T15076] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2291.189875][ T9660] usb 9-1: USB disconnect, device number 19 [ 2291.190279][ C3] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 2291.258336][ T9660] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 2291.521066][T15086] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11591'. [ 2293.006888][T15099] netlink: 'syz.9.11595': attribute type 1 has an invalid length. [ 2293.115484][T15102] overlayfs: conflicting options: userxattr,redirect_dir=on [ 2293.182237][T15104] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 2293.363561][T15112] FAULT_INJECTION: forcing a failure. [ 2293.363561][T15112] name failslab, interval 1, probability 0, space 0, times 0 [ 2293.367389][T15112] CPU: 1 UID: 0 PID: 15112 Comm: syz.8.11600 Not tainted syzkaller #0 PREEMPT(full) [ 2293.367405][T15112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2293.367411][T15112] Call Trace: [ 2293.367416][T15112] [ 2293.367421][T15112] dump_stack_lvl+0x16c/0x1f0 [ 2293.367453][T15112] should_fail_ex+0x512/0x640 [ 2293.367475][T15112] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2293.367488][T15112] should_failslab+0xc2/0x120 [ 2293.367517][T15112] __kmalloc_cache_noprof+0x72/0x780 [ 2293.367529][T15112] ? fuse_lookup_name+0x19f/0x780 [ 2293.367545][T15112] ? fuse_lookup_name+0x19f/0x780 [ 2293.367558][T15112] ? rcu_is_watching+0x12/0xc0 [ 2293.367572][T15112] fuse_lookup_name+0x19f/0x780 [ 2293.367586][T15112] ? __mutex_lock+0x1c5/0x1060 [ 2293.367601][T15112] ? __pfx_fuse_lookup_name+0x10/0x10 [ 2293.367623][T15112] ? rcu_read_unlock+0x17/0x60 [ 2293.367642][T15112] fuse_lookup+0x26a/0x560 [ 2293.367657][T15112] ? __pfx_fuse_lookup+0x10/0x10 [ 2293.367678][T15112] ? do_raw_spin_unlock+0x172/0x230 [ 2293.367690][T15112] ? _raw_spin_unlock+0x28/0x50 [ 2293.367703][T15112] lookup_one_qstr_excl+0x1ce/0x250 [ 2293.367720][T15112] ? mnt_want_write+0x161/0x450 [ 2293.367731][T15112] do_unlinkat+0x284/0x6a0 [ 2293.367745][T15112] ? __pfx_do_unlinkat+0x10/0x10 [ 2293.367759][T15112] ? strncpy_from_user+0x203/0x2e0 [ 2293.367776][T15112] ? getname_flags.part.0+0x1c5/0x550 [ 2293.367791][T15112] ? __pfx_ksys_write+0x10/0x10 [ 2293.367807][T15112] __ia32_sys_unlinkat+0xbf/0x130 [ 2293.367821][T15112] __do_fast_syscall_32+0x7c/0x300 [ 2293.367836][T15112] do_fast_syscall_32+0x32/0x80 [ 2293.367850][T15112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2293.367864][T15112] RIP: 0023:0xf706e579 [ 2293.367873][T15112] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2293.367883][T15112] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 000000000000012d [ 2293.367894][T15112] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 2293.367901][T15112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2293.367907][T15112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2293.367917][T15112] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2293.367924][T15112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2293.367937][T15112] [ 2293.410185][T15113] befs: (nbd6): No write support. Marking filesystem read-only [ 2293.468120][ T9660] usb 14-1: new high-speed USB device number 27 using dummy_hcd [ 2293.475662][T15113] befs: (nbd6): unable to read superblock [ 2293.806065][ T9660] usb 14-1: Using ep0 maxpacket: 32 [ 2293.814675][ T9660] usb 14-1: config index 0 descriptor too short (expected 156, got 27) [ 2293.817620][ T9660] usb 14-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2293.821301][ T9660] usb 14-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2293.824784][ T9660] usb 14-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2293.829986][ T9660] usb 14-1: config 0 interface 0 has no altsetting 0 [ 2293.835009][ T9660] usb 14-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2293.838225][ T9660] usb 14-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2293.840971][ T9660] usb 14-1: Product: syz [ 2293.842330][ T9660] usb 14-1: Manufacturer: syz [ 2293.843973][ T9660] usb 14-1: SerialNumber: syz [ 2293.847973][ T9660] usb 14-1: config 0 descriptor?? [ 2293.853172][ T9660] ldusb 14-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2293.856878][ T9660] ldusb 14-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2294.072778][T15105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2294.075779][T15105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2294.331744][T15127] ldusb 14-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2294.350350][ T34] usb 14-1: USB disconnect, device number 27 [ 2294.350475][ C3] ldusb 14-1:0.0: usb_submit_urb failed (-19) [ 2294.566830][ T34] ldusb 14-1:0.0: LD USB Device #0 now disconnected [ 2295.056935][T15141] bond0: entered promiscuous mode [ 2295.060139][T15141] bond_slave_0: entered promiscuous mode [ 2295.065129][T15141] dummy0: entered promiscuous mode [ 2295.073826][T15141] debugfs: 'hsr0' already exists in 'hsr' [ 2295.078240][T15141] Cannot create hsr debugfs directory [ 2295.080442][T15141] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 2295.092123][T15141] hsr0: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 2295.099539][T15141] hsr0: entered promiscuous mode [ 2295.106821][T15141] hsr0: entered allmulticast mode [ 2295.109649][T15143] Bluetooth: MGMT ver 1.23 [ 2295.111380][T15141] bond0: entered allmulticast mode [ 2295.115327][T15141] bond_slave_0: entered allmulticast mode [ 2295.120044][T15141] dummy0: entered allmulticast mode [ 2295.630683][T15154] FAULT_INJECTION: forcing a failure. [ 2295.630683][T15154] name failslab, interval 1, probability 0, space 0, times 0 [ 2295.635997][T15154] CPU: 0 UID: 0 PID: 15154 Comm: syz.4.11611 Not tainted syzkaller #0 PREEMPT(full) [ 2295.636017][T15154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2295.636028][T15154] Call Trace: [ 2295.636034][T15154] [ 2295.636041][T15154] dump_stack_lvl+0x16c/0x1f0 [ 2295.636065][T15154] should_fail_ex+0x512/0x640 [ 2295.636096][T15154] ? fs_reclaim_acquire+0xae/0x150 [ 2295.636119][T15154] should_failslab+0xc2/0x120 [ 2295.636142][T15154] __kmalloc_noprof+0xdd/0x880 [ 2295.636156][T15154] ? ex_handler_uaccess+0xfa/0x230 [ 2295.636175][T15154] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2295.636197][T15154] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2295.636213][T15154] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2295.636233][T15154] ? tomoyo_profile+0x47/0x60 [ 2295.636254][T15154] tomoyo_path_number_perm+0x245/0x580 [ 2295.636276][T15154] ? tomoyo_path_number_perm+0x237/0x580 [ 2295.636299][T15154] ? do_user_addr_fault+0x874/0x1370 [ 2295.636316][T15154] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2295.636364][T15154] ? find_held_lock+0x2b/0x80 [ 2295.636383][T15154] ? hook_file_ioctl_common+0x145/0x410 [ 2295.636404][T15154] ? __fget_files+0x20e/0x3c0 [ 2295.636419][T15154] ? pfn_swap_entry_to_page+0x540/0x540 [ 2295.636441][T15154] security_file_ioctl_compat+0x9b/0x240 [ 2295.636483][T15154] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2295.636510][T15154] __do_fast_syscall_32+0x7c/0x300 [ 2295.636531][T15154] do_fast_syscall_32+0x32/0x80 [ 2295.636550][T15154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2295.636570][T15154] RIP: 0023:0xf703e579 [ 2295.636583][T15154] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2295.636598][T15154] RSP: 002b:00000000f542e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2295.636615][T15154] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000125e [ 2295.636624][T15154] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2295.636634][T15154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2295.636642][T15154] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2295.636651][T15154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2295.636672][T15154] [ 2295.636679][T15154] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2296.303431][ T8106] usb 13-1: new high-speed USB device number 39 using dummy_hcd [ 2296.437661][ T8106] usb 13-1: device descriptor read/64, error -71 [ 2296.671065][T15171] netlink: 'syz.6.11617': attribute type 1 has an invalid length. [ 2296.687815][ T8106] usb 13-1: new high-speed USB device number 40 using dummy_hcd [ 2296.825445][T15175] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11618'. [ 2296.829758][ T8106] usb 13-1: device descriptor read/64, error -71 [ 2296.833268][T15175] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11618'. [ 2296.938157][ T8106] usb usb13-port1: attempt power cycle [ 2297.288056][ T8106] usb 13-1: new high-speed USB device number 41 using dummy_hcd [ 2297.309125][ T8106] usb 13-1: device descriptor read/8, error -71 [ 2297.794620][ T8106] usb 13-1: new high-speed USB device number 42 using dummy_hcd [ 2297.808145][ T8106] usb 13-1: device descriptor read/8, error -71 [ 2297.929273][ T8106] usb usb13-port1: unable to enumerate USB device [ 2298.401515][T15199] ================================================================== [ 2298.404040][T15199] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1fed/0x43c0 [ 2298.406679][T15199] Write of size 360 at addr ffffc90003471ea0 by task vivid-000-vid-c/15199 [ 2298.410916][T15199] [ 2298.412065][T15199] CPU: 2 UID: 0 PID: 15199 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 2298.412081][T15199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2298.412089][T15199] Call Trace: [ 2298.412094][T15199] [ 2298.412099][T15199] dump_stack_lvl+0x116/0x1f0 [ 2298.412117][T15199] print_report+0xcd/0x630 [ 2298.412133][T15199] ? __virt_addr_valid+0x81/0x610 [ 2298.412150][T15199] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 2298.412163][T15199] kasan_report+0xe0/0x110 [ 2298.412178][T15199] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 2298.412191][T15199] kasan_check_range+0x100/0x1b0 [ 2298.412201][T15199] __asan_memcpy+0x3c/0x60 [ 2298.412212][T15199] tpg_fill_plane_buffer+0x1fed/0x43c0 [ 2298.412231][T15199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2298.412246][T15199] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 2298.412260][T15199] vivid_fillbuff+0x8d2/0x4250 [ 2298.412274][T15199] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2298.412290][T15199] ? update_se+0x53b/0x710 [ 2298.412308][T15199] ? __pfx_vivid_fillbuff+0x10/0x10 [ 2298.412323][T15199] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 2298.412338][T15199] ? lockdep_hardirqs_on+0x7c/0x110 [ 2298.412351][T15199] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 2298.412361][T15199] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 2298.412374][T15199] vivid_thread_vid_cap+0x454/0xda0 [ 2298.412387][T15199] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2298.412402][T15199] ? do_raw_spin_lock+0x12c/0x2b0 [ 2298.412414][T15199] ? find_held_lock+0x2b/0x80 [ 2298.412455][T15199] ? rcu_is_watching+0x12/0xc0 [ 2298.412469][T15199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2298.412481][T15199] ? lockdep_hardirqs_on+0x7c/0x110 [ 2298.412493][T15199] ? __kthread_parkme+0x19e/0x250 [ 2298.412509][T15199] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2298.412519][T15199] kthread+0x3c5/0x780 [ 2298.412529][T15199] ? __pfx_kthread+0x10/0x10 [ 2298.412539][T15199] ? rcu_is_watching+0x12/0xc0 [ 2298.412551][T15199] ? __pfx_kthread+0x10/0x10 [ 2298.412561][T15199] ret_from_fork+0x56a/0x730 [ 2298.412571][T15199] ? __pfx_kthread+0x10/0x10 [ 2298.412581][T15199] ret_from_fork_asm+0x1a/0x30 [ 2298.412598][T15199] [ 2298.412602][T15199] [ 2298.483088][T15199] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc90003471000 allocated at vb2_vmalloc_alloc+0x135/0x3f0 [ 2298.487359][T15199] The buggy address belongs to the physical page: [ 2298.489335][T15199] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804d25df00 pfn:0x4d25d [ 2298.492392][T15199] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 2298.495106][T15199] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 2298.498632][T15199] raw: ffff88804d25df00 0000000000000000 00000001ffffffff 0000000000000000 [ 2298.501846][T15199] page dumped because: kasan: bad access detected [ 2298.504026][T15199] page_owner tracks the page as allocated [ 2298.505864][T15199] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 15198, tgid 15197 (syz.9.11625), ts 2298399483279, free_ts 2298399456718 [ 2298.511898][T15199] post_alloc_hook+0x1c0/0x230 [ 2298.513492][T15199] get_page_from_freelist+0x10a3/0x3a30 [ 2298.515460][T15199] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 2298.517335][T15199] alloc_pages_bulk_noprof+0x71c/0x1410 [ 2298.519068][T15199] alloc_pages_bulk_mempolicy_noprof+0x244/0x1280 [ 2298.521349][T15199] __vmalloc_node_range_noprof+0x50a/0x1480 [ 2298.523277][T15199] vmalloc_user_noprof+0x9e/0xe0 [ 2298.524928][T15199] vb2_vmalloc_alloc+0x135/0x3f0 [ 2298.526544][T15199] __vb2_queue_alloc+0x8c9/0x1280 [ 2298.528154][T15199] vb2_core_reqbufs+0xa90/0xfe0 [ 2298.529661][T15199] __vb2_init_fileio+0x3f1/0x1100 [ 2298.531217][T15199] vb2_core_poll+0x5ec/0x700 [ 2298.532662][T15199] vb2_poll+0x4b/0xe0 [ 2298.533973][T15199] vb2_fop_poll+0x10f/0x2c0 [ 2298.535418][T15199] v4l2_poll+0x160/0x320 [ 2298.536776][T15199] do_sys_poll+0x55c/0xdf0 [ 2298.538188][T15199] page last free pid 15198 tgid 15197 stack trace: [ 2298.540394][T15199] __free_frozen_pages+0x7df/0x1160 [ 2298.542488][T15199] kasan_populate_vmalloc+0x160/0x2d0 [ 2298.544735][T15199] alloc_vmap_area+0x960/0x29e0 [ 2298.546598][T15199] __get_vm_area_node+0x1ca/0x330 [ 2298.548360][T15199] __vmalloc_node_range_noprof+0x271/0x1480 [ 2298.550200][T15199] vmalloc_user_noprof+0x9e/0xe0 [ 2298.551705][T15199] vb2_vmalloc_alloc+0x135/0x3f0 [ 2298.553245][T15199] __vb2_queue_alloc+0x8c9/0x1280 [ 2298.554784][T15199] vb2_core_reqbufs+0xa90/0xfe0 [ 2298.556264][T15199] __vb2_init_fileio+0x3f1/0x1100 [ 2298.557824][T15199] vb2_core_poll+0x5ec/0x700 [ 2298.559201][T15199] vb2_poll+0x4b/0xe0 [ 2298.560483][T15199] vb2_fop_poll+0x10f/0x2c0 [ 2298.561896][T15199] v4l2_poll+0x160/0x320 [ 2298.563238][T15199] do_sys_poll+0x55c/0xdf0 [ 2298.564648][T15199] __ia32_compat_sys_ppoll_time32+0x248/0x2c0 [ 2298.566537][T15199] [ 2298.567292][T15199] Memory state around the buggy address: [ 2298.569111][T15199] ffffc90003471f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2298.571680][T15199] ffffc90003471f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2298.574351][T15199] >ffffc90003472000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2298.576956][T15199] ^ [ 2298.578234][T15199] ffffc90003472080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2298.580752][T15199] ffffc90003472100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2298.583232][T15199] ================================================================== [ 2298.588186][T15199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2298.591379][T15199] CPU: 2 UID: 0 PID: 15199 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 2298.594843][T15199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2298.598262][T15199] Call Trace: [ 2298.599362][T15199] [ 2298.600295][T15199] dump_stack_lvl+0x3d/0x1f0 [ 2298.601769][T15199] vpanic+0x640/0x6f0 [ 2298.603047][T15199] panic+0xca/0xd0 [ 2298.604262][T15199] ? __pfx_panic+0x10/0x10 [ 2298.605662][T15199] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 2298.607552][T15199] ? preempt_schedule_common+0x44/0xc0 [ 2298.609341][T15199] ? preempt_schedule_thunk+0x16/0x30 [ 2298.611141][T15199] ? check_panic_on_warn+0x1f/0xb0 [ 2298.612863][T15199] check_panic_on_warn+0xab/0xb0 [ 2298.614574][T15199] end_report+0x107/0x170 [ 2298.615991][T15199] kasan_report+0xee/0x110 [ 2298.617449][T15199] ? tpg_fill_plane_buffer+0x1fed/0x43c0 [ 2298.619235][T15199] kasan_check_range+0x100/0x1b0 [ 2298.620875][T15199] __asan_memcpy+0x3c/0x60 [ 2298.622283][T15199] tpg_fill_plane_buffer+0x1fed/0x43c0 [ 2298.624082][T15199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2298.626176][T15199] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 2298.628203][T15199] vivid_fillbuff+0x8d2/0x4250 [ 2298.630231][T15199] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2298.632199][T15199] ? update_se+0x53b/0x710 [ 2298.633789][T15199] ? __pfx_vivid_fillbuff+0x10/0x10 [ 2298.635730][T15199] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 2298.637513][T15199] ? lockdep_hardirqs_on+0x7c/0x110 [ 2298.639166][T15199] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 2298.641086][T15199] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 2298.642867][T15199] vivid_thread_vid_cap+0x454/0xda0 [ 2298.644579][T15199] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2298.646358][T15199] ? do_raw_spin_lock+0x12c/0x2b0 [ 2298.648012][T15199] ? find_held_lock+0x2b/0x80 [ 2298.649677][T15199] ? rcu_is_watching+0x12/0xc0 [ 2298.651355][T15199] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2298.653241][T15199] ? lockdep_hardirqs_on+0x7c/0x110 [ 2298.654897][T15199] ? __kthread_parkme+0x19e/0x250 [ 2298.656975][T15199] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 2298.658866][T15199] kthread+0x3c5/0x780 [ 2298.660180][T15199] ? __pfx_kthread+0x10/0x10 [ 2298.661682][T15199] ? rcu_is_watching+0x12/0xc0 [ 2298.663216][T15199] ? __pfx_kthread+0x10/0x10 [ 2298.664906][T15199] ret_from_fork+0x56a/0x730 [ 2298.666515][T15199] ? __pfx_kthread+0x10/0x10 [ 2298.668159][T15199] ret_from_fork_asm+0x1a/0x30 [ 2298.669794][T15199] [ 2298.671664][T15199] Kernel Offset: disabled [ 2298.673070][T15199] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:18:36 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=1ffff92001ca9ede RCX=0000000000000000 RDX=dffffc0000000000 RSI=ffffffff8d9135cb RDI=ffffffff8bd04640 RBP=ffff88802b43a498 RSP=ffffc9000e54f678 R8 =ffff88805f664918 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffff888050ce0000 R13=0000000000000001 R14=ffff88805f664900 R15=0000000000000046 RIP=ffffffff8b4e3205 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097c6f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000314dbff8 CR3=0000000067f86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=ffffffffefffff14 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000005aa7c31 RBX=0000000000000001 RCX=ffffffff8b4e2a59 RDX=0000000000000000 RSI=ffffffff8d8245c1 RDI=ffffffff8bd04640 RBP=ffffed1003adb490 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801d6da480 R14=ffffffff905ff090 R15=0000000000000000 RIP=ffffffff8b4e157f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097d6f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f455c0 CR3=0000000067f86000 CR4=00352ef0 DR0=ffbffffffffffffe DR1=7fffffffffffffff DR2=0000000000000003 DR3=ffffffffefffff14 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85207e15 RDI=ffffffff9ab61060 RBP=ffffffff9ab61020 RSP=ffffc9000e56f158 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=000000000000002f R14=ffffffff9ab61020 R15=ffffffff85207db0 RIP=ffffffff85207e3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097e6f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f737f690 CR3=0000000068d0c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000003a64a85 RBX=0000000000000003 RCX=ffffffff8b4e2a59 RDX=0000000000000000 RSI=ffffffff8d8245c1 RDI=ffffffff8bd04640 RBP=ffffed1003adf000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056e6655 R10=ffff88802b7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6f8000 R14=ffffffff905ff090 R15=0000000000000000 RIP=ffffffff8b4e157f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097f6f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5445e7c CR3=00000000654ae000 CR4=00352ef0 DR0=ffbffffffffffffe DR1=7fffffffffffffff DR2=0000000000000003 DR3=ffffffffefffff14 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000