last executing test programs: 25.018450138s ago: executing program 3 (id=4): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xb, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x4f4, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda92) accept4(r3, 0x0, 0x0, 0x0) 24.193781401s ago: executing program 0 (id=1): listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1", 0xbe, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x800000, 0x3, 0x1}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}]}]}, 0x178}}, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r10, 0x2, &(0x7f0000000300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000001c0)='m', 0x1}]) write$binfmt_aout(r9, 0x0, 0x5c3c) 22.165533742s ago: executing program 3 (id=8): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x84a, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 20.921909024s ago: executing program 3 (id=10): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x109800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) 19.267636815s ago: executing program 5 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 17.499613185s ago: executing program 0 (id=13): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000180a030000000000000000000300000a0900010073797a3100000000080007400000000334000000050a000300000000000000000500000008000540fffffffe08000b4000000003100008800c000140fffffffffffffff7500000000e0a01040000000000000000030000020900010073797a31000000000900010073797a31000000000900020073797a30000000000900010073797a30000000000900020073797a300000000038000000000a010200"], 0x2ac}, 0x1, 0x0, 0x0, 0x20004001}, 0x880) 17.498824235s ago: executing program 4 (id=14): close(0x3) syz_open_dev$dri(0x0, 0xd21, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$unix(0x1, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xa) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, &(0x7f0000006900), 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.302909079s ago: executing program 1 (id=15): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) lsm_set_self_attr(0x69, &(0x7f0000000040)=ANY=[@ANYRES16], 0x30, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, &(0x7f00000010c0)=""/4111) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x23) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 17.158718659s ago: executing program 2 (id=16): fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x101, 0x4}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x0, 0x83, 0x2, 0x3, 0x200007f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454c, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x4038, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xffffffff, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16.417056853s ago: executing program 5 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="200000001200", 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x100000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6c2}, {0xc, 0x90, 0x7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r4, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 14.354517731s ago: executing program 2 (id=18): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000bbd687ed5521d54f8c2b59a1a8421c7c67fa75bf4d9451c499b7b36e00b5219f7d20e06edf8ffa0ca7832092452d3081836621dc5eba7c3f1eb3145e9f1bd5837e93ae5098b2ea1811907b450c36337b833fc98e97a8be63ac9fa6f0f7556c2abb16a352ee9529f8a6d3345107540d8b70af79ef2a53733387d843b53ffcca18994e4993d38f1bd3f6287a1d17909e2a40c5e7bc9655958a556a55"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x110, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3674917455309f0d3e83bbba8d81df1d"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "621185bd84b543e1514c98c1ab96f38b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "18ae64ff6e4c45b5db2e888cdfa8242b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c8e6c1e08ba4a41cc258dc8ce5ef2cc3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "21a138c2370656376ed4a49776c10f634dc589b13274cad5b82ac60a2089be1d"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x45}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x20000015) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 13.022577445s ago: executing program 5 (id=19): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0xe0) landlock_create_ruleset(&(0x7f0000000140)={0x615d}, 0x18, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xa}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 12.843847272s ago: executing program 1 (id=20): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x8) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000900)=""/226, &(0x7f00000000c0)=0xe2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x2, 0x7e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffffaf5a00000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x94) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 12.781825332s ago: executing program 0 (id=21): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000009000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000182a0000", @ANYRES32=0x1, @ANYBLOB="00000000080000005047100010000000007701000000000085200000010000004bb90001fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000020b702000000000000850000008600000085200000010000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0xa0, 0x0, 0x41000, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="551f96e4a5ce744452a25e63106ced1f3bc6f55e6da6be1d1eeac3748310f244320a60a4fcfb1d21e3ae5c1055d3ed0179aa2e302fbade6006bd379073bd7fbb06b517731b99bafb5d4ec63823e60fb93fdc18205e56207a3c8dc9520072d2b158398f1c28e978", @ANYRES8=0x0], 0x48) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) 11.497707227s ago: executing program 2 (id=22): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x2, @loopback, 0x8001}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}], 0x2c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0205838, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$inet6(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getpeername(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000140009052cbd810b61d6805dc25b0000", @ANYBLOB="cc7911f6f603d5558a595cbfce9785ea7bec057751eac2bb1829c3564f7e51c714a7a8690b7bbb7c0fae6dd77dd58c8c999e29e2ffcc0f93cc26f1e30963300aa7a6cf4f625122b3", @ANYBLOB="0800040000000000080002006401010108000a000200000008000400640101020800010064010101"], 0x40}}, 0x200000c4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000300)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, &(0x7f0000000100)=0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x40200) 9.986682043s ago: executing program 3 (id=23): socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x8) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000900)=""/226, &(0x7f00000000c0)=0xe2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x2, 0x7e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffffaf5a00000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x94) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 9.775209249s ago: executing program 0 (id=24): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) close(r1) 9.729898873s ago: executing program 2 (id=25): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$FUSE(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x6, 0x3}}, 0x29) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x0) 9.702965701s ago: executing program 5 (id=26): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) timerfd_create(0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x63022, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='.\x02\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$sock(r3, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000a00)="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", 0x7e9}, {&(0x7f00000003c0)="e84ec49dc9bc", 0x6}, {&(0x7f0000002040)="ca746db325c4d1d82436d60e511d66c41c2be48f8822ced3dc64e24852d90303ff559f8760de8408d3fe200f0a0fb1640054b99f4491f439c277aaecea1987496fb9791fa5df88c3d846144a121c8ed10d9734577364ee2b2e3ea5968a2cefbbac0b0ac7af00e09c8664abaf474a885fec4bbf4842aa21aab3518563254385c09f4d389a19c7c447bdadcbe2587b8f83002c44044aac98f8c387966ab85b72eb87f674689ea81c2b419f8cb860a6e3bfcb0e3df4910720f374cf2242b41d7bd89de13215df2fa3a5463b84992e619ba7b536b1f3ef6b060bdd5ab9f7e5d1cf571c3fcbb518b0a0c198563a12175480cb893a9e79351d4f601ad63ecc2d8c1727a3a8a2226b253200ffbac504910758db66378f87c7e7438366b238ac2d4e47152a6a2e6c914be7756460b6c7ea26b0463f3d391b97f98c22b01ba1aa362ad3cee97aa6356d04d5003545ec24b2d301e3545b21857a0b1dc1f0d4e59052bf7cbf3b2c3991eab2e3949d8df07b5c4058cb1615b1bf73c143bb840700fc812917846b37110210ab5852bf90ce7f0ea60a12cc43895b95468ac2a6e1b7ac959972dba2bf4f5fcf456227c504f045255bbc097809c44c1f1e3579a03d41e08fd2ecd97ada72c344ebb54fa22572beebfa5dbe69111aa8436bf0e0beb8411819d03ab9975b135255514f0f7df3634d7c002fb7ca8821a4952fc758ea14279805d65690b0ccf400044827560adb154384ff4450dde1c159d31ab2a9479547226378374f179d139d3945230faaec3c96a412360cc87074337eac034256bcff6af646d72e6fb2b3ae9902d6e00035049ac34512229287436245927fe26ae12c24a0757ecb57c10e474a4be442f8c6e336adb88499ea1fbbc1b3b886c0f880d6425560435820b59d119ef8c917b9a4170b0b338d18d825d7559305e51bc9697cb99996f079cc46632f3a1e0a6209bb2bc9c8246a8072d716c3c3bd7190666a9b7b721516681483d0734dffbabbde4bed882b1732d9253a22b56e669569a02789980170bafd0ca2ab346f08b2ae8d899b9a94a8543be6dc605efeed491296145d1ca8eeecb6ad3ff0c04db15b08f876cc873fe896219eedc08607253c9b262c1dc961ffd8e23110f7a18976bff8e5cb2e7684fe20ec86c89002094050006963e421687469524b93268de41f6e9c9891ce17bf761260680e2be9cbe963f1b63f013126db6cb5cb34a9af8877937f9c30e5bd2cf951e503e749d52e8ece4af530731085f5ceaf03198c4d0d9a2deb21af47c16905a7829659d0350b2a1b7a325b4f4d35df0177927e5b455a69051a60b68e2f8d9a7944d4eeccdd3a58dffa37ee4b7e8945e3a6acab680075a7520f1e56e6f8bbcbe02c7ec543443590ba3fc3de476fb1439b9e11363c3261c7b855fa6fa7983e0b83874095fd407af9ca5990443630330684f7fa363c2fa360150e17865a837865f765bf718b10df822bfb4639575b5a2bc211fb11b10471bd74dec199eb09c4bfbe41f34cb83b0c7a567eb027e44747beb8b7489a1be553584fcef3cdb16122972b34da6d37bbbcab7859b0bf29d4ee1507c22c5d0e3031f33f6ecccc8285316a2b4a968c8e7dca3a21db14e4534836634968821685831a529d793731c61723bb019620784c0afa11dd84a720193e08403416354a086a38e10a1baf36f51293470193fed6e1a0d8da4b6ffc8dda2fa40b66d106e23516291e9ad7c01a24f9370edecec5676d1bb9fc684b8ff5993c59ff2301e11bd7e13cffa774e3daea53a23f5b74c3e98ccf3846e282be7729412f2f854fcea4c5375f845cd315bc0eff549e87f7ce11f900ed15f17b79b301cc998ece0be890e5d80f993d094734c182738d05e74b1dc6206b062715064b31ed7a7ebccae49e802743bf28e4084bc279f09cfa9f94a8f819d39c6be5e251ea5a4f0e4dd874cb2d846c17b470d07d4769bd8436a5b0ede316556e8f669bea96e485094d5d5a8e2e17f3893207a6435bd747564fcf3113188ec36b5207dd1c522f8b8c0d4d2a4605302a69ad76157638d8b51aa19d256133d4539bd3c15bb0681ceefffdccc8a8856a186c59e7a0e14b0628f5f169b94fb864a4f8698f08342ba9ef05bde2e751b57ab6e7e789fad7b602410082ba5bb251e20b5779d9cf32282032a4b6eef31f2ee7383d6143384da6b6dca874593d9a82008f3e7f93c2603a9845384433a236126fa73f240fd260acbd977abb4cd12bd41a69cad901e88fa473c60f2c171e875027e8235c2185aee370f8fd06fc60e1dffb210d19b9293e7cf5807593f5d5d0d89b7ae8ab836c3cd562bf47730d4affdc0c079713faa928d8a2957f9631b761f254d4c94c50ff86f45aa3434a40aa13c93b914a08e32f8b8aa296ff0d97694cf96ce7133a46d58e7d74c6b7c1e8ba6202c2dca2c35e363f4a27edbcddcefa339165c7930aa08ddd3699871a49945956254fa43a476eccf32a8169715e73803ed3d3b64172a0c0ce4b4e64f19cdd5a345caf8b946b8faa1315bf437617b704631c89c416732810c545bb673438b5c5d5bf07c184ad5dd0127c4ac2437a7a3c72b0ab1e2a1640aee65a72a723060a9b1052cb6b0f8bb4046b9d05bdbb7b9d68a90c1019103fbddcd2e247b32183ef00aa57896ecba51b98aeef129f7e4cd4a125193e807ee12e75373ed194076c6106cfd0c5b16b6425366e096ff18e535c9d2fd8eba645a15b2f6bab4c2f9a67e14f7e825d5bfbdf539c30736ed95f0d2fdf2a3b0cfaba2e102ff1047b3e909fa1406165cc0952f91d97c0e9cc83148f35b4e8e76eda901293db7da808ac24628dbbde4ae6d457f9a58b24c1bba2d477a422876e19d9d741eeb127ca72d7b9418f8799cd973e09494fbc12fdd7db723ec62460658719390a8106e2eccad9e5143c1938386f2598d7ced979e134bb6500005e4a3fd7731a6c4d3f1b18a440b4ad33caf4d754a488b91e74d9904a776506ee5c508b09b25399858cbb6ede053f75d750b98c186893ea0fef05f215eb6a10770f2e9190c6cf0edd683e65ccbb13d78a6e2325a97d0011a38eafd08309d83a0e98183e7805d67b3686e22ba1e9adda2487714a41b67f4689ead3df715b5bb18669a0a66a80b71c64017fa06c6cdf5c6d11bf265c191373574fabe784f0d185747218fde0b4b5d565596d23a913f621da3590f4ee06ed8bbcbbb4203d88425619efad321eb020a7f92b7f7e65feed1421b7ebc20063e2bb70793bca6171e551abdb8005b4aa794f1ede3987c48f9c5bf9292622422adc9740c0510ada87b6b30e70aa9e00032f3865ac0f12694e05f95a57839ae411bb8838416a9c82169f272d729ec78e96162879edc027f53b14426023b800169d1ee24399a17ab1551cf77a3a6c42512edbbbfad435c15a49231fd54cce365314742ddef0e489280f358d13fc1ece44d39340c08ae92277a710e2d61febe3a988908a7fa223e7e95d654b43ce94826452f63c225bcd1a9293de4bb131c029143525d2b512f0923feab8b3fd932afea6dafa41e98f8e7d7b8b5c338c4342deaf4b19da0bd363dc14376653be0a0d7c9b33a848ba27670050d8ef24a597710b8e1a8f7344299fee57c40c1df44cf2f7bdbb91f3ea627eb708f11087910d414d0e06a396e7dec7060ad81fd20fe11095fcd23d6f72be6959b6fee9436fedba917257fcd4c3896ecbb53dc5a91be1c59d74bc53a939600cdc743c572eafc63f350697df65e58ceb9802687adb67c088401950a89fe826866c5496695910b272dc67e906a99573b6697cbf4a247e208ca6aa6d80c26cfa0989cadcbc695807d47373cc8cb1b4991b3399dcadfe3e27aaf496fc2116163b1102ed29d33c9bfc5badeaf73c052c284ee305fca3565be0c251efe444033bf478bc4d53c2422120b8d47ba6ec9ed0995f118654c66bcba482bbe385c64f61eeff05c5c2128bda30544f321a7931338d07d85bac8a768d453edc8b4637f474c3ca0c5a36207a2eb3724f11d12fe943964903a7da7785f9aa0a2102c3dc09f05401711901f9f9079fd6fe9cea5ef92b27dea7e1f95402321d20d94193fef5004308d3caa352e76107a4c6005778c423752a6d4e598d030a2fccf4df7fe6fe431f13af279fc374048ee3ca6af5e8e8603a3060f40a4a78c9bb5172df96216c56a58620b781b9a47b02ba71b865f6b903d7968ba06904e9dcf6cf620a89f5069f75c1106fae1f0e21f727c192b4df64b0b8b6c2580a204d77073facdcc5b337da62e9a92d291c78a329171565641122f41f7da0cc83e0d53f40effda80fe7ad28babbd7b897379d8ab6882c43740f46f285d6e8622b0d555a6fb2b9a229579c8d01a8996b3af73ba74e6e5212b119ec0765560af713ea1e0d58b1192a0b131878d114c48f040d03c93c88b96d1b9ee8dc533116a88054b803151c71314433182192272e7fd11dfa9aa428aef4d106421f9f315f97d6c0463453fe6281924a6226a22d335f5fe01f104c7cdafa8315cddd0b251e884671d2561423df9da7655ba6ca93e65fdd4eba65844cc3c9dc6be5f6c4703b5d7d2bd486419f2f2e0c0f301910b30bc7f898b3b01c2bd5f9eaeedb928a0dc478ea8987ceaa3841113a54c88a36250a59c1633100eae4a795e26f49aa91cc6568774d9a982fd0c183e6267e1cfda9487d88ed39dd14b362c935c19c4644ed54b3669576c435ab1f29648a26820388c4113567a852b51c9cb1de2e84c4dbe4ad960f90531c69a05e3656b554e07f22a45db9560b3ec62d2cc017aae3b1d8e29b195570d9a84cf76b3e336a00d6dc58f7d8bb0c2fe858644e8cab7567a6286b82da0947ab40d881b4f52bc67b06eaac8c96b850eef9a7a30f33b07c8df96fa5d50dd6e4dac91b6d7e9ed78c0522de7c3f20813f78722c12c0cafba09182847175e0b3e081d8855e8e57c8d26b29fe973bdeb0658cdc2b079f86a6d033a6437d016455fba3e37c100b54e0e832faa63934633c5e8e15b275a237f923b502bb961915a43a2dec525dc33eb74fc5ee30b183e7221cc89c53a189267a9f2a55b38849b28172c92fac76bdebbf3b601107545d03d374b76eebf63ed408c93adf38c6e0ce3283deb09162f962651509e6ad8511d7b387337c347f06c34779a9735e20ee283e8f964b2ec3d53ca8c4d39d6caf9b3250f3fa9031783adf4e7a5d85adc4bb22e610669f9a110678e44703684ec2d7bcd245eefaae2b93650e18cde15df5a39f80d65e47abc1cd1b46c8f55e0e3434d91bdaae1651d4db993dbf695953f525bf743a438e8e9e4404fd14c224a9b3f146fdae7b25013452605d0bf20b5b5e2f119ef69ae0da8d8932d109f6d5d376dc6045740bef60570a8f69aec53e1fc4c17bd50fb4a23891134a9c54c97f96a2f5f7635fa0b13915269fa99d45895f6c0f0112f7a30a3b83cf9536aab83a08be50424b3423e55b8170a7da9acdea1ecbcd478d5a4361a62d087928d15470054220a2326483c89438f7dbd1aec09ab213ee89244d20634df503eceac596a61da69d7715776caaff908d0afd440a178bc16301c7c6b7303c51a19f6a75fc610d71d6f08a8f621cbc37c3e5a6680cdf4cfc59e64d2562589a0d61ea1b62f94c0301535cf68c152474d882e4c52a79cd41a94d8a49f583fa0ebc130f043d9545b24acee0cba4229bf2dd2aef7a64bbeb8f2c8dfa8da9ee53a7b5297d26d912dcb7e7f5e7628df04183eac13aae5f03667ba884b345203d265ddef6e21c6fd0a4bb5ee443bb4d81e1b5f85c0feb2ed74ef10b82a9d7e43726", 0x1000}, {&(0x7f0000000640)="ef7114c644219a4bbf679fd3ce11db0a75666a50fcb80923a53dee", 0x1b}, {&(0x7f00000006c0)="25aa69a4553527ee400874683ff37eb59928faaf4fba645ed30c6e80a296d7a0d0a964c4d6576cf12991eb8cd843e74a142aa898c8e67ddcdb9d7d4486b572499c628962c3430a6d6db4f03243bd", 0x4e}, {0x0}, {&(0x7f00000008c0)="2ff44e7cbd155b774890726df831d42c76916bd6bb4a01cd52e8f7598ee3ef8bdb8dba6ffa6bf3fe09683f095836d7d47455116fb3af54a7e1dea3643475c20714e806d886c3d1b4e05ef744534efff470dffc77435c1906074d3685a2d43eaae025369a8f3fbe7025b67d02d3e549738535cb337c71febae73acc9611ee454b0f477d7137cb7a6e68c0eafd9f99ceeeaae978bedf98e2ac8fdcdf2846a6b1ee84df4da40e40d60898370e77a64203981ed5bc3a81c2", 0xb6}], 0x7}}, {{&(0x7f0000001b00)=@pppoe={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001b80)}], 0x1}}], 0x2, 0x4040005) lseek(r2, 0x50000000, 0x1) getdents64(r2, 0x0, 0x4f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2000021b, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x20000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000002900000037"], 0x18}}], 0x1, 0x40000000) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r8 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r7, r8}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) add_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="8bc975f9fd54b19a43e1af1b7e738319c09fc983a5ac18459bcca1346050cca19db5daa439cd6d0400e129c4e4dfaa93b08cfb07fe54b50895a3f2055c8f", 0x3e, r8) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) 9.603088987s ago: executing program 4 (id=27): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80001, 0xd1) syz_open_procfs(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000190001090000000020000000021800000002fd010000000008000100ac1414000800060008000000541399ea5c047dd954968b5a547d861117cd3891bcddf267d76eeeb89a6c046850f71488c4ed06d7e42a91ed3fe7e445abcaefa6e548195213275d2856f5a05f69dc82a9bd67c7ef807104e69c1c52"], 0x2c}}, 0x0) 7.92084036s ago: executing program 1 (id=28): socket$inet(0xa, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 7.903950844s ago: executing program 4 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.321310139s ago: executing program 0 (id=30): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xb, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x4f4, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda92) accept4(r3, 0x0, 0x0, 0x0) 6.163683124s ago: executing program 5 (id=31): fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x101, 0x4}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x0, 0x83, 0x2, 0x3, 0x200007f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454c, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x4038, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xffffffff, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.162256896s ago: executing program 4 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.120406047s ago: executing program 2 (id=33): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = io_uring_setup(0x4d0d, &(0x7f0000000a40)={0x0, 0xf689, 0x2, 0xfffffffe, 0x3bd}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\vjk\xdf\a\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) r4 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) mmap(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r3, 0x7f000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) mknod(0x0, 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xcf, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f00000010c0)) r9 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) ioctl$VIDIOC_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x500, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x4009, 0x1, 0x2, 0x8d36, 0x722, 0x13, 0x7, 0x7f, 0x0, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xea}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 4.861438797s ago: executing program 4 (id=34): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000580)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r5, 0x25, 0x4}, 0x14) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) close(0x4) 4.590882296s ago: executing program 1 (id=35): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 3.762345756s ago: executing program 5 (id=36): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d0182da772f17ad4178f2a23c115f1e6450865a9eb53604c795d1febf02bd35bb1369296594bd997e7ab532e1fed2ee31d50d0276627d24d4b7270e95ee3b787247c892dfab7b9b66cb881fc1e8ceb14806ae93978f"], 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 3.512538876s ago: executing program 3 (id=37): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) openat$misdntimer(0xffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x101121) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x8000000000000400}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r3, r3, 0x7ffffffffffffffe, 0xfffffffffffffffe}) 3.461329103s ago: executing program 4 (id=38): syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 1.870411542s ago: executing program 3 (id=39): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff3400048005000300010000000500030002000000050003000500000005000300180000000500"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.745382879s ago: executing program 1 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x48000) syz_emit_ethernet(0x64, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x56, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x7, 0x42, 0x0, @opaque="912f17461f584e2e8d759fd7cad0d507d4918573565e85988d6abfc9515c84f05a11c56579ba786e42c7ee79423d17e77549712b9505ba6a156b"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c80)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, r4, {0x0, 0xfff3}, {0xe, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) 257.24661ms ago: executing program 2 (id=41): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) close(r4) r5 = syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYRESHEX=r5]) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x30, 0x0, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000006800010000000000000400000a00000000000000030a2a670000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) 75.038579ms ago: executing program 1 (id=42): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 0s ago: executing program 0 (id=43): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4003, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) close(0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) unshare(0xc040400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x20010, r4, 0x6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') preadv(r5, 0x0, 0x0, 0x13, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 82.267386][ T5810] cgroup: Unknown subsys name 'net' [ 82.407717][ T5810] cgroup: Unknown subsys name 'cpuset' [ 82.417180][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.872424][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.069909][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.078075][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.090999][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.100348][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.108610][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.116907][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.124364][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.131928][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.139711][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.148269][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.156628][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.168570][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.176193][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.183841][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.191185][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.195589][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.202909][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.213232][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.214464][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.254416][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.262171][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.274624][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.282113][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.297834][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.306781][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.328573][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.336725][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.355807][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.364403][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.373438][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.168591][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.240209][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.303627][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 88.462529][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 88.507245][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 88.646657][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.674847][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.682670][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.690310][ T5830] bridge_slave_0: entered allmulticast mode [ 88.697844][ T5830] bridge_slave_0: entered promiscuous mode [ 88.706940][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.714149][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.721292][ T5823] bridge_slave_0: entered allmulticast mode [ 88.729031][ T5823] bridge_slave_0: entered promiscuous mode [ 88.774845][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.782114][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.789830][ T5830] bridge_slave_1: entered allmulticast mode [ 88.797629][ T5830] bridge_slave_1: entered promiscuous mode [ 88.805284][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.812443][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.819803][ T5823] bridge_slave_1: entered allmulticast mode [ 88.827559][ T5823] bridge_slave_1: entered promiscuous mode [ 89.015866][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.023200][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.030537][ T5822] bridge_slave_0: entered allmulticast mode [ 89.038543][ T5822] bridge_slave_0: entered promiscuous mode [ 89.046937][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.054446][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.061685][ T5822] bridge_slave_1: entered allmulticast mode [ 89.069473][ T5822] bridge_slave_1: entered promiscuous mode [ 89.097987][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.105383][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.112697][ T5832] bridge_slave_0: entered allmulticast mode [ 89.120351][ T5832] bridge_slave_0: entered promiscuous mode [ 89.131276][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.144645][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.174895][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.182040][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.189440][ T5821] bridge_slave_0: entered allmulticast mode [ 89.197062][ T5821] bridge_slave_0: entered promiscuous mode [ 89.204959][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.212046][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.213923][ T5837] Bluetooth: hci1: command tx timeout [ 89.221476][ T5832] bridge_slave_1: entered allmulticast mode [ 89.231963][ T5832] bridge_slave_1: entered promiscuous mode [ 89.241574][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.254559][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.284853][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.292839][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.300037][ T5821] bridge_slave_1: entered allmulticast mode [ 89.307878][ T5821] bridge_slave_1: entered promiscuous mode [ 89.373393][ T5825] Bluetooth: hci3: command tx timeout [ 89.373420][ T5831] Bluetooth: hci5: command tx timeout [ 89.373740][ T5839] Bluetooth: hci2: command tx timeout [ 89.379268][ T5837] Bluetooth: hci0: command tx timeout [ 89.397936][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.453031][ T5837] Bluetooth: hci4: command tx timeout [ 89.486205][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.526852][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.539302][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.550843][ T5830] team0: Port device team_slave_0 added [ 89.559712][ T5823] team0: Port device team_slave_0 added [ 89.579167][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.586631][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.593906][ T5835] bridge_slave_0: entered allmulticast mode [ 89.601310][ T5835] bridge_slave_0: entered promiscuous mode [ 89.611783][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.639106][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.650087][ T5830] team0: Port device team_slave_1 added [ 89.658109][ T5823] team0: Port device team_slave_1 added [ 89.665928][ T5822] team0: Port device team_slave_0 added [ 89.701024][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.708243][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.715862][ T5835] bridge_slave_1: entered allmulticast mode [ 89.724108][ T5835] bridge_slave_1: entered promiscuous mode [ 89.774184][ T5822] team0: Port device team_slave_1 added [ 89.795874][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.803080][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.829070][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.856726][ T5821] team0: Port device team_slave_0 added [ 89.905038][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.912003][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.938566][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.951385][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.958633][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.984718][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.997672][ T5821] team0: Port device team_slave_1 added [ 90.006769][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.017924][ T5832] team0: Port device team_slave_0 added [ 90.027944][ T5832] team0: Port device team_slave_1 added [ 90.050629][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.058187][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.084313][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.140129][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.166129][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.173678][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.200111][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.214950][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.221896][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.248656][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.329283][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.336645][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.362697][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.403157][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.410129][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.437006][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.450075][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.457389][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.484255][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.510453][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.517561][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.543567][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.606608][ T5835] team0: Port device team_slave_0 added [ 90.640123][ T5823] hsr_slave_0: entered promiscuous mode [ 90.649741][ T5823] hsr_slave_1: entered promiscuous mode [ 90.670411][ T5830] hsr_slave_0: entered promiscuous mode [ 90.677199][ T5830] hsr_slave_1: entered promiscuous mode [ 90.683584][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 90.689359][ T5830] Cannot create hsr debugfs directory [ 90.714984][ T5835] team0: Port device team_slave_1 added [ 90.755317][ T5822] hsr_slave_0: entered promiscuous mode [ 90.761894][ T5822] hsr_slave_1: entered promiscuous mode [ 90.768350][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 90.774184][ T5822] Cannot create hsr debugfs directory [ 90.889103][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.896951][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.923552][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.937477][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.944673][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.971473][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.034417][ T5821] hsr_slave_0: entered promiscuous mode [ 91.040914][ T5821] hsr_slave_1: entered promiscuous mode [ 91.048079][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 91.054443][ T5821] Cannot create hsr debugfs directory [ 91.098095][ T5832] hsr_slave_0: entered promiscuous mode [ 91.104771][ T5832] hsr_slave_1: entered promiscuous mode [ 91.112688][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 91.118530][ T5832] Cannot create hsr debugfs directory [ 91.216001][ T912] cfg80211: failed to load regulatory.db [ 91.294581][ T5837] Bluetooth: hci1: command tx timeout [ 91.356549][ T5835] hsr_slave_0: entered promiscuous mode [ 91.363422][ T5835] hsr_slave_1: entered promiscuous mode [ 91.369890][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 91.376409][ T5835] Cannot create hsr debugfs directory [ 91.452892][ T5837] Bluetooth: hci2: command tx timeout [ 91.452904][ T5839] Bluetooth: hci5: command tx timeout [ 91.464309][ T5839] Bluetooth: hci0: command tx timeout [ 91.464582][ T5825] Bluetooth: hci3: command tx timeout [ 91.533221][ T5825] Bluetooth: hci4: command tx timeout [ 91.882148][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.899379][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.910527][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.929917][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.995109][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.008716][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.020166][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.031389][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.110911][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.147214][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.167132][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.204634][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.271151][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.316446][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.327362][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.353697][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.411768][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.439630][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.451814][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.478233][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.488969][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.506405][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.581740][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.608952][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.621875][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.629104][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.647587][ T5835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.658416][ T5835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.671177][ T5835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.681763][ T5835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.707265][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.714404][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.726476][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.733631][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.796834][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.803993][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.002440][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.061433][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.085790][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.115794][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.159861][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.167048][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.202373][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.257727][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.273740][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.280886][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.326594][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.333770][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.349142][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.356316][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.367021][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.374176][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.382510][ T5825] Bluetooth: hci1: command tx timeout [ 93.420544][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.427681][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.482170][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.528768][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.535599][ T5825] Bluetooth: hci2: command tx timeout [ 93.535644][ T5825] Bluetooth: hci0: command tx timeout [ 93.535680][ T5825] Bluetooth: hci5: command tx timeout [ 93.535835][ T5825] Bluetooth: hci3: command tx timeout [ 93.607271][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.614383][ T5837] Bluetooth: hci4: command tx timeout [ 93.638864][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.725717][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.732949][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.793187][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.800338][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.916475][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.928955][ T5823] veth0_vlan: entered promiscuous mode [ 94.002119][ T5823] veth1_vlan: entered promiscuous mode [ 94.049086][ T5830] veth0_vlan: entered promiscuous mode [ 94.130922][ T5830] veth1_vlan: entered promiscuous mode [ 94.155793][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.179637][ T5822] veth0_vlan: entered promiscuous mode [ 94.271226][ T5823] veth0_macvtap: entered promiscuous mode [ 94.300027][ T5822] veth1_vlan: entered promiscuous mode [ 94.338110][ T5823] veth1_macvtap: entered promiscuous mode [ 94.449789][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.486040][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.505844][ T5830] veth0_macvtap: entered promiscuous mode [ 94.549547][ T5822] veth0_macvtap: entered promiscuous mode [ 94.566474][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.592189][ T5822] veth1_macvtap: entered promiscuous mode [ 94.602340][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.641355][ T5830] veth1_macvtap: entered promiscuous mode [ 94.667897][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.678783][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.705234][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.725720][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.773910][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.801967][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.820805][ T5832] veth0_vlan: entered promiscuous mode [ 94.858407][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.887237][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.898600][ T5832] veth1_vlan: entered promiscuous mode [ 94.937117][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.956484][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.978109][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.988595][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.024516][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.065375][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.075635][ T3465] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.155785][ T3465] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.172337][ T3465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.191800][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.200099][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.222573][ T3465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.234491][ T5821] veth0_vlan: entered promiscuous mode [ 95.263721][ T5832] veth0_macvtap: entered promiscuous mode [ 95.289785][ T5821] veth1_vlan: entered promiscuous mode [ 95.308735][ T5832] veth1_macvtap: entered promiscuous mode [ 95.334809][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.349968][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.366756][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.434707][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.442560][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.454133][ T5837] Bluetooth: hci1: command tx timeout [ 95.490951][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.544758][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.554899][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.560946][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.587835][ T5835] veth0_vlan: entered promiscuous mode [ 95.619540][ T5821] veth0_macvtap: entered promiscuous mode [ 95.633472][ T5837] Bluetooth: hci3: command tx timeout [ 95.638978][ T5837] Bluetooth: hci5: command tx timeout [ 95.645317][ T5837] Bluetooth: hci0: command tx timeout [ 95.650791][ T5837] Bluetooth: hci2: command tx timeout [ 95.712863][ T5825] Bluetooth: hci4: command tx timeout [ 95.723205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.741645][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.764342][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.779560][ T5835] veth1_vlan: entered promiscuous mode [ 95.799929][ T5821] veth1_macvtap: entered promiscuous mode [ 95.830620][ T3465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.844715][ T3465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.893546][ T3465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.935116][ T3465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.053945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.117553][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.177771][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.272345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.463205][ T3465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.472198][ T3465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.494330][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.543126][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.558601][ T5835] veth0_macvtap: entered promiscuous mode [ 96.594885][ T3465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.659079][ T3465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.091254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.099821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.193856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.285747][ T5835] veth1_macvtap: entered promiscuous mode [ 97.291723][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.293460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.308981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 97.322785][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.342698][ T5985] mmap: syz.0.1 (5985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.394916][ T5985] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.511853][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.523639][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.564348][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.706337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.769190][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.022778][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.045677][ T5985] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 98.052828][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.068374][ T5985] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 98.158646][ T65] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.177659][ T65] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.208322][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.220203][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.311239][ T5993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.796086][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.823143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.972884][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.670714][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.709957][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.957345][ T6009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.211409][ T6029] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13'. [ 105.908031][ T6040] vivid-004: kernel_thread() failed [ 109.068796][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.589740][ T6063] bond0: (slave rose0): Enslaving as an active interface with an up link [ 109.646475][ T6052] [U] ^H [ 110.211548][ T6064] llc_conn_state_process: llc_conn_service failed [ 110.374918][ T6068] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.397181][ T6060] Zero length message leads to an empty skb [ 110.498802][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.542944][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.645401][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.760064][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.533130][ T6015] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.884996][ T6015] usb 6-1: Using ep0 maxpacket: 16 [ 113.094635][ T6015] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 113.134364][ T6015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.170287][ T6015] usb 6-1: Product: syz [ 113.340883][ T6015] usb 6-1: Manufacturer: syz [ 113.347701][ T6015] usb 6-1: SerialNumber: syz [ 113.381663][ T6015] r8152-cfgselector 6-1: Unknown version 0x0000 [ 113.398566][ T6015] r8152-cfgselector 6-1: config 0 descriptor?? [ 113.402623][ T6032] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.199868][ T6093] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.218926][ T6015] r8152-cfgselector 6-1: Unknown version 0x0000 [ 114.226170][ T6015] r8152-cfgselector 6-1: bad CDC descriptors [ 114.241668][ T6072] [U] ^H [ 114.285349][ T6015] r8152-cfgselector 6-1: USB disconnect, device number 2 [ 114.340124][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.377121][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.755369][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.841334][ T6118] syz_tun: entered allmulticast mode [ 116.562842][ T6015] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.933949][ T6015] usb 3-1: Using ep0 maxpacket: 8 [ 116.948680][ T6117] syz_tun: left allmulticast mode [ 117.005334][ T6015] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 117.045740][ T6015] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.078665][ T6127] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.106468][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.117775][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.36'. [ 117.548035][ T6133] loop3: detected capacity change from 0 to 40427 [ 117.656271][ T6133] F2FS-fs (loop3): invalid crc value [ 117.739734][ T6133] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 117.751110][ T6133] F2FS-fs (loop3): Start checkpoint disabled! [ 117.838594][ T6133] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 117.846881][ T6133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 118.323764][ T6143] raw_sendmsg: syz.2.33 forgot to set AF_INET. Fix it! [ 118.333916][ T36] kworker/u8:2: attempt to access beyond end of device [ 118.333916][ T36] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 118.351694][ T36] kworker/u8:2: attempt to access beyond end of device [ 118.351694][ T36] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 118.367076][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 118.367103][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.367116][ T36] Workqueue: writeback wb_workfn (flush-7:3) [ 118.367145][ T36] Call Trace: [ 118.367152][ T36] [ 118.367160][ T36] dump_stack_lvl+0x189/0x250 [ 118.367192][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.367218][ T36] ? __pfx_queue_work_on+0x10/0x10 [ 118.367238][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 118.367269][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.367305][ T36] f2fs_handle_critical_error+0x37c/0x540 [ 118.367341][ T36] f2fs_write_end_io+0x886/0xb60 [ 118.367381][ T36] __submit_merged_bio+0x27a/0x6a0 [ 118.367416][ T36] __submit_merged_write_cond+0x255/0x530 [ 118.367451][ T36] f2fs_write_data_pages+0x261d/0x3000 [ 118.367507][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 118.367541][ T36] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 118.367560][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.367611][ T36] ? __lock_acquire+0xab9/0xd20 [ 118.367633][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.367679][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.367720][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.367740][ T36] ? __lock_acquire+0xab9/0xd20 [ 118.367763][ T36] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 118.367782][ T36] do_writepages+0x32e/0x550 [ 118.367812][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.367832][ T36] ? reacquire_held_locks+0x127/0x1d0 [ 118.367853][ T36] ? writeback_sb_inodes+0x384/0x1010 [ 118.367889][ T36] __writeback_single_inode+0x145/0xff0 [ 118.367916][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.367936][ T36] ? do_raw_spin_unlock+0x122/0x240 [ 118.367967][ T36] writeback_sb_inodes+0x6c7/0x1010 [ 118.368023][ T36] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 118.368095][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.368115][ T36] ? rcu_is_watching+0x15/0xb0 [ 118.368137][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.368167][ T36] wb_writeback+0x43b/0xaf0 [ 118.368203][ T36] ? queue_io+0x301/0x590 [ 118.368233][ T36] ? __pfx_wb_writeback+0x10/0x10 [ 118.368272][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.368301][ T36] wb_workfn+0x409/0xef0 [ 118.368340][ T36] ? __pfx_wb_workfn+0x10/0x10 [ 118.368367][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.368387][ T36] ? __lock_acquire+0xab9/0xd20 [ 118.368418][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.368442][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.368467][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.368488][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 118.368507][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 118.368530][ T36] process_scheduled_works+0xae1/0x17b0 [ 118.368583][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.368613][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.368643][ T36] worker_thread+0x8a0/0xda0 [ 118.368668][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 118.368700][ T36] ? __kthread_parkme+0x7b/0x200 [ 118.368734][ T36] kthread+0x711/0x8a0 [ 118.368763][ T36] ? __pfx_worker_thread+0x10/0x10 [ 118.368784][ T36] ? __pfx_kthread+0x10/0x10 [ 118.368806][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.368830][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.368851][ T36] ? srso_alias_return_thunk+0x5/0xfbef5 [ 118.368871][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.368893][ T36] ? __pfx_kthread+0x10/0x10 [ 118.368920][ T36] ret_from_fork+0x4bc/0x870 [ 118.368943][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 118.368972][ T36] ? __switch_to_asm+0x39/0x70 [ 118.368987][ T36] ? __switch_to_asm+0x33/0x70 [ 118.369001][ T36] ? __pfx_kthread+0x10/0x10 [ 118.369028][ T36] ret_from_fork_asm+0x1a/0x30 [ 118.369064][ T36] [ 118.370304][ T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 118.988617][ T43] usb 3-1: USB disconnect, device number 2 [ 119.495941][ T6134] evm: overlay not supported [ 120.520390][ T6155] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.708025][ T5970] IPVS: starting estimator thread 0... [ 134.756287][ C0] sched: DL replenish lagged too much [ 225.792746][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 225.799723][ C0] rcu: 1-...!: (1 GPs behind) idle=ef44/1/0x4000000000000000 softirq=15311/15317 fqs=0 [ 225.810046][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5823/1:b..l [ 225.817961][ C0] rcu: (detected by 0, t=10506 jiffies, g=12057, q=596 ncpus=2) [ 225.825674][ C0] Sending NMI from CPU 0 to CPUs 1: [ 225.825707][ C1] NMI backtrace for cpu 1 [ 225.825722][ C1] CPU: 1 UID: 0 PID: 5890 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 225.825746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.825759][ C1] RIP: 0010:__kasan_check_byte+0x14/0x40 [ 225.825785][ C1] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 56 53 48 89 f3 49 89 fe e8 2e 15 00 00 84 c0 <75> 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 c6 03 00 00 [ 225.825802][ C1] RSP: 0018:ffffc90000a08b28 EFLAGS: 00000002 [ 225.825821][ C1] RAX: 0000000000000001 RBX: ffffffff8b48a487 RCX: ec2f081c6269a300 [ 225.825836][ C1] RDX: 0000000000000000 RSI: ffffffff8b48a487 RDI: 1ffffffff3349b89 [ 225.825851][ C1] RBP: ffffffff8492d05b R08: 0000000000000001 R09: 0000000000000000 [ 225.825865][ C1] R10: dffffc0000000000 R11: fffff52000141196 R12: 0000000000000000 [ 225.825880][ C1] R13: ffffffff99a4dc48 R14: ffffffff99a4dc48 R15: 0000000000000001 [ 225.825898][ C1] FS: 00007f94cbf41880(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 225.825916][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.825931][ C1] CR2: 0000200000001540 CR3: 0000000054b97000 CR4: 0000000000350ef0 [ 225.825948][ C1] Call Trace: [ 225.825957][ C1] [ 225.825966][ C1] lock_acquire+0x8d/0x360 [ 225.825990][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.826016][ C1] ? __lock_acquire+0xab9/0xd20 [ 225.826041][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 225.826067][ C1] ? debug_object_activate+0xbb/0x420 [ 225.826100][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 225.826126][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.826161][ C1] debug_object_activate+0xbb/0x420 [ 225.826200][ C1] enqueue_hrtimer+0x30/0x3a0 [ 225.826229][ C1] __hrtimer_run_queues+0x656/0xc60 [ 225.826257][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 225.826290][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.826327][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 225.826350][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.826383][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 225.826425][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 225.826454][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 225.826481][ C1] [ 225.826488][ C1] [ 225.826497][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.826519][ C1] RIP: 0010:tomoyo_check_acl+0x2e1/0x400 [ 225.826545][ C1] Code: 00 4c 8b 64 24 20 0f 83 1f 01 00 00 49 ff c5 4d 8d 75 ff 4c 89 f0 48 c1 e8 06 49 8d 3c c4 be 08 00 00 00 e8 01 1a e7 fd 31 f6 <4d> 0f a3 34 24 41 0f 93 c7 40 0f 92 c6 bf 02 00 00 00 e8 58 65 81 [ 225.826562][ C1] RSP: 0018:ffffc90003917908 EFLAGS: 00000246 [ 225.826580][ C1] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffffff843ea1ff [ 225.826595][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802e2e2030 [ 225.826609][ C1] RBP: ffff88802e2e2010 R08: ffff88802e2e2037 R09: 1ffff11005c5c406 [ 225.826625][ C1] R10: dffffc0000000000 R11: ffffed1005c5c407 R12: ffff88802e2e2030 [ 225.826641][ C1] R13: 0000000000000015 R14: 0000000000000014 R15: 0000000000000001 [ 225.826660][ C1] ? tomoyo_check_acl+0x2df/0x400 [ 225.826689][ C1] ? tomoyo_check_acl+0x2df/0x400 [ 225.826714][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 225.826744][ C1] tomoyo_path_permission+0x1b4/0x380 [ 225.826775][ C1] tomoyo_path_perm+0x392/0x4b0 [ 225.826802][ C1] ? tomoyo_path_perm+0x1e3/0x4b0 [ 225.826829][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 225.826882][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.826912][ C1] security_inode_getattr+0x12f/0x330 [ 225.826937][ C1] vfs_statx+0x18e/0x550 [ 225.826964][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 225.826984][ C1] ? strncpy_from_user+0x150/0x290 [ 225.827018][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.827042][ C1] ? getname_flags+0x1e5/0x540 [ 225.827063][ C1] ? dput+0x37/0x2b0 [ 225.827084][ C1] vfs_fstatat+0x118/0x170 [ 225.827107][ C1] __x64_sys_newfstatat+0x116/0x190 [ 225.827134][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 225.827157][ C1] ? kmem_cache_free+0x19b/0x690 [ 225.827207][ C1] ? do_syscall_64+0xbe/0xfa0 [ 225.827239][ C1] do_syscall_64+0xfa/0xfa0 [ 225.827273][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.827293][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 225.827319][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.827340][ C1] RIP: 0033:0x7f94cc037b0a [ 225.827359][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 225.827375][ C1] RSP: 002b:00007ffc360bd128 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 225.827396][ C1] RAX: ffffffffffffffda RBX: 00007ffc360bdb00 RCX: 00007f94cc037b0a [ 225.827411][ C1] RDX: 00007ffc360bd150 RSI: 00007ffc360bdb00 RDI: 00000000ffffff9c [ 225.827426][ C1] RBP: 00007ffc360bdb0f R08: 0000000000000075 R09: 0000000000000000 [ 225.827440][ C1] R10: 0000000000000100 R11: 0000000000000202 R12: 000055afa0adb6c5 [ 225.827454][ C1] R13: 00007ffc360bd1e0 R14: 000055af7821e6d7 R15: 000055afa0adb6c0 [ 225.827482][ C1] [ 225.827700][ C0] task:syz-executor state:R running task stack:21256 pid:5823 tgid:5823 ppid:5818 task_flags:0x400140 flags:0x00080001 [ 226.341215][ C0] Call Trace: [ 226.344576][ C0] [ 226.347504][ C0] __schedule+0x1798/0x4cc0 [ 226.352026][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.357670][ C0] ? __pfx___schedule+0x10/0x10 [ 226.362525][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.368157][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 226.373359][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 226.378649][ C0] preempt_schedule_irq+0xb5/0x150 [ 226.383763][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 226.389477][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.395111][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.401281][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.406944][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 226.412755][ C0] irqentry_exit+0x6f/0x90 [ 226.417175][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.423151][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 226.428436][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb cc d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 226.448047][ C0] RSP: 0018:ffffc900035370b8 EFLAGS: 00000206 [ 226.454115][ C0] RAX: 7e61e89fede5db00 RBX: 0000000000000000 RCX: 7e61e89fede5db00 [ 226.462078][ C0] RDX: 0000000000000001 RSI: ffffffff8d8f29f0 RDI: ffffffff8bbf05e0 [ 226.470042][ C0] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25 [ 226.478012][ C0] R10: dffffc0000000000 R11: ffffffff81ac2d30 R12: 0000000000000002 [ 226.485976][ C0] R13: ffffffff8df3d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 226.493944][ C0] ? unwind_next_frame+0xa5/0x2390 [ 226.499057][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.505218][ C0] ? unwind_next_frame+0xa5/0x2390 [ 226.510352][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.515989][ C0] ? unwind_next_frame+0xa5/0x2390 [ 226.521097][ C0] ? shmem_evict_inode+0x272/0xa70 [ 226.526204][ C0] ? unwind_next_frame+0xa5/0x2390 [ 226.531313][ C0] unwind_next_frame+0xc2/0x2390 [ 226.536255][ C0] ? unwind_next_frame+0xa5/0x2390 [ 226.541388][ C0] ? unwind_next_frame+0xa5/0x2390 [ 226.546509][ C0] ? shmem_undo_range+0x49e/0x14b0 [ 226.551656][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 226.557814][ C0] arch_stack_walk+0x11c/0x150 [ 226.562584][ C0] ? shmem_evict_inode+0x272/0xa70 [ 226.567694][ C0] stack_trace_save+0x9c/0xe0 [ 226.572376][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 226.577764][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.583406][ C0] save_stack+0xf5/0x1f0 [ 226.587658][ C0] ? __pfx_save_stack+0x10/0x10 [ 226.592510][ C0] ? free_unref_folios+0xdb3/0x14f0 [ 226.597713][ C0] ? folios_put_refs+0x584/0x670 [ 226.602644][ C0] ? shmem_undo_range+0x49e/0x14b0 [ 226.607755][ C0] ? shmem_evict_inode+0x272/0xa70 [ 226.612867][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.618499][ C0] ? page_ext_put+0x97/0xc0 [ 226.623012][ C0] __reset_page_owner+0x71/0x1f0 [ 226.627961][ C0] free_unref_folios+0xdb3/0x14f0 [ 226.632999][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.638642][ C0] ? folio_unqueue_deferred_split+0x93/0x230 [ 226.644623][ C0] folios_put_refs+0x584/0x670 [ 226.649398][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 226.654684][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.660312][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 226.666641][ C0] shmem_undo_range+0x49e/0x14b0 [ 226.671586][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.677235][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 226.682638][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.688289][ C0] ? kernel_text_address+0xa5/0xe0 [ 226.693409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.699033][ C0] ? __kernel_text_address+0xd/0x40 [ 226.704234][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.709892][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.715522][ C0] ? stack_depot_save_flags+0x40/0x860 [ 226.720989][ C0] ? kernel_text_address+0xa5/0xe0 [ 226.726103][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.731735][ C0] ? kasan_save_stack+0x4d/0x60 [ 226.736588][ C0] ? kasan_save_stack+0x3e/0x60 [ 226.741440][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 226.746815][ C0] ? call_rcu+0x157/0x9c0 [ 226.751149][ C0] shmem_evict_inode+0x272/0xa70 [ 226.756084][ C0] ? inode_wait_for_writeback+0xf9/0x290 [ 226.761715][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 226.767162][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 226.773228][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.778865][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.784492][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 226.789700][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 226.795146][ C0] evict+0x504/0x9c0 [ 226.799051][ C0] ? __pfx_evict+0x10/0x10 [ 226.803463][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.809087][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 226.814289][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.819915][ C0] ? _raw_spin_unlock+0x28/0x50 [ 226.824760][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.830391][ C0] ? iput+0x946/0xc50 [ 226.834377][ C0] __dentry_kill+0x209/0x660 [ 226.838971][ C0] ? dput+0x37/0x2b0 [ 226.842946][ C0] dput+0x19f/0x2b0 [ 226.846832][ C0] __fput+0x68e/0xa70 [ 226.850826][ C0] task_work_run+0x1d4/0x260 [ 226.855425][ C0] ? __pfx_task_work_run+0x10/0x10 [ 226.860546][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 226.866002][ C0] exit_to_user_mode_loop+0xe9/0x130 [ 226.871281][ C0] do_syscall_64+0x2bd/0xfa0 [ 226.875872][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.881069][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.887129][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.892757][ C0] ? exc_page_fault+0xab/0x100 [ 226.897524][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.903408][ C0] RIP: 0033:0x7f4c39d8dc2a [ 226.907815][ C0] RSP: 002b:00007ffd0c9a9870 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 226.916224][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f4c39d8dc2a [ 226.924191][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 226.932149][ C0] RBP: 00007ffd0c9a98cc R08: 0000000000000000 R09: 00007ffd0c9a95d7 [ 226.940109][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 226.948072][ C0] R13: 00000000000927c0 R14: 000000000001cc51 R15: 00007ffd0c9a9920 [ 226.956057][ C0] [ 226.959074][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g12057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 226.970301][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 226.980267][ C0] rcu: RCU grace-period kthread stack dump: [ 226.986140][ C0] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 226.999737][ C0] Call Trace: [ 227.003010][ C0] [ 227.005935][ C0] __schedule+0x1798/0x4cc0 [ 227.010468][ C0] ? __lock_acquire+0xab9/0xd20 [ 227.015312][ C0] ? __pfx___schedule+0x10/0x10 [ 227.020177][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.025811][ C0] ? schedule+0x91/0x360 [ 227.030058][ C0] schedule+0x165/0x360 [ 227.034218][ C0] schedule_timeout+0x12b/0x270 [ 227.039081][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 227.044467][ C0] ? __pfx_process_timeout+0x10/0x10 [ 227.049758][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.055388][ C0] ? prepare_to_swait_event+0x341/0x380 [ 227.060954][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 227.065816][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 227.070746][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.075955][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 227.081229][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 227.086440][ C0] ? finish_swait+0xcd/0x1f0 [ 227.091038][ C0] rcu_gp_kthread+0x99/0x390 [ 227.095628][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.100827][ C0] ? __kthread_parkme+0x7b/0x200 [ 227.105781][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.111414][ C0] ? __kthread_parkme+0x1a1/0x200 [ 227.116454][ C0] kthread+0x711/0x8a0 [ 227.120537][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 227.125820][ C0] ? __pfx_kthread+0x10/0x10 [ 227.130414][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.136046][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 227.141252][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.146885][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.152089][ C0] ? __pfx_kthread+0x10/0x10 [ 227.156701][ C0] ret_from_fork+0x4bc/0x870 [ 227.161291][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 227.166754][ C0] ? __switch_to_asm+0x39/0x70 [ 227.171511][ C0] ? __switch_to_asm+0x33/0x70 [ 227.176353][ C0] ? __pfx_kthread+0x10/0x10 [ 227.180948][ C0] ret_from_fork_asm+0x1a/0x30 [ 227.185723][ C0] [ 227.188727][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 227.195039][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 227.203961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.214003][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 227.219728][ C0] Code: 5e 33 ca f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 33 33 ca f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 227.239332][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 227.245394][ C0] RAX: c754f3970ae2a400 RBX: ffffffff81967be7 RCX: c754f3970ae2a400 [ 227.253443][ C0] RDX: 0000000000000001 RSI: ffffffff8d70bf53 RDI: ffffffff8bbf05e0 [ 227.261404][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 227.269370][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cd470 [ 227.277331][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 227.285304][ C0] FS: 0000000000000000(0000) GS:ffff88812613e000(0000) knlGS:0000000000000000 [ 227.294227][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.300808][ C0] CR2: 00007ffd30250ddc CR3: 00000000765c7000 CR4: 0000000000350ef0 [ 227.308777][ C0] Call Trace: [ 227.312046][ C0] [ 227.314963][ C0] default_idle+0x13/0x20 [ 227.319304][ C0] default_idle_call+0x73/0xb0 [ 227.324076][ C0] do_idle+0x1e7/0x510 [ 227.328148][ C0] ? __pfx_do_idle+0x10/0x10 [ 227.332753][ C0] cpu_startup_entry+0x44/0x60 [ 227.337517][ C0] rest_init+0x2de/0x300 [ 227.341775][ C0] start_kernel+0x3ae/0x410 [ 227.346290][ C0] x86_64_start_reservations+0x24/0x30 [ 227.351745][ C0] x86_64_start_kernel+0x143/0x1c0 [ 227.356850][ C0] common_startup_64+0x13e/0x147 [ 227.361808][ C0]