last executing test programs: 3m17.267746488s ago: executing program 2 (id=2179): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) 3m16.883585075s ago: executing program 2 (id=2181): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0xc008aeba, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x5625e9b0}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000380)={0xc5, 0x0, r3}) close(0x5) 3m16.655171525s ago: executing program 2 (id=2184): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {0xff}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d9) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) r1 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00038f0000008f037cd9d96f48a5d218746cb8021a50646c817122be0533aa876aeb6079cc9882a3"], 0x0, 0x0, 0x0}, 0x0) 3m14.750231962s ago: executing program 2 (id=2204): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x8) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2263804, 0x0) 3m14.717409056s ago: executing program 2 (id=2205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x1, 0x0, 0x6}, 0xfd}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x91e06422f025cd2) connect$can_j1939(r1, &(0x7f0000000640)={0x1d, r2, 0x82, {0x1, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 3m14.244697343s ago: executing program 2 (id=2210): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/109, 0x6d}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 3m14.084495183s ago: executing program 32 (id=2210): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/109, 0x6d}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 2m42.619236364s ago: executing program 3 (id=2340): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x22000100, 0xf2, 0xfffb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7ff}}, 0x50) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="06ff03076844ba8cb89e14f00800", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc49, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x80000001, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x25000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m39.42175834s ago: executing program 3 (id=2348): chdir(0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') 2m37.653804727s ago: executing program 3 (id=2356): socket$inet6_udp(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0x94fa, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000340)={{0x8, 0xf, 0x3, 0xffa}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_CREATE(r2, 0x5501) 2m36.512221754s ago: executing program 3 (id=2358): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x2, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m34.263141117s ago: executing program 3 (id=2361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m33.072762523s ago: executing program 3 (id=2364): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) sync() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000680)) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, &(0x7f0000000700)={0x14, &(0x7f00000001c0)={0x20, 0x30, 0x36, {0x36, 0x30, "68d360a337092470fd8ae55be56d15abfa79b9e149cb139c331e61c8ae4839b7f5239e7778659b6e555e67bf97162d7e0c27954c"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000000900)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x58}, 0x0, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) 2m18.264317602s ago: executing program 33 (id=2364): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) sync() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000680)) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, &(0x7f0000000700)={0x14, &(0x7f00000001c0)={0x20, 0x30, 0x36, {0x36, 0x30, "68d360a337092470fd8ae55be56d15abfa79b9e149cb139c331e61c8ae4839b7f5239e7778659b6e555e67bf97162d7e0c27954c"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000000900)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x58}, 0x0, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) 1m4.320332845s ago: executing program 5 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x2) 51.091454571s ago: executing program 5 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x2) 49.523086384s ago: executing program 6 (id=2401): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x3e, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) 47.638494836s ago: executing program 6 (id=2401): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x3e, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) 41.659504344s ago: executing program 5 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x2) 36.104399058s ago: executing program 6 (id=2401): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x3e, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) 27.536627257s ago: executing program 5 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x2) 25.780892772s ago: executing program 6 (id=2401): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x3e, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) 21.360587392s ago: executing program 6 (id=2401): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x3e, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) 16.841421836s ago: executing program 5 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x2) 13.47005361s ago: executing program 4 (id=2602): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) read$hidraw(r5, &(0x7f0000002380)=""/93, 0xfdef) write$binfmt_script(r6, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 11.575533283s ago: executing program 4 (id=2604): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x140}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="282a930912ad3e72110bd79878735a640a865596aef5877961eedbc51abe7d4ba284475c7f5ac92cfeb71df1", @ANYRES8=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC=0x0]) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x841) mmap(&(0x7f000014a000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0xa56e8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a000000080003003ac47c760bccdca7fe7cfe9239810991a913f3ac23a029acc11daf68fd7da6a98b076dbb56658fbee5b0a44fba21e9fa298af6ac05da75d303ed26d05c55383aa57651dfca16b32442bd13dad6690f8246fdd3ca9e9f6aebf80991533aff90554ad7902422c68107ee8437202c9c9ed7835ae4bf8825", @ANYRES32=r8, @ANYBLOB="05005b0016000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x2c}}, 0x4005) r10 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r10, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) close_range(r5, 0xffffffffffffffff, 0x0) 11.515892009s ago: executing program 1 (id=2605): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0xab0, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000", 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x452c, 0x28, 0xd27, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4500, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_ACT={0x44f8, 0x1, [@m_police={0x1850, 0x1e, 0x0, 0x0, {{0xb}, {0x824, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0xf2, 0x3ff, 0x7, 0x80000001, 0x2, 0x0, 0x2, 0x2, 0xb5fd, 0x3, 0x6, 0x7, 0x24, 0x200, 0x2, 0x5, 0x4, 0x4, 0x7, 0x5, 0x2, 0x9, 0xd, 0x61e83c67, 0xa, 0x3, 0x7, 0x101, 0x1200, 0x9, 0x2, 0x35a5, 0x5, 0x8, 0x80000000, 0x0, 0x2, 0xb, 0x3e8, 0xb1bb, 0x7fff, 0x2bc, 0x1, 0x813d, 0x401, 0xf9b4, 0x2, 0x9, 0x4, 0x93e, 0x2, 0x8, 0xd, 0x2, 0x1, 0x9, 0x3, 0x5, 0x2956, 0x8, 0x6, 0x6, 0x1, 0x46d, 0x4, 0xff, 0x0, 0x5, 0x7fff, 0x9, 0x3c, 0x401, 0x0, 0x6, 0x0, 0x9, 0xfffffffb, 0x9, 0xfffff001, 0x3ff, 0x7, 0x800, 0x6, 0x0, 0x0, 0x401, 0xf, 0xffffffff, 0x1, 0x9, 0x1ff, 0x7, 0x3, 0x5, 0x4, 0x2851, 0x1, 0x5, 0x8, 0x6, 0x5, 0x352, 0x6, 0x10, 0x3ff, 0x4, 0x6bce01e7, 0x10000, 0x8, 0x7, 0xffff, 0xa1a, 0x80000001, 0x2, 0x8, 0x18e, 0x100, 0x6, 0x6, 0xfffffffc, 0xffffff00, 0x54e2, 0x2, 0xe, 0x2, 0x4, 0xffffffff, 0x4, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0x3, 0xff, 0x0, 0xc5, 0x4800, 0x6, 0x3, 0x5, 0x4, 0xa3a8, 0x0, 0xfffffff7, 0x3, 0x5, 0x9, 0x3, 0x1, 0xe8, 0x16, 0x2, 0x34, 0x5, 0x2ab, 0x18, 0x8, 0x7, 0x9, 0x118, 0x400, 0x1, 0x7, 0x0, 0x4, 0x0, 0x9917, 0x3, 0x8, 0x8, 0x8001, 0x9, 0x2, 0x1, 0x80000001, 0x0, 0x1, 0x429cf44, 0x6, 0xffff, 0xa95, 0x101, 0x10000, 0x10001, 0x8, 0x10001, 0x200, 0x8, 0x1, 0x8, 0x4, 0x9, 0x1b166543, 0x6, 0x6, 0x0, 0xe, 0x8001, 0x1, 0x7, 0x7, 0x8, 0x7, 0x0, 0x597a, 0xfffff800, 0x8000, 0x68b5, 0x2, 0x1000, 0x401, 0xab6, 0x9, 0x0, 0x7ff, 0x7, 0x0, 0x8, 0x63, 0x13dd54d, 0x6, 0xfffffffb, 0x2, 0x5, 0x6, 0xd, 0x7, 0x6, 0x4, 0x8, 0x6, 0x0, 0x3c1f41cc, 0x3, 0x9, 0x7, 0x3, 0x101, 0xb, 0xe3, 0xea, 0x6, 0x7, 0x1, 0xdf, 0xb, 0xd, 0x4d8f, 0x2, 0x7, 0x1, 0x5, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1, 0x7feb45c7, 0x10001, 0x59, 0x1ff, 0x6, 0x0, 0xfffffffa, 0xa3f, 0x0, 0x101, 0x7ff, 0x1, 0x0, 0x4, 0x2, 0x1, 0xfe, 0x0, 0x1, 0x4, 0x2, 0x6, 0x775b, 0x7, 0x7, 0x8, 0xc7, 0x61d, 0xa, 0x14, 0xf, 0x607, 0x8, 0x0, 0x2040, 0x0, 0x1, 0xfffffffa, 0x81, 0x6, 0x0, 0x8, 0x88a, 0x4, 0x9, 0x8, 0x80000001, 0x4, 0x6, 0x9, 0x9aa9, 0x6, 0x9, 0xc, 0x9f98, 0x100, 0xef, 0x0, 0x6, 0x5, 0xf8, 0x4, 0x1, 0x7, 0xe, 0x2, 0x3, 0x7, 0x7, 0x6, 0xc85, 0x800, 0xffffffff, 0x8001, 0xe3, 0x223, 0x1, 0x4, 0x8000, 0x8, 0x2e01, 0x4cfe, 0x3, 0x0, 0x4, 0x7fff, 0x400, 0x7d, 0x7, 0x2, 0x7f, 0xd, 0xfffffffa, 0x6, 0x6d, 0x6, 0xb, 0x1, 0x1, 0x6, 0xdf, 0x7f000000, 0x5, 0x3, 0x7, 0x80000000, 0x5, 0x1, 0x8001, 0x401, 0xb, 0xc, 0x7, 0x5b1, 0x7, 0x2, 0x0, 0x6, 0xfffffff8, 0x2, 0x5, 0x7fffffff, 0x7d5a, 0x5, 0x1, 0x80, 0x5, 0x8, 0x7a2, 0x8, 0xa21, 0x17b, 0x1, 0x9, 0x0, 0x8, 0x7f, 0x7, 0xab, 0x1, 0x98, 0x2, 0x1aa1, 0x5, 0x9, 0x8000, 0x8, 0x5, 0x8, 0xda15, 0x80000001, 0x6, 0x4, 0x2, 0x0, 0x0, 0x4, 0xd00000, 0x8, 0x5d06, 0x3, 0x3000000, 0x64b, 0x7, 0x7, 0x5, 0x6, 0x8, 0x7f, 0xf, 0x2, 0x34, 0x3, 0x7, 0x1, 0x0, 0x4, 0x8, 0x40, 0x1, 0x8a53, 0x8, 0x6, 0x5, 0x1, 0x4, 0x1e6b, 0x0, 0x800, 0x3, 0x6, 0xfff, 0x8, 0x3, 0xff, 0x0, 0xeb63, 0x9, 0x9, 0x4, 0xfffffff8, 0x4, 0x40, 0x3, 0x0, 0x4, 0x9, 0x3, 0x4, 0x6, 0xe9e5, 0x6, 0x8000, 0x6, 0x57a, 0x4, 0xffffff50, 0xffffffff, 0x9, 0xfffffffc, 0x81, 0x5, 0x8, 0x80000001, 0x2, 0x25b9, 0x10, 0x81, 0x4, 0xe, 0x40, 0xfffffeff, 0x40, 0x7, 0x423, 0x9, 0x52db, 0x1ff, 0xffffffff, 0x7, 0x401, 0x2, 0xbe, 0x116fc8f, 0x6, 0xde5, 0x90, 0x5, 0x4, 0x8000, 0x400, 0x5, 0x9, 0xfffffffd]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}], []]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x15c, 0x5, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x8, 0x5, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0xf}, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0xffff7fff, 0x2, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x7f, 0x3, 0xb, 0x1}, @empty, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x26d, 0x20000000, 0x2f4, 0xe0}, @rand_addr=0x64010100, @multicast1, 0xffffffff}}]}, {0x92, 0x6, "34ad97cb4947ea7b08e08e56b42f492f8d9b6422a401c6c6a88721d694291961428da8b3b352432722be8a12d99a5f3ce35d63302ff963547f33c0822f9fbb61294b5b8e6776d5198131086a7be2ae2e02d83ca608868e210ad49940bde2f2acaf0f3c303009a432f7761edb2f3c41e913d1b4f2a3a82f879e01b8d7fa6ef49e4b2bee09d0cb2464f5361abd14b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x4e0, 0x18, 0x0, 0x0, {{0xb}, {0x4b4, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x7, 0x0, 0x8, {0x6, 0x0, 0x7, 0x7f, 0x80, 0x9}, {0x3, 0x0, 0x9, 0x8344, 0x3, 0x80}, 0x10001, 0x4, 0xcd6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x3, 0x0, 0x1, {0x3, 0x2, 0x380, 0x1, 0xb, 0xc}, {0x81, 0x1, 0xa9f5, 0x9, 0x3, 0x8}, 0x10001, 0x5, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0xfffff001, 0xfffffff8, 0x4c8, 0x800000, 0x9, 0x184c6bf6, 0x4, 0x9a, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x5, 0xe888, 0x6, 0x3fd5, 0x7, 0x4, 0x1, 0x7, 0x9, 0x40, 0x80, 0x1, 0x5, 0x9, 0x0, 0x3, 0x1, 0x40, 0x3, 0x8, 0x81, 0x9752, 0xffffffff, 0x1, 0xfffff962, 0xfffff572, 0x9, 0x9, 0x2, 0x0, 0xf16, 0x6, 0x7, 0x0, 0x2, 0x2, 0x3, 0x7, 0x3, 0x1, 0x7fff, 0xb4e1, 0x9, 0x7, 0x652, 0x2c, 0x7, 0x40, 0x1, 0x5, 0x1, 0x80000001, 0x8001, 0x0, 0x8, 0x6, 0x7, 0x5, 0x7fff, 0x1, 0x1, 0x0, 0x1, 0x3, 0x6, 0x1, 0x8e96, 0x1, 0x4e, 0x1000, 0x7, 0x8428, 0x800, 0x6, 0x5, 0xfff, 0x80, 0x7, 0x8000, 0x7, 0xfffffffd, 0x5, 0x6, 0x9, 0x0, 0x5936, 0x33b800, 0xffffffff, 0x7a5, 0x4, 0x6, 0x0, 0xff0, 0xe, 0x1, 0x9, 0x6, 0xffffffff, 0xe, 0xc, 0x9, 0xe69a, 0x8, 0x9, 0x9, 0x7ff, 0x30, 0x4, 0x2, 0xffffff01, 0xfe, 0x5, 0x1, 0xffffffff, 0x1, 0x7ff, 0x7, 0x7, 0x9, 0x22d5, 0x3, 0x899a, 0x5, 0x2, 0x9, 0x0, 0x6, 0x80000001, 0x9, 0xf448, 0x5, 0x2029601a, 0x9, 0x2, 0x800, 0x80f8, 0xa7ee, 0xa81, 0xbd1, 0x4, 0x3, 0x0, 0x4, 0x9, 0x2, 0x4f1c, 0x0, 0x4, 0x14da, 0x5, 0x7, 0x10, 0xffff, 0x7, 0x5, 0xfffffff8, 0x4, 0x442f4a4c, 0x5, 0x0, 0x0, 0x0, 0x5, 0x4, 0x56, 0x7, 0x5, 0x5, 0x10000, 0x5, 0x2, 0x3, 0x8, 0x2, 0xfc, 0xe1f, 0x3, 0x3, 0x0, 0x7, 0x805, 0x4, 0x0, 0x3, 0x1a66, 0x7, 0x822, 0x9, 0xfffffffb, 0xab, 0xfffffc00, 0x2, 0xff, 0x6, 0xbe, 0x1, 0x0, 0x9, 0x0, 0x7, 0x1, 0x57e7069f, 0x6, 0x3, 0x1000, 0x4, 0xf8, 0x8000, 0xffffffff, 0x7, 0x7, 0x7fff, 0x32, 0x50000000, 0xc, 0xffffffff, 0x3, 0x6, 0x7, 0x2, 0x40, 0x8, 0xa, 0x5, 0x5, 0x0, 0x8, 0x143, 0xff800000, 0x2, 0xfffffff6, 0x5, 0x3, 0x5, 0x0, 0xffffffff, 0x5, 0xf1bb, 0x8, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3b}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe}], []]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x54, 0x20, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x9, 0x2, 0x1, 0x4}, 0x0, r7}}]}, {0x5, 0x6, "11"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x68, 0x10, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x24cc, 0x7, 0x0, 0x0, {{0xb}, {0x14a0, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x4f, 0x9, 0x7, 0x9, 0x10000, 0xffff, 0x6, 0x0, 0x8, 0x5, 0x6, 0x5, 0x1, 0x7, 0x3, 0x1, 0x7f, 0xffff, 0x800, 0x1, 0x400, 0x9, 0x100, 0xffff, 0x2, 0x4, 0x5, 0x0, 0xc87, 0x6, 0x7, 0xc4, 0x9, 0x9, 0x7, 0x9, 0x7, 0x0, 0x43b, 0x4, 0x8, 0x1, 0x2, 0x9, 0x2afe, 0x0, 0xa, 0x9, 0x2, 0x0, 0x3d05, 0x5, 0x7, 0x40, 0xd3ff, 0x1, 0x10, 0xd, 0x5de82271, 0x2, 0x0, 0xffffffff, 0x8001, 0x5, 0x7f0, 0x6, 0x10, 0x0, 0x5, 0x3, 0x1000, 0xd, 0x3, 0xb86, 0x8, 0x5, 0xfffffff7, 0xc, 0x400, 0x9, 0x8, 0x9, 0x3ef1, 0x15, 0x3794c88c, 0x1, 0x10, 0x9, 0xe, 0x1, 0x80000001, 0xffe, 0x80, 0xfffffff6, 0x0, 0x6, 0x40, 0x4, 0x4, 0x56220e24, 0x0, 0x1, 0x8, 0x3, 0xc, 0x7, 0xe, 0x5, 0x3, 0x5, 0x7, 0x800, 0x4, 0x5, 0x4, 0x7ff, 0x5, 0xd84, 0x3, 0xd, 0x8, 0x4135, 0x74a3, 0xffffa440, 0x6, 0x7, 0xffffffff, 0xd6, 0x8, 0x34ec, 0x8, 0x1fa, 0x3, 0x9, 0xd4c, 0x7, 0x1, 0x7fffffff, 0x10001, 0x400, 0x5, 0x9, 0x3, 0x2, 0x2, 0x8, 0x9, 0xb05a7099, 0x4, 0xff, 0xfffffffc, 0x0, 0x8000, 0x9, 0x1, 0x2, 0x4, 0x8, 0x5, 0x6, 0x7, 0x7f, 0xa0a1, 0x4, 0x8, 0x5, 0x6, 0x6, 0x0, 0x1, 0x1, 0x81, 0xd56, 0x10000, 0x96ad, 0x400, 0x51c, 0x0, 0x1, 0x2, 0x0, 0x2, 0xe53, 0xf4f, 0x6, 0xaf94, 0x7, 0x0, 0x2a54, 0x7, 0x7fffffff, 0x1, 0x9, 0x8, 0x800, 0x6, 0x10, 0xf, 0xfc, 0xbf0, 0xa8, 0xff, 0x5, 0x0, 0x3ff, 0x595f, 0x7, 0x2, 0xa611, 0xffffffff, 0x3, 0x7, 0x8, 0x1000, 0xc, 0xdef8, 0xffff, 0x4f8, 0x9, 0xc8, 0x437, 0x1, 0xd3, 0x4, 0x5, 0x7ff, 0x5, 0xff, 0x200, 0x7fff, 0x3, 0x0, 0x8, 0x4, 0x2, 0x2, 0x1a, 0x8001, 0x1, 0x5, 0x6, 0x8, 0x800, 0xc7b3, 0x1, 0x3, 0x4, 0x7, 0x0, 0x8, 0x0, 0xb, 0x4, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x2, 0x7884, 0x7, 0x80, 0x0, 0xff, 0x2, 0x6, 0x7, 0x1, 0x1000, 0x7, 0x0, 0x2, 0x6, 0x8cb, 0xc, 0x2, 0x2, 0x0, 0x7, 0x8, 0x80000000, 0x9, 0x3, 0x1, 0x3, 0x8, 0x1, 0x6, 0x7, 0x0, 0x4000000, 0x9, 0x2, 0x1ff, 0x40, 0x9, 0x4, 0x0, 0x4, 0x3, 0x7, 0x7fff, 0x3, 0xe47c, 0x4, 0x8, 0x9, 0x1, 0x3cf, 0x5, 0x7, 0xab0b5c9, 0x37, 0x4, 0x40, 0x6, 0x1, 0x3, 0x7, 0x8, 0x3, 0xd, 0x3, 0xb, 0x8001, 0xffffffff, 0x81, 0xdc3c, 0x7, 0x5b, 0x1000, 0x401, 0x5, 0x7, 0x2, 0xffff0000, 0x100, 0x27, 0xfffffeff, 0x0, 0xc, 0x1, 0x3, 0x501, 0x10001, 0xbf63, 0x98db, 0x10, 0x30e, 0x8, 0x3ff, 0xffffff80, 0x1, 0xfffffff4, 0x5, 0x4, 0x4, 0xffff0001, 0x2, 0x2, 0x100, 0x0, 0x8, 0x6, 0x6, 0x10000, 0x9, 0x10001, 0x6, 0x1, 0x101, 0x7, 0xd, 0x0, 0xf, 0x4, 0x4, 0x113f, 0x0, 0xfffffff7, 0x6, 0x7, 0x1efd43c3, 0xfff, 0x1, 0x9, 0x7fffffff, 0x5, 0x28c9, 0x2, 0x2, 0xfff, 0x6, 0x6, 0x22, 0x4, 0x3, 0xb9, 0x800, 0x0, 0x40e72ab2, 0x2, 0x2, 0x6, 0x2841c6d, 0xd, 0xfffffffc, 0x8, 0x1, 0x4, 0x4, 0x9, 0x1bc1, 0x0, 0x6814, 0x7b9, 0x9, 0x3, 0x4, 0x0, 0x40, 0x733, 0xfffffffe, 0x4, 0x4, 0x0, 0x0, 0xffffffff, 0x4, 0x9, 0x9, 0x200, 0x0, 0x6, 0x67d, 0x3, 0x5, 0x7, 0x9, 0x1f15, 0xc2c, 0xd, 0x8, 0x4, 0x1, 0x7, 0x2, 0x1ff, 0xc3, 0x7, 0x0, 0x9, 0x9e, 0xea47, 0xe1, 0x0, 0x0, 0x7, 0x800000, 0x3, 0x2, 0x3, 0xd018, 0x7, 0x0, 0xfff, 0x9, 0x0, 0x1ff, 0xff, 0x0, 0x5, 0x8001, 0x7fffffff, 0x1, 0x10000, 0x6, 0x4b5, 0x4, 0x9, 0xcbd7, 0xfff, 0x9, 0x0, 0x800, 0x0, 0x5, 0x8, 0x0, 0x3, 0xfffff801, 0x3, 0x2e5, 0x3, 0x9, 0x1, 0x8, 0x40, 0x2, 0x9, 0x6, 0xffff7fff, 0x2, 0x9, 0xfc, 0x5, 0x0, 0xfffffff7, 0x0, 0x94fb, 0xfffffff7, 0xc, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x9, 0x264, 0x7f, 0x3, 0x8001, 0xf, 0x9, 0x7, 0x8, 0x200, 0xed3, 0x9, 0x5, 0xfa89, 0x1000, 0x5, 0x81, 0x1, 0x80000000, 0x6, 0x40, 0x4, 0xc, 0x23, 0x9, 0x3, 0x328f, 0x1, 0x3, 0xf, 0x8, 0x4, 0xfffffff9, 0x45, 0xc591, 0x1, 0x81, 0xa, 0x1, 0x100, 0x3, 0x8, 0x1000, 0xfffffffb, 0xcf11, 0x6, 0x1, 0x1, 0x3, 0x1000, 0x1, 0x5f9d, 0x6, 0x6, 0x2, 0x1000, 0x401, 0x2, 0x5fe, 0x8001, 0xb, 0xffffffff, 0x800, 0x40, 0x2be, 0x80, 0x8, 0xfffffc01, 0x1ff, 0xa, 0x5, 0x7, 0x2, 0x43b4, 0x80000000, 0x7, 0x7, 0x60, 0x1, 0xe33, 0xb, 0x2, 0x2, 0x2, 0x5, 0xe, 0x400, 0xfffffffd, 0x6b39, 0x4, 0x5, 0x3, 0x828, 0x2, 0x9, 0xb73, 0x6, 0x2, 0x81, 0x0, 0x401, 0x7fffffff, 0xf, 0x7, 0x6, 0x9, 0x0, 0x1, 0xfffffff9, 0x3d97acb6, 0x3ff, 0x6, 0xb5, 0x8, 0x4, 0x5, 0xffffff7f, 0x4f55, 0x0, 0x2, 0xe, 0x5a7, 0x7, 0xb6ff, 0x9, 0x4, 0xb, 0xfff, 0x8, 0x3, 0x365faa1c, 0x9, 0x5, 0x80000001, 0xa, 0xffffffff, 0x6f, 0x100, 0xfff, 0x200000, 0x7a, 0x81, 0x3, 0x0, 0x276ed1a6, 0x9, 0x1, 0x4, 0x6, 0x2, 0x6, 0x0, 0x2, 0x75, 0x3, 0x0, 0x1, 0xcf, 0x200, 0x401, 0x6, 0x8277, 0x0, 0x400, 0x6856, 0x9, 0x1, 0x1, 0x0, 0x8c28, 0xd, 0x2, 0x6, 0xa, 0xfdbc, 0x10, 0x0, 0x6, 0x4, 0x3, 0xfffffffc, 0x792dc4df, 0x5, 0x2, 0xfffffffe, 0x5, 0x500, 0xe, 0x3b7cc85b, 0xa, 0xff, 0x7, 0x3, 0x4a9f, 0x1, 0x8, 0x9, 0x7, 0x1, 0x5, 0x7fff, 0x5, 0x40, 0x9b5, 0x0, 0x8, 0x6, 0x8, 0x2, 0x36b8, 0xc53, 0xd, 0xfffff801, 0x6, 0xffffa10e, 0x2, 0x845, 0xffff, 0xff, 0x10, 0x1, 0x7, 0x7, 0x6, 0x5, 0x7, 0x7fffffff, 0x7ff, 0x7, 0x4, 0x21, 0x3, 0x80, 0xfffffffe, 0x7, 0x299f, 0x0, 0x3, 0x6, 0x1000, 0x1, 0x9, 0x3ff, 0xb, 0x8, 0x5, 0x7, 0x3, 0x10000, 0x236, 0x2, 0x3, 0xfffffff5, 0x7, 0x80000001]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x58e, 0x10001, 0x4, 0x6, 0xb1b, 0x81, 0x5, 0xe, 0x5, 0x8, 0x6, 0x5, 0x22c, 0x8, 0x6, 0x3, 0x66, 0x6, 0x7, 0x0, 0x0, 0x7, 0x6, 0x80000001, 0x1, 0x1ff, 0x6d71, 0xfff, 0x38c2, 0x3, 0x5, 0x6, 0x3, 0x4, 0x7, 0x8, 0x6, 0x8000, 0x80000000, 0x3, 0x6, 0xa06, 0x7, 0xd376, 0x401, 0x800, 0x5, 0x0, 0x7, 0x8, 0x7, 0x7c8, 0x6c, 0x81, 0x6, 0x5, 0x2, 0xc0, 0x6, 0x2cd2, 0x0, 0x7fff, 0xfff, 0xff, 0x6, 0x1, 0x2, 0x1000, 0x8000, 0x4, 0x88, 0x95, 0x3, 0x2, 0x5, 0x0, 0x6, 0x9, 0x7, 0xffffff08, 0xae, 0x6, 0x400, 0x6, 0x2, 0x6, 0xfffffff8, 0xa0c, 0xf, 0xd, 0x7, 0xffffffff, 0x1000, 0x8, 0x7, 0x8, 0xc0000000, 0x5, 0x7, 0x5, 0x0, 0x7, 0x6, 0x5, 0x5, 0xff, 0x0, 0x1, 0x5, 0x7, 0x8, 0x3, 0x8, 0x8000, 0x7, 0x800, 0x5, 0x8, 0x8000, 0x10f7d912, 0x94, 0x7, 0x10000, 0x80, 0x10001, 0x40, 0x2, 0x1000, 0xc, 0x0, 0xfb, 0x7ff, 0x800, 0x1d, 0x1, 0xffffffff, 0x4, 0x4, 0xc, 0x400, 0x6, 0x7ff, 0x6, 0x4, 0x7, 0x4, 0x2, 0x90000, 0x7f, 0x3, 0x2, 0x7, 0x8001, 0x1bf5, 0x8001, 0x4, 0x2, 0x60a, 0x1ff, 0xc3a, 0x3, 0x200, 0x5, 0x8, 0x2, 0xf2f, 0x8, 0x8, 0x2, 0x7, 0x6, 0x3, 0x6, 0x8001, 0x8, 0x9, 0x45e4, 0x5, 0x2, 0x4, 0x1, 0x1, 0x8, 0xfffffff9, 0x4, 0x2, 0xa, 0x40, 0xfffffff9, 0x10001, 0x7f, 0x0, 0x5, 0xe, 0xfaf9, 0x80000, 0x40, 0x562b912d, 0x9, 0xff, 0x800000, 0x300000, 0x5, 0x1, 0xcd, 0x1, 0xbc1, 0xf02, 0x4, 0xa, 0x5, 0x9, 0x7f3a, 0x5, 0x497c, 0xfffffff8, 0x7, 0x1, 0x9, 0x80000000, 0x101, 0x9, 0x4, 0x7, 0x8, 0x81, 0x3, 0x2, 0x9, 0x1000, 0x7ff, 0x7f, 0xe, 0x80, 0xffffff80, 0x2, 0x7, 0x8000, 0xd, 0x3ff, 0x7, 0x10000, 0x387, 0x5, 0xd4, 0xfffffff9, 0x3, 0x3, 0xe5, 0x8, 0x2, 0x2, 0x6, 0xe5c2, 0x7]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0x1, 0x0, 0x4, {0x0, 0x0, 0x8, 0x7, 0x6, 0x80}, {0xf, 0x0, 0x4, 0x6, 0x7, 0x5}, 0x319, 0x101, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x20000000, 0x4, 0x0, 0x5, {0x1, 0x2, 0x334, 0x80, 0x6, 0x2}, {0x0, 0x2, 0x10, 0x3, 0x1, 0x9}, 0x80000001, 0x2, 0x1}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3a38e83f, 0x3, 0x6, 0x400, 0xd, 0x7, 0x5, 0x7fa, 0x2, 0x7, 0xfffff881, 0x2c, 0x2a64, 0xfffff000, 0x1, 0x5, 0x7fff, 0x40, 0x0, 0x3, 0x0, 0x90c7, 0xcd2, 0x1, 0x0, 0xfffffff8, 0x5c8a, 0x6eeb, 0x3, 0x3, 0x81, 0x8f, 0xffff7db3, 0x9, 0x0, 0x0, 0x5, 0x8, 0x1, 0x200, 0xfffffffe, 0xee99, 0x9, 0x62f, 0x40, 0x0, 0x5, 0x6, 0x80000001, 0x9eb, 0xc, 0x400, 0xecd9, 0x80, 0x9, 0x40, 0x923, 0x29680dc4, 0x5, 0x1, 0xffff8000, 0x6, 0x4, 0x6349d0d4, 0x5, 0x5, 0x3, 0x1, 0x9, 0x6, 0x80, 0xb245, 0x1, 0x1, 0x5, 0x8, 0x80000000, 0x63373c63, 0x7fffffff, 0xc39f, 0x14d2, 0x8b9, 0x8, 0x8, 0x3ff, 0x4, 0x1, 0xff5, 0x1, 0x0, 0xfb, 0x1, 0x69, 0x9, 0xff, 0x6, 0x6, 0x184444cc, 0xffff4795, 0x2, 0x8, 0x5, 0x3, 0x1, 0x5, 0x8, 0x10000, 0x3, 0x6, 0x8, 0x3, 0x40a0, 0x4, 0x4, 0x2, 0x7, 0x9, 0xfffffff8, 0x9, 0x1, 0x9, 0xd, 0x80, 0x3, 0x7fffffff, 0xfffffff7, 0x80000000, 0x5, 0x4, 0x0, 0x2, 0x7, 0x2, 0x2, 0x56a706f9, 0xb1, 0x7, 0x6, 0x0, 0x6, 0x7fff, 0x1ff, 0x8, 0x7ff, 0x6, 0xda, 0x10, 0xd5, 0x167c, 0x0, 0x9, 0xea7d, 0x0, 0x7, 0xd6e, 0x3, 0x200, 0x7fff, 0x3, 0x1, 0x0, 0x8, 0x28, 0x7fff, 0xb, 0x8, 0x10000, 0x8, 0x0, 0x2, 0xfffffffb, 0x8, 0x1, 0xfffffffe, 0xe2, 0xffffff03, 0x4, 0x100, 0x1b, 0x0, 0x6, 0x3, 0xa2, 0x9, 0x80000000, 0x50e7e56a, 0x3, 0x5, 0x6, 0x1, 0x5, 0x0, 0x0, 0x7c4fbab5, 0x5, 0x9, 0xd, 0x4, 0x5, 0x0, 0x3, 0x35, 0x2, 0x0, 0x81, 0xa, 0x1, 0x4, 0xa90, 0x18e6, 0x1000, 0x6, 0x1, 0x5, 0x4, 0x4, 0x10000, 0x830, 0x3, 0x6, 0x93, 0xc11c, 0x5, 0x6, 0x0, 0xfffff1f3, 0x3, 0x2df0, 0x7, 0xd5aa, 0x8, 0x0, 0x3, 0x4, 0x9, 0x8000, 0x9, 0x2, 0x40, 0x5, 0x3, 0x7, 0x38ca, 0x2, 0x80000000, 0x4, 0xff, 0x9, 0xc, 0xd07, 0x4, 0xe, 0x80, 0xb1b, 0x69c8, 0x5]}], [], []]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xe0, 0x8, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5c40}]}, {0x9a, 0x6, "d0614f1848ba2c23ff9842afc59b1b373bed8e34ee0222234dfb14a89adae0099ad202cf04ca38c048d1744b2fb190ad7b60bb34c2d2ba3aa0ec98603144246aa0c36b6788d8b1f3845812ef6495d56e206cdee95441831ea251ca1eefe5cc63181154ec08d9b1eb7f27c0207df1750d50d2791f3739ce8ba16855864a7e939968911cf4dd43e148f08c369a6fce0afa9bb65664561a"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x452c}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r8, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x24044080) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000008}, 0x14) 10.274264847s ago: executing program 1 (id=2608): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2002) ioctl$BLKBSZSET(r2, 0x40041271, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002700), 0x2081) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000002740)={0x0, 0x4, 0x1}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0) init_module(0x0, 0xa10, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) 9.52769594s ago: executing program 4 (id=2609): syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8800) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x6000c181) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001002dbd7200bfdbdf25020002000000080001000100000004002b00"], 0x24}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4004) r0 = socket(0x10, 0x3, 0x0) accept4(r0, 0x0, &(0x7f0000000200), 0x81800) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100f4ffffffffffffff0000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40400000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c0001"], 0x188}}, 0x4044804) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c0002"], 0x140}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000500}, {0xfffffff9}]}}) msgget(0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x800, 0x10, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, 0x0) 8.674683982s ago: executing program 0 (id=2611): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93337568b26948fc700870ec38edc9761fdc", 0xd8}], 0x1}, 0x0) 8.579687905s ago: executing program 0 (id=2612): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x5fd, 0x4) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x800, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x892031, &(0x7f0000000280)={'trans=unix,', {[{@directio}, {@access_client}, {@access_client}, {@loose}], [{@pcr={'pcr', 0x3d, 0x14}}, {@subj_role={'subj_role', 0x3d, './cgroup.cpu/syz1\x00'}}, {@uid_eq}, {@appraise_type}, {@smackfsroot}, {@dont_hash}]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=@getsa={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {@in6=@mcast1, 0x4d4, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x4001090}, 0x40080) syz_emit_ethernet(0x1046, 0x0, 0x0) setfsgid(0xee00) socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 8.421232833s ago: executing program 1 (id=2613): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r3, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) r6 = dup2(r3, r1) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4000090) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r11) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r7, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "b4305cb962f8a8cf12"}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40095) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') 7.937012124s ago: executing program 4 (id=2614): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)={0x40, 0x12, 0x36, "98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x1, 0x9, 0x2, &(0x7f0000000100)={0xf, "f7b51030c4b7c54bf28facb1ed3ee206000000bc517b5452b3b94bce47509d00"}}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbaa402}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, 0x0, 0x0) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140000001f000103000000000000000001"], 0x114}], 0x1}, 0x0) dup(0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000a40)={@val={0xa}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x18, 0x9}}}}}}}}, 0x52) 7.64080795s ago: executing program 0 (id=2615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000080)=0x20000007, 0xfffffffffffffe5e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x10000001, @local, 0x9}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000380), 0x8, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2c020400) r3 = semget(0x1, 0x1, 0x39c) semop(r3, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) unshare(0x40400) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r4 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xfffffff9, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x242, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x400, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0x9, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8005, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x6, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x9549, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x0, 0x6, 0x1, 0x2, 0x2, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0x1]}, 0x45c) 7.583077927s ago: executing program 0 (id=2616): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8804, 0x6, 0x8000, 0x6}, 0xffffffffffffff54) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x18, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r3], 0x48}, 0x1, 0x0, 0x0, 0x40840}, 0x40800) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) 6.955484554s ago: executing program 6 (id=2401): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x6, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_open_dev$admmidi(0x0, 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x3e, 0x1, 0x10001000}) socket$nl_generic(0x10, 0x3, 0x10) 4.608245625s ago: executing program 0 (id=2617): r0 = getpgrp(0x0) socket$key(0xf, 0x3, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x400, 0x80040100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x200c1) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCCONS(r2, 0x541d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = semget$private(0x0, 0x5, 0x0) semop(r4, &(0x7f0000000180)=[{0x3, 0x44cf, 0x800}], 0x1f4) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_LINK_NETNSID={0x8, 0xa, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 4.596942787s ago: executing program 1 (id=2618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84", 0x44}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e0c010320"], 0xf) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000780)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r6, 0x89e0, &(0x7f0000000040)) 4.593255953s ago: executing program 4 (id=2619): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f00000003c0)={[0xa]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2a020400) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800"], 0x58}}, 0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000040000100fcff0700040000000100000004004880180001801400108010000880a831985351cb3d4a577293610c0002000000000000000000697fff6d86830da42fffad7505a5d56dfe18cef14261a147f4ee8c5941a6a10c983b8df251d528e80c5311a6f09633e55bdbf9223aaeafed94ac4a467e3979d746c5"], 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) write$UHID_INPUT2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c08fffff100"], 0x6) 3.678523765s ago: executing program 0 (id=2620): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$tipc(0x1e, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000240)="a3305ba169bd56a5", 0x8) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0984124, &(0x7f0000000300)) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0x4112, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 2.794476789s ago: executing program 1 (id=2621): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x700, 0x1, 0x8, 0x7, {{0x1c, 0x4, 0x1, 0x2, 0x70, 0x67, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0xa9, 0x0, 0x8, [0x7, 0x9f6, 0x5, 0x80000000, 0x2]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x9a, [@private=0xa010101, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x5e, 0x3, 0xb, [{@empty, 0x10001}, {@broadcast, 0x3800}, {@rand_addr=0x64010101, 0x9}, {@broadcast, 0xff}]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2014042, &(0x7f00000004c0)={[{@subsystem='cpu'}, {@release_agent={'release_agent', 0x3d, './cgroup'}}, {@subsystem='freezer'}], [{@euid_gt}, {@obj_user={'obj_user', 0x3d, 'tunl0\x00'}}, {@subj_role={'subj_role', 0x3d, 'cpu'}}, {@dont_hash}, {@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'bpf\x00'}}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) 1.853591791s ago: executing program 1 (id=2622): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x8000, 0x80) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) socket$inet6(0xa, 0xa, 0x2) r7 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'lo\x00'}, 0x18) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="000f04ffffff7fa3e567"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1.731330476s ago: executing program 4 (id=2623): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x80000001, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f00000000c0)}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x401, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x81) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4103, 0x1007}], 0x1, 0x5, 0x0) unshare(0x64000600) 0s ago: executing program 5 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x2) kernel console output (not intermixed with test programs): ched [ 650.946215][ T5852] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 3a:db:a2:4a:fa:d5 [ 651.250312][T13697] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 651.281814][T13701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 651.288320][T13701] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 651.307414][T13707] binder: 13700:13707 ioctl c018937e 0 returned -22 [ 651.321387][T13701] vhci_hcd vhci_hcd.0: Device attached [ 651.347210][ T5871] usb 4-1: USB disconnect, device number 41 [ 651.354586][ T5871] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 651.467218][ T5871] wwan wwan0: port wwan0mbim0 disconnected [ 651.491429][ T5878] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 651.559810][ T5878] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 651.638264][T13727] netlink: 'syz.2.2127': attribute type 10 has an invalid length. [ 652.022897][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2130'. [ 652.032324][T13703] vhci_hcd: connection reset by peer [ 652.061386][ T8948] vhci_hcd vhci_hcd.1: stop threads [ 652.069671][ T8948] vhci_hcd vhci_hcd.1: release socket [ 652.082146][ T8948] vhci_hcd vhci_hcd.1: disconnect device [ 652.358807][T13751] 9p: Bad value for 'rfdno' [ 652.370811][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2130'. [ 652.581211][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 652.756340][T13772] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2141'. [ 652.806986][ T5871] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 652.830147][ T30] audit: type=1400 audit(2000001177.837:2514): avc: denied { append } for pid=13773 comm="syz.4.2142" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 652.917288][T13781] policy can only be matched on NF_INET_PRE_ROUTING [ 652.917306][T13781] unable to load match [ 652.958078][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 652.967682][ T5871] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 652.984895][T13783] ipip0: left allmulticast mode [ 652.989892][ T5871] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 652.993806][T13783] ip6tnl1: left allmulticast mode [ 653.013883][ T5871] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 653.023519][T13785] binder: 13784:13785 ioctl c0306201 200000000640 returned -22 [ 653.045829][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 653.084715][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 653.100937][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 653.150249][ T5871] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 653.159860][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.177633][ T5871] usb 2-1: config 0 descriptor?? [ 653.242005][T13790] netlink: 'syz.2.2147': attribute type 10 has an invalid length. [ 653.401722][ T5871] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 653.443034][ T5871] usb 2-1: USB disconnect, device number 45 [ 653.468298][T13795] netlink: 'syz.4.2148': attribute type 10 has an invalid length. [ 653.485786][ T5871] usblp0: removed [ 653.594648][ T5817] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 653.958753][ T5871] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 654.120294][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 654.127069][ T5871] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 654.140302][ T5871] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 654.151424][ T5871] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 654.184663][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 654.215995][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 654.233318][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 654.251660][ T5871] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 654.262607][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.311328][ T5871] usb 2-1: config 0 descriptor?? [ 654.514996][ T5871] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 654.752218][ T30] audit: type=1400 audit(2000001179.853:2515): avc: denied { read write } for pid=13757 comm="syz.1.2136" name="lp0" dev="devtmpfs" ino=3598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 654.785869][ T30] audit: type=1400 audit(2000001179.853:2516): avc: denied { open } for pid=13757 comm="syz.1.2136" path="/dev/usb/lp0" dev="devtmpfs" ino=3598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 654.813722][ T5819] usb 2-1: USB disconnect, device number 46 [ 654.827052][ T5819] usblp0: removed [ 655.051755][T13843] netlink: 'syz.0.2162': attribute type 10 has an invalid length. [ 655.117358][T13846] netlink: 'syz.4.2164': attribute type 10 has an invalid length. [ 655.164605][ T5817] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 655.511600][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 655.536685][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 655.546044][ T5819] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 655.777568][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 655.791270][ T5819] usb 4-1: not running at top speed; connect to a high speed hub [ 655.802739][ T5819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.855384][ T5819] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.868877][ T5819] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.887948][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.903709][ T5819] usb 4-1: Product: syz [ 655.957453][ T5819] usb 4-1: Manufacturer: syz [ 656.006369][ T5819] usb 4-1: SerialNumber: syz [ 656.132729][ T30] audit: type=1400 audit(2000001181.302:2517): avc: denied { read } for pid=13865 comm="syz.1.2171" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 656.193594][T13871] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 656.211677][ T30] audit: type=1400 audit(2000001181.334:2518): avc: denied { open } for pid=13865 comm="syz.1.2171" path="/445/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 656.236777][T13871] block device autoloading is deprecated and will be removed. [ 656.261649][T13875] netlink: 'syz.0.2172': attribute type 10 has an invalid length. [ 656.459431][T13881] netlink: 'syz.1.2174': attribute type 10 has an invalid length. [ 656.484209][ T5878] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 658.050362][T13897] netlink: 'syz.0.2180': attribute type 10 has an invalid length. [ 658.525106][ T5819] usb 4-1: 0:2 : does not exist [ 658.536854][ T5819] usb 4-1: unit 4 not found! [ 658.561138][ T5819] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 658.579983][ T5819] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 658.604133][ T5819] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 658.634593][ T5852] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 658.646397][ T5819] usb 4-1: USB disconnect, device number 42 [ 658.691335][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.780854][T13913] binder: 13911:13913 ioctl 4018620d 0 returned -22 [ 658.798159][ T5852] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 658.816117][ T5852] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.832388][ T5852] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.849102][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.863931][ T5852] usb 3-1: Product: syz [ 658.871236][ T5852] usb 3-1: Manufacturer: syz [ 658.881105][ T5852] usb 3-1: SerialNumber: syz [ 659.161175][T13925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2191'. [ 659.172435][T13925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2191'. [ 659.265232][T13932] netlink: 'syz.1.2192': attribute type 10 has an invalid length. [ 659.290291][ T5852] usb 3-1: 0:2 : does not exist [ 659.389346][T13938] 9p: Bad value for 'rfdno' [ 659.681911][ T5852] usb 3-1: USB disconnect, device number 46 [ 659.725294][T13947] netlink: 'syz.0.2200': attribute type 10 has an invalid length. [ 660.158067][ T30] audit: type=1400 audit(2000001185.523:2519): avc: denied { append } for pid=13952 comm="syz.4.2202" name="sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 660.232372][T13957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2203'. [ 660.234748][ T30] audit: type=1400 audit(2000001185.586:2520): avc: denied { map } for pid=13952 comm="syz.4.2202" path="/dev/sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 660.243325][T13957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2203'. [ 660.355484][ T30] audit: type=1400 audit(2000001185.586:2521): avc: denied { execute } for pid=13952 comm="syz.4.2202" path="/dev/sg0" dev="devtmpfs" ino=789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 660.569638][ T30] audit: type=1400 audit(2000001185.964:2522): avc: denied { create } for pid=13962 comm="syz.4.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 660.663585][ T30] audit: type=1400 audit(2000001186.058:2523): avc: denied { sys_admin } for pid=13962 comm="syz.4.2207" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 660.663986][ T5878] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 660.688704][T13963] Failed to initialize the IGMP autojoin socket (err -2) [ 660.877761][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.893619][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.909099][ T5878] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 660.940121][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.960220][ T5878] usb 2-1: config 0 descriptor?? [ 661.059035][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 661.070219][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 661.080586][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 661.091175][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 661.099467][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 661.109436][ T30] audit: type=1400 audit(2000001186.531:2524): avc: denied { mounton } for pid=13974 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 661.139014][T13974] Failed to initialize the IGMP autojoin socket (err -2) [ 661.176230][T13982] netlink: 'syz.0.2213': attribute type 10 has an invalid length. [ 661.278917][ T792] Process accounting resumed [ 661.323870][T13974] chnl_net:caif_netlink_parms(): no params data found [ 661.362454][ T5878] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 661.408106][ T5878] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 661.551915][ T5878] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 661.663951][ T6357] block nbd0: Possible stuck request ffff888027cd8000: control (read@0,1024B). Runtime 60 seconds [ 661.674756][ T6357] block nbd0: Possible stuck request ffff888027cd8200: control (read@1024,1024B). Runtime 60 seconds [ 661.685746][ T6357] block nbd0: Possible stuck request ffff888027cd8400: control (read@2048,1024B). Runtime 60 seconds [ 661.696972][ T6357] block nbd0: Possible stuck request ffff888027cd8600: control (read@3072,1024B). Runtime 60 seconds [ 661.735538][T13974] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.755805][T13974] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.774046][T13974] bridge_slave_0: entered allmulticast mode [ 661.788641][T13974] bridge_slave_0: entered promiscuous mode [ 661.803239][T13974] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.811449][T13974] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.819216][T13974] bridge_slave_1: entered allmulticast mode [ 661.836744][T13974] bridge_slave_1: entered promiscuous mode [ 662.102839][T13974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.131271][ T5878] cp2112 0003:10C4:EA90.0014: error reading lock byte: -71 [ 662.153877][ T5878] usb 2-1: USB disconnect, device number 47 [ 662.169650][T13974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.342777][T13974] team0: Port device team_slave_0 added [ 662.388874][T13974] team0: Port device team_slave_1 added [ 662.454900][T13974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.463493][T13974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.495646][T13974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.510046][T13974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.520095][T13974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.553469][T13974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.704797][T13974] hsr_slave_0: entered promiscuous mode [ 662.716212][T13974] hsr_slave_1: entered promiscuous mode [ 662.723982][T13974] debugfs: 'hsr0' already exists in 'hsr' [ 662.730165][T13974] Cannot create hsr debugfs directory [ 663.035124][ T5812] Bluetooth: hci3: command tx timeout [ 663.168767][ T5943] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 663.290979][T13974] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 663.312161][ T5852] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 663.317861][T13974] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 663.338700][ T5943] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 663.351417][ T5943] usb 2-1: config 0 has no interfaces? [ 663.364566][ T5943] usb 2-1: config 0 has no interfaces? [ 663.374372][T13974] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 663.389133][ T5943] usb 2-1: config 0 has no interfaces? [ 663.403505][ T5943] usb 2-1: config 0 has no interfaces? [ 663.410548][T13974] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 663.420773][ T5943] usb 2-1: config 0 has no interfaces? [ 663.430486][ T5943] usb 2-1: config 0 has no interfaces? [ 663.440062][ T5943] usb 2-1: config 0 has no interfaces? [ 663.447456][ T5943] usb 2-1: config 0 has no interfaces? [ 663.456809][ T5943] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 663.466242][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.474533][ T5943] usb 2-1: Product: syz [ 663.478866][ T5943] usb 2-1: Manufacturer: syz [ 663.485544][ T5943] usb 2-1: SerialNumber: syz [ 663.503038][ T5943] usb 2-1: config 0 descriptor?? [ 663.575715][ T5852] usb 5-1: unable to get BOS descriptor or descriptor too short [ 663.588847][ T5852] usb 5-1: not running at top speed; connect to a high speed hub [ 663.620096][ T5852] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.647349][ T5852] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.763647][ T5852] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.779559][T14023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.788072][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.803464][T14023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.818571][ T5852] usb 5-1: Product: syz [ 663.833518][ T5852] usb 5-1: Manufacturer: syz [ 663.859924][ T5852] usb 5-1: SerialNumber: syz [ 663.865762][ T5890] usb 2-1: USB disconnect, device number 48 [ 663.956910][T13974] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.000591][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.007703][ T8948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.089045][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.096176][ T8948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.375434][T14033] netlink: 'syz.3.2219': attribute type 10 has an invalid length. [ 664.389591][ T5812] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 664.492623][ T5871] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 664.637377][T13974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.665924][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 664.694979][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 664.726044][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 664.756164][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 664.787099][ T5871] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 664.811216][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.828595][ T5871] usb 2-1: Product: syz [ 664.839857][ T5871] usb 2-1: Manufacturer: syz [ 664.853345][ T5871] usb 2-1: SerialNumber: syz [ 664.870603][ T5871] usb 2-1: config 0 descriptor?? [ 665.015983][ T5812] Bluetooth: hci3: command tx timeout [ 665.084955][ T5871] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 665.271660][T13974] veth0_vlan: entered promiscuous mode [ 665.299757][T13974] veth1_vlan: entered promiscuous mode [ 665.317187][ T5871] usb 2-1: USB disconnect, device number 49 [ 665.332564][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.546379][T13974] veth0_macvtap: entered promiscuous mode [ 665.582894][T13974] veth1_macvtap: entered promiscuous mode [ 665.716194][T13974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.752689][T13974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.835053][T13974] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 665.950369][T13974] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 665.970773][T13974] wireguard: wg0: Could not create IPv4 socket [ 665.979804][T13974] wireguard: wg1: Could not create IPv4 socket [ 665.993232][T13974] wireguard: wg2: Could not create IPv4 socket [ 666.151405][ T5852] usb 5-1: 0:2 : does not exist [ 666.156549][ T5852] usb 5-1: unit 4 not found! [ 666.167444][ T5852] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 666.181410][ T5852] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 666.200581][ T5852] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 666.248420][ T5852] usb 5-1: USB disconnect, device number 29 [ 666.289472][ T30] audit: type=1400 audit(2000001191.959:2525): avc: denied { bind } for pid=14049 comm="syz.4.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 666.334451][T14050] bpq0: entered promiscuous mode [ 666.497901][ T30] audit: type=1400 audit(2000001192.190:2526): avc: denied { write } for pid=14051 comm="syz.1.2223" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 666.535648][ T30] audit: type=1400 audit(2000001192.211:2527): avc: denied { open } for pid=14051 comm="syz.1.2223" path="/457/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 666.599891][ T30] audit: type=1400 audit(2000001192.211:2528): avc: denied { ioctl } for pid=14051 comm="syz.1.2223" path="/457/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 666.642346][T14064] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2224'. [ 666.732136][T14071] netlink: 'syz.4.2226': attribute type 10 has an invalid length. [ 666.742508][ T5812] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 666.938604][T14074] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2228'. [ 667.609634][T14090] netlink: 'syz.1.2232': attribute type 10 has an invalid length. [ 667.791362][T14096] overlayfs: failed to clone upperpath [ 667.946835][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 667.971565][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 668.000982][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 668.045426][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 668.058203][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 668.088142][T14100] Failed to initialize the IGMP autojoin socket (err -2) [ 668.880973][T14100] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 668.924250][T14100] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 668.962738][T14100] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 669.008511][T14100] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 669.076402][ T792] Process accounting resumed [ 669.463732][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2239'. [ 669.613908][T14151] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 669.633684][T14151] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 670.045172][ T5812] Bluetooth: hci3: command tx timeout [ 670.153941][T14177] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2240'. [ 670.209229][T14180] overlayfs: failed to clone upperpath [ 670.244925][T14175] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 670.253536][T14175] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 670.526515][T14100] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 670.575480][T14100] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 670.599426][T14100] wireguard: wg0: Could not create IPv4 socket [ 670.623757][T14100] wireguard: wg1: Could not create IPv4 socket [ 670.657636][T14100] wireguard: wg2: Could not create IPv4 socket [ 670.972275][T14217] netlink: 'syz.1.2250': attribute type 10 has an invalid length. [ 672.892579][ T5852] Process accounting resumed [ 672.947726][T14252] 9p: Bad value for 'rfdno' [ 673.863662][ T5177] udevd[5177]: worker [5794] /devices/virtual/block/nbd0 is taking a long time [ 673.885053][T14283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.222563][T14303] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2255'. [ 674.506022][T14313] netlink: 'syz.3.2262': attribute type 10 has an invalid length. [ 674.614199][ T5812] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 674.968342][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.986579][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 675.000641][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 675.008574][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 675.016368][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 675.047922][T14322] Failed to initialize the IGMP autojoin socket (err -2) [ 675.789387][T14347] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2266'. [ 675.922293][ T5921] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 676.064731][ T5921] usb 2-1: device descriptor read/64, error -71 [ 676.156344][T14322] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 676.181134][T14322] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 676.201540][T14322] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 676.240749][T14322] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 676.293434][ T5921] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 676.445779][ T5921] usb 2-1: device descriptor read/64, error -71 [ 676.560811][ T5921] usb usb2-port1: attempt power cycle [ 676.931483][ T5921] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 676.961890][ T5921] usb 2-1: device descriptor read/8, error -71 [ 676.979067][ T5812] Bluetooth: hci3: command tx timeout [ 677.129640][T14322] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 677.170090][T14322] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 677.198323][ T5921] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 677.216738][T14322] wireguard: wg0: Could not create IPv4 socket [ 677.240045][T14322] wireguard: wg1: Could not create IPv4 socket [ 677.246974][ T5921] usb 2-1: device descriptor read/8, error -71 [ 677.259711][T14322] wireguard: wg2: Could not create IPv4 socket [ 677.370447][ T5921] usb usb2-port1: unable to enumerate USB device [ 677.716381][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 677.829356][T14414] ceph: No mds server is up or the cluster is laggy [ 678.287886][T14459] netlink: 'syz.0.2279': attribute type 10 has an invalid length. [ 678.374141][T14460] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2280'. [ 679.525092][ T30] audit: type=1400 audit(2000001205.860:2529): avc: denied { accept } for pid=14492 comm="syz.4.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 679.546498][T14498] overlayfs: failed to clone upperpath [ 679.595855][ T30] audit: type=1400 audit(2000001205.933:2530): avc: denied { write } for pid=14492 comm="syz.4.2284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 680.460924][T14535] netlink: 'syz.0.2293': attribute type 10 has an invalid length. [ 680.550660][ T5921] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 680.693654][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 680.704859][ T5921] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 680.727529][ T5921] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 680.739250][ T792] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 680.766467][ T5921] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 680.793247][ T5921] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 680.833013][ T5921] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 680.862368][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.898450][ T792] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 680.908869][ T5921] usb 2-1: Product: syz [ 680.925353][ T5921] usb 2-1: Manufacturer: syz [ 680.933953][ T792] usb 4-1: config 0 has no interface number 0 [ 680.946709][ T5921] usb 2-1: SerialNumber: syz [ 681.001656][ T792] usb 4-1: config 0 interface 29 has no altsetting 0 [ 681.037508][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 681.077249][ T792] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 681.120507][ T5921] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input17 [ 681.136116][ T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.155555][ T792] usb 4-1: Product: syz [ 681.159723][ T792] usb 4-1: Manufacturer: syz [ 681.196536][ T792] usb 4-1: SerialNumber: syz [ 681.216265][ T792] usb 4-1: config 0 descriptor?? [ 681.255378][ T5921] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 681.263733][ T5921] (id 0x00) [ 681.379092][ T5921] rc_core: IR keymap rc-imon-pad not found [ 681.398890][ T5921] Registered IR keymap rc-empty [ 681.403980][ T5921] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 681.463190][ T5921] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 681.489359][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 681.504107][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 681.520998][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.528920][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.537159][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 681.553347][ T5921] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 681.567217][T14555] Failed to initialize the IGMP autojoin socket (err -2) [ 681.598228][ T5921] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input18 [ 681.615221][ T30] audit: type=1400 audit(2000001208.054:2531): avc: denied { accept } for pid=14560 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 681.653672][ T5921] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:54> initialized [ 681.665177][ T792] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 681.693736][ T30] audit: type=1400 audit(2000001208.128:2532): avc: denied { shutdown } for pid=14560 comm="syz.0.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 681.915532][ T792] peak_usb 4-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 681.943776][ T792] peak_usb 4-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 681.979996][T14571] netlink: 'syz.0.2297': attribute type 39 has an invalid length. [ 682.066543][ T792] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 682.105494][ T792] usb 4-1: USB disconnect, device number 43 [ 682.318545][T14584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2299'. [ 682.386400][T14584] ip6gre1: entered promiscuous mode [ 682.408640][T14584] ip6gre1: entered allmulticast mode [ 682.424267][T14584] netlink: 'syz.0.2299': attribute type 6 has an invalid length. [ 682.434978][T14584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2299'. [ 682.661446][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'. [ 682.681567][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2302'. [ 682.911461][T14555] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 682.937582][T14555] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 682.948540][T14615] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 682.959816][T14555] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 682.978627][T14555] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 683.054155][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 683.126516][T14619] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2304'. [ 683.216186][T14615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.423233][ T5921] usb 2-1: USB disconnect, device number 54 [ 683.533678][ T5812] Bluetooth: hci3: command tx timeout [ 683.968178][T14555] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 684.016579][T14555] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 684.062910][T14555] wireguard: wg0: Could not create IPv4 socket [ 684.071047][T14555] wireguard: wg1: Could not create IPv4 socket [ 684.078594][T14555] wireguard: wg2: Could not create IPv4 socket [ 684.555451][T14686] overlayfs: failed to clone upperpath [ 684.863934][T14695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2315'. [ 685.513367][ T5890] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 685.703490][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 685.714882][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.736264][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.783743][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 685.823005][ T5890] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 685.859535][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.922210][ T5890] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.052219][ T5890] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.079371][ T5890] usb 2-1: Manufacturer: syz [ 686.120276][ T5890] usb 2-1: config 0 descriptor?? [ 686.494799][ T5890] rc_core: IR keymap rc-hauppauge not found [ 686.517839][ T5890] Registered IR keymap rc-empty [ 686.530386][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 686.571841][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 686.619136][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 686.663486][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 686.705945][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 686.745008][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 686.789120][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 686.839462][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 686.887680][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 686.935143][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 686.990546][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.028057][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.065461][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.093969][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.122810][ T5890] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.152992][ T5890] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version cf [ 687.165327][ T5890] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 687.182670][ T5890] usb 2-1: USB disconnect, device number 55 [ 687.612813][T14775] binder_alloc: 14772: binder_alloc_buf, no vma [ 687.621761][ T30] audit: type=1400 audit(2000001214.354:2533): avc: denied { call } for pid=14772 comm="syz.1.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 688.345754][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 688.390146][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 688.415743][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 688.450077][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 688.654953][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 688.662340][ T30] audit: type=1400 audit(2000001215.257:2534): avc: denied { bind } for pid=14804 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 688.804838][T14802] Failed to initialize the IGMP autojoin socket (err -2) [ 689.647977][T14808] Process accounting resumed [ 689.696217][ T30] audit: type=1400 audit(2000001216.548:2535): avc: denied { create } for pid=14835 comm="syz.0.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 689.783320][ T30] audit: type=1400 audit(2000001216.611:2536): avc: denied { write } for pid=14835 comm="syz.0.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 690.318756][ T6357] block nbd0: Possible stuck request ffff888027cd8000: control (read@0,1024B). Runtime 90 seconds [ 690.329698][ T6357] block nbd0: Possible stuck request ffff888027cd8200: control (read@1024,1024B). Runtime 90 seconds [ 690.340841][ T6357] block nbd0: Possible stuck request ffff888027cd8400: control (read@2048,1024B). Runtime 90 seconds [ 690.352024][ T6357] block nbd0: Possible stuck request ffff888027cd8600: control (read@3072,1024B). Runtime 90 seconds [ 690.460214][T14864] fuse: Bad value for 'fd' [ 690.694810][ T5817] Bluetooth: hci3: command tx timeout [ 690.752490][T14802] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 690.791997][T14802] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 690.813292][T14802] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 690.830493][T14802] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 692.502862][T14802] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 692.542425][T14802] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 692.573405][T14802] wireguard: wg0: Could not create IPv4 socket [ 692.582859][T14802] wireguard: wg1: Could not create IPv4 socket [ 692.591094][T14802] wireguard: wg2: Could not create IPv4 socket [ 694.411417][T14940] Process accounting resumed [ 694.484574][ T30] audit: type=1400 audit(2000001221.567:2537): avc: denied { shutdown } for pid=14957 comm="syz.4.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 694.557413][ T30] audit: type=1400 audit(2000001221.640:2538): avc: denied { bind } for pid=14967 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 694.610936][ T30] audit: type=1400 audit(2000001221.640:2539): avc: denied { write } for pid=14967 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 694.897809][T14979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2347'. [ 695.008190][T14984] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14984 comm=syz.1.2347 [ 695.770545][ T30] audit: type=1400 audit(2000001222.910:2540): avc: denied { read } for pid=15005 comm="syz.1.2350" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 695.897482][T15009] syzkaller0: entered promiscuous mode [ 695.913194][T15009] syzkaller0: entered allmulticast mode [ 696.332668][ T30] audit: type=1400 audit(2000001223.498:2541): avc: denied { unmount } for pid=15036 comm="syz.0.2354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 696.363368][ T5812] Bluetooth: hci4: command 0x0405 tx timeout [ 696.696827][ T5890] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 697.250644][ T5890] usb 2-1: unable to get BOS descriptor or descriptor too short [ 697.486616][ T5890] usb 2-1: not running at top speed; connect to a high speed hub [ 697.543427][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 697.561105][T15050] Process accounting resumed [ 697.576336][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 697.585650][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 697.597061][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 697.609356][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 697.654626][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.691204][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 697.742917][ T5890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.784626][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.813412][ T5890] usb 2-1: Product: syz [ 697.817587][ T5890] usb 2-1: Manufacturer: syz [ 697.842983][ T5890] usb 2-1: SerialNumber: syz [ 698.922833][T15101] syz.3.2358 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 699.349774][ T5890] usb 2-1: 0:2 : does not exist [ 699.392921][ T5890] usb 2-1: unit 4 not found! [ 699.424534][ T5890] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 699.456275][ T5890] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 699.877243][ T5812] Bluetooth: hci3: command tx timeout [ 700.517438][ T5890] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 700.545453][ T5890] usb 2-1: USB disconnect, device number 56 [ 700.661881][T14001] udevd[14001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.751813][ T30] audit: type=1400 audit(2000001228.139:2542): avc: denied { create } for pid=15117 comm="syz.1.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 701.828559][ T5812] Bluetooth: hci3: command tx timeout [ 701.898009][ T30] audit: type=1400 audit(2000001229.357:2543): avc: denied { ioctl } for pid=15136 comm="syz.1.2363" path="socket:[42332]" dev="sockfs" ino=42332 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 702.355654][ T5921] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 702.511852][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 702.532540][ T5921] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 702.552311][ T5921] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 702.578783][ T5921] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 702.590325][ T5921] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 702.632331][ T5921] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 702.641746][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.649832][ T5921] usb 4-1: Product: syz [ 702.654036][ T5921] usb 4-1: Manufacturer: syz [ 702.659156][ T5921] usb 4-1: SerialNumber: syz [ 702.669449][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 702.691879][ T5921] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input20 [ 702.895279][ T5921] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 702.909923][ T5921] (id 0x00) [ 702.981248][ T5921] rc_core: IR keymap rc-imon-pad not found [ 702.987096][ T5921] Registered IR keymap rc-empty [ 702.997373][ T5921] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 703.010817][ T5921] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 703.122746][ T5921] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 703.138569][ T5921] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input21 [ 703.156251][ T5921] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:44> initialized [ 703.809548][ T5812] Bluetooth: hci3: command tx timeout [ 703.925964][T15065] Failed to initialize the IGMP autojoin socket (err -2) [ 704.117599][T15233] netlink: 'syz.4.2367': attribute type 1 has an invalid length. [ 704.192568][ T30] audit: type=1400 audit(2000001231.761:2544): avc: denied { create } for pid=15229 comm="syz.4.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 704.221625][ T30] audit: type=1400 audit(2000001231.793:2545): avc: denied { write } for pid=15229 comm="syz.4.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 704.370636][T15241] lo: entered promiscuous mode [ 704.378762][T15241] tunl0: entered promiscuous mode [ 704.395567][T15241] gre0: entered promiscuous mode [ 704.427685][T15241] gretap0: entered promiscuous mode [ 704.448106][T15241] erspan0: entered promiscuous mode [ 704.467867][T15241] ip_vti0: entered promiscuous mode [ 704.488948][T15241] ip6_vti0: entered promiscuous mode [ 704.506721][T15241] sit0: entered promiscuous mode [ 704.522762][T15241] ip6tnl0: entered promiscuous mode [ 704.538647][T15241] ip6gre0: entered promiscuous mode [ 704.558470][T15241] syz_tun: entered promiscuous mode [ 704.575737][T15241] ip6gretap0: entered promiscuous mode [ 704.589075][T15241] vcan0: entered promiscuous mode [ 704.602710][T15241] dummy0: entered promiscuous mode [ 704.615068][T15241] nlmon0: entered promiscuous mode [ 704.631770][T15241] caif0: entered promiscuous mode [ 704.643831][T15241] batadv0: entered promiscuous mode [ 704.657388][T15241] vxcan0: entered promiscuous mode [ 704.669484][T15241] vxcan1: entered promiscuous mode [ 704.683018][T15241] veth0: entered promiscuous mode [ 704.695631][T15251] imon:send_packet: packet tx failed (-71) [ 704.695752][ T5890] usb 4-1: USB disconnect, device number 44 [ 704.721782][T15241] veth1: entered promiscuous mode [ 704.741183][T15241] wg0: entered promiscuous mode [ 704.745702][T15251] imon:vfd_write: send packet #3 failed [ 704.765044][T15241] wg1: entered promiscuous mode [ 704.797875][T15241] wg2: entered promiscuous mode [ 704.826238][T15241] veth0_to_bridge: entered promiscuous mode [ 704.850033][T15241] veth1_to_bridge: entered promiscuous mode [ 704.868861][T15241] bridge_slave_1: entered promiscuous mode [ 704.887423][T15241] veth0_to_bond: entered promiscuous mode [ 704.915844][T15241] bond_slave_0: entered promiscuous mode [ 704.944120][T15241] veth1_to_bond: entered promiscuous mode [ 704.954279][T15241] bond_slave_1: entered promiscuous mode [ 704.971693][T15241] veth0_to_team: entered promiscuous mode [ 704.993460][T15241] team_slave_0: entered promiscuous mode [ 705.001713][T15241] veth1_to_team: entered promiscuous mode [ 705.024209][T15241] team_slave_1: entered promiscuous mode [ 705.035870][T15241] veth0_to_batadv: entered promiscuous mode [ 705.045140][T15241] batadv_slave_0: entered promiscuous mode [ 705.053393][T15241] veth1_to_batadv: entered promiscuous mode [ 705.061596][T15241] batadv_slave_1: entered promiscuous mode [ 705.071370][T15241] xfrm0: entered promiscuous mode [ 705.079216][T15241] veth0_to_hsr: entered promiscuous mode [ 705.088791][T15241] veth1_to_hsr: entered promiscuous mode [ 705.109503][T15241] hsr0: entered promiscuous mode [ 705.126082][T15241] veth1_virt_wifi: entered promiscuous mode [ 705.140583][T15241] veth0_virt_wifi: entered promiscuous mode [ 705.155080][T15241] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 705.187269][T15241] vlan0: entered promiscuous mode [ 705.197253][T15241] vlan1: entered promiscuous mode [ 705.209361][T15241] macvlan0: entered promiscuous mode [ 705.231211][T15241] macvlan1: entered promiscuous mode [ 705.248645][T15241] ipvlan0: entered promiscuous mode [ 705.254009][T15241] ipvlan1: entered promiscuous mode [ 705.278774][T15241] macvtap0: entered promiscuous mode [ 705.293766][T15241] macsec0: entered promiscuous mode [ 705.311808][T15241] geneve0: entered promiscuous mode [ 705.337349][T15241] geneve1: entered promiscuous mode [ 705.349152][T15241] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 705.365223][T15241] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 705.382574][T15241] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 705.413600][T15241] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 705.430074][T15241] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 705.437414][T15241] syztnl2: entered promiscuous mode [ 705.443825][T15241] sit1: entered promiscuous mode [ 705.450754][T15241] bridge0: entered promiscuous mode [ 705.458768][T15241] veth2: entered promiscuous mode [ 705.473726][T15241] veth3: entered promiscuous mode [ 705.497391][T15241] bridge1: entered promiscuous mode [ 705.506777][T15241] bridge2: entered promiscuous mode [ 705.523612][T15241] erspan0.1: entered promiscuous mode [ 705.537089][T15241] bond0: entered promiscuous mode [ 705.542401][T15241] bond1: entered promiscuous mode [ 705.548216][T15241] bond2: entered promiscuous mode [ 705.553961][T15241] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 705.563546][T15241] bridge3: entered promiscuous mode [ 705.570310][T15241] ip6tnl1: entered promiscuous mode [ 705.576281][T15241] bridge4: entered promiscuous mode [ 705.597248][T15241] @: entered promiscuous mode [ 705.610064][T15241] veth4: entered promiscuous mode [ 705.619933][T15241] veth5: entered promiscuous mode [ 705.660546][T15233] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 705.748505][T15285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2373'. [ 705.809792][ T5812] Bluetooth: hci3: command tx timeout [ 706.204718][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'. [ 706.218613][ T1032] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.229350][ T1032] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.240801][ T1032] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.310317][ T1032] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.384555][ T5878] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 706.514673][ T5921] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 706.562716][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 706.604288][ T5878] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.630285][T15065] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 706.637045][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0 [ 706.644976][ T5878] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 706.657140][T15065] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 706.667387][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.685911][ T5921] usb 2-1: device descriptor read/64, error -71 [ 706.696566][T15065] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 706.715051][ T5878] usb 5-1: config 0 descriptor?? [ 706.726223][T15065] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 706.943290][ T5921] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 707.114451][ T5921] usb 2-1: device descriptor read/64, error -71 [ 707.171546][ T5878] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 707.249341][ T5921] usb usb2-port1: attempt power cycle [ 707.609752][ T5921] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 707.615460][ T5890] usb 5-1: USB disconnect, device number 30 [ 707.627285][T15065] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 707.676557][T15065] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 707.709600][ T5921] usb 2-1: device descriptor read/8, error -71 [ 707.739454][T15065] wireguard: wg0: Could not create IPv4 socket [ 707.759026][T15065] wireguard: wg1: Could not create IPv4 socket [ 707.776239][T15065] wireguard: wg2: Could not create IPv4 socket [ 707.943564][ T5921] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 708.000896][ T5921] usb 2-1: device descriptor read/8, error -71 [ 708.145038][ T5921] usb usb2-port1: unable to enumerate USB device [ 708.944746][ T30] audit: type=1400 audit(2000001236.748:2546): avc: denied { setopt } for pid=15371 comm="syz.4.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 710.428203][ T30] audit: type=1326 audit(2000001238.302:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15404 comm="syz.4.2383" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc88d79c629 code=0x0 [ 711.534428][T15446] overlayfs: missing 'lowerdir' [ 711.881839][T15447] netlink: 'syz.0.2388': attribute type 10 has an invalid length. [ 714.217465][T15494] trusted_key: syz.1.2394 sent an empty control message without MSG_MORE. [ 715.637169][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 715.647253][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 715.655506][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 715.663192][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 715.671085][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 715.693044][T15536] Failed to initialize the IGMP autojoin socket (err -2) [ 715.831278][ T30] audit: type=1400 audit(2000001243.972:2548): avc: denied { mount } for pid=15531 comm="syz.0.2396" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 716.265496][T15560] tipc: Enabled bearer , priority 0 [ 716.277430][ T5921] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 716.294384][T15552] syzkaller0: entered promiscuous mode [ 716.300324][T15552] syzkaller0: entered allmulticast mode [ 716.458261][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 716.492351][ T5921] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 716.542279][ T5921] usb 2-1: config 0 has no interface number 0 [ 716.628777][ T5921] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 716.730981][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.790290][ T5921] usb 2-1: Product: syz [ 716.801482][ T5921] usb 2-1: Manufacturer: syz [ 716.806111][ T5921] usb 2-1: SerialNumber: syz [ 716.816257][ T5921] usb 2-1: config 0 descriptor?? [ 716.823416][ T5921] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 716.845065][ T5921] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 716.987369][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.003265][T15552] tipc: Resetting bearer [ 717.006897][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.021675][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.040696][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.050136][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 717.199628][T15550] tipc: Resetting bearer [ 717.246567][T15577] netlink: 'syz.0.2402': attribute type 10 has an invalid length. [ 717.462779][T15550] tipc: Disabling bearer [ 717.484131][ T5852] usb 2-1: USB disconnect, device number 61 [ 717.522240][ T5921] tipc: Node number set to 2886997162 [ 717.598479][T15569] Failed to initialize the IGMP autojoin socket (err -2) [ 717.678730][ T5812] Bluetooth: hci3: command tx timeout [ 717.803300][T15536] netdevsim netdevsim5 netdevsim0: renamed from eth1 [ 717.850846][T15536] netdevsim netdevsim5 netdevsim1: renamed from eth2 [ 717.909605][T15536] netdevsim netdevsim5 netdevsim2: renamed from eth3 [ 717.963590][T15536] netdevsim netdevsim5 netdevsim3: renamed from eth4 [ 718.208676][T15590] syzkaller0: entered promiscuous mode [ 718.214289][T15590] syzkaller0: entered allmulticast mode [ 719.331349][ T6357] block nbd0: Possible stuck request ffff888027cd8000: control (read@0,1024B). Runtime 120 seconds [ 719.342180][ T6357] block nbd0: Possible stuck request ffff888027cd8200: control (read@1024,1024B). Runtime 120 seconds [ 719.353266][ T6357] block nbd0: Possible stuck request ffff888027cd8400: control (read@2048,1024B). Runtime 120 seconds [ 719.364521][ T6357] block nbd0: Possible stuck request ffff888027cd8600: control (read@3072,1024B). Runtime 120 seconds [ 719.552811][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 719.563019][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 719.583704][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 719.616674][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 719.631679][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 719.650871][ T5817] Bluetooth: hci3: command tx timeout [ 719.785244][T15613] delete_channel: no stack [ 719.942739][T15620] netlink: 'syz.0.2408': attribute type 10 has an invalid length. [ 721.142431][T15611] Failed to initialize the IGMP autojoin socket (err -2) [ 721.212295][ T30] audit: type=1400 audit(2000001249.631:2549): avc: denied { create } for pid=15637 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 721.236300][ T30] audit: type=1400 audit(2000001249.652:2550): avc: denied { setopt } for pid=15637 comm="syz.1.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 721.394121][ T5819] Process accounting resumed [ 721.631507][ T5817] Bluetooth: hci5: command tx timeout [ 721.638317][ T5812] Bluetooth: hci3: command tx timeout [ 722.487564][T15658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 722.508631][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.519796][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 722.537235][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 722.545269][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 722.574629][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 722.611879][T15536] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 722.663475][T15536] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 722.728828][T15662] Failed to initialize the IGMP autojoin socket (err -2) [ 722.746117][T15536] wireguard: wg0: Could not create IPv4 socket [ 722.767465][T15536] wireguard: wg1: Could not create IPv4 socket [ 722.794938][T15536] wireguard: wg2: Could not create IPv4 socket [ 723.699459][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 723.708116][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 723.715698][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 723.728457][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 723.735977][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 723.761409][T15677] Failed to initialize the IGMP autojoin socket (err -2) [ 723.847011][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 724.488778][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 724.497688][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 724.507756][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 724.516726][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 724.524187][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 724.532113][T15701] netlink: 'syz.1.2419': attribute type 10 has an invalid length. [ 724.557600][T15701] batadv0: left promiscuous mode [ 725.403158][T15709] mkiss: ax0: crc mode is auto. [ 725.542024][T15698] Failed to initialize the IGMP autojoin socket (err -2) [ 725.672419][ T5817] Bluetooth: hci3: command tx timeout [ 725.858911][T15677] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 725.945417][T15677] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 726.013801][T15677] wireguard: wg0: Could not create IPv4 socket [ 726.052270][T15677] wireguard: wg1: Could not create IPv4 socket [ 726.079943][T15677] wireguard: wg2: Could not create IPv4 socket [ 727.071707][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 727.081837][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 727.090466][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 727.098526][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 727.109036][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 727.172075][T15750] Failed to initialize the IGMP autojoin socket (err -2) [ 728.037295][T15767] syzkaller0: entered promiscuous mode [ 728.060529][T15767] syzkaller0: entered allmulticast mode [ 728.117206][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2424'. [ 729.097669][T15705] Bluetooth: hci3: command tx timeout [ 730.011888][ T5878] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 730.201027][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 730.224756][ T5878] usb 2-1: not running at top speed; connect to a high speed hub [ 730.281881][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.292813][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 730.512336][T15750] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 730.604549][T15750] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 730.643548][T15825] netlink: 'syz.0.2434': attribute type 10 has an invalid length. [ 730.679233][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 730.709047][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 730.717288][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 730.724828][T15750] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 730.734774][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 730.742471][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 730.809099][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 730.831081][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.839127][ T5878] usb 2-1: Product: syz [ 730.844240][T15750] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 730.849667][ T5878] usb 2-1: Manufacturer: syz [ 730.895970][ T5878] usb 2-1: SerialNumber: syz [ 730.960334][T15826] Failed to initialize the IGMP autojoin socket (err -2) [ 731.078723][ T5817] Bluetooth: hci3: command tx timeout [ 732.217856][T15750] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 732.269148][T15750] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 732.328391][T15750] wireguard: wg0: Could not create IPv4 socket [ 732.355174][T15750] wireguard: wg1: Could not create IPv4 socket [ 732.400104][T15705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 732.410272][T15750] wireguard: wg2: Could not create IPv4 socket [ 732.424641][T15705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 732.436139][T15705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 732.446701][T15705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 732.455934][T15705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 732.539820][ T5878] usb 2-1: 0:2 : does not exist [ 732.548971][ T5878] usb 2-1: unit 4 not found! [ 732.560563][ T5878] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 732.562706][T15868] Failed to initialize the IGMP autojoin socket (err -2) [ 732.572618][ T5878] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 732.624119][ T5878] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 732.678097][ T5878] usb 2-1: USB disconnect, device number 62 [ 732.720148][T14001] udevd[14001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.024638][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 734.039151][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 734.047875][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 734.055917][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 734.063548][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 734.093420][T15909] Failed to initialize the IGMP autojoin socket (err -2) [ 734.137516][T15847] Process accounting resumed [ 735.765481][T15948] overlayfs: failed to clone upperpath [ 736.031077][T15705] Bluetooth: hci3: command tx timeout [ 736.403635][T15909] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 736.446493][T15909] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 736.487382][T15909] wireguard: wg0: Could not create IPv4 socket [ 736.519849][T15909] wireguard: wg1: Could not create IPv4 socket [ 736.550781][T15909] wireguard: wg2: Could not create IPv4 socket [ 736.901573][T15972] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 737.967517][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 737.996060][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 738.007043][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 738.020598][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 738.029830][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 738.080707][T16028] netlink: 'syz.4.2446': attribute type 10 has an invalid length. [ 738.112855][T16022] Failed to initialize the IGMP autojoin socket (err -2) [ 738.222157][ T5817] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 739.993976][ T5817] Bluetooth: hci3: command tx timeout [ 740.415264][T16066] syzkaller0: entered promiscuous mode [ 740.430976][T16066] syzkaller0: entered allmulticast mode [ 740.936485][ T5878] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 741.090031][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.114931][ T5878] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 741.127545][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.140656][ T5878] usb 2-1: config 0 descriptor?? [ 741.159422][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 741.176064][T16022] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 741.206045][T16022] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 741.236377][T16022] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 741.255039][T16022] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 741.546762][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 741.563176][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 741.573425][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 741.589600][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 741.603732][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 741.611369][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 741.619981][ T5878] pwc: recv_control_msg error -32 req 02 val 2000 [ 741.632462][ T5878] pwc: recv_control_msg error -32 req 02 val 2100 [ 741.639867][ T5878] pwc: recv_control_msg error -32 req 04 val 1500 [ 741.648469][ T5878] pwc: recv_control_msg error -32 req 02 val 2500 [ 741.656158][ T5878] pwc: recv_control_msg error -32 req 02 val 2400 [ 741.854396][T15705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 741.865969][T15705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 741.878591][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 741.887603][T15705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 741.897526][T15705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 741.905919][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 741.914324][T16022] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 741.915470][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 741.936840][T15705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 741.944881][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 741.957954][ T5878] pwc: Registered as video103. [ 741.964458][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 741.974790][ T5817] Bluetooth: hci3: command tx timeout [ 742.098883][ T5878] usb 2-1: USB disconnect, device number 63 [ 742.589269][T16022] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 742.620321][T16022] wireguard: wg0: Could not create IPv4 socket [ 742.632850][T16022] wireguard: wg1: Could not create IPv4 socket [ 742.649919][T16109] Failed to initialize the IGMP autojoin socket (err -2) [ 742.655722][T16022] wireguard: wg2: Could not create IPv4 socket [ 743.870229][T15850] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 744.034371][T15850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.047121][T15850] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 744.058196][T15850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.070389][T15850] usb 5-1: config 0 descriptor?? [ 744.347603][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.355060][T16135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.364409][T16135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.372086][T16135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.380009][T16135] batman_adv: batadv0: Interface deactivated: gretap1 [ 744.387065][T16135] batman_adv: batadv0: Removing interface: gretap1 [ 744.406244][T16135] bond0: (slave batadv0): Releasing backup interface [ 744.596032][T15850] usbhid 5-1:0.0: can't add hid device: -71 [ 744.602121][T15850] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 744.645077][T15850] usb 5-1: USB disconnect, device number 31 [ 745.157038][T16174] syzkaller0: entered promiscuous mode [ 745.211665][T16174] syzkaller0: entered allmulticast mode [ 745.325096][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 745.336321][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 745.356785][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 745.375945][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 745.389683][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 746.077366][ T30] audit: type=1400 audit(2000001275.711:2551): avc: denied { append } for pid=16207 comm="syz.4.2459" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 747.115218][ T30] audit: type=1400 audit(2000001276.708:2552): avc: denied { accept } for pid=16221 comm="syz.4.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 747.389111][ T5817] Bluetooth: hci3: command tx timeout [ 747.659602][ T5817] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 748.217821][T16185] Failed to initialize the IGMP autojoin socket (err -2) [ 748.225900][ T6357] block nbd0: Possible stuck request ffff888027cd8000: control (read@0,1024B). Runtime 150 seconds [ 748.243580][ T6357] block nbd0: Possible stuck request ffff888027cd8200: control (read@1024,1024B). Runtime 150 seconds [ 748.254890][ T6357] block nbd0: Possible stuck request ffff888027cd8400: control (read@2048,1024B). Runtime 150 seconds [ 748.266029][ T6357] block nbd0: Possible stuck request ffff888027cd8600: control (read@3072,1024B). Runtime 150 seconds [ 749.365846][ T5817] Bluetooth: hci3: command tx timeout [ 750.067396][T16185] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 750.091575][T16185] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 750.110748][T16185] wireguard: wg0: Could not create IPv4 socket [ 750.119737][T16185] wireguard: wg1: Could not create IPv4 socket [ 750.138726][T16185] wireguard: wg2: Could not create IPv4 socket [ 750.461753][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 750.473063][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 750.482395][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 750.495106][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 750.509796][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 750.552520][T16325] Failed to initialize the IGMP autojoin socket (err -2) [ 750.718256][ T29] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 751.329717][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 751.427369][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 751.440179][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.453625][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.478494][ T29] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 751.493300][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.508863][ T29] usb 2-1: Product: syz [ 751.515172][ T29] usb 2-1: Manufacturer: syz [ 751.525259][ T29] usb 2-1: SerialNumber: syz [ 751.531767][T15705] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 752.499314][T15705] Bluetooth: hci3: command tx timeout [ 754.024661][ T30] audit: type=1400 audit(2000001284.079:2553): avc: denied { setopt } for pid=16368 comm="syz.4.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 754.483544][T15705] Bluetooth: hci3: command tx timeout [ 754.695499][ T29] usb 2-1: 0:2 : does not exist [ 754.704642][ T29] usb 2-1: unit 4 not found! [ 754.761248][ T29] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 754.805710][ T29] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 754.837970][T16391] netlink: 'syz.1.2474': attribute type 10 has an invalid length. [ 754.855918][ T29] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 754.903140][ T29] usb 2-1: USB disconnect, device number 64 [ 756.227124][T16427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=16427 comm=syz.1.2478 [ 756.460729][T15705] Bluetooth: hci3: command tx timeout [ 756.511371][ T29] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 756.672880][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 756.696885][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 756.726693][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.767029][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.800433][ T29] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.829444][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.864963][ T29] usb 5-1: Product: syz [ 756.891956][ T29] usb 5-1: Manufacturer: syz [ 756.929986][ T29] usb 5-1: SerialNumber: syz [ 757.714249][T16325] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 757.743083][T16325] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 757.783345][T16325] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 757.810891][T16325] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 758.386837][T16325] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 758.443537][T15705] Bluetooth: hci3: command tx timeout [ 758.452955][T16325] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 758.601902][T16325] wireguard: wg0: Could not create IPv4 socket [ 758.619640][T16325] wireguard: wg1: Could not create IPv4 socket [ 758.647707][T16325] wireguard: wg2: Could not create IPv4 socket [ 759.067745][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 759.086817][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 759.102042][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 759.110090][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 759.118442][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 759.162013][T16493] Failed to initialize the IGMP autojoin socket (err -2) [ 762.511548][ T29] usb 5-1: 0:2 : does not exist [ 762.521016][ T29] usb 5-1: unit 4 not found! [ 762.538017][ T29] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 762.579598][ T29] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 762.645648][ T29] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 762.820294][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 762.831448][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 762.843089][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 762.871881][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 763.293432][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 763.343587][T16533] Failed to initialize the IGMP autojoin socket (err -2) [ 763.418555][ T29] usb 5-1: USB disconnect, device number 32 [ 763.758753][T15705] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 763.970709][ T30] audit: type=1400 audit(2000001294.525:2554): avc: denied { ioctl } for pid=16546 comm="syz.0.2487" path="socket:[47738]" dev="sockfs" ino=47738 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 764.143005][T16561] syzkaller0: entered promiscuous mode [ 764.149225][T16561] syzkaller0: entered allmulticast mode [ 764.242345][T16561] tipc: Enabled bearer , priority 0 [ 764.270366][T16560] tipc: Resetting bearer [ 764.308891][T16560] tipc: Disabling bearer [ 764.470477][T16572] netlink: 'syz.0.2488': attribute type 4 has an invalid length. [ 765.215513][T15705] Bluetooth: hci3: command tx timeout [ 765.273153][T16533] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 765.319967][T16533] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 765.347984][T16533] wireguard: wg0: Could not create IPv4 socket [ 765.380276][T16533] wireguard: wg1: Could not create IPv4 socket [ 765.400188][T16533] wireguard: wg2: Could not create IPv4 socket [ 766.718227][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 766.728431][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 766.756397][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 766.778932][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 766.788776][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 766.837744][T16623] Failed to initialize the IGMP autojoin socket (err -2) [ 766.873471][T16626] input: syz1 as /devices/virtual/input/input23 [ 768.291334][ T29] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 768.462364][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 768.473654][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 768.485456][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 768.495513][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.516716][ T29] usb 5-1: config 0 descriptor?? [ 768.780272][ T29] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 768.796180][ T5817] Bluetooth: hci3: command tx timeout [ 770.777280][ T5817] Bluetooth: hci3: command tx timeout [ 770.872506][ T5852] usb 5-1: USB disconnect, device number 33 [ 772.336588][T16623] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 772.361932][T16623] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 772.380262][T16623] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 772.401946][T16623] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 772.758343][ T5817] Bluetooth: hci3: command tx timeout [ 772.856917][T16623] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 772.891096][T16623] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 772.915271][T16623] wireguard: wg0: Could not create IPv4 socket [ 772.931748][T16623] wireguard: wg1: Could not create IPv4 socket [ 772.953653][T16623] wireguard: wg2: Could not create IPv4 socket [ 774.103348][T15705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 774.117214][T15705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 774.134342][T15705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 774.143030][T15705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 774.152300][T15705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 774.193389][T16810] Failed to initialize the IGMP autojoin socket (err -2) [ 775.885734][ T1032] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.904836][ T1032] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.920195][ T1032] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.929198][ T1032] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.831810][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 776.842426][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 776.852101][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 776.859399][T16901] netlink: 'syz.1.2508': attribute type 10 has an invalid length. [ 776.872958][ T6357] block nbd0: Possible stuck request ffff888027cd8000: control (read@0,1024B). Runtime 180 seconds [ 776.888831][ T6357] block nbd0: Possible stuck request ffff888027cd8200: control (read@1024,1024B). Runtime 180 seconds [ 776.899890][ T6357] block nbd0: Possible stuck request ffff888027cd8400: control (read@2048,1024B). Runtime 180 seconds [ 776.916967][ T6357] block nbd0: Possible stuck request ffff888027cd8600: control (read@3072,1024B). Runtime 180 seconds [ 776.932250][T11242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 776.942030][T11242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 777.271827][T16898] Failed to initialize the IGMP autojoin socket (err -2) [ 777.625623][T16906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 777.631857][T16906] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 777.890992][T16906] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 778.017103][T16906] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 778.117836][T16906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 778.212103][T16906] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 778.940333][T16906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 778.987307][T16906] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 779.158496][T15705] Bluetooth: hci3: command tx timeout [ 779.616106][T16898] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 779.734989][T16898] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 779.817011][T16898] wireguard: wg0: Could not create IPv4 socket [ 779.855736][T16898] wireguard: wg1: Could not create IPv4 socket [ 779.935870][T16898] wireguard: wg2: Could not create IPv4 socket [ 781.424337][T11242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 781.460513][T11242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 781.470108][T11242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 781.486713][T11242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 781.497397][T11242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 781.690079][T17003] Failed to initialize the IGMP autojoin socket (err -2) [ 782.367352][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.425459][T11242] Bluetooth: hci3: command tx timeout [ 784.269226][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 784.278242][T17028] openvswitch: netlink: Flow actions attr not present in new flow. [ 785.407160][T15705] Bluetooth: hci3: command tx timeout [ 785.448536][T17003] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 785.510041][T17003] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 785.542412][T17003] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 785.678083][T17003] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 786.483146][T17003] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 786.514113][T17003] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 786.537557][T17003] wireguard: wg0: Could not create IPv4 socket [ 786.559819][T17003] wireguard: wg1: Could not create IPv4 socket [ 786.568713][T17003] wireguard: wg2: Could not create IPv4 socket [ 786.883595][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 786.905422][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 786.922843][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 786.950804][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 786.964249][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 787.242192][T17111] bridge0: port 3(hsr0) entered blocking state [ 787.405102][T17111] bridge0: port 3(hsr0) entered disabled state [ 787.789158][T17111] hsr0: entered allmulticast mode [ 787.794194][T17111] hsr_slave_0: entered allmulticast mode [ 787.803102][T17111] hsr_slave_1: entered allmulticast mode [ 787.914517][T17111] hsr0: entered promiscuous mode [ 787.936859][T17105] Failed to initialize the IGMP autojoin socket (err -2) [ 788.306583][ T30] audit: type=1400 audit(2000001319.786:2555): avc: denied { map } for pid=17130 comm="syz.4.2523" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 788.421329][ T30] audit: type=1400 audit(2000001319.786:2556): avc: denied { execute } for pid=17130 comm="syz.4.2523" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 788.689172][T17141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2524'. [ 788.911501][T15705] Bluetooth: hci3: command tx timeout [ 789.004237][ T30] audit: type=1326 audit(2000001320.784:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.0.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71b59c629 code=0x7ffc0000 [ 789.359659][ T30] audit: type=1326 audit(2000001320.784:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.0.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71b59c629 code=0x7ffc0000 [ 789.383613][ T30] audit: type=1326 audit(2000001320.784:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.0.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb71b59c629 code=0x7ffc0000 [ 789.408435][ T30] audit: type=1326 audit(2000001320.784:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.0.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71b59c629 code=0x7ffc0000 [ 789.432531][ T30] audit: type=1326 audit(2000001320.784:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.0.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71b59c629 code=0x7ffc0000 [ 789.464554][ T30] audit: type=1326 audit(2000001320.784:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.0.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fb71b59c629 code=0x7ffc0000 [ 789.488237][ T30] audit: type=1326 audit(2000001320.784:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.0.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71b59c629 code=0x7ffc0000 [ 789.520560][ T30] audit: type=1326 audit(2000001320.784:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17142 comm="syz.0.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb71b59c629 code=0x7ffc0000 [ 790.061079][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2526'. [ 790.598169][T17154] syzkaller0: entered promiscuous mode [ 790.603734][T17154] syzkaller0: entered allmulticast mode [ 791.826436][T15705] Bluetooth: hci3: command tx timeout [ 792.227003][T17105] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 792.276867][T17105] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 792.308046][T17105] wireguard: wg0: Could not create IPv4 socket [ 792.327857][T17105] wireguard: wg1: Could not create IPv4 socket [ 792.342912][T17105] wireguard: wg2: Could not create IPv4 socket [ 793.428109][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 793.428125][ T30] audit: type=1400 audit(2000001325.445:2596): avc: denied { execute_no_trans } for pid=17185 comm="syz.0.2530" path="/720/file2" dev="tmpfs" ino=3754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 793.492549][T11242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.502913][T11242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.515100][T11242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.524858][T11242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.534428][T11242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.574203][T17202] Failed to initialize the IGMP autojoin socket (err -2) [ 793.588265][ T5890] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 793.731400][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 793.767141][ T5890] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 793.799075][ T5890] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.850073][ T5890] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 793.930392][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 793.968123][ T5890] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 794.031911][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.074899][ T5890] usb 2-1: config 0 descriptor?? [ 794.655776][T17256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.666086][T17256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.123221][ T30] audit: type=1400 audit(2000001327.566:2597): avc: denied { accept } for pid=17266 comm="syz.0.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 796.199096][T15705] Bluetooth: hci3: command tx timeout [ 796.250943][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 796.304176][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 796.315744][ T30] audit: type=1400 audit(2000001328.480:2598): avc: denied { bind } for pid=17272 comm="syz.0.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 796.344992][ T5890] usb 2-1: USB disconnect, device number 65 [ 797.355282][ T30] audit: type=1400 audit(2000001329.372:2599): avc: denied { mount } for pid=17309 comm="syz.4.2537" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 798.208738][T17202] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 798.217384][T15705] Bluetooth: hci3: command tx timeout [ 798.226589][T17202] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 798.244127][T17202] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 798.260180][T17202] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 798.728738][T17202] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 798.757909][T17202] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 798.775830][T17202] wireguard: wg0: Could not create IPv4 socket [ 798.790326][T17202] wireguard: wg1: Could not create IPv4 socket [ 798.798941][T17202] wireguard: wg2: Could not create IPv4 socket [ 799.416289][T17383] Failed to initialize the IGMP autojoin socket (err -2) [ 799.503370][T17389] lo speed is unknown, defaulting to 1000 [ 799.510819][T17389] lo speed is unknown, defaulting to 1000 [ 799.524006][T17389] lo speed is unknown, defaulting to 1000 [ 799.563423][T17389] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 799.749454][T17389] lo speed is unknown, defaulting to 1000 [ 799.767161][T17389] lo speed is unknown, defaulting to 1000 [ 799.783564][T17389] lo speed is unknown, defaulting to 1000 [ 799.795471][T17389] lo speed is unknown, defaulting to 1000 [ 799.802596][T17389] lo speed is unknown, defaulting to 1000 [ 799.834874][T11242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 799.854061][T11242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 799.864020][T11242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.876591][T11242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.884741][T11242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 799.939527][T17388] Failed to initialize the IGMP autojoin socket (err -2) [ 799.969964][ T30] audit: type=1326 audit(2000001332.322:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17381 comm="syz.4.2540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88d79c629 code=0x0 [ 799.981889][T17394] 9p: Bad value for 'rfdno' [ 800.132416][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 801.139684][T17418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17418 comm=syz.0.2543 [ 801.222493][T17418] netlink: 'syz.0.2543': attribute type 1 has an invalid length. [ 801.305669][T17423] bond6: (slave gretap2): making interface the new active one [ 801.320812][T17423] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 801.395313][T17418] vlan0: entered allmulticast mode [ 801.422986][T17418] bond6: entered allmulticast mode [ 801.438472][T17418] gretap2: entered allmulticast mode [ 801.456207][T17418] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 801.874027][T15705] Bluetooth: hci3: command tx timeout [ 802.138615][T17388] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 802.164231][T17388] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 802.183236][T17388] wireguard: wg0: Could not create IPv4 socket [ 802.192919][T17388] wireguard: wg1: Could not create IPv4 socket [ 802.201784][T17388] wireguard: wg2: Could not create IPv4 socket [ 802.274489][ T5852] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 802.438996][ T5852] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 802.473470][ T5852] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 802.497979][ T5852] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 802.509217][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.543119][T17459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 802.568527][ T5852] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.262441][ T29] usb 5-1: USB disconnect, device number 34 [ 803.534212][ T30] audit: type=1400 audit(2000001336.049:2601): avc: denied { write } for pid=17458 comm="syz.4.2546" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 803.902589][T17498] bridge_slave_1: left allmulticast mode [ 803.929664][T17498] bridge_slave_1: left promiscuous mode [ 803.950456][T17498] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.993313][T17498] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 804.051831][T17515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6093 sclass=netlink_route_socket pid=17515 comm=syz.1.2550 [ 805.522535][ T6357] block nbd0: Possible stuck request ffff888027cd8000: control (read@0,1024B). Runtime 210 seconds [ 805.533541][ T6357] block nbd0: Possible stuck request ffff888027cd8200: control (read@1024,1024B). Runtime 210 seconds [ 805.544721][ T6357] block nbd0: Possible stuck request ffff888027cd8400: control (read@2048,1024B). Runtime 210 seconds [ 805.555766][ T6357] block nbd0: Possible stuck request ffff888027cd8600: control (read@3072,1024B). Runtime 210 seconds [ 805.636827][T11242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 805.650972][T11242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 805.661582][T11242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 805.670023][T11242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 805.677621][T11242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 805.726655][T17564] Failed to initialize the IGMP autojoin socket (err -2) [ 806.999892][T17564] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 807.045911][T17564] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 807.066106][T17564] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 807.088371][T15705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 807.101953][T15705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 807.111076][T15705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 807.121092][T15705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 807.128729][T15705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 807.190929][T17564] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 807.210241][T17597] Failed to initialize the IGMP autojoin socket (err -2) [ 807.656140][T11242] Bluetooth: hci3: command tx timeout [ 807.666966][T17610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2553'. [ 808.120041][T17564] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 808.156354][T17564] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 808.182762][T17564] wireguard: wg0: Could not create IPv4 socket [ 808.215574][T17564] wireguard: wg1: Could not create IPv4 socket [ 808.229331][T17564] wireguard: wg2: Could not create IPv4 socket [ 809.404204][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 809.413579][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 809.423270][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 809.851397][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 809.861975][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 809.889604][T17660] Failed to initialize the IGMP autojoin socket (err -2) [ 812.595396][T11242] Bluetooth: hci3: command tx timeout [ 812.722676][ T30] audit: type=1400 audit(2000001345.698:2602): avc: denied { load_policy } for pid=17706 comm="syz.4.2561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 812.722733][T17711] kAFS: unable to lookup cell 'ÿ' [ 812.809125][T17711] kAFS: unable to lookup cell '(,c¾Ì' [ 813.408459][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2562'. [ 814.121338][T17660] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 814.176698][T17660] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 814.214409][T17660] wireguard: wg0: Could not create IPv4 socket [ 814.242948][T17660] wireguard: wg1: Could not create IPv4 socket [ 814.259252][T17660] wireguard: wg2: Could not create IPv4 socket [ 814.876129][T17707] SELinux: failed to load policy [ 815.398826][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 815.408726][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 815.417150][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 815.429732][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 815.437149][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 815.460930][ T30] audit: type=1326 audit(2000001348.585:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 815.489320][T17815] Failed to initialize the IGMP autojoin socket (err -2) [ 815.558638][T17822] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2565'. [ 815.583769][ T30] audit: type=1326 audit(2000001348.585:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 815.676971][T17816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'. [ 815.695640][ T30] audit: type=1326 audit(2000001348.617:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 815.856456][ T30] audit: type=1326 audit(2000001348.617:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 815.921697][ T30] audit: type=1326 audit(2000001348.669:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17805 comm="syz.1.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 816.354309][ T30] audit: type=1400 audit(2000001349.520:2608): avc: denied { read } for pid=17805 comm="syz.1.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 816.667641][T17850] Failed to initialize the IGMP autojoin socket (err -2) [ 817.737652][T15705] Bluetooth: hci3: command tx timeout [ 818.256808][ T30] audit: type=1400 audit(2000001351.452:2609): avc: denied { map } for pid=17876 comm="syz.1.2569" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 819.704583][T15705] Bluetooth: hci3: command tx timeout [ 819.871655][T17815] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 819.973980][T17815] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 819.987335][T17815] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 820.024172][T17815] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 820.611548][T17815] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 820.636766][T17815] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 820.672387][T17815] wireguard: wg0: Could not create IPv4 socket [ 820.689700][T17815] wireguard: wg1: Could not create IPv4 socket [ 820.702282][T17815] wireguard: wg2: Could not create IPv4 socket [ 821.025387][T11242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 821.049976][T11242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 821.061014][T11242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 821.074933][T11242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 821.085503][T11242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 821.216251][T17957] Failed to initialize the IGMP autojoin socket (err -2) [ 821.367847][T17965] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 821.415741][T17965] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 821.424952][ T30] audit: type=1400 audit(2000001354.822:2610): avc: denied { firmware_load } for pid=17959 comm="syz.1.2573" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 823.054931][T11242] Bluetooth: hci3: command tx timeout [ 823.073372][T17995] 9p: Could not find request transport: tcp*por0000000004e22 [ 824.692610][T17957] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 824.742990][T17957] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 824.770884][T17957] wireguard: wg0: Could not create IPv4 socket [ 824.834935][T17957] wireguard: wg1: Could not create IPv4 socket [ 824.870230][T17957] wireguard: wg2: Could not create IPv4 socket [ 827.873597][ T5177] udevd[5177]: worker [5794] /devices/virtual/block/nbd0 timeout; kill it [ 827.887380][ T5177] udevd[5177]: seq 15566 '/devices/virtual/block/nbd0' killed [ 829.270164][T18117] netlink: 'syz.0.2584': attribute type 21 has an invalid length. [ 830.358514][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.401168][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.412008][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.421502][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.429164][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 830.464084][T18132] Failed to initialize the IGMP autojoin socket (err -2) [ 831.147893][T18146] loop9: detected capacity change from 0 to 7 [ 831.158702][T15705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 831.173034][T15705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 831.186053][T15705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 831.194632][T15705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 831.206933][T15705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 832.506338][T15705] Bluetooth: hci3: command tx timeout [ 832.726544][T18132] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 832.797309][T13993] Dev loop9: unable to read RDB block 7 [ 832.812772][T13993] loop9: AHDI p1 p2 p3 [ 832.816962][T13993] loop9: partition table partially beyond EOD, truncated [ 832.846569][T18132] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 832.847139][T18144] Failed to initialize the IGMP autojoin socket (err -2) [ 832.861290][T18151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 832.877372][T13993] loop9: p1 start 1601398130 is beyond EOD, truncated [ 832.904318][T13993] loop9: p2 start 1702059890 is beyond EOD, truncated [ 832.906870][T18151] vivid-003: disconnect [ 832.936507][T18132] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 833.090702][T18157] overlayfs: failed to clone upperpath [ 833.191998][T15705] Bluetooth: hci5: command tx timeout [ 833.507163][T18132] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 833.556469][T18146] Dev loop9: unable to read RDB block 7 [ 833.575052][T18160] futex_wake_op: syz.4.2590 tries to shift op by 32; fix this program [ 833.586345][T18146] loop9: AHDI p1 p2 p3 [ 833.595538][T18146] loop9: partition table partially beyond EOD, truncated [ 833.792603][T18137] vivid-003: reconnect [ 833.822209][T18146] loop9: p1 start 1601398130 is beyond EOD, truncated [ 833.881182][T18146] loop9: p2 start 1702059890 is beyond EOD, truncated [ 834.033721][T18164] netlink: 'syz.4.2590': attribute type 4 has an invalid length. [ 834.067747][ T30] audit: type=1400 audit(2000001368.082:2611): avc: denied { getopt } for pid=18155 comm="syz.4.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 834.125085][T18164] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2590'. [ 834.147188][ T30] audit: type=1400 audit(2000001368.082:2612): avc: denied { setopt } for pid=18155 comm="syz.4.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 834.172988][ T6357] block nbd0: Possible stuck request ffff888027cd8000: control (read@0,1024B). Runtime 240 seconds [ 834.185490][ T6357] block nbd0: Possible stuck request ffff888027cd8200: control (read@1024,1024B). Runtime 240 seconds [ 834.197574][ T6357] block nbd0: Possible stuck request ffff888027cd8400: control (read@2048,1024B). Runtime 240 seconds [ 834.208649][ T6357] block nbd0: Possible stuck request ffff888027cd8600: control (read@3072,1024B). Runtime 240 seconds [ 834.499302][T15705] Bluetooth: hci3: command tx timeout [ 834.607451][ T30] audit: type=1400 audit(2000001368.628:2613): avc: denied { ioctl } for pid=18162 comm="syz.0.2591" path="socket:[56918]" dev="sockfs" ino=56918 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 835.295511][T18132] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 835.315819][T18132] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 835.333707][T18132] wireguard: wg0: Could not create IPv4 socket [ 835.341304][T18132] wireguard: wg1: Could not create IPv4 socket [ 835.359834][T18132] wireguard: wg2: Could not create IPv4 socket [ 835.957959][T18161] delete_channel: no stack [ 837.043985][T11242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 837.054155][T11242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 837.063405][T11242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 837.074709][T11242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 837.082471][T11242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 837.175770][T18212] Failed to initialize the IGMP autojoin socket (err -2) [ 839.058523][T11242] Bluetooth: hci3: command tx timeout [ 839.572829][T18212] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 839.594289][T18212] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 839.613736][T18212] wireguard: wg0: Could not create IPv4 socket [ 839.622798][T18212] wireguard: wg1: Could not create IPv4 socket [ 839.631736][T18212] wireguard: wg2: Could not create IPv4 socket [ 840.103034][T18302] netlink: 'syz.1.2598': attribute type 21 has an invalid length. [ 840.225033][ T30] audit: type=1400 audit(2000001374.581:2614): avc: denied { bind } for pid=18309 comm="syz.1.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 840.248144][T15705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 840.310162][T15705] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 840.318666][T15705] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 840.326548][T15705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 840.336168][T15705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 840.394622][T18311] Failed to initialize the IGMP autojoin socket (err -2) [ 841.544194][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.594867][ T5921] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 841.803325][ T5921] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 841.836207][T18321] tipc: Trying to set illegal importance in message [ 841.843442][ T5921] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 841.870245][ T5921] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.873014][ T5921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 841.873042][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.873060][ T5921] usb 2-1: Product: syz [ 841.873073][ T5921] usb 2-1: Manufacturer: syz [ 841.873087][ T5921] usb 2-1: SerialNumber: syz [ 841.882608][ T5921] hub 2-1:1.0: bad descriptor, ignoring hub [ 841.882634][ T5921] hub 2-1:1.0: probe with driver hub failed with error -5 [ 841.984615][ T30] audit: type=1400 audit(2000001376.408:2615): avc: denied { read } for pid=18323 comm="syz.4.2602" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 842.060064][ T30] audit: type=1400 audit(2000001376.408:2616): avc: denied { open } for pid=18323 comm="syz.4.2602" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 842.094556][ T5921] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 842.136828][ T30] audit: type=1400 audit(2000001376.408:2617): avc: denied { ioctl } for pid=18323 comm="syz.4.2602" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 842.326288][T15705] Bluetooth: hci3: command tx timeout [ 842.369535][ T30] audit: type=1400 audit(2000001376.828:2618): avc: denied { read write } for pid=18309 comm="syz.1.2600" dev="sockfs" ino=58586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 842.395146][T18340] comedi comedi1: Minor 3 could not be opened [ 842.489032][ T792] usb 2-1: USB disconnect, device number 66 [ 842.549252][T18343] wlan1 speed is unknown, defaulting to 1000 [ 842.556627][T18343] wlan1 speed is unknown, defaulting to 1000 [ 842.568106][T18343] wlan1 speed is unknown, defaulting to 1000 [ 842.602034][T18343] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -2 [ 842.674121][T18343] wlan1 speed is unknown, defaulting to 1000 [ 842.689223][T18343] wlan1 speed is unknown, defaulting to 1000 [ 842.704238][T18343] wlan1 speed is unknown, defaulting to 1000 [ 842.718086][T18343] wlan1 speed is unknown, defaulting to 1000 [ 842.732873][T18343] wlan1 speed is unknown, defaulting to 1000 [ 842.809296][ T792] usblp0: removed [ 843.813649][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 843.928632][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2606'. [ 844.360115][T15705] Bluetooth: hci3: command tx timeout [ 845.252863][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2604'. [ 845.262854][ T30] audit: type=1400 audit(2000001379.820:2619): avc: denied { map } for pid=18347 comm="syz.4.2604" path="socket:[58629]" dev="sockfs" ino=58629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 845.307020][ T30] audit: type=1400 audit(2000001379.915:2620): avc: denied { module_load } for pid=18361 comm="syz.1.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 845.776079][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2609'. [ 845.831579][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2609'. [ 845.840683][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2609'. [ 845.892182][T18382] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2609'. [ 846.354849][T18397] netlink: 'syz.0.2611': attribute type 21 has an invalid length. [ 846.592987][T15705] Bluetooth: hci3: command tx timeout [ 846.745736][ T30] audit: type=1400 audit(2000001381.427:2621): avc: denied { nlmsg_read } for pid=18400 comm="syz.0.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 846.878170][ T5819] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 847.078755][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 847.089775][ T5819] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.115570][ T5819] usb 2-1: config 0 interface 0 has no altsetting 0 [ 847.138073][ T5819] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 847.151415][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.164241][ T5819] usb 2-1: config 0 descriptor?? [ 847.373379][ T5890] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 847.602567][ T5819] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 847.668878][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 847.789471][ T5890] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 847.975205][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.080474][ T5890] usb 5-1: config 0 descriptor?? [ 848.155411][ T30] audit: type=1400 audit(2000001382.918:2622): avc: denied { mounton } for pid=18404 comm="syz.1.2613" path="/proc/2064/task" dev="proc" ino=58699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 848.358435][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 848.374811][ T5819] usb 2-1: USB disconnect, device number 67 [ 848.391555][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 848.432379][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 848.440722][ T5890] usb 5-1: media controller created [ 848.474421][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 848.576062][T15705] Bluetooth: hci3: command tx timeout [ 848.667169][T18311] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 848.682791][T18311] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 848.695886][T18311] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 848.706553][T18311] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 849.350004][ T5890] az6027: usb out operation failed. (-71) [ 849.367633][ T5890] az6027: usb out operation failed. (-71) [ 849.373384][ T5890] stb0899_attach: Driver disabled by Kconfig [ 849.381485][ T5890] az6027: no front-end attached [ 849.381485][ T5890] [ 849.391205][ T5890] az6027: usb out operation failed. (-71) [ 849.402613][ T5890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 849.423264][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 849.456812][ T5890] dvb-usb: schedule remote query interval to 400 msecs. [ 849.468978][ T5890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 849.497100][ T5890] usb 5-1: USB disconnect, device number 35 [ 849.599429][ T5890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 849.769869][T18311] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 849.792784][T18311] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 849.814420][T18311] wireguard: wg0: Could not create IPv4 socket [ 849.823534][T18311] wireguard: wg1: Could not create IPv4 socket [ 849.832202][T18311] wireguard: wg2: Could not create IPv4 socket [ 851.165668][T18517] netlink: 'syz.1.2618': attribute type 10 has an invalid length. [ 851.198292][T11242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 851.375285][T11242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 851.386718][T11242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 851.412870][T11242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 851.428953][T11242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 851.471784][T18524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2619'. [ 851.482596][T18524] openvswitch: netlink: IP tunnel dst address not specified [ 851.497824][T18519] Failed to initialize the IGMP autojoin socket (err -2) [ 852.551017][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 852.560394][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 852.585471][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 852.594674][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2621'. [ 852.751471][T18535] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 852.787836][T18535] Failed to initialize the IGMP autojoin socket (err -2) [ 852.811028][ T30] audit: type=1326 audit(2000001387.642:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 852.893222][ T30] audit: type=1326 audit(2000001387.642:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 852.955456][ T30] audit: type=1326 audit(2000001387.653:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 853.019251][ T30] audit: type=1326 audit(2000001387.852:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 853.051478][ T30] audit: type=1326 audit(2000001387.852:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.1.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae779c629 code=0x7ffc0000 [ 853.384270][T11242] Bluetooth: hci3: command tx timeout [ 853.932884][T18575] Failed to initialize the IGMP autojoin socket (err -2) [ 854.414978][T18519] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 854.492541][T18519] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 854.510613][T18519] wireguard: wg0: Could not create IPv4 socket [ 854.523308][T18519] wireguard: wg1: Could not create IPv4 socket [ 854.531021][T18519] wireguard: wg2: Could not create IPv4 socket [ 855.031127][ T5852] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 855.511132][ T31] INFO: task syz.3.2364:15216 blocked for more than 142 seconds. [ 855.539416][ T31] Tainted: G L syzkaller #0 [ 855.563086][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 855.593485][ T31] task:syz.3.2364 state:D stack:28136 pid:15216 tgid:15155 ppid:5803 task_flags:0x400040 flags:0x00080002 [ 855.637305][ T31] Call Trace: [ 855.645466][ T31] [ 855.655247][ T31] __schedule+0xfee/0x60e0 [ 855.672041][ T31] ? __lock_acquire+0x4a5/0x2630 [ 855.686597][ T31] ? __pfx___schedule+0x10/0x10 [ 855.701280][ T31] ? find_held_lock+0x2b/0x80 [ 855.716089][ T31] ? schedule+0x2bf/0x390 [ 855.731318][ T31] schedule+0xdd/0x390 [ 855.745243][ T31] schedule_preempt_disabled+0x13/0x30 [ 855.758673][ T31] __mutex_lock+0xc9a/0x1b90 [ 855.774478][ T31] ? sync_bdevs+0x153/0x480 [ 855.785402][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 855.798195][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 855.816705][ T31] ? iput.part.0+0x1a0/0xf50 [ 855.821513][ T31] ? sync_bdevs+0x153/0x480 [ 855.834353][ T31] sync_bdevs+0x153/0x480 [ 855.850404][ T31] ksys_sync+0xb0/0xf0 [ 855.863634][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 855.871067][ T31] ? kcov_ioctl+0x16a/0x720 [ 855.884727][ T31] ? do_syscall_64+0x95/0xf80 [ 855.904523][ T31] __do_sys_sync+0xe/0x20 [ 855.919551][ T31] do_syscall_64+0x106/0xf80 [ 855.928678][ T31] ? clear_bhb_loop+0x40/0x90 [ 855.943741][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.955775][ T31] RIP: 0033:0x7f2afb79c629 [ 855.972355][ T31] RSP: 002b:00007f2afc5d2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 855.991329][ T31] RAX: ffffffffffffffda RBX: 00007f2afba16090 RCX: 00007f2afb79c629 [ 856.004429][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 856.014566][ T31] RBP: 00007f2afba16090 R08: 0000000000000000 R09: 0000000000000000 [ 856.026982][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.035829][ T31] R13: 00007f2afba16128 R14: 00007f2afba16090 R15: 00007ffe4ccda8d8 [ 856.044573][ T31] [ 856.047896][ T31] [ 856.047896][ T31] Showing all locks held in the system: [ 856.056415][ T31] 1 lock held by khungtaskd/31: [ 856.064755][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 856.091409][ T31] 4 locks held by kworker/u8:6/735: [ 856.102735][ T31] #0: ffff8880206be148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 856.121802][ T31] #1: ffffc900035c7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 856.136125][ T31] #2: ffff8880380ae0e0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 856.148314][ T31] #3: ffff888037fccb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 856.161334][ T31] 3 locks held by kworker/1:2/792: [ 856.172295][ T31] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 856.206524][ T31] #1: ffffc90003b27d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 856.223678][ T31] #2: ffff88802b703240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 856.233932][ T31] 2 locks held by getty/5559: [ 856.239378][ T31] #0: ffff8880348050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 856.253848][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 856.267801][ T31] 1 lock held by udevd/5794: [ 856.274206][ T31] #0: ffff88802778e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 856.284678][ T31] 5 locks held by kworker/0:4/5852: [ 856.294883][ T31] #0: ffff8880236be548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 856.310112][ T31] #1: ffffc900032a7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 856.321659][ T31] #2: ffff88802aef4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 856.333995][ T31] #3: ffff88802af6d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 856.344084][ T31] #4: ffff88802ad6ba68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 856.355618][ T31] 1 lock held by syz.3.2364/15216: [ 856.360736][ T31] #0: ffff88802778e358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 856.370425][ T31] 1 lock held by syz-executor/18519: [ 856.375769][ T31] #0: ffffffff8e7f4ec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 856.386714][ T31] 1 lock held by rm/18618: [ 856.391157][ T31] [ 856.430373][ T31] ============================================= [ 856.430373][ T31] [ 856.441650][ T31] NMI backtrace for cpu 0 [ 856.441666][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 856.441689][ T31] Tainted: [L]=SOFTLOCKUP [ 856.441694][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.441704][ T31] Call Trace: [ 856.441710][ T31] [ 856.441716][ T31] dump_stack_lvl+0x100/0x190 [ 856.441746][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 856.441765][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 856.441793][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 856.441818][ T31] sys_info+0x141/0x190 [ 856.441838][ T31] watchdog+0xd25/0x1050 [ 856.441868][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.441890][ T31] ? __kthread_parkme+0x18c/0x230 [ 856.441917][ T31] ? kthread+0x13a/0x450 [ 856.441931][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.441952][ T31] kthread+0x370/0x450 [ 856.441966][ T31] ? __pfx_kthread+0x10/0x10 [ 856.441989][ T31] ret_from_fork+0x754/0xd80 [ 856.442007][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 856.442025][ T31] ? __switch_to+0x7b4/0x1120 [ 856.442045][ T31] ? __pfx_kthread+0x10/0x10 [ 856.442062][ T31] ret_from_fork_asm+0x1a/0x30 [ 856.442094][ T31] [ 856.442099][ T31] Sending NMI from CPU 0 to CPUs 1: [ 856.567938][ C1] NMI backtrace for cpu 1 [ 856.567956][ C1] CPU: 1 UID: 0 PID: 792 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.567976][ C1] Tainted: [L]=SOFTLOCKUP [ 856.567981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.567991][ C1] Workqueue: events nsim_fib_event_work [ 856.568012][ C1] RIP: 0010:update_se+0x305/0x760 [ 856.568032][ C1] Code: 4c 0f a3 2d 0d fe 00 0f 0f 82 68 02 00 00 48 8d bd 48 09 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 09 04 00 00 4c 8b ad 48 09 00 00 48 b8 00 00 00 00 00 fc ff [ 856.568045][ C1] RSP: 0018:ffffc90003b276c0 EFLAGS: 00000046 [ 856.568055][ C1] RAX: dffffc0000000000 RBX: ffff888026ff8080 RCX: ffffffff81d865fb [ 856.568064][ C1] RDX: 1ffff11004dff129 RSI: ffffffff8c1aef20 RDI: ffff888026ff8948 [ 856.568072][ C1] RBP: ffff888026ff8000 R08: 0000000000000000 R09: fffffbfff21b2c82 [ 856.568081][ C1] R10: ffffffff90d96417 R11: 0000000000000000 R12: 000000000000ead1 [ 856.568089][ C1] R13: 0000000000000001 R14: ffff888026ff8130 R15: ffff888026ff8000 [ 856.568098][ C1] FS: 0000000000000000(0000) GS:ffff888124448000(0000) knlGS:0000000000000000 [ 856.568111][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 856.568120][ C1] CR2: 00007fc66a83f1d4 CR3: 000000000e598000 CR4: 00000000003526f0 [ 856.568128][ C1] Call Trace: [ 856.568132][ C1] [ 856.568139][ C1] update_curr+0x71/0x550 [ 856.568152][ C1] ? sched_clock+0x38/0x60 [ 856.568171][ C1] dequeue_entities+0x14c/0x2e40 [ 856.568188][ C1] ? rcu_is_watching+0x12/0xc0 [ 856.568204][ C1] dequeue_task_fair+0x1aa/0xa10 [ 856.568218][ C1] ? dequeue_task+0xe7/0x4d0 [ 856.568242][ C1] __schedule+0x3551/0x60e0 [ 856.568262][ C1] ? __lock_acquire+0x4a5/0x2630 [ 856.568285][ C1] ? __pfx___schedule+0x10/0x10 [ 856.568303][ C1] ? find_held_lock+0x2b/0x80 [ 856.568319][ C1] ? schedule+0x2bf/0x390 [ 856.568339][ C1] schedule+0xdd/0x390 [ 856.568357][ C1] schedule_timeout+0x127/0x280 [ 856.568374][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 856.568391][ C1] ? __pfx_process_timeout+0x10/0x10 [ 856.568408][ C1] ? find_held_lock+0x2b/0x80 [ 856.568422][ C1] ? nsim_fib_event_work+0x51ec/0x63b0 [ 856.568436][ C1] ? nsim_fib_event_work+0x51ec/0x63b0 [ 856.568452][ C1] msleep+0x32/0x50 [ 856.568465][ C1] nsim_fib_event_work+0x40c1/0x63b0 [ 856.568483][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 856.568500][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 856.568518][ C1] ? rcu_is_watching+0x12/0xc0 [ 856.568533][ C1] process_one_work+0x9d7/0x1920 [ 856.568552][ C1] ? __pfx_process_one_work+0x10/0x10 [ 856.568568][ C1] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 856.568583][ C1] worker_thread+0x5da/0xe40 [ 856.568599][ C1] ? __pfx_worker_thread+0x10/0x10 [ 856.568612][ C1] ? kthread+0x13a/0x450 [ 856.568623][ C1] ? __pfx_worker_thread+0x10/0x10 [ 856.568635][ C1] kthread+0x370/0x450 [ 856.568646][ C1] ? __pfx_kthread+0x10/0x10 [ 856.568658][ C1] ret_from_fork+0x754/0xd80 [ 856.568671][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 856.568684][ C1] ? __switch_to+0x7b4/0x1120 [ 856.568699][ C1] ? __pfx_kthread+0x10/0x10 [ 856.568712][ C1] ret_from_fork_asm+0x1a/0x30 [ 856.568732][ C1] [ 856.888487][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 856.895341][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 856.906018][ T31] Tainted: [L]=SOFTLOCKUP [ 856.910335][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.920392][ T31] Call Trace: [ 856.923671][ T31] [ 856.926600][ T31] dump_stack_lvl+0x100/0x190 [ 856.931290][ T31] vpanic+0x552/0x970 [ 856.935274][ T31] ? __pfx_vpanic+0x10/0x10 [ 856.939774][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 856.945920][ T31] panic+0xd1/0xe0 [ 856.949622][ T31] ? __pfx_panic+0x10/0x10 [ 856.954019][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 856.960156][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 856.966295][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 856.972434][ T31] ? watchdog.cold+0x198/0x1ca [ 856.977179][ T31] ? watchdog+0xd35/0x1050 [ 856.981583][ T31] watchdog.cold+0x1a9/0x1ca [ 856.986157][ T31] ? __pfx_watchdog+0x10/0x10 [ 856.990824][ T31] ? __kthread_parkme+0x18c/0x230 [ 856.995836][ T31] ? kthread+0x13a/0x450 [ 857.000053][ T31] ? __pfx_watchdog+0x10/0x10 [ 857.004709][ T31] kthread+0x370/0x450 [ 857.008753][ T31] ? __pfx_kthread+0x10/0x10 [ 857.013323][ T31] ret_from_fork+0x754/0xd80 [ 857.017897][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 857.023013][ T31] ? __switch_to+0x7b4/0x1120 [ 857.027678][ T31] ? __pfx_kthread+0x10/0x10 [ 857.032250][ T31] ret_from_fork_asm+0x1a/0x30 [ 857.037005][ T31] [ 857.040264][ T31] Kernel Offset: disabled [ 857.044573][ T31] Rebooting in 86400 seconds..