last executing test programs: 6m19.864982923s ago: executing program 0 (id=3965): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4004010) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(0x0, 0x8, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0) sendmsg(r2, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f0000000a80)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r5, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) syz_usb_connect(0x4, 0x596, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="8124e5469e2422be11682cb57c8231fd0e99d80d2f88b8eeeef92f750dd9062b9785f72d0bcabe2833bb8601fd680715854294bc", @ANYRESOCT=r8, @ANYRES8=r1], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 6m18.01061173s ago: executing program 0 (id=3971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="043306000000d15831aaa48e4fbc1c6ae219a40d8245137b662ea52253b164fa06432fceff349e987d9a393f9743bae0085de2cc8d6874140a96863820347bd8d1bd16094560a4f5410b81abe1020ad021be7bb0e54a74b29fea7adef5f8d9dfcabd63a6ad8e9bd2d962bcea2b5959c25b141a520ec57a08a8e1f718857600cb520cb7be0cca5e902598d038b8c9cc90b95f8aae289dfef2adb6bfec582b2bb85c4de2ba30754c95270994fbe63f6698a156e759d8a60a31cdf810b7840f6e74e2d49ab8f3ceaa99dc4876b8386cb40b64c1dc"], 0xd) pipe2$9p(0x0, 0x80800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xc0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3507, 0x2, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x8a, &(0x7f00000002c0)=@req3={0x0, 0x0, 0x3, 0x89, 0xfffff6bd, 0xf, 0xed}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xa2a02, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0xd8003, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x14) r9 = getpid() sched_getattr(r9, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000000000)=0x401, 0x4) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e21, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e9}, 0x1c) syz_emit_ethernet(0x71, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb08004d8a006300660000ff069078ac1414bbac141415831767ac1e0001e000000100000000e0000001e00000014406d49454f50000000000000000000000000000000000000300004e2400004e220000eb6c8dff0001000000030000000200000004000000f3b81723d20f4a168a845b3022a48d106158c266b77b9526fd4d233fa048816c5726eeb1a7488983fbcc547638cab21e7a79f1a7674a561119c785a0acd7e5fe38d385a2f0cb158eed61af47ebe899f1c6b9ce167c7a09818e770676a051c1941fd541faf7dcd336d1f0cf86cbeb6a87"], 0x0) 6m15.563944099s ago: executing program 0 (id=3981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) 6m15.24909548s ago: executing program 0 (id=3983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000140)=0xff, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004085}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x24000054}, 0x26088888) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m14.082706179s ago: executing program 0 (id=3988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0xf0, 0xe, 0x0, &(0x7f0000000440)="e02742e86c0d85ff9783763a0a00", 0x0, 0x2, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1b) pread64(r2, &(0x7f0000000540)=""/207, 0xcf, 0x1) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000480)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="083c8604600000a20c6eec00be00442cfffe00ee90880400000000000000aaff0200"/43, @ANYRES32=r3], 0xfdef) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r7, &(0x7f0000000300)=ANY=[], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f00000010c0)=r9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220c00000086"], 0x0}, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 6m10.325106587s ago: executing program 0 (id=4005): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40e41, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x20}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0xfffffffffffffd57}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040480) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000f5ff22ff", @ANYRES64=0x3], 0x10) io_uring_setup(0x664c, 0x0) unshare(0x40000600) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r6, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) socket$inet(0xa, 0x801, 0x84) prlimit64(r5, 0x7, &(0x7f0000000140)={0x8, 0x4000000010008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 5m53.460050635s ago: executing program 32 (id=4005): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40e41, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x20}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0xfffffffffffffd57}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x8040480) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000f5ff22ff", @ANYRES64=0x3], 0x10) io_uring_setup(0x664c, 0x0) unshare(0x40000600) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r6, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) socket$inet(0xa, 0x801, 0x84) prlimit64(r5, 0x7, &(0x7f0000000140)={0x8, 0x4000000010008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 4m1.189514972s ago: executing program 4 (id=4470): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x6, 0xd00}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000160900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) 4m0.022931707s ago: executing program 4 (id=4473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000044010000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000010000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200050028000000000000004c001200726663343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000080024"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3m59.922774355s ago: executing program 4 (id=4474): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) read(r0, &(0x7f00000019c0)=""/4107, 0x100b) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e61, 0x2, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) shutdown(r6, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r7 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0xa1, 0x31324d4e, 0x8, 0x9, 0xfffffff3, 0x4, 0xfeedcafe, 0x2, 0x6, 0x0, 0x2}}) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "ff00afcdff8200", "ab46760000ffffffff8c59e6b613fa7b6e6a8151b63b15089c5f3a00", "01005f8c", "051cd1e28935a574"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0001}]}) 3m56.366539397s ago: executing program 4 (id=4490): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r1, 0x0, 0x0) bind(r0, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff"], 0x0) 3m53.499483073s ago: executing program 4 (id=4501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000300)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0xf00, 0x0, 0x5e, 0xfffffffffffffff9}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) 3m37.251235865s ago: executing program 33 (id=4501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000300)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0xf00, 0x0, 0x5e, 0xfffffffffffffff9}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) 2m51.688886904s ago: executing program 1 (id=4741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7ffffffbffffffff, 0x6, 0x10004, 0x9, 0x4, 0x4, 0x10, 0x6, 0x7ffffffffffffff9, 0x10000000001, 0x0, 0x5, 0x5, 0x6, 0xfffffffffffffffd], 0x0, 0x110f10}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m50.153785913s ago: executing program 1 (id=4743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) (async, rerun: 32) r3 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (rerun: 32) landlock_restrict_self(r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) r5 = socket$inet(0x2, 0x3, 0xd) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) dup(0xffffffffffffffff) (async) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) listen(r6, 0x2) (async) get_mempolicy(&(0x7f00000001c0), &(0x7f00000002c0), 0x7f, &(0x7f0000ffa000/0x4000)=nil, 0x1) listen(r6, 0x5) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x200, 0x2, 0x40, "84fc05093b7b54d6a10fa069b1b15cb32b85524d3f4a97708be91481799766a3", 0x30395056}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1bbf2c22}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68ec1c94}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x2040005}, 0x40000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x24000800) 2m47.810440234s ago: executing program 1 (id=4744): syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) close(0x3) io_setup(0x400, &(0x7f0000000000)=0x0) io_destroy(r0) io_cancel(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 2m44.229258457s ago: executing program 1 (id=4759): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = fsopen(&(0x7f0000000140)='nfs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x300) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="0986ce95c1971c291606d2ab", @ANYRESHEX=r1, @ANYBLOB=',\x00']) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) 2m42.059928105s ago: executing program 1 (id=4771): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b15a896b16d718b2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000010000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000006a000105fefdffffffdbdf2500000008"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) sendto(r3, &(0x7f0000000240)="468984f9745def809285305601188a9cbf335bdfbf42a451a8f88978b033122fbc8711a059f2318a90f3fea6cf6509f91017a6506082489c8bab1c13d703667786fefcf59b233b1aa1bcfa9d6ce86a54c7eb14387fde87ba74a66ea713b0f309dd07e744fed1940752057cb63d05f4605dd73f262e1615059890279ffe7f3c89c79d875bc45a8cac7e8acf8671792e078d71c74709b4d7748d0e8b7957e2a87625ac032abaeff4dbca636add142a09762cf02257abf6e08e8175429380fb62c9fe2be8760046ae1ed524822a7caa6f7ea7d5", 0xd2, 0xc011, &(0x7f0000000340)=@l2tp={0x2, 0x0, @rand_addr=0x64010102}, 0x80) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd090387237ee530000000"], 0xfdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000004000000080000000000"], 0x50) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r7, 0x5402) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x5, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) 2m40.894775945s ago: executing program 1 (id=4775): io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f00000004c0)=0x240079, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x1a4, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2c}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x8d, 0x3, {{'deflate\x00'}, 0x228, "99498a25bf2c5ad010ef5e4b616493b968895288fe118960c284a6e1f0468e5e5ecda971d9043e5779c8f22d6b2bc53112b8a1cd6365779f51576dbb6c51d49de1a65e4a69"}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x1, 0x715, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0xf, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r10, &(0x7f0000000180)="cf", 0x1) sendfile(r9, r10, &(0x7f0000000000), 0xff) fcntl$addseals(r10, 0x409, 0x8) io_submit(r0, 0x3, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x9, r10, 0x0, 0x0, 0x8}, 0x0, 0x0]) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x300) 2m24.04485377s ago: executing program 34 (id=4775): io_setup(0x3, &(0x7f0000000000)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f00000004c0)=0x240079, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x1a4, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2c}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x8d, 0x3, {{'deflate\x00'}, 0x228, "99498a25bf2c5ad010ef5e4b616493b968895288fe118960c284a6e1f0468e5e5ecda971d9043e5779c8f22d6b2bc53112b8a1cd6365779f51576dbb6c51d49de1a65e4a69"}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x5}, 0x1, 0x715, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0xf, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40c4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r10, &(0x7f0000000180)="cf", 0x1) sendfile(r9, r10, &(0x7f0000000000), 0xff) fcntl$addseals(r10, 0x409, 0x8) io_submit(r0, 0x3, &(0x7f0000000240)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x9, r10, 0x0, 0x0, 0x8}, 0x0, 0x0]) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x300) 34.84630918s ago: executing program 7 (id=5229): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004b00004800000000002f9078000000030a01010007074bac1414aa830f31e0000001ac1414417f0000010000800190781200183f2500000000000000026200007f0028aec3ad8c96"], 0x0) getpgrp(0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000002c0)={0x6, 0x6, 0x1000002, 0x87, 0xffffffff, 0x3fe}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r6, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xff0f}, {0x95, 0x0, 0x0, 0xb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.244775912s ago: executing program 7 (id=5232): syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt6_stats\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) mlock(&(0x7f000029f000/0x3000)=nil, 0x3000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x2, 0x2, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000003000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000480)={0x7, 0x0, [{0xbf9, 0x0, 0xffffffffffffff9f}, {0x2b2, 0x0, 0xab40}, {0x9c8, 0x0, 0xfffffffffffffffa}, {0x581, 0x0, 0x81}, {0x636, 0x0, 0x9}, {0x40000003, 0x0, 0xa65}, {0xbc1, 0x0, 0x82}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x9}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team0\x00', {0x7, 0x40, 0x41, 0x8, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x78}, {0xc5}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 30.916136192s ago: executing program 7 (id=5237): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003940400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) 30.813125761s ago: executing program 7 (id=5239): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x42400, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x1, 0x7f, 0x2, 0xffa3}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r3, 0x2}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}) r5 = accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) fchown(r5, r7, r9) r10 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r10, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/92, 0x5c}, {&(0x7f0000000740)=""/107, 0x6b}], 0x5, &(0x7f0000000840)=""/169, 0xa9}, 0xe}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/27, 0x1b}, {&(0x7f00000009c0)=""/117, 0x75}, {&(0x7f0000000a40)=""/168, 0xa8}, {&(0x7f0000000b00)=""/114, 0x72}, {&(0x7f0000000b80)=""/110, 0x6e}, {&(0x7f0000000c00)=""/88, 0x58}, {&(0x7f0000000c80)=""/118, 0x76}], 0x7, &(0x7f0000000d80)=""/163, 0xa3}, 0x6}, {{&(0x7f0000000e40)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/120, 0x78}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/226, 0xe2}, {&(0x7f00000010c0)}, {&(0x7f0000001100)=""/19, 0x13}, {&(0x7f0000001140)=""/56, 0x38}], 0x7, &(0x7f0000001200)=""/27, 0x1b}, 0x1}, {{&(0x7f0000001240)=@pppoe, 0x80, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/68, 0x44}, {&(0x7f0000001340)=""/222, 0xde}], 0x2, &(0x7f0000001480)=""/191, 0xbf}, 0x4}], 0x4, 0x40000000, &(0x7f0000001640)={0x77359400}) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@ifindex=r6, 0x32, 0x1, 0x2, &(0x7f0000001680)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000017c0)={@ifindex=r6, r1, 0x2e, 0x2001, r1, @value=r1, @void, @void, @void, r13}, 0x20) tkill(r8, 0x12) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r14, 0x84, 0x22, &(0x7f0000001800)={0x4, 0x201, 0x1, 0xffffffff}, &(0x7f0000001840)=0x10) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000001880)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$fou(&(0x7f0000001900), r11) sendmsg$FOU_CMD_ADD(r15, &(0x7f0000001a40)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f0000001940)={0x84, r16, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x9, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001a80)=0x8, 0x12) r17 = syz_open_dev$rtc(&(0x7f0000001ac0), 0x80000000, 0x200002) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r17, 0x80489439, &(0x7f0000001b00)) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x7, 0x14, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c40)='GPL\x00', 0x8, 0x60, &(0x7f0000001c80)=""/96, 0x41100, 0x18, '\x00', r6, @fallback=0x2, r1, 0x8, &(0x7f0000001d00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001d40)={0xcb, 0x2, 0x80000000, 0x8}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000001d80)=[r1, r1], 0x0, 0x10, 0xd}, 0x94) 30.510603107s ago: executing program 7 (id=5241): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000000e14080025bd7000ffdbdf250800030004000000080001000200000008003c000400000008000300ff01000008003c00050000000800030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) r4 = socket(0x1e, 0x805, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000d23000/0x4000)=nil, 0x4000, 0x11) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, 0x0, &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000125c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x24040084) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000050000000000001102000000ffffffffede444b63017fa59885723dc0700004000000008000000000000302e5f6130610000000000000000000200000000000000"], 0x0, 0x3d, 0x0, 0x1}, 0x28) 29.503809065s ago: executing program 7 (id=5243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) socket$inet(0x2, 0x5, 0x58631df4) 14.290159851s ago: executing program 5 (id=5289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4c8402, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000240)={0x4, 0x7, 0x4, 0x9, 0x12, "3c0c144e835a6c4b"}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x4401) ioctl$PIO_UNIMAP(r2, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@can={0xc, {{0x4, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "cd8be496bd7b3eb5"}}}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000d40)='net/llc/socket\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) 14.131903529s ago: executing program 3 (id=5291): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x9) fallocate(0xffffffffffffffff, 0x20000, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000080)={[{@subsystem='memory'}, {@cpuset_v2_mode}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x89, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000080)=0x12, &(0x7f00000001c0)}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000580)={{r0, &(0x7f0000000300)='GPL\x00', 0x8000, &(0x7f0000000340)={@align=0x5, {0x7f, 0x2, 0x9, 0x5}}, 0x9, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000500)=0x401}, {[0xffffffff, 0x8, 0x10000, 0x10000]}, 0x710c, 0xb4, &(0x7f0000000840)=""/180}) sendmsg$nl_generic(r4, &(0x7f0000001a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a40)={&(0x7f0000002c40)={0x1434, 0xba, 0x8, 0x70bd2c, 0x25dfdbfe, {0x9}, [@typed={0x8, 0x2c, 0x0, 0x0, @uid=0xee00}, @nested={0x133e, 0xc, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @u32=0x4}, @nested={0x2cc, 0xc6, 0x0, 0x1, [@nested={0x2bf, 0xc8, 0x0, 0x1, [@generic="0a87936f97dd53bf121933d5148bab7b5e9269e9a65a17d6caffc017a1cdd3c481516f694d0a0f027ca7b505c7ecb152425da22726374401369ed4026fb8fe5be8897d53eaf66bec30eb678d5c223e0890a7336c3b6274e79915016dad3c9aa29016d59eaf4475a901a27ef554836913c9146ba8220cacb44dc5a9bc11683657b62dd9e8d392fdc2b2c83d037c650acbb4a857cf9f9837bb13b802be08b67cb9c5764a68f500116c30cc79472929ac885181a5b0578dd6dc8e243e65a43052aa638a5808ffbd69727a3866a0", @generic="2cb14d186e7590b751b5477a1995af38f6188e958cd065695bc0eef4922f04ccc060c5f9758e275e82e77daf94f918128edbff7c7e56783bb11fbab5af3d37ddc0b147eadfeefccf65530488d88f93850ec188b8c24da5", @typed={0xd4, 0xb6, 0x0, 0x0, @binary="2df3776c2e14341198c5af288105fd08cf147d63f20f8b9a42fa71a5b3f7e82d47dea1b685a2966b4a1ae25d1c72ede92f57883a87feaed9d51107fcfdd9c260ad70cfee6f371646903f21f7deb65bb10213cea3d1bb2c6c1b21494d62ee90723438074477d393c68494c62ecf5caab91513450504a24ad72f4665f5c029da01d2f2e7d0fac7d84bb017baf1c7432172a8aa28064aa05cce103afaa66e4d73cfbf6691fabeae4df92cca85f95a85eed262079edebd93d6b5ddbb7ad43c900d9355e0b9951559e004a48c525bf743f81c"}, @typed={0x6, 0x7e, 0x0, 0x0, @str='#\x00'}, @typed={0x8, 0x28, 0x0, 0x0, @fd=r1}, @generic="08d7e17d2f5bde5be6476c94f69a2529286f0292973f4be233670a46367e48480a2623702b86146fe6af2a2c532ef2cfa23b0fce36270466517a51eda3332c579c3337cc34a079141510669b897025d2b049", @generic="e48656154ba3dbbb1e5b9ea4a2b37d298886e9c8ed6487b53ce7bc9a1a58bcebdd79c32f2278adb0461951881b08fddaf7e4c852db22bffa53ca4c07e8987cbdabee02c2d464f0aa82c305dcc8162185a56f9af11241e2e41902a31bd6c7b6b46ce5"]}, @nested={0x8, 0x10e, 0x0, 0x1, [@nested={0x4, 0x104}]}]}, @generic="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", @generic="012b29a75f57d66be4060f5e5ebede1f5f9a178c339527a0d028f72468fc75516f90c4207d609bc5ccb3f8cd896bd3cae10c1a15aba484c63b98271c97403985b09d14a7310e761ef418895d796874fa476515e43d624c7f64f21294f26ea4ba7efa62452a25"]}, @typed={0xc, 0x4d, 0x0, 0x0, @u64=0xc}, @nested={0xcb, 0x59, 0x0, 0x1, [@typed={0xc, 0x57, 0x0, 0x0, @u64=0x7fffffff}, @generic="e634cbfce9cf1144656662f90b4c9d0423d358377063ed782ec5bcb2f1e0c1c56d7e767779eae81290545e134a7650a34f167025903cb276934fa786962065f736565b4129dac09554528d0a383856f58dc58e0d68920fb75f10ee382e2781bc2a013194d962631cd9a7c14aeedd1524198246d5bf8e5990de7da3433fa832f71135f10b99b563f26588be6522c0a54a1954f1c7ebc55b", @generic="555817723ff27210f895c9cc258ed9b25e24d4c3ae662ddb", @typed={0xc, 0xa0, 0x0, 0x0, @u64=0xf17}]}]}, 0x1434}}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000000c0)={0x2, 0x0, 0x1017, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000ac0)={{0xffffffffffffffff, &(0x7f0000000000)='/-\x00', 0x8080, &(0x7f0000000040)={@_ha_fsid={[0x6, 0xa]}, {0x7, 0x33, 0x4, 0x3}}, 0x1ff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)}, 0x9, &(0x7f0000000980)=[{0x3, 0x9, &(0x7f0000000140)='^{,\x00', &(0x7f0000000180)="628215487229fd68b68055d8cd7555846715972ad38ca555cbcbddf6056d88b10e894d7fc15a7065d3e24b9553ba093041bd9143f06eb7", 0x37, 0x20}, {0x1, 0x6, &(0x7f00000001c0)='*-,({---\\\x00', &(0x7f0000000200)="c779272b930fd5f5666119193b5a82b2f4c06f2cc745707832628c146d9904f3c558344819e28c1458b318b75727cdd9ad3358cb28b4d6bad5fbf37b32da30cd4f95a84791038c05e7ef4d9d44eb3fe907699858c9698c3c25ad9dce2e086b777666d4605705db87693a3589a81f59e7ee79a107915db88dbe5d39436883c98f287a64614b521bf9da76538e5d0d60c003012a34c000c285fa7a944fdcec878dae3b88e1f4f57825e262bd1fff54e284", 0xb0, 0x20}, {0x3, 0x9, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="08821cead70210098a8721bc219056221cf5f0cd8c3784c4a9e84e2ed7ac6f60bff39d13da1149f3313aaab307a9bc1346f69faefc82916c54ec578117860afe5143c9fe28783140c626677b90f9d165b63c6f2afd8dec96b626b3e8252b49713d525cde5fb5e45da5925f1814ca0d3c51291321221589d17716586efcf3e7306470f3f289f3b71000459adcf9c8663db352796701af1611380f44e92521b20d114355e9e35e00", 0xa7, 0x20}, {0x2, 0x8, &(0x7f00000003c0)='\'\'--{\x8d\x00', &(0x7f0000000400)="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", 0xfb, 0x20}, {0x3, 0x2, &(0x7f0000000500)='\x00', &(0x7f0000000540)="f5fa8b2ed9cba30f424a874f6503bd6544503ba6e193383362283d85a92aa18ca9d9f069f384faf66f73e7df79c409e55b94b9f32077bdac387c16b6a32fa3d45ac5d1bc8b1d3463287644a11211a346dbaebdbc885618c7da2f0b3a64044d349e04ffd939ddda2aa31724370c6727f4e88568beaf4909ae24c8d9a2da226ff624fc50ee94fc52f2ff86fa5c35d4e41751b94f980f10cd3b56fb93e0c4fc7addf3627fe55b50a3d044c21ed5ceed8128280abee77df8111d8333", 0xba, 0x20}, {0x1, 0x6, &(0x7f0000000600)='^}\x00', &(0x7f0000000640)="5afe334cfcb5a20e9267f70410a4d134caeb34044794247634c48b7e35b069b315e650b870cf8937d0d2895735fffeaa06f83a9a17bb3ecb1a3dc67cbca5119c66e80f8c3464fd9561a8", 0x4a, 0x14}, {0x2, 0x9, &(0x7f00000006c0)='!&v$\x00', &(0x7f0000000700)="522ea990494d890a0c297c9565b3667df69d0052498fcd3c197ee3cb9eee9485c434affc883ff21eb32b7b1a0f2f6accfff5b6b65170d308dd8543ee372405b0a51e77b19ec40b475f061ccfe1f68520aefdda0ef9469c58e30cf4ab1930a34f184ad2ee826cd2e5aedacf152c55ce727d05f119c29533f97ef4ebabb835954ba3bc634730ca47c25ec6fec9677d82707cbaabeb5b80483b03cee82de6284d650a1c1b58aeef13abafd9766db052", 0xae, 0x30}, {0x2, 0xc, &(0x7f00000007c0)='%@\x00', &(0x7f0000000800)="12308759479420c7aab0362d44db93cea914887738937637468732b5886649723c212e9d00664a19634f27cc59e0c11f626242d42f5801b010d0aae13a3d36a294ac4daf92d946b20a10ce98168fba7c472af3d538a62c837268c5955e086da4ad73066d9a86d8a64cf3d7bb67e6e2b598e55a26ca99da991161239b4c7cf446318955e4a0ba041c8f73e8a8d1b42ce962df5c2de5a158bd45d18544d3bb744f563a167754574d6c8a191fdb79974c1fdf1488b9b930496d88", 0xb9, 0x2}, {0x1, 0x6f23f152, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="a8653974abbbe82939d0b66c1084dfea08dad6171e6997576e7fced5305100ead4e045dce514ea3d8682d93a88cf5ad10ae8df55f93cbaa4e65018bb4f88e04b79278c6aec65549295e43a74d9ff09026da006ace9fd294c2dd7ea2557ef80420eab86d20065f5205b89c1e4151e8c39a028bf90d46a9e17f9df37159f3b", 0x7e, 0x12}]}) 13.341914691s ago: executing program 35 (id=5243): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100004000"/20, @ANYRES32=0x0, @ANYBLOB="041004000000000008000400f903000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x44004) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) socket$inet(0x2, 0x5, 0x58631df4) 13.321304102s ago: executing program 3 (id=5294): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff26bd700001000000000000ff", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280050004000100000014e006002001000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13.050507434s ago: executing program 3 (id=5296): init_module(&(0x7f0000000000)=ANY=[@ANYBLOB="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"/1031], 0x407, &(0x7f0000000440)='\x06\x00PC\x00\x00\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000006c0)="c3a9cdebd5d65aff1d320fc5d90b4550b77c183c0b7c6f9a359973de955cb6712f1e7fc6caacbf93204d569c4da9375b1c28a9e35607dd1c188146fcc46ee42713d14316aaef326ef15e2085700adf9f0c92e2470154c1f07cd815f1765b6973282abe17607b3e206eec05d6dec171e6f6622b4e2c200a4c391270663bf205156ed3c86e4a6c49427eb8fafbbb6063554192a91ffccc10ca6d94c7fc209f3aa91ba3bcba523a9264d6b5d5954b4ef92c0f8163b5bbdcc4c2f1a01e27ac5cde24ff3963426949ffafe1f13ff903698f00"/222, 0x78cbb9c343066347) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYRESDEC=r2, @ANYRESDEC, @ANYRESDEC=r2]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/bnep\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0xfdbb) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000f4adb26dd990829a7cba394f182505a1a4c000110203dc1b4bd29d010902bf0002010650000900000000020d0000052406000108240089b30d240f010a0000000300ff000606241a05001407240a050905580c"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES16=0x0, @ANYRES64=r7], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 10.888897555s ago: executing program 5 (id=5299): setuid(0xee01) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x1, &(0x7f0000000240)) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) syz_io_uring_setup(0x3a, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r4, @ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x48811}, 0x44840) 9.548466927s ago: executing program 2 (id=5300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) 8.468919345s ago: executing program 3 (id=5302): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x0, 0x2, 0x7fffffdf, 0x84e1, 0x2f, 0xb, 0x6, 0x7, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000000, 0xf, 0x10000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0x9e800000, 0x40002, 0x8, 0x7, 0x746f, 0x48, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 5.981390562s ago: executing program 2 (id=5303): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x27, 0x4, @thr={0x0, 0x0}}, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x1}}) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000004c0)) (rerun: 32) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f00000000c0)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) getpid() (async, rerun: 32) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f07ebbee7, 0x100010, r1, 0x1000000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000000) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x888, 0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x201, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x890}, 0x1) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c2000001400a59500000000fddbdf250a6800c8", @ANYRES32=r5, @ANYBLOB="14000200ff020000000000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000040), 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r8, 0x89e4) 5.954992209s ago: executing program 3 (id=5304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000001900)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) 5.66291489s ago: executing program 5 (id=5305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a7c000000090a010400000000000000000a0000040900020073797a310000000208000a40fffffffc0900010073797a3100000000080005400000000d3800128034000180090001006c6173740000000004000280200001800c000100636f756e74657200100002800c000140000000010000000108000340000001"], 0xa4}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 5.662332782s ago: executing program 6 (id=5306): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000002c0), 0x4) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000300)={0x40000000000, 0xff, 0xfffffffd, 0xf001}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x9a, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@getchain={0x5c, 0x66, 0x500, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xfffb, 0x2}, {0xc, 0x5}}, [{0x8, 0xb, 0x1000}, {0x8, 0xb, 0x449}, {0x8, 0xb, 0xe3a9}, {0x8, 0xb, 0xa980}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x1000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) fspick(0xffffffffffffffff, 0x0, 0x4065a0f5ac746b35) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x2f00) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) socket$nl_route(0x10, 0x3, 0x0) acct(&(0x7f0000000000)='./file0\x00') 5.66160285s ago: executing program 2 (id=5307): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x6, 0xd00}]}]}}, &(0x7f0000000280)=""/265, 0x32, 0x109, 0x1}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x1600000000000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) 4.39430532s ago: executing program 5 (id=5308): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ftruncate(0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x20000, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000080)={[{@subsystem='memory'}, {@cpuset_v2_mode}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x89, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000080)=0x12, &(0x7f00000001c0)}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000580)={{r0, &(0x7f0000000300)='GPL\x00', 0x8000, &(0x7f0000000340)={@align=0x5, {0x7f, 0x2, 0x9, 0x5}}, 0x9, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000500)=0x401}, {[0xffffffff, 0x8, 0x10000, 0x10000]}, 0x710c, 0xb4, &(0x7f0000000840)=""/180}) sendmsg$nl_generic(r5, &(0x7f0000001a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a40)={&(0x7f0000002c40)={0x1434, 0xba, 0x8, 0x70bd2c, 0x25dfdbfe, {0x9}, [@typed={0x8, 0x2c, 0x0, 0x0, @uid=0xee00}, @nested={0x133e, 0xc, 0x0, 0x1, [@typed={0x8, 0x9a, 0x0, 0x0, @u32=0x4}, @nested={0x2cc, 0xc6, 0x0, 0x1, [@nested={0x2bf, 0xc8, 0x0, 0x1, [@generic="0a87936f97dd53bf121933d5148bab7b5e9269e9a65a17d6caffc017a1cdd3c481516f694d0a0f027ca7b505c7ecb152425da22726374401369ed4026fb8fe5be8897d53eaf66bec30eb678d5c223e0890a7336c3b6274e79915016dad3c9aa29016d59eaf4475a901a27ef554836913c9146ba8220cacb44dc5a9bc11683657b62dd9e8d392fdc2b2c83d037c650acbb4a857cf9f9837bb13b802be08b67cb9c5764a68f500116c30cc79472929ac885181a5b0578dd6dc8e243e65a43052aa638a5808ffbd69727a3866a0", @generic="2cb14d186e7590b751b5477a1995af38f6188e958cd065695bc0eef4922f04ccc060c5f9758e275e82e77daf94f918128edbff7c7e56783bb11fbab5af3d37ddc0b147eadfeefccf65530488d88f93850ec188b8c24da5", @typed={0xd4, 0xb6, 0x0, 0x0, @binary="2df3776c2e14341198c5af288105fd08cf147d63f20f8b9a42fa71a5b3f7e82d47dea1b685a2966b4a1ae25d1c72ede92f57883a87feaed9d51107fcfdd9c260ad70cfee6f371646903f21f7deb65bb10213cea3d1bb2c6c1b21494d62ee90723438074477d393c68494c62ecf5caab91513450504a24ad72f4665f5c029da01d2f2e7d0fac7d84bb017baf1c7432172a8aa28064aa05cce103afaa66e4d73cfbf6691fabeae4df92cca85f95a85eed262079edebd93d6b5ddbb7ad43c900d9355e0b9951559e004a48c525bf743f81c"}, @typed={0x6, 0x7e, 0x0, 0x0, @str='#\x00'}, @typed={0x8, 0x28, 0x0, 0x0, @fd}, @generic="08d7e17d2f5bde5be6476c94f69a2529286f0292973f4be233670a46367e48480a2623702b86146fe6af2a2c532ef2cfa23b0fce36270466517a51eda3332c579c3337cc34a079141510669b897025d2b049", @generic="e48656154ba3dbbb1e5b9ea4a2b37d298886e9c8ed6487b53ce7bc9a1a58bcebdd79c32f2278adb0461951881b08fddaf7e4c852db22bffa53ca4c07e8987cbdabee02c2d464f0aa82c305dcc8162185a56f9af11241e2e41902a31bd6c7b6b46ce5"]}, @nested={0x8, 0x10e, 0x0, 0x1, [@nested={0x4, 0x104}]}]}, @generic="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", @generic="012b29a75f57d66be4060f5e5ebede1f5f9a178c339527a0d028f72468fc75516f90c4207d609bc5ccb3f8cd896bd3cae10c1a15aba484c63b98271c97403985b09d14a7310e761ef418895d796874fa476515e43d624c7f64f21294f26ea4ba7efa62452a25"]}, @typed={0xc, 0x4d, 0x0, 0x0, @u64=0xc}, @nested={0xcb, 0x59, 0x0, 0x1, [@typed={0xc, 0x57, 0x0, 0x0, @u64=0x7fffffff}, @generic="e634cbfce9cf1144656662f90b4c9d0423d358377063ed782ec5bcb2f1e0c1c56d7e767779eae81290545e134a7650a34f167025903cb276934fa786962065f736565b4129dac09554528d0a383856f58dc58e0d68920fb75f10ee382e2781bc2a013194d962631cd9a7c14aeedd1524198246d5bf8e5990de7da3433fa832f71135f10b99b563f26588be6522c0a54a1954f1c7ebc55b", @generic="555817723ff27210f895c9cc258ed9b25e24d4c3ae662ddb", @typed={0xc, 0xa0, 0x0, 0x0, @u64=0xf17}]}]}, 0x1434}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, 0x94) syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) syz_open_procfs(0x0, &(0x7f0000000b40)='oom_score\x00') ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000ac0)={{0xffffffffffffffff, &(0x7f0000000000)='/-\x00', 0x8080, &(0x7f0000000040)={@_ha_fsid={[0x6, 0xa]}, {0x7, 0x33, 0x4, 0x3}}, 0x1ff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)}, 0x9, &(0x7f0000000980)=[{0x3, 0x9, &(0x7f0000000140)='^{,\x00', &(0x7f0000000180)="628215487229fd68b68055d8cd7555846715972ad38ca555cbcbddf6056d88b10e894d7fc15a7065d3e24b9553ba093041bd9143f06eb7", 0x37, 0x20}, {0x1, 0x6, &(0x7f00000001c0)='*-,({---\\\x00', &(0x7f0000000200)="c779272b930fd5f5666119193b5a82b2f4c06f2cc745707832628c146d9904f3c558344819e28c1458b318b75727cdd9ad3358cb28b4d6bad5fbf37b32da30cd4f95a84791038c05e7ef4d9d44eb3fe907699858c9698c3c25ad9dce2e086b777666d4605705db87693a3589a81f59e7ee79a107915db88dbe5d39436883c98f287a64614b521bf9da76538e5d0d60c003012a34c000c285fa7a944fdcec878dae3b88e1f4f57825e262bd1fff54e284", 0xb0, 0x20}, {0x3, 0x9, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="08821cead70210098a8721bc219056221cf5f0cd8c3784c4a9e84e2ed7ac6f60bff39d13da1149f3313aaab307a9bc1346f69faefc82916c54ec578117860afe5143c9fe28783140c626677b90f9d165b63c6f2afd8dec96b626b3e8252b49713d525cde5fb5e45da5925f1814ca0d3c51291321221589d17716586efcf3e7306470f3f289f3b71000459adcf9c8663db352796701af1611380f44e92521b20d114355e9e35e00", 0xa7, 0x20}, {0x2, 0x8, &(0x7f00000003c0)='\'\'--{\x8d\x00', &(0x7f0000000400)="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", 0xfb, 0x20}, {0x3, 0x2, &(0x7f0000000500)='\x00', &(0x7f0000000540)="f5fa8b2ed9cba30f424a874f6503bd6544503ba6e193383362283d85a92aa18ca9d9f069f384faf66f73e7df79c409e55b94b9f32077bdac387c16b6a32fa3d45ac5d1bc8b1d3463287644a11211a346dbaebdbc885618c7da2f0b3a64044d349e04ffd939ddda2aa31724370c6727f4e88568beaf4909ae24c8d9a2da226ff624fc50ee94fc52f2ff86fa5c35d4e41751b94f980f10cd3b56fb93e0c4fc7addf3627fe55b50a3d044c21ed5ceed8128280abee77df8111d8333", 0xba, 0x20}, {0x1, 0x6, &(0x7f0000000600)='^}\x00', &(0x7f0000000640)="5afe334cfcb5a20e9267f70410a4d134caeb34044794247634c48b7e35b069b315e650b870cf8937d0d2895735fffeaa06f83a9a17bb3ecb1a3dc67cbca5119c66e80f8c3464fd9561a8", 0x4a, 0x14}, {0x2, 0x9, &(0x7f00000006c0)='!&v$\x00', &(0x7f0000000700)="522ea990494d890a0c297c9565b3667df69d0052498fcd3c197ee3cb9eee9485c434affc883ff21eb32b7b1a0f2f6accfff5b6b65170d308dd8543ee372405b0a51e77b19ec40b475f061ccfe1f68520aefdda0ef9469c58e30cf4ab1930a34f184ad2ee826cd2e5aedacf152c55ce727d05f119c29533f97ef4ebabb835954ba3bc634730ca47c25ec6fec9677d82707cbaabeb5b80483b03cee82de6284d650a1c1b58aeef13abafd9766db052", 0xae, 0x30}, {0x2, 0xc, &(0x7f00000007c0)='%@\x00', &(0x7f0000000800)="12308759479420c7aab0362d44db93cea914887738937637468732b5886649723c212e9d00664a19634f27cc59e0c11f626242d42f5801b010d0aae13a3d36a294ac4daf92d946b20a10ce98168fba7c472af3d538a62c837268c5955e086da4ad73066d9a86d8a64cf3d7bb67e6e2b598e55a26ca99da991161239b4c7cf446318955e4a0ba041c8f73e8a8d1b42ce962df5c2de5a158bd45d18544d3bb744f563a167754574d6c8a191fdb79974c1fdf1488b9b930496d88", 0xb9, 0x2}, {0x1, 0x6f23f152, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="a8653974abbbe82939d0b66c1084dfea08dad6171e6997576e7fced5305100ead4e045dce514ea3d8682d93a88cf5ad10ae8df55f93cbaa4e65018bb4f88e04b79278c6aec65549295e43a74d9ff09026da006ace9fd294c2dd7ea2557ef80420eab86d20065f5205b89c1e4151e8c39a028bf90d46a9e17f9df37159f3b", 0x7e, 0x12}]}) 4.393756809s ago: executing program 3 (id=5309): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x1, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000400)={0xa, 0x2000000000000007}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth0_to_team\x00', 0x200}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028bd7000fcdbdf251b000000080001", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480741306806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000140)=0xc160) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000c40)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8001, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x5000000000000000, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x5927, 0xb, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0xffffffffffffffff, 0x88c, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x840, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x534, 0xfffffffffffffffc, 0x0, 0x0, 0xff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0xa0000, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x0, 0x400, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x100000000000, 0x3, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x3ff, 0x0, 0x80000000, 0x100, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x7]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$TCSETSF2(r5, 0x8926, &(0x7f0000000240)={0xa, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0x0, 0x8}) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) 4.343327188s ago: executing program 6 (id=5310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x80) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) 3.940423098s ago: executing program 5 (id=5311): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x130, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) close(0x3) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000480)={0x5, 0x1, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000010040)='net/mcfilter\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xfffffffc, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x20000) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000010080)='id_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r7}) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x0) keyctl$update(0x2, r7, 0x0, 0xff88) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 3.351248165s ago: executing program 2 (id=5312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000000000000004e0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000124c51dcf7c59eedc5f11cb059ff296754dff24c6420ac86cda77b7bb002eb1b30d5efec64c5350479e76c1d40ee08d82f59218db1610dd22e5bb0ae615bbebfe9bbad9658c8c903dc97cf8219530a16ddc49c7d7e068ada26363dc5308a30fc305f5002df0e"], 0x34}}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0x2020) io_uring_setup(0x58fe, &(0x7f0000000540)={0x0, 0xf6fc, 0x0, 0x0, 0x805f}) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x1, 0x356, [0x0, 0x200000000640, 0x200000000936, 0x200000000966], 0x0, &(0x7f0000000300), &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, 0x3ce) close(0xffffffffffffffff) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) syz_io_uring_setup(0x5edd, &(0x7f0000000340)={0x0, 0x60d6, 0x800, 0x1, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1e) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.906659887s ago: executing program 6 (id=5313): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100003b00015300000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140a, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x20004000) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup(0xffffffffffffffff) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = fanotify_init(0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f00000000c0)={0x30000015}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) lseek(r7, 0x0, 0x1) socket$unix(0x1, 0x1, 0x0) 1.190621967s ago: executing program 6 (id=5314): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001b00)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69394a09000032010000000010"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ustat(0xd, &(0x7f00000000c0)) socket$inet6(0xa, 0x3, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x268, 0x140, 0x19, 0x0, 0x140, 0x0, 0x1f8, 0x1f0, 0x1f0, 0x1f8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xb8, 0x118, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}]}, @common=@SET={0x60}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2709fb5a2bab03dc, 0xff0000ff, 'bridge_slave_0\x00', 'pimreg\x00', {}, {0xe8835d89a38d226f}, 0xff, 0x2, 0x1}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x85ffffff, 0x0, '\x00', 0x0, 0xb, r0}, 0x94) 486.289313ms ago: executing program 2 (id=5315): socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x24008810) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x100}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) 122.658225ms ago: executing program 6 (id=5316): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a000000000000000000000000000080ffffffffffffff000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000000000000000000000000000080019"], 0xe0}}, 0x0) 68.47685ms ago: executing program 6 (id=5317): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001afbff00030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) 43.842983ms ago: executing program 2 (id=5318): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000300000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000000000000000000000000000080019f060"], 0xe0}}, 0x240840c0) 0s ago: executing program 5 (id=5319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='-]-\\($+.\x00', 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180"], 0x64}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf25110000003c0002803400038008000200f9ffffff08000100001000000800010000000000080002000700000008000100ff01000008000100ff01000004000400"], 0x50}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000040) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) kernel console output (not intermixed with test programs): ue: 81 [ 1130.806446][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1130.816199][ T5868] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1130.826473][ T5868] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1130.840486][ T5868] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1130.849982][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.860291][ T5868] usb 7-1: config 0 descriptor?? [ 1131.042168][ T10] usb 6-1: device descriptor read/64, error -71 [ 1131.092270][ T5868] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1131.128644][ T5868] usb 7-1: USB disconnect, device number 16 [ 1131.141158][ T5868] usblp0: removed [ 1131.816767][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1131.995982][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1132.196859][ T10] usb 6-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 1132.219212][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1132.239987][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 18432, setting to 1024 [ 1132.267502][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1132.364742][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.449822][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1132.465016][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1132.482278][T23678] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1132.482450][ T10] usb 6-1: Manufacturer: syz [ 1132.489176][ T29] audit: type=1400 audit(1775134223.834:2058): avc: denied { mounton } for pid=23677 comm="syz.3.5000" path="/syzcgroup/unified/syz3" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1132.533689][ T10] usb 6-1: config 0 descriptor?? [ 1132.608503][T23680] input: syz1 as /devices/virtual/input/input85 [ 1132.911070][ T4674] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1132.935541][ T4674] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1132.973083][ T4674] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1133.299617][ T10] rc_core: IR keymap rc-hauppauge not found [ 1133.305586][ T10] Registered IR keymap rc-empty [ 1133.312080][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1133.322264][ T4674] usb 3-1: USB disconnect, device number 2 [ 1133.435952][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1133.570714][T23695] netlink: 'syz.7.4999': attribute type 10 has an invalid length. [ 1133.578733][T23695] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4999'. [ 1133.595865][T23695] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1133.670093][ T29] audit: type=1400 audit(1775134224.919:2059): avc: denied { ioctl } for pid=23690 comm="syz.7.4999" path="socket:[123723]" dev="sockfs" ino=123723 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1133.998307][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1134.286030][T23698] netlink: 'syz.6.5003': attribute type 10 has an invalid length. [ 1134.294513][T23698] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5003'. [ 1134.310947][T23698] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1134.491860][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input86 [ 1134.509450][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.632858][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.655945][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.687977][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.782704][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.816469][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.831961][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5005'. [ 1134.840029][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.880728][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.910212][ T29] audit: type=1400 audit(1775134226.097:2060): avc: denied { ioctl } for pid=23707 comm="syz.5.5007" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1134.938231][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1134.949137][T23710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5005'. [ 1135.036322][T23714] loop6: detected capacity change from 0 to 2640 [ 1135.044803][T23714] buffer_io_error: 6 callbacks suppressed [ 1135.044832][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.058687][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.067055][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.075404][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.083758][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.091884][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.100451][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.108519][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.116492][T23714] ldm_validate_partition_table(): Disk read failed. [ 1135.123331][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.131680][T23714] Buffer I/O error on dev loop6, logical block 0, async page read [ 1135.139859][T23714] Dev loop6: unable to read RDB block 0 [ 1135.145964][T23714] loop6: unable to read partition table [ 1135.152416][T23714] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1135.212239][T23714] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 1135.222332][T23714] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 1135.232344][T23714] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 1135.242352][T23714] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 1135.255368][T23714] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 1135.265318][T23714] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 1135.275227][T23714] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 1135.285129][T23714] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 1135.660714][ T10] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1135.685944][ T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1135.702595][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1135.714139][ T4674] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1135.730295][ T10] usb 6-1: USB disconnect, device number 32 [ 1135.886591][ T4674] usb 3-1: Using ep0 maxpacket: 8 [ 1135.903937][ T4674] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1135.914974][ T4674] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1135.929153][T23725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.937719][T23725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.955229][ T4674] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1135.965693][ T4674] usb 3-1: config 250 has no interface number 0 [ 1135.973117][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1135.988998][ T4674] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1136.002997][ T4674] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1136.016594][ T4674] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 28276, setting to 1024 [ 1136.028895][ T4674] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1136.044602][ T4674] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1136.059125][ T4674] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1136.077341][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1136.131718][ T9] usb 4-1: device descriptor read/64, error -71 [ 1136.146236][ T4674] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1136.156881][ T4674] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1136.167573][ T4674] usb 3-1: Product: syz [ 1136.172908][ T4674] usb 3-1: SerialNumber: syz [ 1136.409363][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1136.417316][ T10] usb 6-1: can't read configurations, error -61 [ 1136.424625][ T9] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1136.442636][ T4674] hub 3-1:250.228: bad descriptor, ignoring hub [ 1136.449312][ T4674] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1136.581816][ T9] usb 4-1: device descriptor read/64, error -71 [ 1136.608048][T23734] macvtap1: entered promiscuous mode [ 1136.608235][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1136.614768][T23734] macvtap1: entered allmulticast mode [ 1136.871420][ T9] usb usb4-port1: attempt power cycle [ 1136.936101][T23732] kvm: apic: phys broadcast and lowest prio [ 1136.946962][T23739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.958861][T23739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.978820][T23701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1136.990738][T23701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1137.001384][T23701] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1137.009557][T23701] UDF-fs: Scanning with blocksize 512 failed [ 1137.016984][T23701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1137.027470][T23701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1137.030926][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1137.037157][T23701] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1137.045652][ T10] usb 6-1: can't read configurations, error -61 [ 1137.060100][T23701] UDF-fs: Scanning with blocksize 1024 failed [ 1137.060128][ T10] usb usb6-port1: attempt power cycle [ 1137.067082][T23701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1137.084890][T23701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1137.095661][T23701] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1137.103805][T23701] UDF-fs: Scanning with blocksize 2048 failed [ 1137.110997][T23701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1137.120987][T23701] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1137.130663][T23701] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1137.138679][T23701] UDF-fs: Scanning with blocksize 4096 failed [ 1137.144768][T23701] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1137.170204][ T4674] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1137.201176][ T4674] usb 3-1: USB disconnect, device number 3 [ 1137.209697][ T4674] usblp0: removed [ 1137.215502][T14616] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1137.232633][ T9] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1137.232808][T14635] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1137.254779][ T9] usb 4-1: device descriptor read/8, error -71 [ 1137.385437][T14616] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1137.395418][T14616] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.403950][T14616] usb 8-1: Product: syz [ 1137.408131][T14616] usb 8-1: Manufacturer: syz [ 1137.412711][T14616] usb 8-1: SerialNumber: syz [ 1137.413605][T14635] usb 7-1: Using ep0 maxpacket: 8 [ 1137.425438][T14616] usb 8-1: config 0 descriptor?? [ 1137.425450][T14635] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1137.440092][T14635] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1137.441646][T14616] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1137.448831][T14635] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1137.448858][T14635] usb 7-1: config 250 has no interface number 0 [ 1137.448894][T14635] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1137.448917][T14635] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1137.448940][T14635] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1137.448960][T14635] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1137.448981][T14635] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1137.449004][T14635] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1137.450478][T14635] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1137.461489][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1137.468244][T14635] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1137.511431][T14616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1137.517330][T14635] usb 7-1: Product: syz [ 1137.531516][ T9] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1137.538334][T14635] usb 7-1: SerialNumber: syz [ 1137.564518][T14616] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1137.601967][T14616] usb 8-1: media controller created [ 1137.609337][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1137.617462][ T10] usb 6-1: can't read configurations, error -61 [ 1137.624098][ T9] usb 4-1: device descriptor read/8, error -71 [ 1137.626375][T14635] hub 7-1:250.228: bad descriptor, ignoring hub [ 1137.637228][T14635] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1137.639477][T14616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1137.655283][T23732] dvb-usb: bulk message failed: -22 (7/0) [ 1137.711487][T14616] DVB: Unable to find symbol mt352_attach() [ 1137.743639][T14616] DVB: Unable to find symbol nxt6000_attach() [ 1137.750391][ T9] usb usb4-port1: unable to enumerate USB device [ 1137.758060][T14616] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1137.769212][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1137.779251][T14616] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input87 [ 1137.794253][T14616] dvb-usb: schedule remote query interval to 1000 msecs. [ 1137.802052][T14616] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1137.813221][T14616] dvb-usb: bulk message failed: -22 (7/0) [ 1137.823166][T14616] dvb-usb: bulk message failed: -22 (7/0) [ 1137.831096][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1137.838668][ T10] usb 6-1: can't read configurations, error -61 [ 1137.848794][T14635] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1137.855195][T14616] usb 8-1: USB disconnect, device number 7 [ 1137.884369][ T10] usb usb6-port1: unable to enumerate USB device [ 1137.924345][T14616] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1138.056323][ T29] audit: type=1400 audit(1775134229.044:2061): avc: denied { read write } for pid=23738 comm="syz.6.5014" name="lp0" dev="devtmpfs" ino=4873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1138.080688][T23748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.093200][T23748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.112816][ T29] audit: type=1400 audit(1775134229.044:2062): avc: denied { open } for pid=23738 comm="syz.6.5014" path="/dev/usb/lp0" dev="devtmpfs" ino=4873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1138.228000][T14635] usb 7-1: USB disconnect, device number 17 [ 1138.253846][T14635] usblp0: removed [ 1138.272660][T23754] netlink: 'syz.5.5019': attribute type 1 has an invalid length. [ 1138.333374][T23757] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5019'. [ 1138.383238][T23754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1138.565122][T23757] bond1: (slave geneve2): making interface the new active one [ 1138.574777][T23757] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1138.584393][T12478] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.057808][T14616] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1139.073147][T12467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.087445][T23769] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5023'. [ 1139.097250][T12467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.109918][T12467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.183246][ T29] audit: type=1400 audit(1775134230.091:2063): avc: denied { block_suspend } for pid=23768 comm="syz.6.5023" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1139.252905][T23769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1139.264314][T14616] usb 3-1: Using ep0 maxpacket: 16 [ 1139.276343][T14616] usb 3-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 1139.291303][T23771] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5022'. [ 1139.303269][T14616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1139.334032][T14616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 18432, setting to 1024 [ 1139.354561][T14616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1139.376073][T14616] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.404310][T23771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5022'. [ 1139.415615][T14616] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1139.425446][T14616] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1139.434215][T14635] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1139.439162][T23771] macvtap1: entered promiscuous mode [ 1139.447695][T14616] usb 3-1: Manufacturer: syz [ 1139.459822][T14616] usb 3-1: config 0 descriptor?? [ 1139.466461][T23771] syz_tun: entered promiscuous mode [ 1139.473957][T23771] macvtap1: entered allmulticast mode [ 1139.500787][T23778] syz_tun: left promiscuous mode [ 1139.618150][T23781] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5025'. [ 1139.621183][T14635] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1139.721268][T14635] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.827304][T14635] usb 8-1: Product: syz [ 1139.868949][T14635] usb 8-1: Manufacturer: syz [ 1139.919814][T14635] usb 8-1: SerialNumber: syz [ 1139.950664][T14635] usb 8-1: config 0 descriptor?? [ 1140.012022][T14616] rc_core: IR keymap rc-hauppauge not found [ 1140.030208][T14616] Registered IR keymap rc-empty [ 1140.047342][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.082002][T23786] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5027'. [ 1140.097448][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.131106][T14616] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1140.162343][T14616] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input88 [ 1140.207443][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.258810][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.289852][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.322867][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.354332][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.385637][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.412944][T14635] usb 8-1: Firmware: major: 2, minor: 0, hardware type: ATUSB (0) [ 1140.417957][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.450090][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.483317][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.514264][T14616] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1140.564724][T14616] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1140.629103][T14635] usb 8-1: no permanent extended address found, random address set [ 1140.916018][T14616] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1141.047809][T23798] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5024'. [ 1141.802151][T23802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5030'. [ 1142.027646][T14635] usb 3-1: USB disconnect, device number 4 [ 1142.636565][ T29] audit: type=1400 audit(1775134232.935:2064): avc: denied { ioctl } for pid=23803 comm="syz.3.5031" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1143.418747][ T29] audit: type=1400 audit(1775134234.057:2065): avc: denied { ioctl } for pid=23812 comm="syz.6.5034" path="socket:[124411]" dev="sockfs" ino=124411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1144.042712][T23825] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5037'. [ 1144.262466][T23826] vlan0: entered promiscuous mode [ 1144.287735][T23826] vlan0: left allmulticast mode [ 1144.293562][T14635] usb 8-1: USB disconnect, device number 8 [ 1145.111021][T14635] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1145.357800][T14635] usb 3-1: Using ep0 maxpacket: 16 [ 1145.371277][T14635] usb 3-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 1145.392787][T14635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1145.414624][T14635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 18432, setting to 1024 [ 1145.427224][T14634] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1145.577866][T14635] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1145.588152][T14635] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1145.603900][T14635] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1145.613826][T14635] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1145.621881][T14635] usb 3-1: Manufacturer: syz [ 1145.742530][T14635] usb 3-1: config 0 descriptor?? [ 1145.762940][T14634] usb 6-1: Using ep0 maxpacket: 32 [ 1145.877362][T14634] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1145.909721][T14634] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1145.934011][T14634] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1145.953123][T14634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1145.973306][T14634] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1145.983706][T14634] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1145.998053][T14634] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1146.007160][T14634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.034831][T14634] usb 6-1: config 0 descriptor?? [ 1146.347426][T14634] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1146.393777][T14635] rc_core: IR keymap rc-hauppauge not found [ 1146.414080][T14634] usb 6-1: USB disconnect, device number 37 [ 1146.422740][T14635] Registered IR keymap rc-empty [ 1146.439145][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1146.446521][T14634] usblp0: removed [ 1146.501372][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1146.525378][T14635] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1146.566309][T14635] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input89 [ 1146.595164][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1146.622957][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1146.789860][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1147.222310][T23898] netlink: zone id is out of range [ 1147.227891][T23898] netlink: zone id is out of range [ 1147.233094][T23898] netlink: get zone limit has 4 unknown bytes [ 1147.634066][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1147.668443][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1147.731397][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1147.773753][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1147.783606][ T29] audit: type=1400 audit(1775134238.136:2066): avc: denied { getopt } for pid=23905 comm="syz.5.5054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1147.813197][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1147.837178][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1147.898488][T14635] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1148.159376][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1148.234468][T14635] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1148.270108][T14635] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1148.385197][ T9] usb 6-1: config 7 has an invalid interface number: 54 but max is 2 [ 1148.406017][ T9] usb 6-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 1148.439195][ T9] usb 6-1: config 7 has an invalid interface number: 4 but max is 2 [ 1148.489631][ T9] usb 6-1: config 7 has an invalid interface number: 248 but max is 2 [ 1148.527136][ T9] usb 6-1: config 7 has no interface number 0 [ 1148.566200][ T9] usb 6-1: config 7 has no interface number 1 [ 1148.733664][ T9] usb 6-1: config 7 has no interface number 2 [ 1148.793696][ T9] usb 6-1: config 7 interface 54 altsetting 6 has an endpoint descriptor with address 0x13, changing to 0x3 [ 1148.976658][ T9] usb 6-1: config 7 interface 54 altsetting 6 endpoint 0x3 has an invalid bInterval 122, changing to 7 [ 1148.992886][ T9] usb 6-1: config 7 interface 54 altsetting 6 endpoint 0x3 has invalid maxpacket 59220, setting to 1024 [ 1149.015449][ T9] usb 6-1: config 7 interface 54 altsetting 6 endpoint 0xB has an invalid bInterval 204, changing to 11 [ 1149.040559][T14616] usb 3-1: USB disconnect, device number 5 [ 1149.062902][ T9] usb 6-1: config 7 interface 54 altsetting 6 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1149.095150][ T9] usb 6-1: config 7 interface 54 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 1149.126325][ T9] usb 6-1: config 7 interface 54 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 1149.149150][ T9] usb 6-1: config 7 interface 54 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1149.204614][ T9] usb 6-1: config 7 interface 54 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 1149.514810][ T10] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1149.944957][ T9] usb 6-1: config 7 interface 54 altsetting 6 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 1149.999882][ T9] usb 6-1: config 7 interface 4 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1150.031296][ T9] usb 6-1: config 7 interface 4 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1150.068497][ T9] usb 6-1: config 7 interface 4 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1150.092709][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1150.099914][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1150.125995][ T9] usb 6-1: config 7 interface 4 altsetting 2 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1150.146488][ T10] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1150.166543][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.182413][ T9] usb 6-1: config 7 interface 4 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1150.199895][ T10] usb 4-1: Product: syz [ 1150.204161][ T10] usb 4-1: Manufacturer: syz [ 1150.208923][ T9] usb 6-1: config 7 interface 4 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1150.222046][ T10] usb 4-1: SerialNumber: syz [ 1150.228921][ T10] usb 4-1: config 0 descriptor?? [ 1150.276491][ T9] usb 6-1: config 7 interface 4 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 1150.352156][ T10] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 1150.370619][ T9] usb 6-1: config 7 interface 4 altsetting 2 endpoint 0x5 has an invalid bInterval 215, changing to 7 [ 1150.382478][ T10] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1151.391114][ T9] usb 6-1: config 7 interface 4 altsetting 2 has an endpoint descriptor with address 0x4E, changing to 0xE [ 1151.402935][ T9] usb 6-1: config 7 interface 4 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1151.709952][ T29] audit: type=1400 audit(1775134240.661:2067): avc: denied { mounton } for pid=23936 comm="syz.7.5062" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1151.844050][ T9] usb 6-1: config 7 interface 4 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 1151.934569][ T9] usb 6-1: config 7 interface 4 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1151.946891][T22483] usb 4-1: USB disconnect, device number 124 [ 1151.976577][T22483] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1151.989734][ T5824] udevd[5824]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 1151.999325][ T9] usb 6-1: config 7 interface 4 altsetting 2 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 1152.018233][T22483] kobil_sct 4-1:0.0: device disconnected [ 1152.024076][T23952] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5064'. [ 1152.059922][T23949] syzkaller1: entered promiscuous mode [ 1152.065477][T23949] syzkaller1: entered allmulticast mode [ 1152.066785][ T29] audit: type=1400 audit(1775134242.149:2068): avc: denied { ioctl } for pid=23946 comm="syz.7.5064" path="socket:[124627]" dev="sockfs" ino=124627 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1152.120292][ T5824] udevd[5824]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1152.142163][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5065'. [ 1152.276421][ T9] usb 6-1: config 7 interface 248 altsetting 9 endpoint 0x1 has an invalid bInterval 212, changing to 7 [ 1152.308511][ T9] usb 6-1: config 7 interface 54 has no altsetting 0 [ 1152.331628][ T9] usb 6-1: config 7 interface 4 has no altsetting 0 [ 1152.340850][ T29] audit: type=1400 audit(1775134242.214:2069): avc: denied { shutdown } for pid=23950 comm="syz.2.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1152.367255][ T9] usb 6-1: config 7 interface 248 has no altsetting 0 [ 1152.385056][ T9] usb 6-1: string descriptor 0 read error: -71 [ 1152.392363][ T9] usb 6-1: Dual-Role OTG device on HNP port [ 1152.415781][ T9] usb 6-1: can't set HNP mode: -71 [ 1152.515971][T23960] bond5: Unable to set down delay as MII monitoring is disabled [ 1152.533408][T23960] bond5 (unregistering): Released all slaves [ 1153.605053][T22506] Bluetooth: hci7: Frame reassembly failed (-84) [ 1153.818746][T23971] 9pnet_fd: Insufficient options for proto=fd [ 1153.896908][T23959] ISOFS: Unable to identify CD-ROM format. [ 1154.064166][T23972] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1154.386485][ T29] audit: type=1400 audit(1775134244.113:2070): avc: denied { setattr } for pid=23977 comm="syz.2.5071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1154.422102][T14635] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1154.603833][T14635] usb 7-1: Using ep0 maxpacket: 16 [ 1154.621126][T14635] usb 7-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 1154.667879][T14635] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1154.714437][T14635] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 18432, setting to 1024 [ 1154.757533][T14635] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1154.779208][T14635] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1154.943913][T14635] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1154.965519][T14635] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1154.987283][T14635] usb 7-1: Manufacturer: syz [ 1155.005187][T14635] usb 7-1: config 0 descriptor?? [ 1155.074522][T23985] tmpfs: Bad value for 'mpol' [ 1155.111502][ T29] audit: type=1400 audit(1775134245.002:2071): avc: denied { unmount } for pid=19974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1155.209719][ T29] audit: type=1400 audit(1775134245.095:2072): avc: denied { write } for pid=23987 comm="syz.5.5074" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1155.250394][T23988] input: syz1 as /devices/virtual/input/input90 [ 1155.251145][ T29] audit: type=1400 audit(1775134245.123:2073): avc: denied { bind } for pid=23984 comm="syz.2.5073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1155.623903][ T29] audit: type=1400 audit(1775134245.123:2074): avc: denied { name_bind } for pid=23984 comm="syz.2.5073" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1155.716519][T14635] rc_core: IR keymap rc-hauppauge not found [ 1155.722793][T14635] Registered IR keymap rc-empty [ 1155.733455][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1155.748641][ T29] audit: type=1400 audit(1775134245.123:2075): avc: denied { node_bind } for pid=23984 comm="syz.2.5073" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1155.934429][T13805] Bluetooth: hci7: command 0x1003 tx timeout [ 1155.941736][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1155.950101][T23212] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1156.964168][T14635] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1156.979212][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.991472][ T29] audit: type=1400 audit(1775134246.545:2076): avc: denied { map } for pid=23993 comm="syz.2.5076" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1157.208038][T14635] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input91 [ 1157.222916][ T29] audit: type=1400 audit(1775134246.545:2077): avc: denied { execute } for pid=23993 comm="syz.2.5076" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1157.279113][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1157.296695][ T29] audit: type=1400 audit(1775134246.844:2078): avc: denied { create } for pid=24002 comm="syz.3.5079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1157.383586][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1157.411264][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1157.556617][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1157.591473][T24011] netlink: 'syz.7.5078': attribute type 10 has an invalid length. [ 1157.741239][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1157.796721][T24011] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5078'. [ 1157.943723][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1157.968622][T24011] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1157.996606][T24016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1158.036051][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1158.057572][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1158.094392][ T29] audit: type=1326 audit(1775134247.789:2079): auid=4294967295 uid=60929 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24012 comm="syz.5.5080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff33f59c819 code=0x0 [ 1158.122325][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1158.142768][T14635] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1158.314264][T14635] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1158.452951][T14635] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1158.509622][T14635] usb 7-1: USB disconnect, device number 18 [ 1158.553610][T24028] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5082'. [ 1158.699869][T24031] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5084'. [ 1158.999588][ T29] audit: type=1400 audit(1775134248.594:2080): avc: denied { read write } for pid=24002 comm="syz.3.5079" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1159.056621][ T29] audit: type=1400 audit(1775134248.640:2081): avc: denied { open } for pid=24002 comm="syz.3.5079" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1159.149338][ T29] audit: type=1400 audit(1775134248.687:2082): avc: denied { read open } for pid=24043 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.213524][ T29] audit: type=1400 audit(1775134248.687:2083): avc: denied { getattr } for pid=24043 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.240086][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1159.522415][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1159.532987][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1159.542344][ T9] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 1159.576390][ T9] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1159.594403][ T9] usb 8-1: string descriptor 0 read error: -22 [ 1159.607690][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40 [ 1159.616763][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.816304][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.829826][T24065] overlay: Bad value for 'workdir' [ 1160.848143][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.856709][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.866293][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.873962][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.883239][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.890903][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.897871][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.906878][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.914702][ T9] ryos 0003:1E7D:31CE.002B: unknown main item tag 0x0 [ 1160.954866][ T9] ryos 0003:1E7D:31CE.002B: hidraw0: USB HID vff.7f Device [HID 1e7d:31ce] on usb-dummy_hcd.7-1/input0 [ 1160.999788][ T29] audit: type=1400 audit(1775134250.511:2084): avc: denied { add_name } for pid=24042 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.096302][ T29] audit: type=1400 audit(1775134250.511:2085): avc: denied { create } for pid=24042 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1161.582820][ T5868] usb 8-1: USB disconnect, device number 9 [ 1161.621570][ T29] audit: type=1400 audit(1775134250.511:2086): avc: denied { write } for pid=24042 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=21155 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1162.132045][T24092] netlink: 'syz.6.5097': attribute type 10 has an invalid length. [ 1162.139949][T24092] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5097'. [ 1162.149537][T24092] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1163.010501][T24097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5099'. [ 1163.483033][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1163.483149][ T29] audit: type=1400 audit(1775134252.794:2096): avc: denied { ioctl } for pid=24082 comm="syz.2.5095" path="socket:[124883]" dev="sockfs" ino=124883 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1163.612006][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5099'. [ 1163.670724][ T29] audit: type=1400 audit(1775134252.812:2097): avc: denied { bind } for pid=24082 comm="syz.2.5095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1163.738291][ T29] audit: type=1400 audit(1775134253.065:2098): avc: denied { set_context_mgr } for pid=24103 comm="syz.6.5100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1163.767771][T24108] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5102'. [ 1163.958414][T14634] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1164.126573][T14634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.429291][T14634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.472550][T14634] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1164.472727][T24134] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5108'. [ 1164.504444][T14634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.523911][T24134] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5108'. [ 1164.545526][T14634] usb 6-1: config 0 descriptor?? [ 1164.818055][T24104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1164.888729][T22483] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1165.049632][ T29] audit: type=1400 audit(1775134254.300:2099): avc: denied { write } for pid=24147 comm="syz.3.5113" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1165.091812][T14635] kernel read not supported for file /1299/net/arp (pid: 14635 comm: kworker/1:8) [ 1165.156818][T22483] usb 3-1: Using ep0 maxpacket: 32 [ 1165.212092][T24153] netlink: 'syz.7.5110': attribute type 10 has an invalid length. [ 1165.220604][T24153] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5110'. [ 1165.231676][T24153] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1165.270062][T22483] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.334541][T22483] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1165.385612][T22483] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1165.432837][T22483] usb 3-1: Product: syz [ 1165.460039][T22483] usb 3-1: Manufacturer: syz [ 1165.488495][T22483] usb 3-1: SerialNumber: syz [ 1165.534620][T22483] usb 3-1: config 0 descriptor?? [ 1165.637428][T14634] arvo 0003:1E7D:30D4.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 1165.768988][T22483] usb 3-1: USB disconnect, device number 6 [ 1165.970317][T14634] arvo 0003:1E7D:30D4.002C: couldn't init struct arvo_device [ 1165.984699][T14634] arvo 0003:1E7D:30D4.002C: couldn't install keyboard [ 1166.043411][ T5868] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1166.195502][T14634] arvo 0003:1E7D:30D4.002C: probe with driver arvo failed with error -71 [ 1166.322476][T24175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1166.326415][T14634] usb 6-1: USB disconnect, device number 40 [ 1166.386167][ T5868] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.496385][ T5868] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1166.538698][ T5868] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1166.555036][ T29] audit: type=1400 audit(1775134255.703:2100): avc: denied { create } for pid=24182 comm="syz.7.5118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1166.680450][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.692062][ T29] audit: type=1400 audit(1775134255.712:2101): avc: denied { write } for pid=24182 comm="syz.7.5118" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1166.716612][T24162] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1166.728362][ T5868] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1167.086061][ T29] audit: type=1400 audit(1775134256.011:2102): avc: denied { firmware_load } for pid=24182 comm="syz.7.5118" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1167.314670][ T29] audit: type=1400 audit(1775134256.376:2103): avc: denied { create } for pid=24158 comm="syz.3.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1167.353737][ T5868] usb 4-1: USB disconnect, device number 125 [ 1168.036109][ T29] audit: type=1400 audit(1775134256.713:2104): avc: denied { bind } for pid=24158 comm="syz.3.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1168.074944][ T29] audit: type=1400 audit(1775134256.722:2105): avc: denied { append } for pid=24192 comm="syz.2.5120" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1168.405341][ T5868] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1168.480045][T24203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=24203 comm=syz.5.5123 [ 1168.601370][ T5868] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1168.632533][ T5868] usb 8-1: config 0 has no interface number 0 [ 1168.669172][ T5868] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1168.709245][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.744031][ T5868] usb 8-1: Product: syz [ 1168.761973][ T5868] usb 8-1: Manufacturer: syz [ 1168.787635][ T5868] usb 8-1: SerialNumber: syz [ 1168.819173][ T5868] usb 8-1: config 0 descriptor?? [ 1169.083234][ T5868] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1169.164939][ T5868] usb 8-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1169.235863][ T5868] usb 8-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1169.292777][ T29] audit: type=1400 audit(1775134258.209:2106): avc: denied { firmware_load } for pid=5868 comm="kworker/1:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1169.426289][T24212] binder: 24211:24212 ioctl 4018620d 0 returned -22 [ 1169.655555][T24217] netlink: 'syz.5.5126': attribute type 10 has an invalid length. [ 1169.664070][T24217] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5126'. [ 1169.681081][T24217] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1169.973974][T24218] bridge_slave_0: left promiscuous mode [ 1169.999570][T24218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.020940][T24218] bridge_slave_1: left promiscuous mode [ 1170.033700][T24218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.317538][T24220] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 1170.444360][T24218] bond0: (slave bond_slave_0): Releasing backup interface [ 1170.480242][T24218] bond0: (slave bond_slave_1): Releasing backup interface [ 1170.532161][T24218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.585304][T24218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.631628][T24218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1171.194214][ T29] audit: type=1400 audit(1775134259.893:2107): avc: denied { read } for pid=24226 comm="syz.7.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1172.892302][T24241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1172.901851][T24242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1173.820176][T24267] comedi comedi0: dt2801: a I/O base address must be specified [ 1174.000616][T24271] binder: 24270:24271 ioctl c0306201 200000003480 returned -14 [ 1174.126083][T24276] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5145'. [ 1174.147807][ T29] audit: type=1400 audit(1775134262.812:2108): avc: denied { mounton } for pid=24275 comm="syz.2.5145" path=2F3336362FE91F7189591E9233614B dev="tmpfs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1174.273000][ T29] audit: type=1400 audit(1775134262.924:2109): avc: denied { read write } for pid=24272 comm="syz.5.5144" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1174.365092][ T29] audit: type=1400 audit(1775134262.924:2110): avc: denied { open } for pid=24272 comm="syz.5.5144" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1174.375065][T24282] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1174.397350][T24282] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1174.509715][T14634] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1174.650181][T24289] loop6: detected capacity change from 0 to 2640 [ 1174.658201][T24289] buffer_io_error: 6 callbacks suppressed [ 1174.658233][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.674263][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.682809][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.690778][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.698806][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.706952][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.715547][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.724132][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.731976][T24289] ldm_validate_partition_table(): Disk read failed. [ 1174.739358][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.747842][T24289] Buffer I/O error on dev loop6, logical block 0, async page read [ 1174.756445][T24289] Dev loop6: unable to read RDB block 0 [ 1174.762503][T24289] loop6: unable to read partition table [ 1174.770239][T24289] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1175.507536][T14634] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1175.530277][T14634] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 50686, setting to 1024 [ 1175.613335][T14634] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 1175.635365][T14634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.665655][T14634] usb 3-1: Product: 䟎䫈䯓ᶽÂ髭ℎ뵅깆೼蠖ëžá‘œâ™‡è¸°ç„¦î…µï‘ŸìŠìž¤ã›æ¦‰ã²µèšŸè°ªê™·á¿¨ê¡„뷎깅딓눚㮝æ…ì©¢ã¨ã¶²çª±ì‰¿ïšâ˜”숽႑웵ê뎡䌃ﱽ뽖í±æ‡¾é€™Åµä“—ႇ홑먃昱ᇄ젰룒ⰸ⚣劷戜 [ 1175.821932][T14634] usb 3-1: Manufacturer: ෧쎵î¡è»‰ä’²ä§¹å¡¸à§µæ§€áˆŸî°©î›á´£ä¶–顢耋͌磺曅ퟖî±äž¨â„˜ç¡“᭫냰脶ï¶ì¢¥â£·ê‚¡ê½²â¸ç£³ç€ˆïš˜é‡˜ï†„옸Ḟ낗옎㴡畓í©éœ„ë曜á‰ç‘…뿨讀ⅵ쩴Ƒ᭺螯佤쪫쿃敆ä¹ç» ã¿­â¸›ìŽºî‰‘ꎚင影˘ὀ贡í‘何 [ 1175.846505][T14634] usb 3-1: SerialNumber: syz [ 1175.866661][T24298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5152'. [ 1176.007415][T24305] netlink: 'syz.6.5150': attribute type 10 has an invalid length. [ 1176.015401][T24305] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5150'. [ 1176.151210][T14634] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1176.185299][T14634] usb 3-1: 2:1 : bogus bTerminalLink 2 [ 1176.196730][T14634] usb 3-1: unit 6 not found! [ 1176.207509][T14634] usb 3-1: unit 1 not found! [ 1176.216995][T14634] usb 3-1: unit 2 not found! [ 1176.223649][T14634] usb 3-1: unit 255 not found! [ 1176.288193][T24305] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1176.322304][T24304] syzkaller0: entered promiscuous mode [ 1176.329654][T14634] usb 3-1: USB disconnect, device number 7 [ 1176.346227][T24304] syzkaller0: entered allmulticast mode [ 1176.426608][T24304] tipc: Started in network mode [ 1176.437051][T24304] tipc: Node identity 5abc6d4e0c1d, cluster identity 4711 [ 1176.452942][T24304] tipc: Enabled bearer , priority 0 [ 1176.468125][T24303] tipc: Resetting bearer [ 1176.566924][T24303] tipc: Disabling bearer [ 1176.691234][T24311] input: syz0 as /devices/virtual/input/input92 [ 1176.810092][ T29] audit: type=1400 audit(1775134265.290:2111): avc: denied { create } for pid=24308 comm="syz.3.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1177.054673][ T29] audit: type=1400 audit(1775134265.524:2112): avc: denied { create } for pid=24315 comm="syz.7.5158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1177.806956][T24331] netlink: zone id is out of range [ 1177.830829][T24331] netlink: get zone limit has 4 unknown bytes [ 1177.950241][ T29] audit: type=1400 audit(1775134266.357:2113): avc: denied { create } for pid=24335 comm="syz.6.5162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1178.034482][T24338] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5160'. [ 1178.040289][T24340] loop6: detected capacity change from 0 to 2640 [ 1178.091894][ T29] audit: type=1400 audit(1775134266.497:2114): avc: denied { write } for pid=24329 comm="syz.5.5160" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1178.116149][T24340] ldm_validate_partition_table(): Disk read failed. [ 1178.122905][T24340] Dev loop6: unable to read RDB block 0 [ 1178.135045][T24346] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1178.190462][T24340] loop6: unable to read partition table [ 1178.199590][T24346] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1178.226109][T24340] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1178.251278][T24346] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1178.295121][T24346] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1178.341434][T24346] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1178.397484][T24346] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1178.498718][T24346] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1178.536812][T24346] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1178.548581][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1178.560538][ T29] audit: type=1400 audit(1775134266.937:2115): avc: denied { getopt } for pid=24335 comm="syz.6.5162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1178.581708][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5162'. [ 1178.612722][T24341] gtp0: entered promiscuous mode [ 1178.632430][T24341] gtp0: entered allmulticast mode [ 1178.808046][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1178.896159][T24354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=24354 comm=syz.2.5166 [ 1178.943748][T24354] hpfs: Bad magic ... probably not HPFS [ 1179.097998][ T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1179.201554][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.238081][ T9] usb 4-1: Product: syz [ 1179.255631][ T9] usb 4-1: Manufacturer: syz [ 1179.279189][ T9] usb 4-1: SerialNumber: syz [ 1179.541472][T24348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.572964][T24348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.613850][ T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1179.656263][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1179.677403][T24362] 9p: Bad value for 'rfdno' [ 1179.683111][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1179.719837][ T9] usb 4-1: media controller created [ 1179.953765][ T29] audit: type=1400 audit(1775134268.228:2116): avc: denied { write } for pid=24360 comm="syz.7.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1180.169802][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1180.199495][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1180.206793][T24361] netlink: zone id is out of range [ 1180.214120][T24361] netlink: zone id is out of range [ 1180.219375][T24361] netlink: get zone limit has 4 unknown bytes [ 1180.252654][ T9] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1180.412631][ T9] DVB: Unable to find symbol qt1010_attach() [ 1180.538672][T24381] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5174'. [ 1180.614735][T24385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1180.725039][T24391] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5175'. [ 1180.840790][ T29] audit: type=1400 audit(1775134269.069:2117): avc: denied { map } for pid=24394 comm="syz.7.5177" path="socket:[127302]" dev="sockfs" ino=127302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1180.976114][ T29] audit: type=1400 audit(1775134269.069:2118): avc: denied { accept } for pid=24394 comm="syz.7.5177" path="socket:[127302]" dev="sockfs" ino=127302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1181.473941][T24401] netlink: 'syz.5.5178': attribute type 1 has an invalid length. [ 1181.494879][T24401] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1181.505282][T24401] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5178'. [ 1181.580972][ T5882] usb 4-1: USB disconnect, device number 126 [ 1182.057565][ T5882] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1182.509643][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.562956][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.626144][ T5882] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1182.929035][ T29] audit: type=1400 audit(1775134270.940:2119): avc: denied { audit_write } for pid=24411 comm="syz.6.5182" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1183.116963][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.146755][ T5882] usb 4-1: config 0 descriptor?? [ 1183.582566][T24414] 9p: Could not find request transport: f0xffffffffffffffff [ 1183.601326][T24424] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5186'. [ 1183.631339][T24424] netlink: 7 bytes leftover after parsing attributes in process `syz.7.5186'. [ 1183.830319][T24407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.153609][T24407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.192756][ T5882] hid_parser_main: 4009 callbacks suppressed [ 1184.192778][ T5882] hid-led 0003:1D34:000A.002D: unknown main item tag 0x0 [ 1184.329321][ T5882] hid-led 0003:1D34:000A.002D: unknown main item tag 0x0 [ 1184.348504][T24432] macvtap1: entered promiscuous mode [ 1184.364840][ T5882] hid-led 0003:1D34:000A.002D: unknown main item tag 0x0 [ 1184.369202][T24432] macvtap1: entered allmulticast mode [ 1184.580525][ T29] audit: type=1400 audit(1775134272.512:2120): avc: denied { watch } for pid=24406 comm="syz.3.5180" path="/proc/1349" dev="proc" ino=126779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1184.660739][ T5882] hid-led 0003:1D34:000A.002D: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 1185.060430][ T5882] hid-led 0003:1D34:000A.002D: Dream Cheeky Webmail Notifier initialized [ 1186.142126][T24444] netlink: 'syz.6.5191': attribute type 1 has an invalid length. [ 1186.180289][T24447] FAULT_INJECTION: forcing a failure. [ 1186.180289][T24447] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.207826][T24449] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5191'. [ 1186.229962][ T5882] usb 4-1: USB disconnect, device number 127 [ 1186.250091][T24447] CPU: 0 UID: 0 PID: 24447 Comm: syz.3.5193 Tainted: G L syzkaller #0 PREEMPT(full) [ 1186.250122][T24447] Tainted: [L]=SOFTLOCKUP [ 1186.250129][T24447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1186.250143][T24447] Call Trace: [ 1186.250147][T24447] [ 1186.250153][T24447] dump_stack_lvl+0x100/0x190 [ 1186.250188][T24447] should_fail_ex.cold+0x5/0xa [ 1186.250212][T24447] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1186.250240][T24447] should_failslab+0xc2/0x120 [ 1186.250260][T24447] __kmalloc_noprof+0xe0/0x850 [ 1186.250291][T24447] tomoyo_realpath_from_path+0xb6/0x690 [ 1186.250325][T24447] tomoyo_path_number_perm+0x23c/0x580 [ 1186.250349][T24447] ? tomoyo_path_number_perm+0x22e/0x580 [ 1186.250375][T24447] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1186.250426][T24447] ? find_held_lock+0x2b/0x80 [ 1186.250449][T24447] ? __fget_files+0x215/0x3d0 [ 1186.250466][T24447] ? hook_file_ioctl_common+0x146/0x410 [ 1186.250489][T24447] ? __fget_files+0x21f/0x3d0 [ 1186.250510][T24447] security_file_ioctl+0xd3/0x230 [ 1186.250535][T24447] __x64_sys_ioctl+0xb7/0x210 [ 1186.250562][T24447] do_syscall_64+0x106/0xf80 [ 1186.250587][T24447] ? clear_bhb_loop+0x40/0x90 [ 1186.250617][T24447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.250636][T24447] RIP: 0033:0x7f8f06d9c819 [ 1186.250651][T24447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1186.250668][T24447] RSP: 002b:00007f8f07c19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1186.250686][T24447] RAX: ffffffffffffffda RBX: 00007f8f07015fa0 RCX: 00007f8f06d9c819 [ 1186.250698][T24447] RDX: 0000200000003480 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1186.250708][T24447] RBP: 00007f8f07c19090 R08: 0000000000000000 R09: 0000000000000000 [ 1186.250719][T24447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1186.250729][T24447] R13: 00007f8f07016038 R14: 00007f8f07015fa0 R15: 00007ffc0b349008 [ 1186.250753][T24447] [ 1186.250955][T24447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1186.262887][T24439] fido_id[24439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1186.295411][T24447] binder: 24446:24447 unknown command 0 [ 1186.314097][T24450] overlayfs: missing 'lowerdir' [ 1186.336831][T24447] binder: 24446:24447 ioctl c0306201 200000003480 returned -22 [ 1186.437114][T24444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1186.551530][T24453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.656855][T24449] bond1: (slave geneve2): making interface the new active one [ 1186.677475][T24449] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1186.783964][T24465] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1186.811408][T24465] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1186.833922][T24465] bond1: entered allmulticast mode [ 1186.868841][T24465] geneve2: entered allmulticast mode [ 1186.902909][T24465] macvtap1: left promiscuous mode [ 1186.908509][T24465] bond2: entered allmulticast mode [ 1186.943630][T12655] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.952547][T12655] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.986396][T12655] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.995312][T12655] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.421049][T24485] comedi comedi0: dt2801: a I/O base address must be specified [ 1189.005688][T24490] ubi31: detaching mtd0 [ 1189.105289][T24490] ubi31: mtd0 is detached [ 1189.780954][T24500] FAULT_INJECTION: forcing a failure. [ 1189.780954][T24500] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.808524][T24500] CPU: 1 UID: 0 PID: 24500 Comm: syz.2.5207 Tainted: G L syzkaller #0 PREEMPT(full) [ 1189.808554][T24500] Tainted: [L]=SOFTLOCKUP [ 1189.808559][T24500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1189.808569][T24500] Call Trace: [ 1189.808575][T24500] [ 1189.808582][T24500] dump_stack_lvl+0x100/0x190 [ 1189.808615][T24500] should_fail_ex.cold+0x5/0xa [ 1189.808636][T24500] ? tomoyo_encode2+0xfb/0x3c0 [ 1189.808660][T24500] should_failslab+0xc2/0x120 [ 1189.808678][T24500] __kmalloc_noprof+0xe0/0x850 [ 1189.808701][T24500] ? d_absolute_path+0x136/0x1b0 [ 1189.808731][T24500] tomoyo_encode2+0xfb/0x3c0 [ 1189.808762][T24500] tomoyo_encode+0x29/0x50 [ 1189.808785][T24500] tomoyo_realpath_from_path+0x18c/0x690 [ 1189.808817][T24500] tomoyo_path_number_perm+0x23c/0x580 [ 1189.808845][T24500] ? tomoyo_path_number_perm+0x22e/0x580 [ 1189.808870][T24500] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1189.808917][T24500] ? find_held_lock+0x2b/0x80 [ 1189.808941][T24500] ? __fget_files+0x215/0x3d0 [ 1189.808958][T24500] ? hook_file_ioctl_common+0x146/0x410 [ 1189.808983][T24500] ? __fget_files+0x21f/0x3d0 [ 1189.809005][T24500] security_file_ioctl+0xd3/0x230 [ 1189.809031][T24500] __x64_sys_ioctl+0xb7/0x210 [ 1189.809060][T24500] do_syscall_64+0x106/0xf80 [ 1189.809084][T24500] ? clear_bhb_loop+0x40/0x90 [ 1189.809105][T24500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.809122][T24500] RIP: 0033:0x7f21b439c819 [ 1189.809138][T24500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.809154][T24500] RSP: 002b:00007f21b51bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1189.809171][T24500] RAX: ffffffffffffffda RBX: 00007f21b4615fa0 RCX: 00007f21b439c819 [ 1189.809183][T24500] RDX: 0000200000003480 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1189.809194][T24500] RBP: 00007f21b51bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.809204][T24500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.809214][T24500] R13: 00007f21b4616038 R14: 00007f21b4615fa0 R15: 00007ffe8796bcb8 [ 1189.809238][T24500] [ 1189.809269][T24500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1190.107684][T24500] binder: 24499:24500 unknown command 0 [ 1190.113391][T24500] binder: 24499:24500 ioctl c0306201 200000003480 returned -22 [ 1190.315469][T24510] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5209'. [ 1190.449337][T21832] NFSD: Failed to start, no listeners configured. [ 1192.676937][T24537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1192.688380][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5216'. [ 1192.726775][ T29] audit: type=1400 audit(1775134280.182:2121): avc: denied { execute } for pid=24536 comm="syz.3.5217" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=128212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1194.381822][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1194.800951][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1194.817123][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1194.835882][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1194.859956][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1194.909964][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1194.967283][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1195.001215][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1195.036173][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1195.054832][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.076812][ T9] usb 6-1: config 0 descriptor?? [ 1195.191676][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1196.481609][ T9] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1196.521383][ T9] usb 6-1: USB disconnect, device number 41 [ 1196.555036][ T9] usblp0: removed [ 1196.579707][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1196.599962][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1196.640603][ T10] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.678219][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 1196.687973][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.696885][ T10] usb 3-1: Product: syz [ 1196.701122][ T10] usb 3-1: Manufacturer: syz [ 1196.706356][ T10] usb 3-1: SerialNumber: syz [ 1197.195761][T23212] Bluetooth: hci1: command 0x0406 tx timeout [ 1197.401937][T24590] loop6: detected capacity change from 0 to 2640 [ 1197.410347][T24590] buffer_io_error: 22 callbacks suppressed [ 1197.410363][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1197.428686][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1197.576185][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1197.587334][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1197.588374][T24593] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1197.606991][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1197.701857][T24596] /dev/nullb0: Can't open blockdev [ 1198.604464][T24593] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1198.628063][T24593] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1198.639556][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1198.647564][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1198.885289][T24593] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1198.897285][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1198.905173][T24590] ldm_validate_partition_table(): Disk read failed. [ 1198.925019][T24593] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1198.971695][T24593] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1199.014905][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1199.022823][T24590] Buffer I/O error on dev loop6, logical block 0, async page read [ 1199.043341][ T29] audit: type=1400 audit(1775134286.066:2122): avc: denied { bind } for pid=24565 comm="syz.2.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1199.072788][T24597] comedi comedi0: Cannot bond this driver to itself! [ 1199.080978][T24590] Dev loop6: unable to read RDB block 0 [ 1199.091276][T24590] loop6: unable to read partition table [ 1199.099418][ T29] audit: type=1400 audit(1775134286.103:2123): avc: denied { append } for pid=24602 comm="syz.7.5239" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1199.123604][T24590] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1199.141147][ T29] audit: type=1400 audit(1775134286.112:2124): avc: denied { read } for pid=24602 comm="syz.7.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1199.247387][T24607] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1199.253943][T24607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1199.303404][T24607] vhci_hcd vhci_hcd.0: Device attached [ 1199.309561][T24611] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 1199.316081][T24611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1199.325151][T24611] vhci_hcd vhci_hcd.0: Device attached [ 1199.474939][T24607] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(5) [ 1199.481502][T24607] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1199.509566][T24617] binder: 24615:24617 unknown command 0 [ 1199.515566][T24617] binder: 24615:24617 ioctl c0306201 200000003480 returned -22 [ 1200.048692][T22483] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1200.071501][ T29] audit: type=1400 audit(1775134286.664:2125): avc: denied { create } for pid=24610 comm="syz.7.5241" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1200.094520][T24607] vhci_hcd vhci_hcd.0: Device attached [ 1200.101570][ T29] audit: type=1400 audit(1775134286.674:2126): avc: denied { write } for pid=24610 comm="syz.7.5241" name="file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1200.125770][T24611] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(10) [ 1200.132391][T24611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1200.147441][T24611] vhci_hcd vhci_hcd.0: Device attached [ 1200.154610][T24607] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(9) [ 1200.161115][T24607] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1200.169291][ T29] audit: type=1400 audit(1775134286.674:2127): avc: denied { open } for pid=24610 comm="syz.7.5241" path="/71/file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1200.272743][T24611] fuse: Unknown parameter '0x000000000000000c' [ 1200.285739][T24607] vhci_hcd vhci_hcd.0: Device attached [ 1200.313436][ T29] audit: type=1400 audit(1775134286.674:2128): avc: denied { ioctl } for pid=24610 comm="syz.7.5241" path="/71/file0" dev="tmpfs" ino=383 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1200.342384][ T29] audit: type=1400 audit(1775134287.244:2129): avc: denied { unlink } for pid=23036 comm="syz-executor" name="file0" dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1200.390828][T24616] vhci_hcd: connection closed [ 1200.391046][T24624] vhci_hcd: connection closed [ 1200.391507][T23877] vhci_hcd vhci_hcd.6: stop threads [ 1200.406659][T24608] vhci_hcd: connection reset by peer [ 1200.406873][T24612] vhci_hcd: connection closed [ 1200.407004][T24622] vhci_hcd: connection closed [ 1200.425040][ T29] audit: type=1400 audit(1775134287.310:2130): avc: denied { ioctl } for pid=24606 comm="syz.6.5238" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1200.488860][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1200.514684][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1200.569096][T23877] vhci_hcd vhci_hcd.6: release socket [ 1200.572057][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1200.606005][T23877] vhci_hcd vhci_hcd.6: disconnect device [ 1200.640703][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5244'. [ 1200.665444][T23877] vhci_hcd vhci_hcd.6: stop threads [ 1200.679113][T23877] vhci_hcd vhci_hcd.6: release socket [ 1200.710363][T23877] vhci_hcd vhci_hcd.6: disconnect device [ 1200.745172][T23877] vhci_hcd vhci_hcd.6: stop threads [ 1200.754196][T24636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5244'. [ 1200.764531][T23877] vhci_hcd vhci_hcd.6: release socket [ 1200.778521][T23877] vhci_hcd vhci_hcd.6: disconnect device [ 1200.793995][T23877] vhci_hcd vhci_hcd.6: stop threads [ 1200.807038][T23877] vhci_hcd vhci_hcd.6: release socket [ 1200.824492][T23877] vhci_hcd vhci_hcd.6: disconnect device [ 1200.837065][T23877] vhci_hcd vhci_hcd.6: stop threads [ 1200.845903][T23877] vhci_hcd vhci_hcd.6: release socket [ 1200.851629][T23877] vhci_hcd vhci_hcd.6: disconnect device [ 1200.952029][ T10] qmi_wwan 3-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1201.007686][ T10] usb 3-1: USB disconnect, device number 8 [ 1201.350455][T14617] ip6_vti0 speed is unknown, defaulting to 1000 [ 1201.365387][T24628] infiniband syz2: set down [ 1201.370816][T24628] infiniband syz2: added ip6_vti0 [ 1201.379015][T24628] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1201.381169][T24628] infiniband syz2: Couldn't open port 1 [ 1201.430592][ T5882] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1201.518965][T23212] Bluetooth: hci1: command 0x0406 tx timeout [ 1201.772693][ T5882] usb 7-1: Using ep0 maxpacket: 16 [ 1201.870402][ T5882] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1201.897110][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.907521][ T5882] usb 7-1: Product: syz [ 1201.912524][ T5882] usb 7-1: Manufacturer: syz [ 1201.917235][ T5882] usb 7-1: SerialNumber: syz [ 1201.952834][T24628] RDS/IB: syz2: added [ 1202.009206][ T5882] usb 7-1: config 0 descriptor?? [ 1202.014807][T24628] smc: adding ib device syz2 with port count 1 [ 1202.036301][T24628] smc: ib device syz2 port 1 has pnetid ßßßß (user defined) [ 1202.084951][ T5893] ip6_vti0 speed is unknown, defaulting to 1000 [ 1202.339163][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1202.493663][T24658] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5250'. [ 1202.571363][ T5882] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1202.605479][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1202.623858][ T5882] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1202.633995][ T5882] usb 7-1: media controller created [ 1202.665546][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1202.724215][T24665] macvtap1: entered promiscuous mode [ 1202.740563][T24665] macvtap1: entered allmulticast mode [ 1202.756406][T23212] Bluetooth: hci3: command 0x0406 tx timeout [ 1202.975145][T24670] netlink: 'syz.6.5245': attribute type 1 has an invalid length. [ 1202.995943][T24672] binder: 24671:24672 unknown command 0 [ 1203.019631][T24672] binder: 24671:24672 ioctl c0306201 200000003480 returned -22 [ 1203.123823][T24670] bond2: entered promiscuous mode [ 1203.131160][T24670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1203.185333][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1203.219346][ T29] audit: type=1400 audit(1775134290.004:2131): avc: denied { create } for pid=24680 comm="syz.5.5255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1203.270832][ T5882] zl10353_read_register: readreg error (reg=127, ret==0) [ 1203.279151][T24638] dtv5100: wlen = 0, aborting. [ 1203.311406][ T5882] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1203.350788][ T5882] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1203.352546][T24675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1203.414861][T24675] bond2: (slave bond3): making interface the new active one [ 1203.422749][T24675] bond3: entered promiscuous mode [ 1203.446057][T24675] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1204.603490][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1204.933793][T24687] affs: No valid root block on device nullb0 [ 1204.942911][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1204.942927][ T29] audit: type=1326 audit(1775134291.613:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24686 comm="syz.5.5258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff33f59c819 code=0x0 [ 1205.360691][ T5882] usb 7-1: USB disconnect, device number 19 [ 1205.492529][ T29] audit: type=1400 audit(1775134292.099:2134): avc: denied { setopt } for pid=24704 comm="syz.2.5263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1206.426936][ T5882] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1206.444553][T22483] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1206.682120][T24717] binder: 24716:24717 unknown command 0 [ 1206.720334][T24717] binder: 24716:24717 ioctl c0306201 200000003480 returned -22 [ 1206.761135][T24720] macvtap2: entered promiscuous mode [ 1206.784159][T24720] macvtap2: entered allmulticast mode [ 1206.850495][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1210.794532][ T29] audit: type=1400 audit(1775134296.495:2135): avc: denied { remount } for pid=24745 comm="syz.5.5274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1211.001876][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1211.762062][ T29] audit: type=1400 audit(1775134297.992:2136): avc: denied { listen } for pid=24759 comm="syz.6.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1211.922955][ T29] audit: type=1400 audit(1775134297.992:2137): avc: denied { accept } for pid=24759 comm="syz.6.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1211.951068][ T29] audit: type=1400 audit(1775134298.132:2138): avc: denied { shutdown } for pid=24759 comm="syz.6.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1212.084744][T24771] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5279'. [ 1212.166482][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1212.621366][T24780] netlink: 'syz.6.5282': attribute type 1 has an invalid length. [ 1212.653102][T24780] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1212.669343][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1212.677077][T24780] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5282'. [ 1214.076172][T22483] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1214.268779][T24788] ip6_vti0 speed is unknown, defaulting to 1000 [ 1214.396697][T24795] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5285'. [ 1214.428930][T22483] usb 7-1: Using ep0 maxpacket: 8 [ 1214.451906][T22483] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1214.479959][T22483] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1214.536739][T22483] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1214.590914][T22483] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1214.647349][T22483] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1214.705125][T22483] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1214.743951][T22483] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1214.782912][T22483] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.857844][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1215.146013][T22483] usb 7-1: usb_control_msg returned -32 [ 1215.184187][T22483] usbtmc 7-1:16.0: can't read capabilities [ 1215.535198][ T29] audit: type=1400 audit(1775134301.519:2139): avc: denied { write } for pid=24782 comm="syz.6.5283" name="usbtmc0" dev="devtmpfs" ino=4984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1215.551512][T24804] macvtap1: entered promiscuous mode [ 1215.601641][T24804] macvtap1: entered allmulticast mode [ 1215.624079][T24628] ip6_vti0 speed is unknown, defaulting to 1000 [ 1215.624288][T24807] tipc: Enabled bearer , priority 0 [ 1215.746587][T24813] syzkaller0: entered promiscuous mode [ 1215.866022][T24813] syzkaller0: entered allmulticast mode [ 1215.938968][T22483] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1216.000944][T24807] tipc: Resetting bearer [ 1216.140510][T22483] usb 6-1: Using ep0 maxpacket: 32 [ 1216.231441][T22483] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1216.335663][T22483] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1216.368384][T22483] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.412185][T22483] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1216.429593][T22483] usb 6-1: config 1 has no interface number 0 [ 1216.467506][T22483] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1216.490380][T22483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.496585][T24825] netlink: 'syz.3.5294': attribute type 1 has an invalid length. [ 1216.519019][ T29] audit: type=1400 audit(1775134302.445:2140): avc: denied { getopt } for pid=24823 comm="syz.2.5295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1216.537111][T22483] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1216.558014][T24827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5294'. [ 1216.603604][T24825] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1216.632017][T24828] kernel read not supported for file /file0 (pid: 24828 comm: syz.2.5295) [ 1216.645821][ T29] audit: type=1800 audit(1775134302.547:2141): pid=24828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.5295" name="file0" dev="mqueue" ino=128894 res=0 errno=0 [ 1216.718576][T24830] Invalid ELF header type: 3 != 1 [ 1216.723692][ T29] audit: type=1400 audit(1775134302.632:2142): avc: denied { module_load } for pid=24829 comm="syz.3.5296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1216.759045][T14634] tipc: Node number set to 3332239832 [ 1216.771200][T22483] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 1216.779438][T22483] snd_usb_pod 6-1:1.1: invalid control EP [ 1216.806449][T23212] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1216.827556][T23212] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1216.837080][T23212] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1216.845346][T23212] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1216.852734][T23212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1216.874966][T22483] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 1216.886816][T22483] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1216.896670][T22483] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1216.938355][T24831] ip6_vti0 speed is unknown, defaulting to 1000 [ 1216.995262][ T29] audit: type=1400 audit(1775134302.894:2143): avc: denied { read } for pid=24806 comm="syz.5.5289" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1217.020421][ T29] audit: type=1400 audit(1775134302.912:2144): avc: denied { open } for pid=24806 comm="syz.5.5289" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1217.046636][ T29] audit: type=1400 audit(1775134302.912:2145): avc: denied { ioctl } for pid=24806 comm="syz.5.5289" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1217.158322][T14634] usb 7-1: USB disconnect, device number 20 [ 1217.183895][T24807] tipc: Resetting bearer [ 1217.199765][T24807] tipc: Disabling bearer [ 1217.690036][T22483] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1218.035482][T24842] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5297'. [ 1218.047518][T22483] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1218.057555][T22483] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.070602][T22483] usb 4-1: config 220 has no interface number 2 [ 1218.077538][T22483] usb 4-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x58, changing to 0x8 [ 1218.089957][T22483] usb 4-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1218.100258][T22483] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1218.113727][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1218.122037][T22483] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1218.130066][T22483] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1218.137075][T22483] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1218.147885][T22483] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1218.159083][T22483] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.167629][T22483] usb 4-1: Product: syz [ 1218.173236][T22483] usb 4-1: Manufacturer: syz [ 1218.177893][T22483] usb 4-1: SerialNumber: syz [ 1218.246514][T24831] chnl_net:caif_netlink_parms(): no params data found [ 1218.288349][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1218.296648][ T10] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 1218.305701][ T10] usb 7-1: config 0 has no interface number 0 [ 1218.312870][ T10] usb 7-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1218.318312][T24831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.324995][ T10] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1218.344426][ T10] usb 7-1: config 0 interface 200 has no altsetting 0 [ 1218.351431][T24831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.359736][T24831] bridge_slave_0: entered allmulticast mode [ 1218.364229][ T10] usb 7-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1218.375295][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.376754][T24831] bridge_slave_0: entered promiscuous mode [ 1218.383405][ T10] usb 7-1: Product: syz [ 1218.394067][ T10] usb 7-1: Manufacturer: syz [ 1218.399221][ T10] usb 7-1: SerialNumber: syz [ 1218.399541][T24831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.408325][ T10] usb 7-1: config 0 descriptor?? [ 1218.420829][T24831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.429565][T24831] bridge_slave_1: entered allmulticast mode [ 1218.436850][T24831] bridge_slave_1: entered promiscuous mode [ 1218.469415][T24831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.482430][T24831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.492499][T24832] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5296'. [ 1218.520065][T24831] team0: Port device team_slave_0 added [ 1218.528351][T24831] team0: Port device team_slave_1 added [ 1218.553590][T24831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.561136][T24831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.589008][T24831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.601999][T24831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.609202][T24831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.663833][T24831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1218.731019][T24831] hsr_slave_0: entered promiscuous mode [ 1218.737631][T24831] hsr_slave_1: entered promiscuous mode [ 1218.744278][T24831] debugfs: 'hsr0' already exists in 'hsr' [ 1218.767918][T24831] Cannot create hsr debugfs directory [ 1218.842048][T24839] dvmrp0: entered allmulticast mode [ 1218.858576][T22482] usb 6-1: USB disconnect, device number 42 [ 1218.872246][ T10] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input94 [ 1218.893742][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.901406][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.910456][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.918013][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.927025][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.934546][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.942217][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.949714][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.957942][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.966188][ C0] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.976330][ C0] usb 7-1: hanwang_irq - urb shutting down with status: -2 [ 1218.987504][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1218.995198][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.002587][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.010562][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.018017][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.025410][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.032700][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.040259][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.047532][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.054843][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.062587][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.070220][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.077522][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.084871][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.092251][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.099587][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.107233][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.114587][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.121992][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.129455][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.136981][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.144296][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.144916][T13805] Bluetooth: hci7: command tx timeout [ 1219.151593][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.165563][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.172862][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.180339][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.187628][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.194902][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.194955][T13805] Bluetooth: hci6: command 0x0406 tx timeout [ 1219.202492][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.202683][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.223351][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.230817][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.238115][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.245402][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.252717][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.260020][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.267612][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.274934][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.282253][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.289545][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.297143][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.304480][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.311771][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.319131][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.326645][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.333971][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.341272][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.348624][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.356283][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.363852][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.371138][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.378411][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.385714][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.393375][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.400684][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.407975][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.415273][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.422742][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.430041][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.437308][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.444580][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.451868][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.459431][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.466718][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.473991][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.481278][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.488755][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.496038][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.503318][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.510628][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.518225][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.525513][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.532864][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.540623][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.547916][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.555442][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.562739][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.570005][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.577335][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.584921][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.592278][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.599574][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.606870][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.614387][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.621668][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.628955][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.636234][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.643511][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.651004][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.658317][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.665586][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.672867][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.680374][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.687675][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.695174][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.702540][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.710141][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.717429][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.724760][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.732110][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.739379][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.746919][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.754217][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.761499][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.768796][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.776292][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.783586][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.790892][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.798210][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.805505][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.813029][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.820341][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.827634][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.834915][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.842441][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.849726][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.856996][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.864721][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.872220][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.879501][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.886800][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.894087][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.901351][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.908849][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.916161][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.923462][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.930755][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.938363][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.945696][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.952975][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.960244][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.967751][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.975033][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.982327][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.989617][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1219.996919][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.004522][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.011839][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.019176][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.026563][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.034127][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.041470][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.048787][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.056124][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.063675][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.070957][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.078295][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.085623][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.092918][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.100413][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.107704][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.116478][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.123806][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.131310][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.138608][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.145913][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.153260][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.160777][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.168080][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.175378][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.182696][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.189980][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.197429][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.204711][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.212033][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.219346][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.226896][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.234198][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.241542][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.248861][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.256395][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.263721][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.271007][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.278312][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.285588][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.293177][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.300563][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.307856][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.315189][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.322730][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.330024][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.337301][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.344580][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.352085][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.359340][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.366674][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.374052][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.381324][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.388822][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.396097][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.403405][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.410695][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.418474][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.425816][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.433131][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.440444][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.447977][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.455338][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.462671][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.470021][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.477348][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.484988][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.492297][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.499614][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.506902][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.514421][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.521689][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.528970][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.536265][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.543908][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.551229][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.558536][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.565818][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.573069][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.580598][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.587882][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.595195][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.602497][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.610031][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.617303][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.624595][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.631941][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.639225][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.646732][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.654010][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.661305][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.668586][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.676040][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.683307][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.690554][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.697827][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.705305][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.712583][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.719863][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.727153][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.734462][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.741958][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.749241][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.756498][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.763790][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.771282][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.778555][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.785833][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.793107][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.800676][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.807965][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.815219][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.822574][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.829830][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.837327][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.844627][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.851900][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.859199][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.866682][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.873959][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.881248][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.888609][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.895872][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.903392][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.910678][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.917973][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.925249][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.932708][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.939984][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.947257][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.954538][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.962037][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.969308][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.976618][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.983901][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.991160][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1220.998697][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.005974][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.013258][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.020556][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.028128][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.035448][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.042708][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.049974][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.057498][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.064771][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.072025][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.079307][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.086561][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.094010][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.101311][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.108580][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.115851][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.123315][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.130662][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.137940][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.145251][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.152549][ C1] usb 7-1: hanwang_irq - nonzero urb status received: -71 [ 1221.160094][ C1] usb 7-1: hanwang_irq - urb shutting down with status: -2 [ 1221.192520][ T10] usb 7-1: USB disconnect, device number 21 [ 1221.245867][T22483] usb 4-1: selecting invalid altsetting 0 [ 1221.261856][T22483] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1221.269377][T22483] uvcvideo 4-1:220.0: No valid video chain found. [ 1221.286632][T22483] usb 4-1: selecting invalid altsetting 0 [ 1221.293567][T22483] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1221.313934][T23212] Bluetooth: hci7: command tx timeout [ 1221.323398][T22483] usb 4-1: USB disconnect, device number 2 [ 1221.431673][T24863] comedi comedi0: dt2801: a I/O base address must be specified [ 1222.429750][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1223.491584][T24869] netlink: 'syz.6.5301': attribute type 10 has an invalid length. [ 1223.537167][T23212] Bluetooth: hci7: command tx timeout [ 1223.749686][T24868] bridge0: port 3(syz_tun) entered blocking state [ 1223.756241][T24868] bridge0: port 3(syz_tun) entered disabled state [ 1223.764586][T24868] syz_tun: entered allmulticast mode [ 1223.771078][T24868] syz_tun: entered promiscuous mode [ 1223.776923][T24868] bridge0: port 3(syz_tun) entered blocking state [ 1223.783421][T24868] bridge0: port 3(syz_tun) entered forwarding state [ 1223.829711][T24869] bridge0: port 3(syz_tun) entered disabled state [ 1223.836385][T24869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.843691][T24869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.854947][T24869] bridge0: port 3(syz_tun) entered blocking state [ 1223.861454][T24869] bridge0: port 3(syz_tun) entered forwarding state [ 1223.868251][T24869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.875371][T24869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.882696][T24869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.889852][T24869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.899065][T24869] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1224.341010][T24884] 9p: Bad value for 'wfdno' [ 1225.543981][T24886] bond5: Unable to set down delay as MII monitoring is disabled [ 1225.713897][T24886] bond5 (unregistering): Released all slaves [ 1225.761198][T23212] Bluetooth: hci7: command tx timeout [ 1226.164939][T24904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1226.182801][ T29] audit: type=1400 audit(1775134311.481:2146): avc: denied { map } for pid=24892 comm="syz.3.5309" path="socket:[129926]" dev="sockfs" ino=129926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1226.353123][T24831] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1226.364989][T24896] ip6_vti0 speed is unknown, defaulting to 1000 [ 1226.373936][T24831] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1226.397180][T24831] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1226.423104][T24831] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1226.642752][T24921] netlink: 'syz.2.5312': attribute type 10 has an invalid length. [ 1226.677041][T24921] bridge0: left allmulticast mode [ 1226.706275][T24921] bridge0: entered allmulticast mode [ 1226.721880][T24921] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1226.779949][T24831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.889699][T24831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.055319][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.062452][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.144266][ T29] audit: type=1400 audit(1775134312.369:2147): avc: denied { mount } for pid=24927 comm="syz.6.5313" name="/" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1228.059442][ T29] audit: type=1400 audit(1775134312.369:2148): avc: denied { search } for pid=24927 comm="syz.6.5313" name="/" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1228.084060][ T29] audit: type=1400 audit(1775134312.369:2149): avc: denied { search } for pid=24927 comm="syz.6.5313" name="/" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1228.108430][ T29] audit: type=1400 audit(1775134312.369:2150): avc: denied { read open } for pid=24927 comm="syz.6.5313" path="/" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1228.732849][T24831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1228.784648][T24831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1229.264745][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.271866][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.952316][ T30] INFO: task syz.1.3174:16409 blocked for more than 143 seconds. [ 1229.960340][ T30] Tainted: G L syzkaller #0 [ 1229.991283][ T30] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1230.077575][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1230.095730][ T29] audit: type=1400 audit(1775134315.119:2151): avc: denied { write } for pid=5791 comm="syz-executor" path="pipe:[3924]" dev="pipefs" ino=3924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1230.197584][ T30] task:syz.1.3174 state:D stack:27320 pid:16409 tgid:16409 ppid:13187 task_flags:0x40044c flags:0x00080003 [ 1230.210027][ T5882] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1230.235601][T24831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.243374][ T30] Call Trace: [ 1230.252656][ T30] [ 1230.255648][ T30] __schedule+0xfee/0x6120 [ 1230.260117][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1230.334022][ T30] ? __pfx___schedule+0x10/0x10 [ 1230.379592][ T30] ? find_held_lock+0x2b/0x80 [ 1230.384418][ T30] ? schedule+0x2bf/0x390 [ 1230.411231][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 1230.432449][ T30] schedule+0xdd/0x390 [ 1230.436607][ T30] schedule_preempt_disabled+0x13/0x30 [ 1230.442125][ T30] __mutex_lock+0xc9a/0x1b90 [ 1230.489986][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1230.495360][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1230.500791][ T30] ? net_generic+0xea/0x2a0 [ 1230.505319][ T30] ? net_generic+0xea/0x2a0 [ 1230.514139][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1230.519777][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1230.524945][ T30] nfsd_umount+0x3b/0x60 [ 1230.529558][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1230.534964][ T30] deactivate_super+0xe7/0x110 [ 1230.541797][ T30] cleanup_mnt+0x21f/0x450 [ 1230.546261][ T30] task_work_run+0x150/0x240 [ 1230.551909][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1230.557090][ T30] do_exit+0x8b8/0x2b60 [ 1230.561715][ T30] ? __pfx_do_exit+0x10/0x10 [ 1230.566342][ T30] ? cgroup_update_frozen_flag+0x107/0x210 [ 1230.573027][ T30] ? find_held_lock+0x2b/0x80 [ 1230.577739][ T30] ? get_signal+0x184f/0x21e0 [ 1230.582819][ T30] do_group_exit+0xd5/0x2a0 [ 1230.587357][ T30] get_signal+0x1ec7/0x21e0 [ 1230.591880][ T30] ? __asan_memset+0x23/0x50 [ 1230.596970][ T30] ? __pfx_get_signal+0x10/0x10 [ 1230.601849][ T30] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1230.607918][ T30] arch_do_signal_or_restart+0x91/0x7a0 [ 1230.613516][ T30] ? __pfx_get_timespec64+0x10/0x10 [ 1230.619086][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1230.625498][ T30] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1230.631349][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 1230.637567][ T30] do_syscall_64+0x67c/0xf80 [ 1230.642201][ T30] ? clear_bhb_loop+0x40/0x90 [ 1230.647357][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.653294][ T30] RIP: 0033:0x7fc07c35d04e [ 1230.658063][ T30] RSP: 002b:00007fc07d2c9f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1230.666511][ T30] RAX: fffffffffffffdfc RBX: 00007fc07d2ca6c0 RCX: 00007fc07c35d04e [ 1230.675220][ T30] RDX: 00007fc07d2c9fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1230.683477][ T30] RBP: 00007fc07c432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1230.693269][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.701674][ T30] R13: 00007fc07c616218 R14: 00007fc07c616180 R15: 00007ffc8fa2a5b8 [ 1230.709698][ T30] [ 1230.718336][ T30] [ 1230.718336][ T30] Showing all locks held in the system: [ 1230.756142][ T30] 1 lock held by pool_workqueue_/3: [ 1230.761486][ T30] #0: ffffffff8e7f3478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1230.805934][ T30] 3 locks held by kworker/0:1/10: [ 1230.813849][ T30] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1230.849226][ T30] #1: ffffc900000f7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1230.858967][ T30] #2: ffffffff8e7f3478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1230.892020][ T30] 1 lock held by khungtaskd/30: [ 1230.896920][ T30] #0: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1230.924055][ T30] 2 locks held by kworker/u8:5/145: [ 1230.929311][ T30] #0: ffff8880b843b220 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1230.956233][ T30] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 1230.965029][ T30] 3 locks held by kworker/u8:6/244: [ 1230.988266][ T30] #0: ffff888033387148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1231.009542][ T30] #1: ffffc90003357d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1231.021856][ T30] #2: ffffffff90613ba8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 1231.031764][ T30] 2 locks held by getty/5567: [ 1231.036606][ T30] #0: ffff888038fd40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1231.046443][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1231.056817][ T30] 4 locks held by udevd/5824: [ 1231.061518][ T30] #0: ffff88805118d8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1231.070862][ T30] #1: ffff8880763c4c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1231.095049][ T30] #2: ffff88802c6b44b8 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1231.104632][ T30] #3: ffff888058e851e0 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1231.114420][ T30] 6 locks held by kworker/1:3/5868: [ 1231.119684][ T30] #0: ffff8880202a0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1231.130615][ T30] #1: ffffc90004f37d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1231.142110][ T30] #2: ffff88802b4111e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1231.151912][ T30] #3: ffff888058e851e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1231.161216][ T30] #4: ffff88802b9ce1a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1231.170729][ T30] #5: ffffffff8e691fb0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 1231.181158][ T30] 5 locks held by kworker/1:4/5882: [ 1231.186375][ T30] #0: ffff8880202a0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1231.197339][ T30] #1: ffffc9000507fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1231.208818][ T30] #2: ffff88802afd51e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 1231.217717][ T30] #3: ffff88802af96560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2bd2/0x4af0 [ 1231.227687][ T30] #4: ffff88802aa0b768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bfb/0x4af0 [ 1231.237671][ T30] 3 locks held by kworker/1:5/5893: [ 1231.242870][ T30] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1231.253334][ T30] #1: ffffc9000514fd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1231.263830][ T30] #2: ffffffff8e7f3340 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1231.274057][ T30] 2 locks held by syz.1.3174/16409: [ 1231.279317][ T30] #0: ffff888050e1c0e0 (&type->s_umount_key#73){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1231.289620][ T30] #1: ffffffff8ec59d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1231.299449][ T30] 2 locks held by syz.2.3332/17244: [ 1231.304632][ T30] #0: ffff88803648a0e0 (&type->s_umount_key#73){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1231.315087][ T30] #1: ffffffff8ec59d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1231.324781][ T30] 1 lock held by syz.2.3707/18668: [ 1231.329986][ T30] #0: ffffffff90613ba8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1231.339347][ T30] 2 locks held by syz.4.4501/21832: [ 1231.344561][ T30] #0: ffffffff906bfed0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1231.352807][ T30] #1: ffffffff8ec59d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1231.363130][ T30] 3 locks held by kworker/u8:0/22506: [ 1231.370273][ T30] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1231.381454][ T30] #1: ffffc90010bbfd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1231.391843][ T30] #2: ffffffff90613ba8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1231.401175][ T30] 2 locks held by syz.5.5022/23777: [ 1231.406448][ T30] #0: ffffffff90613ba8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1231.415429][ T30] #1: ffffffff8e7f3478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1231.425494][ T30] 2 locks held by syz.7.5243/24628: [ 1231.430956][ T30] #0: ffff8880586120e0 (&type->s_umount_key#73){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1231.441320][ T30] #1: ffffffff8ec59d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1231.451337][ T30] 4 locks held by syz-executor/24831: [ 1231.456705][ T30] #0: ffff88809b2d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1231.466559][ T30] #1: ffff88809b2d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1231.476280][ T30] #2: ffffffff908acac8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1231.486368][ T30] #3: ffff88803875d300 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 1231.496472][ T30] 2 locks held by syz.6.5317/24964: [ 1231.501775][ T30] #0: ffff888054d160e0 (&type->s_umount_key#73){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1231.512145][ T30] #1: ffffffff8ec59d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1231.521745][ T30] 2 locks held by kvm-nx-lpage-re/24972: [ 1231.527643][ T30] #0: ffff88805a3560e0 (&type->s_umount_key#73){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1231.537946][ T30] #1: ffffffff8ec59d88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1231.548015][ T30] [ 1231.554325][ T30] ============================================= [ 1231.554325][ T30] [ 1231.564152][ T30] NMI backtrace for cpu 1 [ 1231.564168][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1231.564191][ T30] Tainted: [L]=SOFTLOCKUP [ 1231.564197][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1231.564206][ T30] Call Trace: [ 1231.564212][ T30] [ 1231.564219][ T30] dump_stack_lvl+0x100/0x190 [ 1231.564250][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1231.564273][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1231.564285][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1231.564301][ T30] sys_info+0x141/0x190 [ 1231.564312][ T30] watchdog+0xd25/0x1050 [ 1231.564331][ T30] ? __pfx_watchdog+0x10/0x10 [ 1231.564347][ T30] ? __kthread_parkme+0x18c/0x230 [ 1231.564364][ T30] ? kthread+0x13a/0x450 [ 1231.564375][ T30] ? __pfx_watchdog+0x10/0x10 [ 1231.564390][ T30] kthread+0x370/0x450 [ 1231.564400][ T30] ? __pfx_kthread+0x10/0x10 [ 1231.564412][ T30] ret_from_fork+0x754/0xd80 [ 1231.564424][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1231.564436][ T30] ? __switch_to+0x7b4/0x1120 [ 1231.564450][ T30] ? __pfx_kthread+0x10/0x10 [ 1231.564461][ T30] ret_from_fork_asm+0x1a/0x30 [ 1231.564481][ T30] [ 1231.564498][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1231.690721][ C0] NMI backtrace for cpu 0 [ 1231.690738][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1231.690757][ C0] Tainted: [L]=SOFTLOCKUP [ 1231.690762][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1231.690771][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1231.690795][ C0] Code: d8 81 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 91 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1231.690809][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1231.690822][ C0] RAX: 000000000596f651 RBX: ffffffff8e4975c0 RCX: ffffffff8b90fc75 [ 1231.690832][ C0] RDX: 0000000000000000 RSI: ffffffff8de79dfe RDI: ffffffff8c1b1a20 [ 1231.690842][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708679d [ 1231.690852][ C0] R10: ffff8880b8433ceb R11: 0000000000000000 R12: 0000000000000000 [ 1231.690860][ C0] R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90d9c710 [ 1231.690870][ C0] FS: 0000000000000000(0000) GS:ffff88812433c000(0000) knlGS:0000000000000000 [ 1231.690884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1231.690894][ C0] CR2: 00005601ff476da8 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1231.690903][ C0] Call Trace: [ 1231.690909][ C0] [ 1231.690914][ C0] default_idle+0x9/0x10 [ 1231.690928][ C0] default_idle_call+0x6c/0xb0 [ 1231.690942][ C0] do_idle+0x464/0x590 [ 1231.690962][ C0] ? __pfx_do_idle+0x10/0x10 [ 1231.690983][ C0] cpu_startup_entry+0x4f/0x60 [ 1231.691001][ C0] rest_init+0x251/0x260 [ 1231.691015][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1231.691036][ C0] start_kernel+0x47f/0x480 [ 1231.691054][ C0] x86_64_start_reservations+0x24/0x30 [ 1231.691073][ C0] x86_64_start_kernel+0x12b/0x130 [ 1231.691091][ C0] common_startup_64+0x13e/0x148 [ 1231.691113][ C0] [ 1231.878212][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1231.885074][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1231.895756][ T30] Tainted: [L]=SOFTLOCKUP [ 1231.900060][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1231.910094][ T30] Call Trace: [ 1231.913367][ T30] [ 1231.916288][ T30] dump_stack_lvl+0x100/0x190 [ 1231.920966][ T30] vpanic+0x552/0x970 [ 1231.924923][ T30] ? __pfx_vpanic+0x10/0x10 [ 1231.929407][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1231.935552][ T30] panic+0xd1/0xe0 [ 1231.939265][ T30] ? __pfx_panic+0x10/0x10 [ 1231.943680][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1231.949817][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1231.955953][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1231.962091][ T30] ? watchdog.cold+0x198/0x1ca [ 1231.966838][ T30] ? watchdog+0xd35/0x1050 [ 1231.971244][ T30] watchdog.cold+0x1a9/0x1ca [ 1231.975822][ T30] ? __pfx_watchdog+0x10/0x10 [ 1231.980484][ T30] ? __kthread_parkme+0x18c/0x230 [ 1231.985499][ T30] ? kthread+0x13a/0x450 [ 1231.989724][ T30] ? __pfx_watchdog+0x10/0x10 [ 1231.994384][ T30] kthread+0x370/0x450 [ 1231.998450][ T30] ? __pfx_kthread+0x10/0x10 [ 1232.003018][ T30] ret_from_fork+0x754/0xd80 [ 1232.007596][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1232.012696][ T30] ? __switch_to+0x7b4/0x1120 [ 1232.017368][ T30] ? __pfx_kthread+0x10/0x10 [ 1232.021945][ T30] ret_from_fork_asm+0x1a/0x30 [ 1232.026713][ T30] [ 1232.029996][ T30] Kernel Offset: disabled [ 1232.034295][ T30] Rebooting in 86400 seconds..