last executing test programs:

14m37.885736613s ago: executing program 2 (id=203):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x800, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x20, 0x3, 0x2, 0x10, 0x4, 0xcc7, 0xc9, 0x5c952399, 0x5, 0x3ff, 0x802, 0xbc20, 0x1, 0x6, 0x9, 0x0, 0x1, 0x200000, 0xfffffff4, 0x2, 0x0, 0xfffffffd, 0xfffffffd, 0xfffffff5, 0xffffeadb, 0x3, 0x7ff, 0xb, 0x0, 0x8000000, 0x4, 0x1f]})

14m37.71844252s ago: executing program 2 (id=204):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x10001, 0x20482)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$xdp(0x2c, 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000)
fsopen(0x0, 0x1)
syz_clone3(&(0x7f0000000640)={0x8207800, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380), {0x30}, &(0x7f0000000400)=""/132, 0x84, 0x0, &(0x7f0000000600)}, 0x58)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x3, 0x1})
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB="7cbe77fd687c5441cc94b9000000ab687dd5315295fa2cb59a236fa7a38a8c5ca28e9648e8170e33022eab741177aee2bc32e0124d05bcd23ead642ef7001f61e39e0c", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0), 0x0)
syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x25e, 0x20, 0x20005, 0x27b}, &(0x7f0000000200), 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="080088090301040007001400000045fe002800650000520690d922569d01ac1014aa4e234e2093dd1fcabaa405004e30518514a3f5ff0756ceb30a74c5e5f84f1d708ba97601d84421a86dc5d5ad03ebece217d577d91c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="508000149078"], 0x36)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x110c}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

14m34.715199232s ago: executing program 2 (id=216):
syz_open_dev$ttys(0xc, 0x2, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffffffffffff, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x1274, 0x0)
ptrace(0x10, r2)
ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002)
ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x40)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x2, 0x3c, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000e0601030000000000000000010000030900020073797a32000000000500010007000000050001000700000005000100070000000900020073797a30000000000900020073797a3100000000700558dde922100340faa26ba575336d76915cf943d443692813f9a8ea8cd244a7"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x84)
r5 = syz_open_dev$loop(0x0, 0x3, 0x8000)
setuid(0xee01)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0)
ioctl$BLKPG(r5, 0x1269, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

14m34.198513594s ago: executing program 2 (id=217):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x101}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000240)='./file0\x00')
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20)
unlink(&(0x7f0000000000)='./cgroup\x00')
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[0x2, 0xeb]})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000076c5000000000000ad600027842cf52300", @ANYRES8=r1, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844)

14m34.075075864s ago: executing program 2 (id=220):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES8=r0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES64=0x0, @ANYRESOCT=0x0], 0x30, 0x40010}], 0x1, 0x4100)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x3, 0x4, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4]}}})
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0xa000200000a958, 0x2000000009, 0x3, 0x80000002, 0x580000000004, 0x1462faad, 0xfff})
socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

14m33.577249676s ago: executing program 2 (id=221):
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$netlink(0x10, 0x3, 0xf)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040))
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004)

14m33.328211143s ago: executing program 32 (id=221):
socket$netlink(0x10, 0x3, 0xf)
r0 = socket$netlink(0x10, 0x3, 0xf)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), &(0x7f0000000040))
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004)

9m31.405481159s ago: executing program 5 (id=1461):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00')
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000140)=0x3f2bd663, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000004b508be1462bdefd7598a58880d36e0f95046ae52e5d3470dba7e36b8abdd4e3e3359e1c9b01bca5ed7ca28f2f68e51834d78ad4b57739e3532a19032809bbed0b83a3d1ec5208f7e7fb46a37d3c9e93862896b55e9f2719930bd80daed0e26054cd1b4c983535bc5a5e7bdafe40b924a2740274c98a621fde7698acd533f901c74a", @ANYRES16=r5, @ANYBLOB="000426bd7000fedbdf250500000008003a0006000000050030000000000005002f000100000008003a00ff7f0000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8084)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa8, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x14}, 0x533b38816533e130)
ioprio_set$pid(0x3, 0x0, 0x0)
add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff)
capset(&(0x7f00000006c0)={0x20080522}, &(0x7f0000000080))
syz_open_dev$tty1(0xc, 0x4, 0x1)
clock_adjtime(0x0, 0x0)

9m30.545391402s ago: executing program 5 (id=1462):
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x8040)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9m30.36298284s ago: executing program 5 (id=1464):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x105000, 0x0)
r0 = getpgid(0xffffffffffffffff)
prlimit64(r0, 0xd, &(0x7f00000000c0)={0x9, 0x6}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x40601)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x40f, &(0x7f0000000000)={0x1})
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r2=>0x0, 0x1}, &(0x7f0000000040)=0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f33000000000000000c00020001000000150000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e22, 0xff, @mcast2, 0x1200}}, 0x9, 0x0, 0x1fe, 0x9, 0x88, 0x7, 0xb9}, 0x9c)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r10=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff7, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x3}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x74}, 0x1, 0x0, 0x0, 0x600}, 0x0)

9m29.905484214s ago: executing program 5 (id=1465):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0)

9m29.241035352s ago: executing program 5 (id=1470):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
io_setup(0x2, &(0x7f0000001200))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd697a402d00383afefc010000000000000000000000000601ff020000000000000000000000000001010390780500000064bbcf090009ff0000000000000000000000ffff6401010100000000000000000000ffffac1e01018ff940c9431ec2cc"], 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x8000000000b400, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffd9e5}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0x9}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201004040154220a9055015bbe4010203010902120001000000000904"], 0x0)

9m28.053588822s ago: executing program 5 (id=1477):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x2, @multicast2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1105000040000000000009000000380003800600040069d7000008008300000000000400020076657468305f746f5f626f6e64000000080001000200000008000500e0000002"], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="a5b40019", @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES32=r10, @ANYBLOB="e6b98fb5bc87cacace20e33c4e3cc08a010000000000ea00ecc07750eae0f428612c833d515f1b7cbaabf500e227b44d6d1470c176f2caba92b30f076dd00a0d340700000000000000d2061bded04ecf5f3df5b6512a05f9bfaa7c1d22ef9625ca63e96df90d4bb1f055763ba62fc66b0e19d48f47e8423ba09cf9"], 0x28}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000040800000008000300", @ANYRES32=r1, @ANYBLOB="d1563bab697d8b273da25875510439b9d1a2b064b5bbe982e966fef33eba76b7197a98b3e603412099e1e22b01ee8ba635b24d757df8a0af2ec5fa10c685791cfe32094fa3a9d51cb23a0b0ef6c9e845c6df65ae93be166990f23e1fd9967b520d20dac20e59d5f665153f649b66c38221e0de57f4b2b7b9db14c9b02e13399229a49b3f55433176a1b3b5f467df0eec8b90e3ece2623335cb10f8e2f14faf9f0a25f313aa36b999c66c97e25dfc5ba7c6091a2fb4a6d8f50f63a63dc7be15ab2cdcbcbcc2c6fceec280"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)
read$FUSE(0xffffffffffffffff, &(0x7f0000008380)={0x2020, 0x0, <r13=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r13, {0x7, 0x1f, 0xa, 0x40010, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7ff, {0x0, 0xdb56a6a7e10141ef}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)

9m27.715129536s ago: executing program 33 (id=1477):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x2, @multicast2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1105000040000000000009000000380003800600040069d7000008008300000000000400020076657468305f746f5f626f6e64000000080001000200000008000500e0000002"], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="a5b40019", @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES32=r10, @ANYBLOB="e6b98fb5bc87cacace20e33c4e3cc08a010000000000ea00ecc07750eae0f428612c833d515f1b7cbaabf500e227b44d6d1470c176f2caba92b30f076dd00a0d340700000000000000d2061bded04ecf5f3df5b6512a05f9bfaa7c1d22ef9625ca63e96df90d4bb1f055763ba62fc66b0e19d48f47e8423ba09cf9"], 0x28}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000040800000008000300", @ANYRES32=r1, @ANYBLOB="d1563bab697d8b273da25875510439b9d1a2b064b5bbe982e966fef33eba76b7197a98b3e603412099e1e22b01ee8ba635b24d757df8a0af2ec5fa10c685791cfe32094fa3a9d51cb23a0b0ef6c9e845c6df65ae93be166990f23e1fd9967b520d20dac20e59d5f665153f649b66c38221e0de57f4b2b7b9db14c9b02e13399229a49b3f55433176a1b3b5f467df0eec8b90e3ece2623335cb10f8e2f14faf9f0a25f313aa36b999c66c97e25dfc5ba7c6091a2fb4a6d8f50f63a63dc7be15ab2cdcbcbcc2c6fceec280"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)
read$FUSE(0xffffffffffffffff, &(0x7f0000008380)={0x2020, 0x0, <r13=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r13, {0x7, 0x1f, 0xa, 0x40010, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7ff, {0x0, 0xdb56a6a7e10141ef}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)

16.992215506s ago: executing program 4 (id=3634):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x7f, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x9}, [@obex={0x5, 0x24, 0x15, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x4, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x3ef, 0xd, 0x7, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xc1, 0xf8, 0x7f}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0xf7, 0x7, 0xd, 0x20}, 0x135, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, [{0x72, &(0x7f0000000a80)=ANY=[@ANYBLOB="7203854fbaa40de182dd7bb8d45cfd8c3329dc51e4d4a007b3a9ad782ab68fe05c42ea15e3aa5458e3957958ab03edf18cc65080989165dfa4a78cf699274ece18f8b43969bb0fe3c14f4b56a51601bafdd32de7890abb5f00093d7d2a32e05682cf6d8884e4343816e988e647707c31c2137cb717d1a74cae8fdfbaf08cfe00b448878c3b276423d5efb07d30365d415ced934e67a585b25017c8b5db3798c992b3b266cd18475e3d91903b3de465a0193a09f2a28f878ab9ec3aca7f1506870586e3c0ca9cdf30d8c9ef817f29e132a5ed6195b997f5c200fe9a2a1a4de585ef333a6c680c8e2ea61869"]}]})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r7}, 0x8)
prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
madvise(&(0x7f0000f7c000/0x3000)=nil, 0x3000, 0x14)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0xffff)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

12.274827856s ago: executing program 4 (id=3654):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
ioprio_set$pid(0x1, 0x0, 0x2000)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000440)='./bus\x00')
userfaultfd(0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private2, @in6=@remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}]}, 0xa0}}, 0x0)
semctl$SETVAL(0x0, 0x1, 0x10, &(0x7f0000000280)=0x8)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd611, 0x10000006, 0x9, 0x0, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

9.845169422s ago: executing program 6 (id=3659):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x3000000}, {0x0, 0x8}}}, 0xb8}}, 0x0)

9.709687977s ago: executing program 6 (id=3661):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="201480"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x3}}], 0x24}, 0x8040)
r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340))
ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f0000000440)={0x60, 0x3, &(0x7f0000a87000/0x2000)=nil, &(0x7f0000661000/0x1000)=nil, 0x80000000, &(0x7f0000000400)=[{0x3e, 0x3, 0x8}], 0x1, 0x10c21940, 0x0, 0x24, 0x8, 0x4})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)

9.372354258s ago: executing program 4 (id=3662):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x410101, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r7, 0x80885659, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, '\x00', "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "beb8dd00", "e96e232f2004a832"}, 0x38)
recvfrom$inet6(r5, &(0x7f0000000240)=""/169, 0xa9, 0x40010002, 0x0, 0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d}]}, 0x18}, 0x1, 0x0, 0xe7030000, 0x42804}, 0x0)

6.683309198s ago: executing program 0 (id=3666):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c)
syz_emit_ethernet(0xd0, &(0x7f0000000100)=ANY=[@ANYBLOB="79ee7ca42eeabbbbbbbbbbbb86dd6a000000009a1100fe80000000009a0000000000000000aaff0200000000000000000000000000014e1d4e20"], 0x0)

6.381534496s ago: executing program 3 (id=3667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000f5ff00e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

6.311983794s ago: executing program 0 (id=3669):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000700)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)

6.28557584s ago: executing program 3 (id=3670):
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-ce\x00'}, 0xfffffffffffffdf7)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000001800bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28)
syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x301400)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000080000000b0000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200000000faffffff00"/28], 0x50)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40044160, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
gettid()
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4a21, 0xdec, @private2, 0x6}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000100)=0x8)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20)
ioctl$int_out(r1, 0x0, &(0x7f0000000280))

5.901880561s ago: executing program 0 (id=3671):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0xdd43, 0x10000000004, 0x3c, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000002"], 0xfdef)

5.814476637s ago: executing program 4 (id=3672):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$nullb(0xffffffffffffff9c, 0x0, 0x94042, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = getpid()
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x8004, &(0x7f00000000c0)={[], [], 0x2f})
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11)
socket$vsock_stream(0x28, 0x1, 0x0)
getrlimit(0xd, 0x0)
syz_open_dev$video(&(0x7f0000000300), 0x80000000, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)

5.422054278s ago: executing program 6 (id=3673):
io_setup(0x8, &(0x7f00000001c0)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1000, r1, 0x0, 0x0, 0x1}])
io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x3e49, 0x0, 0x2}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x2b)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x20)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'bridge_slave_0\x00', {'ipvlan1\x00'}, 0x1})
io_setup(0x8, &(0x7f00000001c0)) (async)
eventfd2(0x0, 0x0) (async)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1000, r1, 0x0, 0x0, 0x1}]) (async)
io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async)
io_cancel(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x3e49, 0x0, 0x2}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x2b) (async)
epoll_create1(0x0) (async)
fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) (async)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x20) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'bridge_slave_0\x00', {'ipvlan1\x00'}, 0x1}) (async)

5.357893424s ago: executing program 3 (id=3674):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'vxcan0\x00'})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x800)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000340), 0x4)
r1 = socket$inet6(0xa, 0x80803, 0x83)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x8800)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a0000ffa49afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)

5.339818411s ago: executing program 3 (id=3675):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x24044850)
syz_emit_ethernet(0x4e, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4f06e3fe8f7800000f020000"], 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x44, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

4.674650965s ago: executing program 6 (id=3676):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x10001, 0x20482)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$xdp(0x2c, 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r2, &(0x7f0000000780)=[{0x0}], 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002240)=""/102400, 0x19000)
fsopen(0x0, 0x1)
syz_clone3(&(0x7f0000000640)={0x8207800, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380), {0x30}, &(0x7f0000000400)=""/132, 0x84, 0x0, &(0x7f0000000600)}, 0x58)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x3, 0x1})
mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB="7cbe77fd687c5441cc94b9000000ab687dd5315295fa2cb59a236fa7a38a8c5ca28e9648e8170e33022eab741177aee2bc", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0), 0x0)
syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x25e, 0x20, 0x20005, 0x27b}, &(0x7f0000000200), 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="080088090301040007001400000045fe002800650000520690d922569d01ac1014aa4e234e2093dd1fcabaa405004e30518514a3f5ff0756ceb30a74c5e5f84f1d708ba97601d84421a86dc5d5ad03ebece217d577d91c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="508000149078"], 0x36)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x110c}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

4.412955363s ago: executing program 0 (id=3677):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c)
pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x0, 0x0, 0x80000000000000, 0x804, 0x20000}, 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

4.217056229s ago: executing program 3 (id=3678):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="0a08912600"})
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040))
write$cgroup_int(r5, &(0x7f0000000000)=0x8008, 0xffffff6a)
sendfile(r2, r5, 0x0, 0xffffffff004)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.216433191s ago: executing program 0 (id=3680):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000240)={0xffffffffffffffff, 0x7fffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ff"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010325bd7000fcffffff0a"], 0x14}, 0x1, 0x0, 0x0, 0x200448d2}, 0x0)
r5 = syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12e7526abdbdf80037cd16f0ac01200248635008450c826215cb01020301090212ea010701e00509040000000000000002000000"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r5, 0x0, 0x0)
r6 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r9, 0x0, &(0x7f0000000000)="bd", 0x1, 0x100, 0x1})
io_uring_enter(r6, 0x46f3, 0x0, 0x0, 0x0, 0x0)

3.216198742s ago: executing program 1 (id=3681):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000000000f0", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.211706205s ago: executing program 4 (id=3682):
r0 = syz_open_pts(0xffffffffffffffff, 0x20800)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000))
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x200081, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4)
ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000000c0))
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=0x200, 0x4)
syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r2, 0x8000000)
epoll_pwait(r2, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1, &(0x7f00000001c0)={[0x5]}, 0x8)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000200))
connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x210800, 0x0)
fadvise64(r3, 0x6, 0x8, 0x4)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2)
sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x240080c0}, 0x20000000)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)={<r5=>0x0, 0x9, "df2053ea9a40256af2"}, &(0x7f0000000540)=0x11)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000580)={r5, 0x826}, 0x8)
r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9)
ioctl$VT_DISALLOCATE(r6, 0x5608)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r7=>r2}, './file0\x00'})
sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xf8, 0x464, 0x200, 0x70bd2b, 0x25dfdbff, "1759385997739b13dd030a026dd15b7a80414bb4ca76e44632d8f45de2452fe394b2042b0d7e710571b2893b770103a6c7b579db03104190232fc6ffd0b0602602546c3a45d80c3c76cfe32347fc70ce2ad13def45683127fcee9b87e176ce83810ec8a6eb09316f9965bc34d510c16faff367b6067080930f853c8a6ad415450a18ac2c32d33870a6fa3462012bee10d52f1036c03ba94ac463256afa36a6a082876a40989e36b4cd3a580719c8e3038747fe834fbdbbd6383689927fbd77d713d02fa250a3b054e9319571371598bd5a8774c2122c3ba4a445c40171632fa1a8169756efa4", ["", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x40008010}, 0x4010)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f00000007c0)={0x4, {{0xa, 0x4e22, 0x8, @loopback, 0xffff}}, {{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}}}}, 0x108)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r7)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r8, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "87993eb55abde019896ec8b92df15a05"}, @NL80211_ATTR_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004811}, 0x4041)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000ac0)={&(0x7f0000000a40)=[0x0, <r9=>0x0], &(0x7f0000000a80)=[0x0], 0x2, 0x0, 0xfbfbfbfb})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000b80)={&(0x7f0000000b00)=[<r10=>0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x1, 0x0, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000d40)={&(0x7f0000000bc0)=[<r11=>0x0, 0x0, 0x0], &(0x7f0000000c00)=[{}, {}], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x3})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000ec0)={&(0x7f0000000e40)=[0x0, 0x0, 0x0, <r12=>0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0], 0x5, 0x0, 0xdededede})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000001180)={0x400, 0x6, &(0x7f0000000dc0)=[r9, r10, 0x0, 0x0, 0x0, r11], &(0x7f0000000e00)=[0x2, 0x4, 0x5, 0x80000001, 0x8, 0x1, 0x8e, 0x0], &(0x7f0000001100)=[r12, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x4, 0x6, 0x291580, 0x2, 0x781, 0x6, 0x6], 0x0, 0x1})

3.161995287s ago: executing program 1 (id=3683):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c)
listen(r0, 0x50)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e11, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="c3", 0x1}], 0x1}}], 0x2, 0x0)

2.645097732s ago: executing program 1 (id=3684):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x18, 0x3, 0x0)
setsockopt(r3, 0x1000000029, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x649, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea606132c03cb697a653e336f000000500000000000ff020000000000000000000000000301160000"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)
chdir(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141)

2.550940975s ago: executing program 4 (id=3685):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000040)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}})
r3 = socket(0x18, 0x3, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff, 0x2000}], 0x2)
r4 = socket(0x18, 0x2, 0x0)
connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
writev(r4, &(0x7f00000017c0)=[{&(0x7f0000000140)="a3926f2db49bc118c1d623687cd0ca8d23a234628fb31df0fe97beb2175133372bc9348bfeb9bfd85d87af4472b5183eeb5c2405e8de12403a0f2165d1217f29f32ea36cb3dbd330daa479fdd855d8", 0x4f}, {&(0x7f00000001c0)="a65ab3d30906f24d6a92c166fc8ae6199c31ef0f7d4f19f945ba3325a82baeb7e7d063b00e3c5a96442a4eb2670e0a56e1c5a63441fa63a3b16fad979aa3731290bd4febae45c874933adde3e08dcb300165b1b7285a70e08690214e25bdf62dde647b096a36a8adfa72f02f85ea04db16c5e0c0634d0e5210c6de4f892361a26f64f623d328d75da0df20743406e049c2e65fae9dafc7cfa492e43c26b60425f2a180944144b06dff88fb96d46170281be726d2f7c2544f034fc25a40d60468f4c439591c4e8cae1a83200136dbf919f0619f894479d24c5631746f10bf555c9774ecab65985a036f31d0b0bfadb8a04a110b0339adb9", 0xf7}, {&(0x7f00000003c0)="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", 0x38b}], 0x3)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
write(r8, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x1, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x5, 0xfffffffffffffffe, 0xf5, 0x4}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x4, 0x3, 0x0, 0x0, "13f90700"}, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x805936d41ec618b7}, 0x0)
ioctl$EVIOCGMASK(r6, 0x80015b12, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_disconnect(r5)
syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

1.764712771s ago: executing program 1 (id=3686):
pipe2(&(0x7f0000000580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20)
sendmmsg$inet6(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="5ad558645074ff", 0x7}], 0x1}}], 0x2, 0x41)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x0, 0x40, @scatter={0x1, 0x0, &(0x7f0000000740)=[{&(0x7f0000001940)=""/218, 0xda}]}, 0x0, 0x0, 0x5, 0x31, 0x0, 0x0})
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0xc369d000) (async)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.472503403s ago: executing program 3 (id=3687):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0xb356841f36698ca6})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0)

1.292547084s ago: executing program 6 (id=3688):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x82800, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r2}]}}}]}, 0x38}}, 0x2400c080)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000005c0)={[&(0x7f00000004c0)='/dev/net/tun\x00', &(0x7f0000000540)='/dev/net/tun\x00']})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0xf000000, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)

493.139079ms ago: executing program 6 (id=3689):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r2 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x3}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0)

425.818028ms ago: executing program 1 (id=3690):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000200000001000000ffffac1414aa060001000a0080000800"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

189.231919ms ago: executing program 1 (id=3691):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mount_setattr(r2, &(0x7f0000000340)='./file0/../file0\x00', 0x1000, &(0x7f0000000400)={0x81, 0x8, 0x100000, {r2}}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=3692):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
sched_getattr(r2, &(0x7f00000002c0)={0x38}, 0x38, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (rerun: 32)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
ioprio_set$pid(0x2, 0x0, 0x2007)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_dev$sg(0x0, 0x5dc, 0x0) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
io_uring_setup(0x1684, 0x0) (async)
syz_open_dev$vim2m(0x0, 0x8, 0x2) (async, rerun: 32)
r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) (async, rerun: 32)
r4 = accept4(r3, 0x0, 0x0, 0x800) (rerun: 32)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}], 0x2}], 0x1, 0x40800) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xe, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xfd}}, 0x14}}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 64)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x2000c040) (rerun: 64)

kernel console output (not intermixed with test programs):

r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  867.632444][T12734] usb 2-1: USB disconnect, device number 4
[  867.747987][ T5880] usb 1-1: USB disconnect, device number 123
[  867.833311][   T30] audit: type=1400 audit(1769777885.030:5704): avc:  denied  { append } for  pid=18331 comm="syz.0.3227" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  867.963869][T18334] syzkaller1: entered promiscuous mode
[  867.979495][T18334] syzkaller1: entered allmulticast mode
[  870.179959][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  870.393185][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'.
[  870.491963][   T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  870.502319][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  870.502339][   T52] Tainted: [L]=SOFTLOCKUP
[  870.502344][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  870.502351][   T52] Workqueue: hci0 hci_rx_work
[  870.502368][   T52] Call Trace:
[  870.502372][   T52]  <TASK>
[  870.502377][   T52]  dump_stack_lvl+0x100/0x190
[  870.502395][   T52]  sysfs_warn_dup.cold+0x1c/0x28
[  870.502411][   T52]  sysfs_create_dir_ns+0x24b/0x2b0
[  870.502429][   T52]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  870.502444][   T52]  ? find_held_lock+0x2b/0x80
[  870.502465][   T52]  ? kobject_add_internal+0x25f/0x930
[  870.502480][   T52]  ? kobject_add_internal+0x25f/0x930
[  870.502496][   T52]  ? do_raw_spin_unlock+0x145/0x1e0
[  870.502511][   T52]  kobject_add_internal+0x2c8/0x930
[  870.502529][   T52]  kobject_add+0x16a/0x1e0
[  870.502543][   T52]  ? __pfx_kobject_add+0x10/0x10
[  870.502557][   T52]  ? class_to_subsys+0x10f/0x150
[  870.502574][   T52]  ? kobject_put+0xb9/0x640
[  870.502586][   T52]  ? _raw_spin_unlock+0x28/0x50
[  870.502600][   T52]  device_add+0x294/0x1950
[  870.502613][   T52]  ? __pfx_dev_set_name+0x10/0x10
[  870.502629][   T52]  ? __pfx_device_add+0x10/0x10
[  870.502643][   T52]  ? mgmt_send_event_skb+0x2fb/0x460
[  870.502660][   T52]  hci_conn_add_sysfs+0x1a3/0x260
[  870.502675][   T52]  le_conn_complete_evt+0x11cb/0x1f40
[  870.502691][   T52]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  870.502708][   T52]  hci_le_conn_complete_evt+0x23c/0x3a0
[  870.502721][   T52]  ? skb_pull_data+0x15f/0x1e0
[  870.502735][   T52]  hci_le_meta_evt+0x34a/0x5f0
[  870.502749][   T52]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  870.502764][   T52]  hci_event_packet+0x682/0x11c0
[  870.502776][   T52]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  870.502791][   T52]  ? __pfx_hci_event_packet+0x10/0x10
[  870.502805][   T52]  ? kcov_remote_start+0x374/0x660
[  870.502820][   T52]  ? lockdep_hardirqs_on+0x78/0x100
[  870.502835][   T52]  hci_rx_work+0x451/0xfc0
[  870.502850][   T52]  process_one_work+0x9c2/0x1840
[  870.502869][   T52]  ? __pfx_process_one_work+0x10/0x10
[  870.502885][   T52]  ? assign_work+0x19c/0x250
[  870.502899][   T52]  worker_thread+0x5da/0xe40
[  870.502916][   T52]  ? kthread+0x17d/0x730
[  870.502927][   T52]  ? __pfx_worker_thread+0x10/0x10
[  870.502939][   T52]  kthread+0x3b3/0x730
[  870.502950][   T52]  ? __pfx_kthread+0x10/0x10
[  870.502961][   T52]  ? ret_from_fork+0x79/0xaf0
[  870.502973][   T52]  ? ret_from_fork+0x79/0xaf0
[  870.502986][   T52]  ? rcu_is_watching+0x12/0xc0
[  870.503000][   T52]  ? __pfx_kthread+0x10/0x10
[  870.503012][   T52]  ret_from_fork+0x754/0xaf0
[  870.503025][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  870.503039][   T52]  ? __switch_to+0x7b9/0x10c0
[  870.503054][   T52]  ? __pfx_kthread+0x10/0x10
[  870.503066][   T52]  ret_from_fork_asm+0x1a/0x30
[  870.503083][   T52]  </TASK>
[  870.503096][   T52] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  870.801033][   T52] Bluetooth: hci0: failed to register connection device
[  870.917206][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3241'.
[  871.159786][T18378] : entered promiscuous mode
[  871.253782][   T30] kauditd_printk_skb: 49 callbacks suppressed
[  871.253798][   T30] audit: type=1400 audit(1769777888.480:5754): avc:  denied  { name_bind } for  pid=18382 comm="syz.3.3244" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  871.302166][   T30] audit: type=1400 audit(1769777888.521:5755): avc:  denied  { connect } for  pid=18382 comm="syz.3.3244" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  871.418555][   T30] audit: type=1400 audit(1769777888.614:5756): avc:  denied  { create } for  pid=18380 comm="syz.1.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  871.418727][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'.
[  871.741299][   T30] audit: type=1400 audit(1769777888.614:5757): avc:  denied  { write } for  pid=18380 comm="syz.1.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  871.761774][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3246'.
[  871.781709][   T30] audit: type=1400 audit(1769777888.614:5758): avc:  denied  { nlmsg_write } for  pid=18380 comm="syz.1.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  871.867663][T18392] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3245'.
[  871.920984][T18392] netlink: 'syz.6.3245': attribute type 7 has an invalid length.
[  871.950527][T18392] netlink: 'syz.6.3245': attribute type 8 has an invalid length.
[  872.065175][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3245'.
[  872.493851][   T30] audit: type=1400 audit(1769777889.408:5759): avc:  denied  { read write } for  pid=18397 comm="syz.0.3249" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  872.529615][   T30] audit: type=1400 audit(1769777889.408:5760): avc:  denied  { open } for  pid=18397 comm="syz.0.3249" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  872.578175][   T30] audit: type=1400 audit(1769777889.408:5761): avc:  denied  { read write } for  pid=18397 comm="syz.0.3249" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  872.588516][T18394] IPVS: length: 4096 != 8
[  872.603354][   T30] audit: type=1400 audit(1769777889.408:5762): avc:  denied  { open } for  pid=18397 comm="syz.0.3249" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  872.632158][   T30] audit: type=1400 audit(1769777889.408:5763): avc:  denied  { ioctl } for  pid=18397 comm="syz.0.3249" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  874.349538][T11170] block nbd0: Possible stuck request ffff888027138000: control (read@0,1024B). Runtime 330 seconds
[  874.360305][T11170] block nbd0: Possible stuck request ffff888027138200: control (read@1024,1024B). Runtime 330 seconds
[  874.371458][T11170] block nbd0: Possible stuck request ffff888027138400: control (read@2048,1024B). Runtime 330 seconds
[  874.382641][T11170] block nbd0: Possible stuck request ffff888027138600: control (read@3072,1024B). Runtime 330 seconds
[  875.562288][T18441] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3259'.
[  876.644247][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  876.666122][   T30] audit: type=1400 audit(1769777894.015:5788): avc:  denied  { read } for  pid=18442 comm="syz.6.3261" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  876.891229][   T30] audit: type=1400 audit(1769777894.015:5789): avc:  denied  { open } for  pid=18442 comm="syz.6.3261" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  876.897420][T18460] netlink: 'syz.0.3262': attribute type 13 has an invalid length.
[  876.915560][   T30] audit: type=1400 audit(1769777894.015:5790): avc:  denied  { ioctl } for  pid=18442 comm="syz.6.3261" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  877.193433][T18460] netlink: 'syz.0.3262': attribute type 17 has an invalid length.
[  877.201574][   T30] audit: type=1400 audit(1769777894.015:5791): avc:  denied  { map } for  pid=18442 comm="syz.6.3261" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  877.376371][   T30] audit: type=1400 audit(1769777894.015:5792): avc:  denied  { execute } for  pid=18442 comm="syz.6.3261" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  877.428022][   T30] audit: type=1400 audit(1769777894.270:5793): avc:  denied  { setopt } for  pid=18446 comm="syz.0.3262" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  877.492133][T18460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  877.513253][ T5931] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  877.840065][ T5931] usb 1-1: Using ep0 maxpacket: 32
[  877.967271][ T5931] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  877.989330][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.076835][   T30] audit: type=1400 audit(1769777895.445:5794): avc:  denied  { write } for  pid=18468 comm="syz.4.3266" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  878.396922][ T5931] usb 1-1: Product: syz
[  878.411676][ T5931] usb 1-1: Manufacturer: syz
[  878.431616][   T10] IPVS: starting estimator thread 0...
[  878.437501][ T5931] usb 1-1: SerialNumber: syz
[  878.442258][   T30] audit: type=1400 audit(1769777895.465:5795): avc:  denied  { bind } for  pid=18468 comm="syz.4.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  878.465759][ T5931] usb 1-1: config 0 descriptor??
[  878.471543][   T30] audit: type=1400 audit(1769777895.465:5796): avc:  denied  { name_bind } for  pid=18468 comm="syz.4.3266" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[  878.496809][ T5931] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  878.520577][   T30] audit: type=1400 audit(1769777895.465:5797): avc:  denied  { node_bind } for  pid=18468 comm="syz.4.3266" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[  878.551774][T18474] IPVS: using max 46 ests per chain, 110400 per kthread
[  879.028115][ T5931] gspca_ov534_9: reg_w failed -110
[  879.365059][T18479] x_tables: duplicate underflow at hook 3
[  879.474021][ T5931] gspca_ov534_9: Unknown sensor 0000
[  879.474072][ T5931] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  879.741877][   T10] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[  879.900079][   T10] usb 7-1: Using ep0 maxpacket: 32
[  879.917722][   T10] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  879.946513][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.954524][   T10] usb 7-1: Product: syz
[  879.959179][   T10] usb 7-1: Manufacturer: syz
[  879.963924][   T10] usb 7-1: SerialNumber: syz
[  879.971492][   T10] usb 7-1: config 0 descriptor??
[  880.076789][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  880.104944][ T5880] usb 1-1: USB disconnect, device number 124
[  880.232493][T18487] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3270'.
[  880.371599][ T5930] usb 2-1: Using ep0 maxpacket: 16
[  880.420697][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  880.458924][   T10] airspy 7-1:0.0: usb_control_msg() failed -71 request 09
[  880.466529][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  880.517961][   T10] airspy 7-1:0.0: Could not detect board
[  880.523659][   T10] airspy 7-1:0.0: probe with driver airspy failed with error -71
[  880.538034][ T5930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  880.548393][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.590819][   T10] usb 7-1: USB disconnect, device number 70
[  880.620826][ T5930] usb 2-1: Product: syz
[  880.665060][ T5930] usb 2-1: Manufacturer: syz
[  880.697593][ T5930] usb 2-1: SerialNumber: syz
[  880.951104][ T5930] usb 2-1: 0:2 : does not exist
[  881.357501][ T5930] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  881.429346][ T5930] usb 2-1: USB disconnect, device number 5
[  881.691745][T18512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3277'.
[  881.711809][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3277'.
[  882.197578][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  882.197597][   T30] audit: type=1400 audit(1769777899.161:5811): avc:  denied  { bind } for  pid=18507 comm="syz.0.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  882.371827][   T30] audit: type=1400 audit(1769777899.852:5812): avc:  denied  { write } for  pid=18516 comm="syz.4.3280" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  882.448267][   T30] audit: type=1400 audit(1769777899.923:5813): avc:  denied  { ioctl } for  pid=18516 comm="syz.4.3280" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75726 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  882.548008][   T30] audit: type=1400 audit(1769777900.025:5814): avc:  denied  { getopt } for  pid=18510 comm="syz.6.3278" lport=58297 faddr=fc02:: fport=18977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  882.614820][   T30] audit: type=1400 audit(1769777900.096:5815): avc:  denied  { ioctl } for  pid=18510 comm="syz.6.3278" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  882.649794][T18527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3279'.
[  882.686674][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3279'.
[  882.713420][   T30] audit: type=1400 audit(1769777900.126:5816): avc:  denied  { read } for  pid=18514 comm="syz.0.3279" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  882.808719][T12734] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  882.832336][   T30] audit: type=1400 audit(1769777900.126:5817): avc:  denied  { open } for  pid=18514 comm="syz.0.3279" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  882.881884][   T30] audit: type=1400 audit(1769777900.319:5818): avc:  denied  { setopt } for  pid=18531 comm="syz.6.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  882.926941][   T30] audit: type=1400 audit(1769777900.319:5819): avc:  denied  { accept } for  pid=18531 comm="syz.6.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  882.954449][   T30] audit: type=1400 audit(1769777900.390:5820): avc:  denied  { ioctl } for  pid=18518 comm="syz.1.3281" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  883.011935][T12734] usb 2-1: unable to get BOS descriptor or descriptor too short
[  883.028342][T12734] usb 2-1: not running at top speed; connect to a high speed hub
[  883.042650][T12734] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  883.056423][T12734] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2
[  883.088803][T12734] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70
[  883.102557][T12734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.127595][T12734] usb 2-1: Product: syz
[  883.131808][T12734] usb 2-1: Manufacturer: syz
[  883.145125][T12734] usb 2-1: SerialNumber: syz
[  883.149946][T18541] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  883.370971][T18544] input: syz1 as /devices/virtual/input/input71
[  883.420853][T12734] usb 2-1: USB disconnect, device number 6
[  883.462988][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  883.580537][T18548] input: syz0 as /devices/virtual/input/input72
[  884.651746][ T5930] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  884.770060][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  884.819781][ T5930] usb 5-1: Using ep0 maxpacket: 16
[  884.826112][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  884.836606][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  884.848083][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  884.857894][ T5930] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  884.868882][T12734] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  885.066161][T12734] usb 7-1: Using ep0 maxpacket: 8
[  885.078304][T12734] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  885.087385][T12734] usb 7-1: config 0 has no interface number 0
[  885.093748][T12734] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  885.106902][T12734] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  885.126491][T12734] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  885.141431][T12734] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  885.148294][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  885.167822][T12734] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  885.172488][   T10] usb 2-1: Using ep0 maxpacket: 32
[  885.177587][T12734] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.183352][ T5930] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  885.199394][ T5930] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  885.200279][T12734] usb 7-1: config 0 descriptor??
[  885.207562][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  885.223899][ T5930] usb 5-1: Manufacturer: syz
[  885.229022][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  885.232559][T12734] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  885.240652][ T5930] usb 5-1: config 0 descriptor??
[  885.252940][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  885.270445][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.280364][   T10] usb 2-1: config 0 descriptor??
[  885.288618][   T10] hub 2-1:0.0: USB hub found
[  885.459669][    C0] ldusb 7-1:0.55: usb_submit_urb failed (-1)
[  885.491140][   T10] hub 2-1:0.0: 1 port detected
[  885.520579][ T5930] rc_core: IR keymap rc-hauppauge not found
[  885.521183][T12734] usb 7-1: USB disconnect, device number 71
[  885.526625][ T5930] Registered IR keymap rc-empty
[  885.541438][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  885.541643][T12734] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  885.569953][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  885.604348][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  885.654899][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input73
[  885.891155][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  886.013968][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  886.033965][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  886.063544][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  886.083449][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  886.116508][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  886.148632][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  886.172244][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  886.320389][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  887.275858][   T10] hub 2-1:0.0: activate --> -90
[  887.309250][ T5930] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  887.471035][ T5930] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  887.480155][ T5930] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  888.441002][ T5930] usb 5-1: USB disconnect, device number 106
[  888.466660][   T10] usb 2-1-port1: cannot reset (err = -110)
[  888.484500][   T10] usb 2-1-port1: cannot reset (err = -32)
[  888.519340][   T10] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad?
[  888.527569][   T30] kauditd_printk_skb: 77 callbacks suppressed
[  888.527582][   T30] audit: type=1400 audit(1769777906.081:5898): avc:  denied  { ioctl } for  pid=18610 comm="syz.4.3308" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  888.558109][ T5931] usb 2-1: USB disconnect, device number 7
[  888.570774][   T10] usb 2-1-port1: attempt power cycle
[  888.987583][T18619] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  888.994204][T18619] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  889.004892][T18619] vhci_hcd vhci_hcd.0: Device attached
[  889.006252][   T30] audit: type=1400 audit(1769777906.546:5899): avc:  denied  { read write } for  pid=18618 comm="syz.0.3311" name="radio3" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  889.013239][T18619] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12)
[  889.040446][T18619] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  889.049777][T18619] vhci_hcd vhci_hcd.0: Device attached
[  889.090263][T18619] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14)
[  889.096873][T18619] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  889.116579][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  889.129557][T18619] vhci_hcd vhci_hcd.0: Device attached
[  889.150253][   T30] audit: type=1400 audit(1769777906.546:5900): avc:  denied  { open } for  pid=18618 comm="syz.0.3311" path="/dev/radio3" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  889.258336][T12734] usb 33-1: new low-speed USB device number 6 using vhci_hcd
[  889.317247][   T30] audit: type=1400 audit(1769777906.779:5901): avc:  denied  { read } for  pid=18631 comm="syz.4.3314" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  889.473142][   T30] audit: type=1400 audit(1769777906.779:5902): avc:  denied  { open } for  pid=18631 comm="syz.4.3314" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  889.501514][   T30] audit: type=1400 audit(1769777906.779:5903): avc:  denied  { create } for  pid=18618 comm="syz.0.3311" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  889.524063][   T30] audit: type=1400 audit(1769777906.789:5904): avc:  denied  { ioctl } for  pid=18631 comm="syz.4.3314" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[  889.551107][   T30] audit: type=1400 audit(1769777906.839:5905): avc:  denied  { create } for  pid=18618 comm="syz.0.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  889.573728][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'.
[  889.584346][T18634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3315'.
[  889.599881][   T30] audit: type=1400 audit(1769777906.849:5906): avc:  denied  { setopt } for  pid=18618 comm="syz.0.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  889.625646][   T30] audit: type=1400 audit(1769777907.122:5907): avc:  denied  { create } for  pid=18633 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  889.869124][T18620] vhci_hcd: connection reset by peer
[  889.874537][T18622] vhci_hcd: connection closed
[  889.874760][T18627] vhci_hcd: connection closed
[  889.883532][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3316'.
[  889.902875][ T6574] vhci_hcd vhci_hcd.0: stop threads
[  889.918255][ T6574] vhci_hcd vhci_hcd.0: release socket
[  889.939983][ T6574] vhci_hcd vhci_hcd.0: disconnect device
[  889.972727][ T6574] vhci_hcd vhci_hcd.0: stop threads
[  889.981730][ T6574] vhci_hcd vhci_hcd.0: release socket
[  890.006198][ T6574] vhci_hcd vhci_hcd.0: disconnect device
[  890.027997][ T6574] vhci_hcd vhci_hcd.0: stop threads
[  890.034205][ T6574] vhci_hcd vhci_hcd.0: release socket
[  890.050478][ T6574] vhci_hcd vhci_hcd.0: disconnect device
[  891.359493][T18656] syzkaller1: entered promiscuous mode
[  891.376236][T18656] syzkaller1: entered allmulticast mode
[  892.142430][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3327'.
[  892.151790][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3327'.
[  893.739503][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  893.739519][   T30] audit: type=1400 audit(1769777911.328:5924): avc:  denied  { ioctl } for  pid=18686 comm="syz.4.3332" path="socket:[76221]" dev="sockfs" ino=76221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  893.929695][   T30] audit: type=1400 audit(1769777911.540:5925): avc:  denied  { read write } for  pid=18691 comm="syz.6.3334" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  893.976653][   T30] audit: type=1400 audit(1769777911.540:5926): avc:  denied  { open } for  pid=18691 comm="syz.6.3334" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  894.076137][   T10] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  894.135255][   T30] audit: type=1400 audit(1769777911.661:5927): avc:  denied  { name_bind } for  pid=18696 comm="syz.3.3335" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  894.139956][T18699] ipvlan0: entered promiscuous mode
[  894.351146][T18706] siw: device registration error -23
[  894.383943][   T30] audit: type=1400 audit(1769777911.963:5928): avc:  denied  { create } for  pid=18690 comm="syz.1.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  894.462781][T18707] kAFS: unable to lookup cell ''
[  894.493010][T18707] tmpfs: Unknown parameter 'mpok'
[  894.939946][T12734] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  895.040333][T18702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3331'.
[  895.109390][   T30] audit: type=1400 audit(1769777911.963:5929): avc:  denied  { write } for  pid=18690 comm="syz.1.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  895.130405][   T10] usb 5-1: Using ep0 maxpacket: 32
[  895.136825][   T10] usb 5-1: config 0 has an invalid interface number: 16 but max is 0
[  895.148436][   T10] usb 5-1: config 0 has no interface number 0
[  895.168206][   T10] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  895.169282][   T30] audit: type=1400 audit(1769777912.104:5930): avc:  denied  { mounton } for  pid=18698 comm="syz.6.3336" path="/362/file0" dev="tmpfs" ino=1900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  895.188031][   T10] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  895.214967][   T30] audit: type=1400 audit(1769777912.104:5931): avc:  denied  { remount } for  pid=18698 comm="syz.6.3336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  895.356595][   T10] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  895.359140][   T30] audit: type=1400 audit(1769777912.769:5932): avc:  denied  { sys_module } for  pid=18701 comm="syz.3.3337" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  895.414800][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  895.446191][   T10] usb 5-1: Product: syz
[  895.450382][   T10] usb 5-1: Manufacturer: syz
[  895.454969][   T10] usb 5-1: SerialNumber: syz
[  895.492281][   T10] usb 5-1: config 0 descriptor??
[  895.503058][T18688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  895.542785][T18688] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  895.599395][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  895.711756][   T30] audit: type=1400 audit(1769777913.222:5933): avc:  denied  { create } for  pid=18720 comm="syz.6.3341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  895.805354][T18688] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  895.889063][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3342'.
[  895.958723][   T10] usb 5-1: USB disconnect, device number 107
[  896.011055][T18730] netlink: 'syz.1.3342': attribute type 7 has an invalid length.
[  896.029298][T18730] netlink: 'syz.1.3342': attribute type 8 has an invalid length.
[  896.052340][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'.
[  896.232201][T18736] netlink: 'syz.6.3345': attribute type 1 has an invalid length.
[  897.127841][T18756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3348'.
[  897.761170][ T5931] usb 1-1: new full-speed USB device number 125 using dummy_hcd
[  897.769313][   T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  897.790862][   T43] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  897.920166][   T43] usb 2-1: device descriptor read/64, error -71
[  897.972579][   T10] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  897.981625][ T5931] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  898.024631][   T10] usb 4-1: config 0 has no interface number 0
[  898.038283][ T5931] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  898.053291][   T10] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[  898.078630][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0
[  898.093990][   T10] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x6 has invalid maxpacket 43115, setting to 64
[  898.111593][ T5931] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  898.143625][   T10] usb 4-1: config 0 interface 113 has no altsetting 0
[  898.155242][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.163575][   T43] usb 2-1: new low-speed USB device number 13 using dummy_hcd
[  898.180312][   T10] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  898.191053][ T5931] usb 1-1: config 0 descriptor??
[  898.196553][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.212949][T18773] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  898.239011][   T10] usb 4-1: Product: syz
[  898.248538][   T10] usb 4-1: Manufacturer: syz
[  898.260067][   T10] usb 4-1: SerialNumber: syz
[  898.284186][   T10] usb 4-1: config 0 descriptor??
[  898.317942][   T43] usb 2-1: device descriptor read/64, error -71
[  898.328702][   T10] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  898.448571][ T5931] usbhid 1-1:0.0: can't add hid device: -71
[  898.454571][ T5931] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  898.468342][   T43] usb usb2-port1: attempt power cycle
[  898.514059][ T5931] usb 1-1: USB disconnect, device number 125
[  898.561159][T12734] usb 4-1: USB disconnect, device number 6
[  898.849958][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  898.849995][   T30] audit: type=1400 audit(1769777916.472:5965): avc:  denied  { name_connect } for  pid=18798 comm="syz.4.3356" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[  899.174731][   T43] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  899.234268][   T43] usb 2-1: device descriptor read/8, error -71
[  899.493382][   T43] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  899.534106][   T43] usb 2-1: device descriptor read/8, error -71
[  899.640989][   T43] usb usb2-port1: unable to enumerate USB device
[  899.793426][   T30] audit: type=1400 audit(1769777917.437:5966): avc:  denied  { create } for  pid=18820 comm="syz.4.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  900.148107][   T30] audit: type=1400 audit(1769777917.759:5967): avc:  denied  { listen } for  pid=18820 comm="syz.4.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  900.177974][   T30] audit: type=1400 audit(1769777917.759:5968): avc:  denied  { accept } for  pid=18820 comm="syz.4.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  900.374995][   T30] audit: type=1400 audit(1769777918.020:5969): avc:  denied  { getopt } for  pid=18835 comm="syz.0.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  900.479851][   T30] audit: type=1400 audit(1769777918.131:5970): avc:  denied  { map } for  pid=18835 comm="syz.0.3364" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  900.654892][   T30] audit: type=1400 audit(1769777918.131:5971): avc:  denied  { read write } for  pid=18835 comm="syz.0.3364" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  900.871831][T18855] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14)
[  900.878437][T18855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  900.946615][T18862] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17)
[  900.953246][T18862] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  901.280917][T18867] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20)
[  901.287519][T18867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  901.313502][   T30] audit: type=1400 audit(1769777918.161:5972): avc:  denied  { write } for  pid=18835 comm="syz.0.3364" path="socket:[76487]" dev="sockfs" ino=76487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  901.360437][T18862] vhci_hcd vhci_hcd.0: Device attached
[  901.380595][T18855] vhci_hcd vhci_hcd.0: Device attached
[  901.447160][T18848] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  901.453772][T18848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  901.480975][   T30] audit: type=1400 audit(1769777918.242:5973): avc:  denied  { ioctl } for  pid=18840 comm="syz.3.3365" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x563c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  901.537893][T18867] vhci_hcd vhci_hcd.0: Device attached
[  901.560819][T18848] vhci_hcd vhci_hcd.0: Device attached
[  901.590532][   T30] audit: type=1400 audit(1769777918.302:5974): avc:  denied  { write } for  pid=18835 comm="syz.0.3364" path="socket:[76487]" dev="sockfs" ino=76487 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  901.693527][   T10] usb 41-2: new low-speed USB device number 7 using vhci_hcd
[  901.722145][T18862] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(24)
[  901.728739][T18862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  901.785720][T18855] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16)
[  901.792315][T18855] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  901.803780][T18878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  901.853002][T18862] vhci_hcd vhci_hcd.0: Device attached
[  901.878466][T18855] vhci_hcd vhci_hcd.0: Device attached
[  901.914851][T18848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  901.946025][T18848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  901.969611][T18848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  902.011174][T18882] vhci_hcd: connection closed
[  902.011512][T16203] vhci_hcd vhci_hcd.4: stop threads
[  902.012728][T18887] vhci_hcd: connection closed
[  902.023048][T16203] vhci_hcd vhci_hcd.4: release socket
[  902.033969][T18868] vhci_hcd: connection closed
[  902.034655][T18856] vhci_hcd: connection reset by peer
[  902.034983][T18863] vhci_hcd: connection closed
[  902.045294][T18850] vhci_hcd: connection closed
[  902.056847][T16203] vhci_hcd vhci_hcd.4: disconnect device
[  902.067729][T16203] vhci_hcd vhci_hcd.4: stop threads
[  902.165689][T16203] vhci_hcd vhci_hcd.4: release socket
[  902.175986][T16203] vhci_hcd vhci_hcd.4: disconnect device
[  902.188978][T16203] vhci_hcd vhci_hcd.4: stop threads
[  902.200025][T16203] vhci_hcd vhci_hcd.4: release socket
[  902.614695][T16203] vhci_hcd vhci_hcd.4: disconnect device
[  902.630265][T16203] vhci_hcd vhci_hcd.4: stop threads
[  902.645416][T16203] vhci_hcd vhci_hcd.4: release socket
[  902.653826][T16203] vhci_hcd vhci_hcd.4: disconnect device
[  902.662018][T16203] vhci_hcd vhci_hcd.4: stop threads
[  902.674184][T16203] vhci_hcd vhci_hcd.4: release socket
[  902.690022][T16203] vhci_hcd vhci_hcd.4: disconnect device
[  902.702348][T16203] vhci_hcd vhci_hcd.4: stop threads
[  902.709721][T16203] vhci_hcd vhci_hcd.4: release socket
[  902.716580][T16203] vhci_hcd vhci_hcd.4: disconnect device
[  903.030744][T18919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18919 comm=syz.4.3378
[  903.154732][T18919] netlink: 'syz.4.3378': attribute type 1 has an invalid length.
[  903.601907][T18917] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3376'.
[  903.651401][T18930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3378'.
[  903.943510][T18930] bond3: (slave bridge1): making interface the new active one
[  904.005311][T18930] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  904.016210][   T30] kauditd_printk_skb: 76 callbacks suppressed
[  904.016225][   T30] audit: type=1400 audit(1769777921.687:6051): avc:  denied  { name_bind } for  pid=18935 comm="syz.3.3381" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  904.046165][   T30] audit: type=1400 audit(1769777921.687:6052): avc:  denied  { node_bind } for  pid=18935 comm="syz.3.3381" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  904.108787][   T30] audit: type=1400 audit(1769777921.768:6053): avc:  denied  { getopt } for  pid=18939 comm="syz.3.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  904.219138][T11170] block nbd0: Possible stuck request ffff888027138000: control (read@0,1024B). Runtime 360 seconds
[  904.230752][T11170] block nbd0: Possible stuck request ffff888027138200: control (read@1024,1024B). Runtime 360 seconds
[  904.241717][T11170] block nbd0: Possible stuck request ffff888027138400: control (read@2048,1024B). Runtime 360 seconds
[  904.252686][T11170] block nbd0: Possible stuck request ffff888027138600: control (read@3072,1024B). Runtime 360 seconds
[  904.502777][   T30] audit: type=1400 audit(1769777921.808:6054): avc:  denied  { connect } for  pid=18927 comm="syz.6.3380" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  904.525362][T18949] siw: device registration error -23
[  904.955917][   T30] audit: type=1400 audit(1769777921.948:6055): avc:  denied  { write } for  pid=18927 comm="syz.6.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  905.086550][   T30] audit: type=1400 audit(1769777922.019:6056): avc:  denied  { setopt } for  pid=18939 comm="syz.3.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  905.106665][   T30] audit: type=1400 audit(1769777922.019:6057): avc:  denied  { create } for  pid=18939 comm="syz.3.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  905.349380][T18958] input: syz1 as /devices/virtual/input/input75
[  905.438098][T18960] netlink: 'syz.4.3384': attribute type 13 has an invalid length.
[  905.446045][T18960] netlink: 'syz.4.3384': attribute type 17 has an invalid length.
[  905.454081][   T30] audit: type=1400 audit(1769777922.199:6058): avc:  denied  { write } for  pid=18939 comm="syz.3.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  905.503795][   T30] audit: type=1400 audit(1769777922.762:6059): avc:  denied  { read write } for  pid=18939 comm="syz.3.3382" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  905.528550][T18960] gre0: left promiscuous mode
[  905.533219][T18960] gre0: left allmulticast mode
[  905.556548][   T30] audit: type=1400 audit(1769777922.762:6060): avc:  denied  { open } for  pid=18939 comm="syz.3.3382" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  905.667172][T18960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  905.822234][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'.
[  905.837120][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'.
[  905.872285][   T43] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  905.980089][T18969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3388'.
[  906.008044][T18969] vlan0: entered allmulticast mode
[  906.117571][T18972] netlink: 'syz.0.3389': attribute type 13 has an invalid length.
[  906.125593][T18972] netlink: 'syz.0.3389': attribute type 17 has an invalid length.
[  906.160913][   T43] usb 5-1: Using ep0 maxpacket: 32
[  906.193627][   T43] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  906.261280][T18972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  906.283787][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.323228][   T43] usb 5-1: Product: syz
[  906.339126][   T43] usb 5-1: Manufacturer: syz
[  906.345399][   T43] usb 5-1: SerialNumber: syz
[  906.456756][T18985] netlink: 212112 bytes leftover after parsing attributes in process `syz.6.3392'.
[  906.501516][ T5931] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  906.661682][ T5931] usb 1-1: Using ep0 maxpacket: 32
[  906.698120][ T5931] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  906.718646][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.729362][ T5931] usb 1-1: Product: syz
[  906.733536][ T5931] usb 1-1: Manufacturer: syz
[  906.738120][ T5931] usb 1-1: SerialNumber: syz
[  906.759319][ T5931] usb 1-1: config 0 descriptor??
[  906.780522][ T5931] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  906.818911][   T10] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  906.882800][   T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  906.899598][   T43] gspca_ov534_9: reg_w failed -71
[  907.081492][T18989] tipc: Disabling bearer <eth:ipvlan1>
[  907.240701][ T5931] gspca_ov534_9: reg_w failed -71
[  907.298806][   T43] gspca_ov534_9: Unknown sensor 0000
[  907.298941][   T43] ov534_9 5-1:255.0: probe with driver ov534_9 failed with error -22
[  907.325150][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'.
[  907.354759][   T43] usb 5-1: USB disconnect, device number 108
[  907.364495][T18993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3394'.
[  908.358531][ T5931] gspca_ov534_9: Unknown sensor 0000
[  908.358579][ T5931] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  908.430927][ T5931] usb 1-1: USB disconnect, device number 126
[  908.565282][T19018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3399'.
[  908.742304][T13622] usb usb42-port1: attempt power cycle
[  909.117615][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  909.117630][   T30] audit: type=1400 audit(1769777926.796:6090): avc:  denied  { write } for  pid=19007 comm="syz.4.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  909.459344][T13622] usb usb42-port1: unable to enumerate USB device
[  909.547498][   T30] audit: type=1400 audit(1769777927.227:6091): avc:  denied  { ioctl } for  pid=19024 comm="syz.6.3402" path="socket:[79026]" dev="sockfs" ino=79026 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  909.577996][T19028] netlink: 'syz.3.3401': attribute type 10 has an invalid length.
[  909.810236][   T30] audit: type=1400 audit(1769777927.498:6092): avc:  denied  { read write } for  pid=19030 comm="syz.0.3403" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  909.834771][   T30] audit: type=1400 audit(1769777927.498:6093): avc:  denied  { open } for  pid=19030 comm="syz.0.3403" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[  910.033476][   T30] audit: type=1400 audit(1769777927.689:6094): avc:  denied  { create } for  pid=19032 comm="syz.3.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  910.074655][   T30] audit: type=1400 audit(1769777927.689:6095): avc:  denied  { setopt } for  pid=19032 comm="syz.3.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  910.092883][T19040] geneve2: entered promiscuous mode
[  910.590781][T14750] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[  910.786284][T14750] usb 7-1: Using ep0 maxpacket: 32
[  910.918855][T14750] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  910.929974][T14750] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  910.946249][T14750] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  910.957428][T14750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.976443][T14750] usb 7-1: config 0 descriptor??
[  911.135711][   T30] audit: type=1400 audit(1769777928.752:6096): avc:  denied  { ioctl } for  pid=19050 comm="syz.0.3409" path="socket:[78432]" dev="sockfs" ino=78432 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  912.013950][T14750] hub 7-1:0.0: USB hub found
[  912.416519][T14750] hub 7-1:0.0: config failed, can't read hub descriptor (err -22)
[  912.495905][T19062] siw: device registration error -23
[  912.631235][   T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  912.673583][T14750] usbhid 7-1:0.0: can't add hid device: -71
[  912.687656][T14750] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  912.869699][T14750] usb 7-1: USB disconnect, device number 72
[  912.880430][   T10] usb 1-1: Using ep0 maxpacket: 32
[  912.887203][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  912.978499][T19067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  913.245544][   T30] audit: type=1400 audit(1769777930.647:6097): avc:  denied  { read write } for  pid=19064 comm="syz.1.3413" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  913.303126][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.312963][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  913.322039][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.333653][   T30] audit: type=1400 audit(1769777930.647:6098): avc:  denied  { open } for  pid=19064 comm="syz.1.3413" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  913.358804][   T30] audit: type=1400 audit(1769777930.657:6099): avc:  denied  { bind } for  pid=19064 comm="syz.1.3413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  913.392689][   T10] usb 1-1: config 0 descriptor??
[  913.413563][   T10] hub 1-1:0.0: USB hub found
[  913.623155][   T10] hub 1-1:0.0: 1 port detected
[  914.236164][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  914.236187][   T30] audit: type=1400 audit(1769777931.930:6109): avc:  denied  { create } for  pid=19076 comm="syz.6.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  914.300967][T19078] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  914.335782][   T30] audit: type=1400 audit(1769777931.970:6110): avc:  denied  { create } for  pid=19079 comm="syz.1.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  914.454768][   T30] audit: type=1400 audit(1769777931.970:6111): avc:  denied  { ioctl } for  pid=19079 comm="syz.1.3417" path="socket:[78545]" dev="sockfs" ino=78545 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  914.491879][T19090] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3420'.
[  914.507196][T19090] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3420'.
[  914.517259][   T30] audit: type=1400 audit(1769777931.970:6112): avc:  denied  { getopt } for  pid=19079 comm="syz.1.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  914.548530][   T30] audit: type=1400 audit(1769777931.990:6113): avc:  denied  { open } for  pid=19079 comm="syz.1.3417" path="/dev/ttyq6" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  914.575187][ T5811] Bluetooth: hci4: command 0x0406 tx timeout
[  914.738339][   T10] hub 1-1:0.0: activate --> -90
[  914.783075][T19096] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  915.562898][   T30] audit: type=1400 audit(1769777933.263:6114): avc:  denied  { name_bind } for  pid=19114 comm="syz.4.3429" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  915.622042][ T5930] usb 1-1: USB disconnect, device number 127
[  915.656204][T19116] Cannot find add_set index 0 as target
[  915.673734][   T10] usb 1-1.1: new full-speed USB device number 2 using dummy_hcd
[  915.979986][   T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  916.004466][   T10] usb 1-1.1: parent hub has no TT
[  916.022791][   T10] usb 1-1-port1: attempt power cycle
[  916.132720][   T43] usb 2-1: Using ep0 maxpacket: 32
[  916.158715][   T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  916.168475][   T43] usb 2-1: config 0 has no interface number 0
[  916.185905][   T43] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  916.195208][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.203397][   T43] usb 2-1: Product: syz
[  916.476839][   T30] audit: type=1400 audit(1769777934.175:6115): avc:  denied  { create } for  pid=19117 comm="syz.0.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  916.511054][   T30] audit: type=1400 audit(1769777934.205:6116): avc:  denied  { bind } for  pid=19117 comm="syz.0.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  916.536384][   T43] usb 2-1: Manufacturer: syz
[  916.541490][   T43] usb 2-1: SerialNumber: syz
[  916.814369][   T43] usb 2-1: config 0 descriptor??
[  916.828325][   T30] audit: type=1400 audit(1769777934.205:6117): avc:  denied  { listen } for  pid=19117 comm="syz.0.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  916.828369][   T30] audit: type=1400 audit(1769777934.235:6118): avc:  denied  { connect } for  pid=19117 comm="syz.0.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  916.830460][   T43] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  917.038013][   T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  917.043121][   T43] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  917.141217][T19133] input: syz1 as /devices/virtual/input/input78
[  917.239173][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[  917.325627][T19143] CIFS mount error: No usable UNC path provided in device string!
[  917.325627][T19143] 
[  917.326135][T19144] FAULT_INJECTION: forcing a failure.
[  917.326135][T19144] name failslab, interval 1, probability 0, space 0, times 0
[  917.336579][T19143] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  917.349192][T19144] CPU: 1 UID: 0 PID: 19144 Comm: syz.4.3438 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  917.349218][T19144] Tainted: [L]=SOFTLOCKUP
[  917.349224][T19144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  917.349233][T19144] Call Trace:
[  917.349239][T19144]  <TASK>
[  917.349245][T19144]  dump_stack_lvl+0x100/0x190
[  917.349270][T19144]  should_fail_ex.cold+0x5/0xa
[  917.349288][T19144]  should_failslab+0xc2/0x120
[  917.349314][T19144]  kmem_cache_alloc_node_noprof+0x8c/0x880
[  917.349335][T19144]  ? __alloc_skb+0x156/0x410
[  917.349352][T19144]  ? __alloc_skb+0x35d/0x410
[  917.349372][T19144]  ? __alloc_skb+0x156/0x410
[  917.349389][T19144]  __alloc_skb+0x156/0x410
[  917.349405][T19144]  ? __alloc_skb+0x35d/0x410
[  917.349422][T19144]  ? __pfx___alloc_skb+0x10/0x10
[  917.349440][T19144]  ? netlink_autobind.isra.0+0x60/0x370
[  917.349468][T19144]  netlink_alloc_large_skb+0x69/0x150
[  917.349490][T19144]  netlink_sendmsg+0x680/0xda0
[  917.349515][T19144]  ? __pfx_netlink_sendmsg+0x10/0x10
[  917.349535][T19144]  ? PageHuge+0x180/0x180
[  917.349559][T19144]  ____sys_sendmsg+0xa54/0xc30
[  917.349576][T19144]  ? __pfx_____sys_sendmsg+0x10/0x10
[  917.349601][T19144]  ___sys_sendmsg+0x190/0x1e0
[  917.349617][T19144]  ? __pfx____sys_sendmsg+0x10/0x10
[  917.349643][T19144]  ? find_held_lock+0x2b/0x80
[  917.349676][T19144]  __sys_sendmsg+0x170/0x220
[  917.349696][T19144]  ? __pfx___sys_sendmsg+0x10/0x10
[  917.349729][T19144]  do_syscall_64+0xc9/0xf80
[  917.349748][T19144]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  917.349763][T19144] RIP: 0033:0x7ff5a559aeb9
[  917.349776][T19144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  917.349790][T19144] RSP: 002b:00007ff5a64b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  917.349805][T19144] RAX: ffffffffffffffda RBX: 00007ff5a5815fa0 RCX: 00007ff5a559aeb9
[  917.349816][T19144] RDX: 0000000000000080 RSI: 00002000000010c0 RDI: 0000000000000003
[  917.349825][T19144] RBP: 00007ff5a64b7090 R08: 0000000000000000 R09: 0000000000000000
[  917.349834][T19144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  917.349843][T19144] R13: 00007ff5a5816038 R14: 00007ff5a5815fa0 R15: 00007ffcb7e0a0c8
[  917.349863][T19144]  </TASK>
[  917.584223][ T5930] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  917.753830][ T5930] usb 1-1: Using ep0 maxpacket: 32
[  917.762363][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.789026][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3442'.
[  917.794597][ T5930] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  917.818374][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.819438][T19153] netlink: 'syz.3.3442': attribute type 5 has an invalid length.
[  917.845517][ T5930] usb 1-1: config 0 descriptor??
[  917.863228][ T5930] hub 1-1:0.0: bad descriptor, ignoring hub
[  917.869208][T13622] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  917.884125][ T5930] hub 1-1:0.0: probe with driver hub failed with error -5
[  917.893617][ T5930] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  918.028792][T13622] usb 5-1: Using ep0 maxpacket: 16
[  918.039352][T13622] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  918.056707][T13622] usb 5-1: config 0 has no interface number 0
[  918.141036][T13622] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  918.159400][T13622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.177001][T13622] usb 5-1: Product: syz
[  918.189273][T13622] usb 5-1: Manufacturer: syz
[  918.201601][T13622] usb 5-1: SerialNumber: syz
[  918.248971][T13622] usb 5-1: config 0 descriptor??
[  918.265561][T13622] hub 5-1:0.132: bad descriptor, ignoring hub
[  918.275606][T13622] hub 5-1:0.132: probe with driver hub failed with error -5
[  918.304541][T13622] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input79
[  918.348340][ T5930] usb 7-1: new low-speed USB device number 73 using dummy_hcd
[  918.472530][T19148] netlink: 'syz.4.3440': attribute type 21 has an invalid length.
[  918.490815][T19148] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3440'.
[  918.507876][ T5930] usb 7-1: device descriptor read/64, error -71
[  918.522358][T19148] netlink: 'syz.4.3440': attribute type 4 has an invalid length.
[  918.541126][T19148] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3440'.
[  918.595098][T19148] netlink: 'syz.4.3440': attribute type 1 has an invalid length.
[  918.619856][T19148] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3440'.
[  918.716970][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  918.727497][T12734] usb 2-1: USB disconnect, device number 16
[  918.737769][T12734] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  918.757474][ T5930] usb 7-1: new low-speed USB device number 74 using dummy_hcd
[  918.779415][T12734] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  918.804945][T12734] quatech2 2-1:0.51: device disconnected
[  918.858863][   T43] usb 5-1: USB disconnect, device number 109
[  918.917742][ T5930] usb 7-1: device descriptor read/64, error -71
[  919.027000][ T5930] usb usb7-port1: attempt power cycle
[  919.390066][T19195] siw: device registration error -23
[  919.615724][ T5930] usb 7-1: new low-speed USB device number 75 using dummy_hcd
[  919.675217][ T5930] usb 7-1: device descriptor read/8, error -71
[  919.709189][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  919.709204][   T30] audit: type=1400 audit(1769777937.421:6134): avc:  denied  { mount } for  pid=19205 comm="syz.3.3448" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  919.815225][   T30] audit: type=1400 audit(1769777937.522:6135): avc:  denied  { read write } for  pid=19205 comm="syz.3.3448" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  919.858456][   T30] audit: type=1400 audit(1769777937.532:6136): avc:  denied  { open } for  pid=19205 comm="syz.3.3448" path="/93/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  919.913375][T19215] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  919.985069][ T5930] usb 7-1: new low-speed USB device number 76 using dummy_hcd
[  920.010840][   T30] audit: type=1400 audit(1769777937.712:6137): avc:  denied  { unmount } for  pid=17156 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  920.055838][ T5930] usb 7-1: device descriptor read/8, error -71
[  920.164885][ T5930] usb usb7-port1: unable to enumerate USB device
[  920.321974][ T5930] usb 1-1: USB disconnect, device number 6
[  920.469301][T19225] netlink: 'syz.1.3453': attribute type 11 has an invalid length.
[  920.477257][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'.
[  920.657527][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'.
[  920.973347][ T5930] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  921.130421][   T30] audit: type=1800 audit(1769777938.844:6138): pid=19241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3458" name="bus" dev="tmpfs" ino=517 res=0 errno=0
[  921.185290][ T5930] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  921.202922][   T30] audit: type=1804 audit(1769777938.874:6139): pid=19241 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm=6C2586CE36DB0CCF197CC94F7FCE8F name="/newroot/97/bus" dev="tmpfs" ino=517 res=1 errno=0
[  921.232899][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.262972][ T5930] usb 1-1: Product: syz
[  921.267165][ T5930] usb 1-1: Manufacturer: syz
[  921.271756][ T5930] usb 1-1: SerialNumber: syz
[  921.286602][ T5930] usb 1-1: config 0 descriptor??
[  921.768489][   T30] audit: type=1400 audit(1769777939.465:6140): avc:  denied  { bind } for  pid=19250 comm="syz.4.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  921.795163][ T5930] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22
[  921.936155][ T5931] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  921.998404][ T5930] usb 1-1: USB disconnect, device number 7
[  922.050935][   T30] audit: type=1400 audit(1769777939.755:6141): avc:  denied  { write } for  pid=19266 comm="syz.6.3461" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  922.112814][ T5931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  922.124880][ T5931] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  922.135649][ T5931] usb 4-1: config 1 has no interface number 1
[  922.141937][ T5931] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  922.156464][ T5931] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  922.169545][ T5931] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  922.188074][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.200225][ T5931] usb 4-1: Product: syz
[  922.204507][ T5931] usb 4-1: Manufacturer: syz
[  922.219472][ T5931] usb 4-1: SerialNumber: syz
[  922.240773][T19253] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  922.258106][T19275] netlink: 'syz.6.3463': attribute type 74 has an invalid length.
[  922.281428][T13622] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  922.430944][T13622] usb 2-1: Using ep0 maxpacket: 32
[  922.446871][T13622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  922.482467][T13622] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  922.501261][T13622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.541546][T13622] usb 2-1: config 0 descriptor??
[  922.567320][T13622] hub 2-1:0.0: bad descriptor, ignoring hub
[  922.567585][ T5931] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  922.585129][T13622] hub 2-1:0.0: probe with driver hub failed with error -5
[  922.601773][T13622] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  922.604542][T19288] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  922.625469][ T5931] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  922.680874][   T30] audit: type=1400 audit(1769777940.386:6142): avc:  denied  { ioctl } for  pid=19281 comm="syz.6.3464" path="socket:[78841]" dev="sockfs" ino=78841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  922.709465][ T5931] usb 4-1: USB disconnect, device number 7
[  923.183448][   T30] audit: type=1400 audit(1769777940.877:6143): avc:  denied  { create } for  pid=19294 comm="syz.0.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  923.239620][   T43] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  923.409417][   T43] usb 5-1: Using ep0 maxpacket: 32
[  923.445663][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  923.486871][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  923.509400][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  923.554403][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.846665][   T43] usb 5-1: config 0 descriptor??
[  923.877640][   T43] hub 5-1:0.0: USB hub found
[  924.061439][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3469'.
[  924.087362][   T43] hub 5-1:0.0: 1 port detected
[  924.093648][T19323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3469'.
[  924.418062][T13622] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[  924.574822][T13622] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  924.736194][   T43] hub 5-1:0.0: activate --> -90
[  924.742197][T13622] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  924.764433][T13622] usb 7-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00
[  924.776650][T13622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.849826][T13622] usb 7-1: config 0 descriptor??
[  924.962433][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  924.962450][   T30] audit: type=1400 audit(1769777942.680:6148): avc:  denied  { setopt } for  pid=19344 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  924.990003][   T30] audit: type=1400 audit(1769777942.710:6149): avc:  denied  { accept } for  pid=19344 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  925.012173][   T30] audit: type=1400 audit(1769777942.710:6150): avc:  denied  { write } for  pid=19344 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  925.035187][   T30] audit: type=1400 audit(1769777942.710:6151): avc:  denied  { read } for  pid=19344 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  925.084897][   T30] audit: type=1400 audit(1769777942.800:6152): avc:  denied  { write } for  pid=19346 comm="syz.1.3477" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  925.086346][   T52] Bluetooth: hci0: unexpected event for opcode 0x1004
[  925.127666][   T30] audit: type=1400 audit(1769777942.850:6153): avc:  denied  { bind } for  pid=19326 comm="syz.6.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  925.128337][T19327] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3470'.
[  925.165250][T13622] thrustmaster 0003:044F:B320.0017: unknown main item tag 0x0
[  925.167880][T12734] usb 2-1: USB disconnect, device number 17
[  925.172985][T13622] thrustmaster 0003:044F:B320.0017: item fetching failed at offset 6/7
[  925.189213][T13622] thrustmaster 0003:044F:B320.0017: parse failed
[  925.195601][T13622] thrustmaster 0003:044F:B320.0017: probe with driver thrustmaster failed with error -22
[  925.236596][T14750] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  925.246351][   T30] audit: type=1400 audit(1769777942.960:6154): avc:  denied  { setopt } for  pid=19350 comm="syz.0.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  925.311570][T19351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3478'.
[  925.344659][T19351] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  925.365638][T12734] usb 7-1: USB disconnect, device number 77
[  925.386616][T14750] usb 4-1: Using ep0 maxpacket: 16
[  925.393276][T14750] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  925.413383][T14750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  925.425709][T14750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  925.435817][T14750] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  925.445709][T14750] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  925.461252][T14750] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  925.471183][T14750] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  925.479449][T14750] usb 4-1: Manufacturer: syz
[  925.486679][T14750] usb 4-1: config 0 descriptor??
[  925.526834][   T30] audit: type=1400 audit(1769777943.241:6155): avc:  denied  { read } for  pid=19354 comm="syz.0.3479" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  925.580839][ T5931] usb 5-1: USB disconnect, device number 110
[  925.601622][   T30] audit: type=1400 audit(1769777943.241:6156): avc:  denied  { open } for  pid=19354 comm="syz.0.3479" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  925.626448][   T30] audit: type=1400 audit(1769777943.251:6157): avc:  denied  { bind } for  pid=19354 comm="syz.0.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  925.645889][   T43] usb 5-1.1: new full-speed USB device number 111 using dummy_hcd
[  925.654012][   T43] usb 5-1.1: parent hub has no TT
[  925.661270][   T43] usb 5-1-port1: attempt power cycle
[  925.789610][T14750] rc_core: IR keymap rc-hauppauge not found
[  926.005570][T14750] Registered IR keymap rc-empty
[  926.014139][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.047264][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.091694][T14750] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  926.146955][T14750] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input81
[  926.169051][T19368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3481'.
[  926.178648][T19368] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3481'.
[  926.192888][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.235846][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.305922][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.306356][T19375] syzkaller0: entered promiscuous mode
[  926.361654][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.409129][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'.
[  926.425554][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.431064][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'.
[  926.504959][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.576989][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.614847][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.645820][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.684912][T14750] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  926.717687][T14750] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  926.751883][T14750] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  927.180177][T19395] Cannot find del_set index 4 as target
[  927.946436][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  928.209762][T19406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3493'.
[  928.302510][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  928.452329][   T10] usb 1-1: Using ep0 maxpacket: 8
[  928.459366][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  928.473752][   T10] usb 1-1: config 4 has an invalid interface number: 147 but max is 0
[  928.486737][   T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  928.509255][ T5931] usb 4-1: USB disconnect, device number 8
[  928.529091][   T10] usb 1-1: config 4 has no interface number 0
[  928.557682][   T10] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  928.569173][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.571143][   T43] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[  928.586433][   T10] usb 1-1: Product: syz
[  928.602310][   T10] usb 1-1: Manufacturer: syz
[  928.606938][   T10] usb 1-1: SerialNumber: syz
[  928.742603][   T43] usb 7-1: Using ep0 maxpacket: 8
[  928.749789][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  928.758865][   T43] usb 7-1: config 4 has an invalid interface number: 147 but max is 0
[  928.767552][   T43] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  928.780322][   T43] usb 7-1: config 4 has no interface number 0
[  928.789428][   T43] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  928.799000][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.807660][   T43] usb 7-1: Product: syz
[  928.812289][   T43] usb 7-1: Manufacturer: syz
[  928.816939][   T43] usb 7-1: SerialNumber: syz
[  929.183863][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3491'.
[  929.201525][   T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  929.210294][   T52] Bluetooth: hci0: Injecting HCI hardware error event
[  929.220390][   T52] Bluetooth: hci0: hardware error 0x00
[  929.769049][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3494'.
[  930.062431][T19441] siw: device registration error -23
[  930.441485][T19445] input: syz0 as /devices/virtual/input/input83
[  930.525438][   T30] kauditd_printk_skb: 15 callbacks suppressed
[  930.525456][   T30] audit: type=1400 audit(1769777948.237:6173): avc:  denied  { name_bind } for  pid=19444 comm="syz.4.3504" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  930.596673][T19445] netlink: 'syz.4.3504': attribute type 1 has an invalid length.
[  930.661018][T19445] bond4 (unregistering): Released all slaves
[  931.352179][   T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  931.503573][T19455] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[  933.013295][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3511'.
[  933.022729][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'.
[  933.031796][T19468] netlink: 'syz.4.3511': attribute type 13 has an invalid length.
[  933.039649][T19468] netlink: 'syz.4.3511': attribute type 12 has an invalid length.
[  933.288011][T19474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.307293][T19474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.516528][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  933.672311][   T10] uvcvideo 1-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  933.682025][ T5929] usb 2-1: Using ep0 maxpacket: 8
[  933.697670][   T10] uvcvideo 1-1:4.147: No valid video chain found.
[  933.707677][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[  933.725710][ T5929] usb 2-1: config 7 has an invalid interface number: 200 but max is 1
[  933.739200][ T5929] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  933.757274][ T5929] usb 2-1: config 7 has an invalid interface number: 4 but max is 1
[  933.773557][ T5929] usb 2-1: config 7 has no interface number 0
[  933.787073][ T5929] usb 2-1: config 7 has no interface number 1
[  933.801698][ T5929] usb 2-1: config 7 interface 4 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  933.823809][ T5929] usb 2-1: config 7 interface 4 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  933.845967][ T5929] usb 2-1: config 7 interface 200 has no altsetting 0
[  933.860238][ T5929] usb 2-1: config 7 interface 4 has no altsetting 0
[  933.875901][ T5929] usb 2-1: New USB device found, idVendor=0403, idProduct=e700, bcdDevice=a7.e4
[  933.905017][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.939768][   T43] uvcvideo 7-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  933.947191][   T43] uvcvideo 7-1:4.147: No valid video chain found.
[  933.953748][ T5929] usb 2-1: Manufacturer: ဉ
[  933.980469][ T5929] usb 2-1: SerialNumber: syz
[  933.998553][T19480] netlink: 'syz.4.3516': attribute type 10 has an invalid length.
[  934.229401][T17337] block nbd0: Possible stuck request ffff888027138000: control (read@0,1024B). Runtime 390 seconds
[  934.241381][T17337] block nbd0: Possible stuck request ffff888027138200: control (read@1024,1024B). Runtime 390 seconds
[  934.255698][T17337] block nbd0: Possible stuck request ffff888027138400: control (read@2048,1024B). Runtime 390 seconds
[  934.270528][T17337] block nbd0: Possible stuck request ffff888027138600: control (read@3072,1024B). Runtime 390 seconds
[  934.308591][ T5929] ftdi_sio 2-1:7.200: FTDI USB Serial Device converter detected
[  934.458751][ T5929] ftdi_sio ttyUSB0: unknown device type: 0xa7e4
[  934.469352][ T5929] ftdi_sio 2-1:7.4: FTDI USB Serial Device converter detected
[  934.480567][ T5929] ftdi_sio ttyUSB1: unknown device type: 0xa7e4
[  934.496649][ T5929] usb 2-1: USB disconnect, device number 18
[  934.504386][ T5929] ftdi_sio 2-1:7.200: device disconnected
[  934.514557][ T5929] ftdi_sio 2-1:7.4: device disconnected
[  935.344825][T12734] usb 1-1: USB disconnect, device number 8
[  935.370625][ T5880] usb 7-1: USB disconnect, device number 78
[  935.741590][T19511] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  936.104109][   T43] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[  936.187089][ T5929] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  936.275122][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  936.286229][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  936.296086][   T43] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  936.306743][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.336600][   T43] usb 7-1: config 0 descriptor??
[  936.363963][ T5929] usb 5-1: Using ep0 maxpacket: 8
[  936.370376][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  936.383644][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  936.419327][ T5929] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  936.428647][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.443585][ T5929] usb 5-1: Product: syz
[  936.447813][ T5929] usb 5-1: Manufacturer: syz
[  936.453375][ T5929] usb 5-1: SerialNumber: syz
[  937.025115][ T5929] usb 5-1: config 0 descriptor??
[  937.337532][T19531] overlayfs: failed to resolve './file1': -2
[  937.439779][   T30] audit: type=1400 audit(1769777955.144:6174): avc:  denied  { setopt } for  pid=19524 comm="syz.1.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  937.594110][   T43] steelseries 0003:1038:1410.0018: item fetching failed at offset 5/7
[  937.623316][   T43] steelseries 0003:1038:1410.0018: parse failed
[  937.630198][T13622] usb 5-1: USB disconnect, device number 115
[  937.695380][   T43] steelseries 0003:1038:1410.0018: probe with driver steelseries failed with error -22
[  937.835698][   T10] usb 7-1: USB disconnect, device number 79
[  938.759055][   T30] audit: type=1400 audit(1769777956.485:6175): avc:  denied  { create } for  pid=19540 comm="syz.6.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  938.936516][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'.
[  938.969865][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'.
[  939.229641][   T30] audit: type=1400 audit(1769777956.956:6176): avc:  denied  { setopt } for  pid=19548 comm="syz.3.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  939.253541][   T10] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  939.780536][   T10] usb 5-1: Using ep0 maxpacket: 8
[  939.788853][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  939.821893][   T10] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  939.843316][   T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  939.878500][   T10] usb 5-1: config 4 has no interface number 0
[  939.902305][   T10] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  939.923828][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.958368][   T10] usb 5-1: Product: syz
[  939.962690][   T10] usb 5-1: Manufacturer: syz
[  939.975464][   T10] usb 5-1: SerialNumber: syz
[  941.007433][   T30] audit: type=1400 audit(1769777958.697:6177): avc:  denied  { unlink } for  pid=19572 comm="syz.6.3542" name="#27" dev="tmpfs" ino=2122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  941.299608][   T30] audit: type=1400 audit(1769777958.697:6178): avc:  denied  { mount } for  pid=19572 comm="syz.6.3542" name="/" dev="overlay" ino=2117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  941.321934][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3535'.
[  941.509069][   T30] audit: type=1400 audit(1769777959.228:6179): avc:  denied  { unmount } for  pid=11597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  941.873683][   T30] audit: type=1400 audit(1769777959.608:6180): avc:  denied  { nlmsg_read } for  pid=19584 comm="syz.1.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  941.948247][   T30] audit: type=1400 audit(1769777959.608:6181): avc:  denied  { ioctl } for  pid=19584 comm="syz.1.3546" path="socket:[80432]" dev="sockfs" ino=80432 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  943.070578][   T30] audit: type=1400 audit(1769777960.799:6182): avc:  denied  { read write } for  pid=19584 comm="syz.1.3546" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  943.176188][   T30] audit: type=1400 audit(1769777960.799:6183): avc:  denied  { open } for  pid=19584 comm="syz.1.3546" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  943.184155][   T10] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  943.226723][T19587] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  943.243278][T19587] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  943.276036][   T10] uvcvideo 5-1:4.147: No valid video chain found.
[  943.292856][T19587] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  943.313701][   T10] usb 5-1: USB disconnect, device number 116
[  943.325872][T19587] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  943.348272][T19587] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  943.354669][T19587] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  943.798325][T19606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3550'.
[  943.950628][T19607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3549'.
[  944.192827][   T30] audit: type=1400 audit(1769777961.930:6184): avc:  denied  { listen } for  pid=19598 comm="syz.3.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  944.196183][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3551'.
[  944.262885][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3549'.
[  945.172093][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  945.336163][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  945.406187][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  945.839444][ T5880] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  946.066123][ T5880] usb 2-1: Using ep0 maxpacket: 16
[  946.177348][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  946.197252][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  946.295761][   T43] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  946.447962][T19643] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  946.514707][ T5880] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00
[  946.527010][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.540708][ T5880] usb 2-1: config 0 descriptor??
[  946.910711][   T43] usb 5-1: Using ep0 maxpacket: 8
[  946.917939][   T43] usb 5-1: unable to get BOS descriptor or descriptor too short
[  946.960541][   T43] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  946.965493][T19628] netlink: 'syz.1.3555': attribute type 1 has an invalid length.
[  946.969050][   T43] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  946.998614][   T43] usb 5-1: config 4 has no interface number 0
[  947.012881][   T43] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  947.029405][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.054698][T19648] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  947.065932][T19648] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  947.074794][   T43] usb 5-1: Product: syz
[  947.100527][   T43] usb 5-1: Manufacturer: syz
[  947.177561][T19628] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  947.245945][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  947.254690][   T43] usb 5-1: SerialNumber: syz
[  947.304758][   T30] audit: type=1400 audit(1769777965.052:6185): avc:  denied  { create } for  pid=19625 comm="syz.1.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  947.350373][   T30] audit: type=1400 audit(1769777965.052:6186): avc:  denied  { write } for  pid=19625 comm="syz.1.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  947.381007][T19655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3561'.
[  947.395873][T19655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3561'.
[  947.438102][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  947.484682][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  947.675168][T19628] bond1: (slave gretap1): making interface the new active one
[  947.684652][T19628] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  947.701874][T19648] macvlan2: entered promiscuous mode
[  947.710581][T19648] macvlan2: entered allmulticast mode
[  947.721293][T19648] bond1: entered promiscuous mode
[  947.728267][T19648] gretap1: entered promiscuous mode
[  947.736526][T19648] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  947.752128][T19648] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  947.800916][T19648] bond1: left promiscuous mode
[  947.816231][T19648] gretap1: left promiscuous mode
[  948.006203][ T5880] holtek_mouse 0003:04D9:A081.0019: unknown main item tag 0x2
[  948.013762][ T5880] holtek_mouse 0003:04D9:A081.0019: unknown main item tag 0x5
[  948.039752][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3559'.
[  948.078358][ T5880] holtek_mouse 0003:04D9:A081.0019: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.1-1/input0
[  948.194724][T19667] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  948.456819][T19668] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3564'.
[  948.468080][T19668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  948.484025][   T10] usb 2-1: USB disconnect, device number 19
[  949.051575][   T30] audit: type=1400 audit(1769777966.794:6187): avc:  denied  { write } for  pid=19662 comm="syz.6.3562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  949.386521][T19660] fido_id[19660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  949.982796][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  950.112679][T14750] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  950.172616][   T10] usb 4-1: Using ep0 maxpacket: 32
[  950.195781][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  950.252567][T14750] usb 2-1: device descriptor read/64, error -71
[  950.273974][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  950.315072][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  950.347622][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.385661][   T10] usb 4-1: config 0 descriptor??
[  950.421655][   T10] hub 4-1:0.0: USB hub found
[  950.502438][T14750] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  950.601930][   T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  950.664600][T14750] usb 2-1: device descriptor read/64, error -71
[  950.773878][T19696] siw: device registration error -23
[  950.790063][T14750] usb usb2-port1: attempt power cycle
[  950.848714][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  950.854741][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  950.920699][   T10] usb 4-1: USB disconnect, device number 9
[  951.182005][T14750] usb 2-1: new low-speed USB device number 22 using dummy_hcd
[  951.257843][T14750] usb 2-1: device descriptor read/8, error -71
[  951.310119][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3568'.
[  951.520808][   T30] audit: type=1400 audit(1769777969.255:6188): avc:  denied  { read write } for  pid=19704 comm="syz.3.3569" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  951.562483][T14750] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[  951.595956][T14750] usb 2-1: device descriptor read/8, error -71
[  951.685794][   T30] audit: type=1400 audit(1769777969.255:6189): avc:  denied  { ioctl open } for  pid=19704 comm="syz.3.3569" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  951.839262][T14750] usb usb2-port1: unable to enumerate USB device
[  951.890337][T19710] xt_hashlimit: max too large, truncated to 1048576
[  951.906798][   T30] audit: type=1400 audit(1769777969.646:6190): avc:  denied  { read } for  pid=19708 comm="syz.6.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  952.017640][   T30] audit: type=1400 audit(1769777969.756:6191): avc:  denied  { mounton } for  pid=19713 comm="syz.3.3571" path="/120/file0" dev="tmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  952.327614][T19724] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  952.442686][   T43] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  952.485459][   T30] audit: type=1400 audit(1769777970.206:6192): avc:  denied  { recv } for  pid=19673 comm="syz.1.3565" saddr=10.128.0.169 src=45600 daddr=10.128.1.52 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  952.492581][ T5929] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  952.512909][   T43] uvcvideo 5-1:4.147: No valid video chain found.
[  952.991558][   T43] usb 5-1: USB disconnect, device number 117
[  953.028080][   T30] audit: type=1400 audit(1769777970.746:6193): avc:  denied  { append } for  pid=19732 comm="syz.6.3575" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  953.150623][ T5929] usb 1-1: Using ep0 maxpacket: 32
[  953.180172][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  953.204183][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  953.245691][ T5929] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  953.280637][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.363410][ T5929] usb 1-1: config 0 descriptor??
[  953.372722][   T30] audit: type=1400 audit(1769777971.116:6194): avc:  denied  { bind } for  pid=19742 comm="syz.6.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  953.383238][ T5929] hub 1-1:0.0: USB hub found
[  953.575880][ T5929] hub 1-1:0.0: 1 port detected
[  953.808204][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  953.940302][   T43] usb 5-1: new full-speed USB device number 118 using dummy_hcd
[  954.253289][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  954.253375][   T43] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  954.329831][ T5929] hub 1-1:0.0: activate --> -90
[  954.337803][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  954.350199][   T43] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  954.389608][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  954.419935][   T43] usb 5-1: config 0 interface 0 has no altsetting 0
[  954.426913][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  954.460520][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  954.478343][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  954.486791][   T43] usb 5-1: config 0 descriptor??
[  954.501562][T19755] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  954.521965][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.569652][   T10] usb 2-1: Product: syz
[  954.574222][   T10] usb 2-1: Manufacturer: syz
[  954.588555][   T10] usb 2-1: SerialNumber: syz
[  954.639920][   T10] usb 2-1: config 0 descriptor??
[  954.655181][T19750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  955.873011][ T5929] usb 1-1-port1: cannot reset (err = -110)
[  955.879179][ T5929] usb 1-1-port1: cannot reset (err = -32)
[  955.884943][ T5929] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad?
[  955.898933][   T43] usbhid 5-1:0.0: can't add hid device: -71
[  955.899612][ T5929] usb 1-1-port1: cannot disable (err = -32)
[  955.911656][ T5929] usb 1-1-port1: cannot reset (err = -32)
[  955.917679][ T5929] usb 1-1-port1: cannot reset (err = -32)
[  955.923682][ T5929] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad?
[  955.928879][   T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  955.931650][ T5929] usb 1-1-port1: cannot disable (err = -32)
[  955.959348][T19750] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  955.976163][   T43] usb 5-1: USB disconnect, device number 118
[  956.023018][T13622] usb 1-1: USB disconnect, device number 9
[  956.036206][ T5929] usb 1-1-port1: attempt power cycle
[  956.427324][T19791] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  956.898235][T12734] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  957.052432][T12734] usb 5-1: Using ep0 maxpacket: 8
[  957.096036][T12734] usb 5-1: unable to get BOS descriptor or descriptor too short
[  957.138377][T12734] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  957.146553][T12734] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  957.258047][T12734] usb 5-1: config 4 has no interface number 0
[  957.337058][T12734] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  957.370713][T12734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.394231][T12734] usb 5-1: Product: syz
[  957.402030][T12734] usb 5-1: Manufacturer: syz
[  957.408445][T12734] usb 5-1: SerialNumber: syz
[  957.955282][T19814] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  958.528881][ T5931] usb 2-1: USB disconnect, device number 24
[  959.275276][T19837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3588'.
[  959.336767][T14750] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  959.586610][T14750] usb 2-1: Using ep0 maxpacket: 32
[  959.595450][T14750] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  959.611137][T14750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.638042][T14750] usb 2-1: config 0 descriptor??
[  959.794788][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'.
[  959.915383][T14750] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  960.005202][T14750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  960.093456][T14750] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  960.113049][T14750] usb 2-1: media controller created
[  960.140094][T14750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  960.423177][T14750] DVB: Unable to find symbol dib7000p_attach()
[  960.446119][T14750] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  960.657094][T14750] rc_core: IR keymap rc-dib0700-rc5 not found
[  960.667605][T14750] Registered IR keymap rc-empty
[  960.674931][T14750] dvb-usb: could not initialize remote control.
[  960.685612][T14750] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  960.704188][T14750] usb 2-1: USB disconnect, device number 25
[  960.797366][T19851] xt_TCPMSS: Only works on TCP SYN packets
[  960.819269][T19851] sit1: entered allmulticast mode
[  960.845878][ T5929] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[  960.915663][T14750] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  961.035698][ T5929] usb 7-1: Using ep0 maxpacket: 32
[  961.045529][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  961.083099][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  961.112342][ T5929] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  961.144591][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.171271][ T5929] usb 7-1: config 0 descriptor??
[  961.198041][ T5929] hub 7-1:0.0: USB hub found
[  961.401101][ T5929] hub 7-1:0.0: 1 port detected
[  961.985795][T12734] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  961.993419][T12734] uvcvideo 5-1:4.147: No valid video chain found.
[  962.007383][ T5929] hub 7-1:0.0: activate --> -90
[  962.009625][T12734] usb 5-1: USB disconnect, device number 119
[  962.569405][   T30] audit: type=1400 audit(1769777980.282:6195): avc:  denied  { accept } for  pid=19870 comm="syz.3.3604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  962.815325][ T5929] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  962.822352][T13622] usb 7-1: USB disconnect, device number 80
[  962.888329][ T5929] usb 7-1-port1: attempt power cycle
[  964.036079][T19883] syzkaller0: entered promiscuous mode
[  964.041573][T19883] syzkaller0: entered allmulticast mode
[  964.354284][T17337] block nbd0: Possible stuck request ffff888027138000: control (read@0,1024B). Runtime 420 seconds
[  964.365606][T17337] block nbd0: Possible stuck request ffff888027138200: control (read@1024,1024B). Runtime 420 seconds
[  964.378249][T17337] block nbd0: Possible stuck request ffff888027138400: control (read@2048,1024B). Runtime 420 seconds
[  964.390127][T17337] block nbd0: Possible stuck request ffff888027138600: control (read@3072,1024B). Runtime 420 seconds
[  964.535647][T19889] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  964.591261][T19898] netlink: 'syz.6.3611': attribute type 13 has an invalid length.
[  964.599387][T19898] netlink: 'syz.6.3611': attribute type 17 has an invalid length.
[  964.923493][T13622] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  964.931223][T12734] usb 7-1: new high-speed USB device number 85 using dummy_hcd
[  965.173326][ T5929] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  965.201786][T19898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  965.243355][T12734] usb 7-1: Using ep0 maxpacket: 32
[  965.303236][T13622] usb 5-1: Using ep0 maxpacket: 8
[  965.336491][T13622] usb 5-1: unable to get BOS descriptor or descriptor too short
[  965.417670][T13622] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[  965.426407][ T5929] usb 1-1: Using ep0 maxpacket: 32
[  965.448512][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  965.538837][T13622] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  965.552619][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  965.573291][T13622] usb 5-1: config 4 has no interface number 0
[  965.590489][ T5929] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  965.604562][T13622] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  965.623880][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.640386][T13622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.684400][ T5929] usb 1-1: config 0 descriptor??
[  965.693021][T13622] usb 5-1: Product: syz
[  965.697206][T13622] usb 5-1: Manufacturer: syz
[  965.711940][T13622] usb 5-1: SerialNumber: syz
[  965.717840][ T5929] hub 1-1:0.0: USB hub found
[  966.185563][ T5929] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  966.495350][ T5929] usbhid 1-1:0.0: can't add hid device: -71
[  966.625828][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  966.716622][ T5929] usb 1-1: USB disconnect, device number 14
[  966.848885][T12734] usb 7-1: unable to get BOS descriptor or descriptor too short
[  966.873486][T12734] usb 7-1: unable to read config index 0 descriptor/start: -71
[  966.895384][T12734] usb 7-1: can't read configurations, error -71
[  966.986298][   T30] audit: type=1400 audit(1769777984.735:6196): avc:  denied  { ioctl } for  pid=19915 comm="syz.3.3617" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  967.151637][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'.
[  967.683199][T19922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3619'.
[  967.744106][   T30] audit: type=1400 audit(1769777985.495:6197): avc:  denied  { create } for  pid=19926 comm="syz.1.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  968.011703][T19932] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0
[  968.044514][   T30] audit: type=1400 audit(1769777985.495:6198): avc:  denied  { ioctl } for  pid=19926 comm="syz.1.3620" path="socket:[82206]" dev="sockfs" ino=82206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  968.510884][   T30] audit: type=1400 audit(1769777985.665:6199): avc:  denied  { create } for  pid=19915 comm="syz.3.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  968.520399][T19936] tipc: Started in network mode
[  968.980281][T19936] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  969.126473][   T30] audit: type=1400 audit(1769777985.665:6200): avc:  denied  { getopt } for  pid=19915 comm="syz.3.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  969.177527][T19936] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  969.208184][   T30] audit: type=1400 audit(1769777985.675:6201): avc:  denied  { write } for  pid=19926 comm="syz.1.3620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  970.387235][   T30] audit: type=1400 audit(1769777988.134:6202): avc:  denied  { read } for  pid=19958 comm="syz.0.3628" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  970.719349][   T30] audit: type=1400 audit(1769777988.134:6203): avc:  denied  { open } for  pid=19958 comm="syz.0.3628" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  970.774936][   T30] audit: type=1400 audit(1769777988.186:6204): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.52 dest=59342 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  970.806041][   T30] audit: type=1400 audit(1769777988.269:6205): avc:  denied  { write } for  pid=19943 comm="syz.1.3624" lport=55813 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  970.848134][T13622] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  970.872504][T13622] uvcvideo 5-1:4.147: No valid video chain found.
[  971.021408][   T30] audit: type=1400 audit(1769777988.454:6206): avc:  denied  { bind } for  pid=19943 comm="syz.1.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  971.170444][T19973] overlayfs: failed to resolve './file1': -2
[  971.452014][T13622] usb 5-1: USB disconnect, device number 120
[  971.642463][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'.
[  971.765530][T19979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'.
[  972.511825][T12734] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  972.888940][   T30] kauditd_printk_skb: 51 callbacks suppressed
[  972.888973][   T30] audit: type=1400 audit(1769777990.617:6258): avc:  denied  { prog_load } for  pid=19992 comm="syz.1.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  972.931597][T12734] usb 5-1: Using ep0 maxpacket: 16
[  973.114936][T12734] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  973.144560][T12734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  973.161691][   T30] audit: type=1400 audit(1769777990.617:6259): avc:  denied  { bpf } for  pid=19992 comm="syz.1.3636" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  973.184030][   T30] audit: type=1400 audit(1769777990.617:6260): avc:  denied  { perfmon } for  pid=19992 comm="syz.1.3636" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  973.208890][   T30] audit: type=1400 audit(1769777990.627:6261): avc:  denied  { create } for  pid=19992 comm="syz.1.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  973.228876][T12734] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  973.238689][T12734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.247012][T12734] usb 5-1: Product: syz
[  973.251400][T12734] usb 5-1: Manufacturer: syz
[  973.256046][T12734] usb 5-1: SerialNumber: syz
[  973.264332][T12734] usb 5-1: config 0 descriptor??
[  973.270896][   T30] audit: type=1400 audit(1769777990.627:6262): avc:  denied  { connect } for  pid=19992 comm="syz.1.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  973.291937][T12734] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  973.303401][T12734] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  973.371605][   T30] audit: type=1400 audit(1769777991.223:6263): avc:  denied  { create } for  pid=19996 comm="syz.3.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  973.466175][   T30] audit: type=1400 audit(1769777991.315:6264): avc:  denied  { ioctl } for  pid=19996 comm="syz.3.3637" path="socket:[83276]" dev="sockfs" ino=83276 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  973.494326][T19988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.524345][T19988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.525776][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3637'.
[  973.582466][T19998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3637'.
[  973.594876][   T30] audit: type=1400 audit(1769777991.315:6265): avc:  denied  { connect } for  pid=19996 comm="syz.3.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  973.670019][   T30] audit: type=1400 audit(1769777991.315:6266): avc:  denied  { module_request } for  pid=19996 comm="syz.3.3637" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  973.742553][   T30] audit: type=1400 audit(1769777991.346:6267): avc:  denied  { read write } for  pid=19987 comm="syz.4.3634" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  974.241729][T12734] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  974.248375][T12734] em28xx 5-1:0.0: Config register raw data: 0x00
[  974.337578][ T5915] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  974.395977][T20021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3643'.
[  974.405435][T20021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3643'.
[  974.515375][ T5915] usb 2-1: Using ep0 maxpacket: 32
[  974.547028][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  974.567479][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  975.094578][ T5915] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  975.116833][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.145674][ T5915] usb 2-1: config 0 descriptor??
[  975.615073][T20037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3649'.
[  975.702300][T20038] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3640'.
[  976.701963][ T5915] usbhid 2-1:0.0: can't add hid device: -71
[  976.730158][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  976.734479][T20055] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  976.776769][ T5915] usb 2-1: USB disconnect, device number 26
[  976.837826][   T43] usb 5-1: USB disconnect, device number 121
[  976.846987][   T43] em28xx 5-1:0.0: Disconnecting em28xx
[  976.947519][   T43] em28xx 5-1:0.0: Freeing device
[  976.983003][T20055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  977.113286][T12734] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  978.025377][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  978.025394][   T30] audit: type=1400 audit(1769777995.980:6325): avc:  denied  { create } for  pid=20067 comm="syz.6.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  978.606645][   T30] audit: type=1400 audit(1769777996.082:6326): avc:  denied  { create } for  pid=20056 comm="syz.3.3653" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  978.627886][   T30] audit: type=1400 audit(1769777996.093:6327): avc:  denied  { write } for  pid=20056 comm="syz.3.3653" name="file2" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  979.060800][   T30] audit: type=1400 audit(1769777996.093:6328): avc:  denied  { open } for  pid=20056 comm="syz.3.3653" path="/144/file2" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  979.126251][   T30] audit: type=1400 audit(1769777996.347:6329): avc:  denied  { bind } for  pid=20067 comm="syz.6.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  979.181143][   T30] audit: type=1400 audit(1769777996.347:6330): avc:  denied  { listen } for  pid=20067 comm="syz.6.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  979.203862][   T30] audit: type=1400 audit(1769777996.347:6331): avc:  denied  { connect } for  pid=20067 comm="syz.6.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  979.237372][   T30] audit: type=1400 audit(1769777996.368:6332): avc:  denied  { write } for  pid=20067 comm="syz.6.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  979.275910][   T30] audit: type=1400 audit(1769777996.388:6333): avc:  denied  { prog_run } for  pid=20056 comm="syz.3.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  979.410068][T20083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20083 comm=syz.6.3661
[  979.427372][   T30] audit: type=1400 audit(1769777996.735:6334): avc:  denied  { accept } for  pid=20067 comm="syz.6.3657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  979.587113][T20083] netlink: 'syz.6.3661': attribute type 1 has an invalid length.
[  979.649122][T20083] bond3: (slave gretap1): making interface the new active one
[  979.662887][T20083] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  979.736452][T12734] usb 4-1: unable to get BOS descriptor or descriptor too short
[  979.760454][T12734] usb 4-1: unable to read config index 0 descriptor/start: -71
[  979.776638][T12734] usb 4-1: can't read configurations, error -71
[  979.798428][T20083] vlan0: entered allmulticast mode
[  979.815193][T20083] bond3: entered allmulticast mode
[  979.831647][T20083] gretap1: entered allmulticast mode
[  979.844234][T20083] bond3: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  979.971863][T20093] bridge1: entered promiscuous mode
[  980.102172][   T43] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[  980.495541][   T43] usb 7-1: Using ep0 maxpacket: 8
[  980.531288][   T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7
[  980.565305][   T43] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  980.596607][   T43] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  980.613491][   T43] usb 7-1: Product: syz
[  980.626331][   T43] usb 7-1: Manufacturer: syz
[  980.644170][   T43] usb 7-1: SerialNumber: syz
[  981.041874][   T43] usb 7-1: palm_os_3_probe - error -110 getting connection information
[  981.057061][   T43] visor 7-1:1.0: probe with driver visor failed with error -110
[  983.001644][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  983.001666][   T30] audit: type=1400 audit(1769778001.035:6353): avc:  denied  { unmount } for  pid=12049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  983.041950][T20122] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  983.317545][T20128] overlay: Unknown parameter '/'
[  983.439672][   T30] audit: type=1400 audit(1769778001.359:6354): avc:  denied  { mount } for  pid=20126 comm="syz.4.3672" name="/" dev="ramfs" ino=83439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  983.466700][   T30] audit: type=1400 audit(1769778001.359:6355): avc:  denied  { mounton } for  pid=20126 comm="syz.4.3672" path="/159/file0" dev="ramfs" ino=83439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  983.512978][   T43] usb 7-1: USB disconnect, device number 87
[  983.631702][   T30] audit: type=1400 audit(1769778001.430:6356): avc:  denied  { create } for  pid=20126 comm="syz.4.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[  983.787128][   T30] audit: type=1400 audit(1769778001.430:6357): avc:  denied  { sys_admin } for  pid=20126 comm="syz.4.3672" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  983.808703][   T30] audit: type=1400 audit(1769778001.643:6358): avc:  denied  { write } for  pid=20131 comm="syz.3.3674" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  984.614064][T13622] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[  984.777482][T13622] usb 7-1: Using ep0 maxpacket: 32
[  984.784289][T13622] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  984.792948][T13622] usb 7-1: config 0 has no interface number 0
[  984.887059][T20167] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  984.904845][T13622] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  984.924503][T13622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.339143][T13622] usb 7-1: Product: syz
[  985.344986][T13622] usb 7-1: Manufacturer: syz
[  985.350282][T13622] usb 7-1: SerialNumber: syz
[  985.382794][T13622] usb 7-1: config 0 descriptor??
[  985.391722][T13622] smsc95xx v2.0.0
[  985.435417][T13622] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  985.786323][T13622] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22
[  985.827109][   T30] audit: type=1400 audit(1769778003.801:6359): avc:  denied  { unmount } for  pid=16745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  986.190034][   T30] audit: type=1400 audit(1769778003.841:6360): avc:  denied  { create } for  pid=20152 comm="syz.6.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  986.313139][   T30] audit: type=1400 audit(1769778003.841:6361): avc:  denied  { read write } for  pid=20152 comm="syz.6.3676" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  986.412043][   T30] audit: type=1400 audit(1769778003.841:6362): avc:  denied  { open } for  pid=20152 comm="syz.6.3676" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  986.530847][T12734] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[  986.669143][T12734] usb 1-1: device descriptor read/64, error -71
[  986.724861][T20192] overlayfs: failed to resolve './file1': -2
[  987.051393][T13622] usb 7-1: USB disconnect, device number 88
[  987.232883][T12734] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[  987.247924][   T43] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  987.460293][T12734] usb 1-1: device descriptor read/64, error -71
[  987.470006][   T43] usb 5-1: Using ep0 maxpacket: 32
[  987.490308][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  987.519525][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  987.541172][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  987.584718][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.598847][T12734] usb usb1-port1: attempt power cycle
[  987.620160][   T43] usb 5-1: config 0 descriptor??
[  987.651383][   T43] hub 5-1:0.0: USB hub found
[  988.141179][T20189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3685'.
[  988.152952][T12734] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  988.211338][   T43] hub 5-1:0.0: 1 port detected
[  988.219634][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  988.219650][   T30] audit: type=1400 audit(1769778006.319:6384): avc:  denied  { remove_name } for  pid=20212 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=9496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.250591][T12734] usb 1-1: device descriptor read/8, error -71
[  988.279510][   T30] audit: type=1400 audit(1769778006.359:6385): avc:  denied  { unlink } for  pid=20212 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=9496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  988.499124][T12734] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[  988.529537][T12734] usb 1-1: device descriptor read/8, error -71
[  988.709975][   T30] audit: type=1400 audit(1769778006.824:6386): avc:  denied  { accept } for  pid=20220 comm="syz.6.3689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  988.879245][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  988.908328][   T43] hub 5-1:0.0: activate --> -90
[  988.958436][ T1297] ==================================================================
[  988.961531][T12734] usb usb1-port1: unable to enumerate USB device
[  988.966518][ T1297] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90
[  988.966546][ T1297] Read of size 8 at addr ffff888035471020 by task aoe_tx0/1297
[  988.966559][ T1297] 
[  988.966571][ T1297] CPU: 0 UID: 0 PID: 1297 Comm: aoe_tx0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  988.966594][ T1297] Tainted: [L]=SOFTLOCKUP
[  988.966600][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  988.966612][ T1297] Call Trace:
[  988.966618][ T1297]  <TASK>
[  988.966626][ T1297]  dump_stack_lvl+0x100/0x190
[  988.966647][ T1297]  print_report+0x156/0x4c9
[  988.966667][ T1297]  ? __virt_addr_valid+0x81/0x620
[  988.966683][ T1297]  ? __phys_addr+0xe8/0x180
[  988.966698][ T1297]  ? tty_write_room+0x7d/0x90
[  988.966712][ T1297]  kasan_report+0xdf/0x1a0
[  988.966733][ T1297]  ? tty_write_room+0x7d/0x90
[  988.966750][ T1297]  tty_write_room+0x7d/0x90
[  988.966765][ T1297]  handle_tx+0x14a/0x620
[  988.966786][ T1297]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  988.966805][ T1297]  dev_hard_start_xmit+0x127/0x6c0
[  988.966824][ T1297]  __dev_queue_xmit+0x6dd/0x46f0
[  988.966843][ T1297]  ? finish_task_switch.isra.0+0x204/0xb70
[  988.966866][ T1297]  ? __pfx___dev_queue_xmit+0x10/0x10
[  988.966885][ T1297]  ? __lock_acquire+0x4a5/0x2630
[  988.966901][ T1297]  ? ref_tracker_free+0x37e/0x6c0
[  988.966924][ T1297]  ? do_raw_spin_lock+0x128/0x260
[  988.966944][ T1297]  ? tx+0xa4/0x130
[  988.966958][ T1297]  ? rcu_is_watching+0x12/0xc0
[  988.966979][ T1297]  ? __pfx_tx+0x10/0x10
[  988.966993][ T1297]  tx+0xc4/0x130
[  988.967007][ T1297]  kthread+0x1d8/0x3c0
[  988.967029][ T1297]  ? __kthread_parkme+0xbb/0x230
[  988.967050][ T1297]  ? __pfx_kthread+0x10/0x10
[  988.967071][ T1297]  ? rcu_is_watching+0x12/0xc0
[  988.967090][ T1297]  ? __pfx_default_wake_function+0x10/0x10
[  988.967112][ T1297]  ? __kthread_parkme+0x18c/0x230
[  988.967135][ T1297]  ? __pfx_kthread+0x10/0x10
[  988.967155][ T1297]  kthread+0x3b3/0x730
[  988.967171][ T1297]  ? __pfx_kthread+0x10/0x10
[  988.967186][ T1297]  ? ret_from_fork+0x79/0xaf0
[  988.967203][ T1297]  ? ret_from_fork+0x79/0xaf0
[  988.967220][ T1297]  ? rcu_is_watching+0x12/0xc0
[  988.967239][ T1297]  ? __pfx_kthread+0x10/0x10
[  988.967255][ T1297]  ret_from_fork+0x754/0xaf0
[  988.967272][ T1297]  ? __pfx_ret_from_fork+0x10/0x10
[  988.967290][ T1297]  ? __switch_to+0x7b9/0x10c0
[  988.967310][ T1297]  ? __pfx_kthread+0x10/0x10
[  988.967326][ T1297]  ret_from_fork_asm+0x1a/0x30
[  988.967345][ T1297]  </TASK>
[  988.967351][ T1297] 
[  989.209973][ T1297] Allocated by task 20179:
[  989.214372][ T1297]  kasan_save_stack+0x30/0x50
[  989.219051][ T1297]  kasan_save_track+0x14/0x30
[  989.223724][ T1297]  __kasan_kmalloc+0xaa/0xb0
[  989.228317][ T1297]  alloc_tty_struct+0x96/0x8c0
[  989.233077][ T1297]  tty_init_dev.part.0+0x20/0x470
[  989.238098][ T1297]  tty_init_dev+0x60/0x80
[  989.242419][ T1297]  ptmx_open+0x15e/0x3c0
[  989.246649][ T1297]  chrdev_open+0x234/0x6a0
[  989.251058][ T1297]  do_dentry_open+0x73e/0x1570
[  989.255811][ T1297]  vfs_open+0x82/0x3f0
[  989.259874][ T1297]  path_openat+0x21dc/0x3120
[  989.264455][ T1297]  do_filp_open+0x1f7/0x420
[  989.268949][ T1297]  do_sys_openat2+0x12e/0x220
[  989.273623][ T1297]  __x64_sys_openat+0x12d/0x210
[  989.278466][ T1297]  do_syscall_64+0xc9/0xf80
[  989.282960][ T1297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.288841][ T1297] 
[  989.291149][ T1297] Freed by task 13622:
[  989.295200][ T1297]  kasan_save_stack+0x30/0x50
[  989.299866][ T1297]  kasan_save_track+0x14/0x30
[  989.304532][ T1297]  kasan_save_free_info+0x3b/0x70
[  989.309542][ T1297]  __kasan_slab_free+0x5f/0x80
[  989.314300][ T1297]  kfree+0x1c7/0x690
[  989.318182][ T1297]  process_one_work+0x9c2/0x1840
[  989.323112][ T1297]  worker_thread+0x5da/0xe40
[  989.327695][ T1297]  kthread+0x3b3/0x730
[  989.331753][ T1297]  ret_from_fork+0x754/0xaf0
[  989.336334][ T1297]  ret_from_fork_asm+0x1a/0x30
[  989.341086][ T1297] 
[  989.343399][ T1297] Last potentially related work creation:
[  989.349096][ T1297]  kasan_save_stack+0x30/0x50
[  989.353763][ T1297]  kasan_record_aux_stack+0xa7/0xc0
[  989.358949][ T1297]  insert_work+0x36/0x230
[  989.363271][ T1297]  __queue_work+0x96f/0x10f0
[  989.367851][ T1297]  queue_work_on+0x180/0x1e0
[  989.372431][ T1297]  release_tty+0x4f3/0x5f0
[  989.376842][ T1297]  tty_release_struct+0xb7/0xe0
[  989.381685][ T1297]  tty_release+0xd7a/0x1300
[  989.386184][ T1297]  __fput+0x3ff/0xb40
[  989.390159][ T1297]  task_work_run+0x150/0x240
[  989.394738][ T1297]  do_exit+0x829/0x2a30
[  989.398882][ T1297]  do_group_exit+0xd5/0x2a0
[  989.403372][ T1297]  get_signal+0x1ec7/0x21e0
[  989.407874][ T1297]  arch_do_signal_or_restart+0x91/0x7a0
[  989.413415][ T1297]  exit_to_user_mode_loop+0x86/0x4b0
[  989.418692][ T1297]  do_syscall_64+0x4fe/0xf80
[  989.423272][ T1297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.429153][ T1297] 
[  989.431465][ T1297] The buggy address belongs to the object at ffff888035471000
[  989.431465][ T1297]  which belongs to the cache kmalloc-cg-2k of size 2048
[  989.445762][ T1297] The buggy address is located 32 bytes inside of
[  989.445762][ T1297]  freed 2048-byte region [ffff888035471000, ffff888035471800)
[  989.459544][ T1297] 
[  989.461854][ T1297] The buggy address belongs to the physical page:
[  989.468247][ T1297] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35470
[  989.476992][ T1297] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  989.485473][ T1297] memcg:ffff888028bd2281
[  989.489694][ T1297] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  989.497657][ T1297] page_type: f5(slab)
[  989.501625][ T1297] raw: 00fff00000000040 ffff88813fe303c0 0000000000000000 dead000000000001
[  989.510195][ T1297] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888028bd2281
[  989.518769][ T1297] head: 00fff00000000040 ffff88813fe303c0 0000000000000000 dead000000000001
[  989.527426][ T1297] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888028bd2281
[  989.536088][ T1297] head: 00fff00000000003 ffffea0000d51c01 00000000ffffffff 00000000ffffffff
[  989.544744][ T1297] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  989.553402][ T1297] page dumped because: kasan: bad access detected
[  989.559799][ T1297] page_owner tracks the page as allocated
[  989.565496][ T1297] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5814, tgid 5814 (syz-executor), ts 62801216999, free_ts 62797645576
[  989.586846][ T1297]  post_alloc_hook+0x1e1/0x250
[  989.591603][ T1297]  get_page_from_freelist+0xe3d/0x2e10
[  989.597052][ T1297]  __alloc_frozen_pages_noprof+0x26c/0x2410
[  989.602936][ T1297]  alloc_pages_mpol+0x1fb/0x550
[  989.607780][ T1297]  new_slab+0x2c4/0x440
[  989.611923][ T1297]  ___slab_alloc+0xda3/0x1ca0
[  989.616586][ T1297]  __slab_alloc.isra.0+0x63/0x110
[  989.621600][ T1297]  __kvmalloc_node_noprof+0x749/0xac0
[  989.626963][ T1297]  xt_alloc_table_info+0x44/0xa0
[  989.631888][ T1297]  do_ip6t_set_ctl+0x504/0xba0
[  989.636641][ T1297]  nf_setsockopt+0x8d/0xf0
[  989.641048][ T1297]  ipv6_setsockopt+0x135/0x170
[  989.645808][ T1297]  tcp_setsockopt+0xa7/0x100
[  989.650391][ T1297]  do_sock_setsockopt+0xf3/0x1d0
[  989.655325][ T1297]  __sys_setsockopt+0x195/0x220
[  989.660165][ T1297]  __x64_sys_setsockopt+0xbd/0x160
[  989.665286][ T1297] page last free pid 5181 tgid 5181 stack trace:
[  989.671596][ T1297]  __free_frozen_pages+0x822/0x1130
[  989.676790][ T1297]  __put_partials+0x127/0x160
[  989.681451][ T1297]  qlist_free_all+0x47/0xe0
[  989.685943][ T1297]  kasan_quarantine_reduce+0x1a0/0x1f0
[  989.691397][ T1297]  __kasan_slab_alloc+0x69/0x90
[  989.696254][ T1297]  kmem_cache_alloc_noprof+0x2ad/0x780
[  989.701706][ T1297]  getname_flags.part.0+0x4c/0x540
[  989.706815][ T1297]  getname_flags+0x93/0xf0
[  989.711232][ T1297]  vfs_fstatat+0xe1/0xf0
[  989.715472][ T1297]  __do_sys_newfstatat+0x9d/0x120
[  989.720492][ T1297]  do_syscall_64+0xc9/0xf80
[  989.724988][ T1297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  989.730872][ T1297] 
[  989.733188][ T1297] Memory state around the buggy address:
[  989.738801][ T1297]  ffff888035470f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  989.746852][ T1297]  ffff888035470f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  989.754900][ T1297] >ffff888035471000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  989.762948][ T1297]                                ^
[  989.768040][ T1297]  ffff888035471080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  989.776086][ T1297]  ffff888035471100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  989.784132][ T1297] ==================================================================
[  989.792267][ T1297] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  989.799450][ T1297] CPU: 0 UID: 0 PID: 1297 Comm: aoe_tx0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  989.810029][ T1297] Tainted: [L]=SOFTLOCKUP
[  989.814340][ T1297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  989.824400][ T1297] Call Trace:
[  989.827671][ T1297]  <TASK>
[  989.830591][ T1297]  dump_stack_lvl+0x100/0x190
[  989.835267][ T1297]  vpanic+0x20d/0x630
[  989.839244][ T1297]  panic+0xd1/0xd1
[  989.842956][ T1297]  ? __pfx_panic+0x10/0x10
[  989.847363][ T1297]  ? check_panic_on_warn+0x1f/0x90
[  989.852474][ T1297]  check_panic_on_warn.cold+0x19/0x34
[  989.857834][ T1297]  end_report.part.0+0x3a/0x90
[  989.862597][ T1297]  kasan_report.cold+0xe/0x18
[  989.867278][ T1297]  ? tty_write_room+0x7d/0x90
[  989.871951][ T1297]  tty_write_room+0x7d/0x90
[  989.876446][ T1297]  handle_tx+0x14a/0x620
[  989.880685][ T1297]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  989.886485][ T1297]  dev_hard_start_xmit+0x127/0x6c0
[  989.891588][ T1297]  __dev_queue_xmit+0x6dd/0x46f0
[  989.896523][ T1297]  ? finish_task_switch.isra.0+0x204/0xb70
[  989.902333][ T1297]  ? __pfx___dev_queue_xmit+0x10/0x10
[  989.907698][ T1297]  ? __lock_acquire+0x4a5/0x2630
[  989.912628][ T1297]  ? ref_tracker_free+0x37e/0x6c0
[  989.917652][ T1297]  ? do_raw_spin_lock+0x128/0x260
[  989.922673][ T1297]  ? tx+0xa4/0x130
[  989.926387][ T1297]  ? rcu_is_watching+0x12/0xc0
[  989.931147][ T1297]  ? __pfx_tx+0x10/0x10
[  989.935289][ T1297]  tx+0xc4/0x130
[  989.938829][ T1297]  kthread+0x1d8/0x3c0
[  989.942898][ T1297]  ? __kthread_parkme+0xbb/0x230
[  989.947833][ T1297]  ? __pfx_kthread+0x10/0x10
[  989.952421][ T1297]  ? rcu_is_watching+0x12/0xc0
[  989.957182][ T1297]  ? __pfx_default_wake_function+0x10/0x10
[  989.962988][ T1297]  ? __kthread_parkme+0x18c/0x230
[  989.968012][ T1297]  ? __pfx_kthread+0x10/0x10
[  989.972599][ T1297]  kthread+0x3b3/0x730
[  989.976658][ T1297]  ? __pfx_kthread+0x10/0x10
[  989.981245][ T1297]  ? ret_from_fork+0x79/0xaf0
[  989.985915][ T1297]  ? ret_from_fork+0x79/0xaf0
[  989.990588][ T1297]  ? rcu_is_watching+0x12/0xc0
[  989.995346][ T1297]  ? __pfx_kthread+0x10/0x10
[  989.999929][ T1297]  ret_from_fork+0x754/0xaf0
[  990.004510][ T1297]  ? __pfx_ret_from_fork+0x10/0x10
[  990.009614][ T1297]  ? __switch_to+0x7b9/0x10c0
[  990.014285][ T1297]  ? __pfx_kthread+0x10/0x10
[  990.018867][ T1297]  ret_from_fork_asm+0x1a/0x30
[  990.023628][ T1297]  </TASK>
[  990.026902][ T1297] Kernel Offset: disabled
[  990.031223][ T1297] Rebooting in 86400 seconds..