last executing test programs: 16m9.546861143s ago: executing program 32 (id=110): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x6c}}, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) unshare(0x28040680) r6 = timerfd_create(0x0, 0x0) timerfd_gettime(r6, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r10, &(0x7f0000000640)={{0xcc, 0x8, 0x4, 0x389, 0x27e, 0x0, 0x218, 0x401}, "", ['\x00', '\x00', '\x00', '\x00']}, 0x420) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r9], 0x5c}, 0x1, 0xba01}, 0x0) close(r9) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) 16m9.310425151s ago: executing program 33 (id=108): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x8000000, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "d89933c8221bed90b593a1f978374fb9"}]}}]}, 0x48}}, 0x24044094) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x4010) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) 15m41.747959286s ago: executing program 34 (id=137): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) get_mempolicy(&(0x7f0000000500), &(0x7f0000000540), 0xc3, &(0x7f0000ffd000/0x2000)=nil, 0x4) 13m53.852255812s ago: executing program 35 (id=232): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="030100006088020024001280110018016272696467655f736c617665000000000c0005800500080001000000140003006272696467655f736c6176655f300200"], 0x58}, 0x1, 0x0, 0x0, 0x60004895}, 0x48000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) fcntl$addseals(r0, 0x409, 0x4) r4 = syz_io_uring_setup(0x4d9, &(0x7f0000001500)={0x0, 0x668a, 0x8000, 0x3, 0x358}, &(0x7f0000000000), &(0x7f0000000100)) r5 = syz_io_uring_setup(0x239, &(0x7f0000001600)={0x0, 0xfffffffd, 0x10100, 0x2, 0x0, 0x0, r4}, &(0x7f0000000180), &(0x7f00000001c0)) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peekuser(0x3, r7, 0x388) readv(r5, &(0x7f0000000200), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) 13m5.236289998s ago: executing program 36 (id=326): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0xff, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0xff, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb0}, {0x0, 0x3, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb0}, {0x0, 0x3, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}}, 0xe8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x6, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00006005aaaaaaaaaabbaaaaaaaaaabb88a84000655800"], 0x2e) (async) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00006005aaaaaaaaaabbaaaaaaaaaabb88a84000655800"], 0x2e) getpid() (async) r6 = getpid() r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) 3m33.802725896s ago: executing program 37 (id=2241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="13ca0d813f6326f51b588bb6281d", 0x0, 0xffff1b47, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m30.788727455s ago: executing program 38 (id=2253): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x400) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x400240, 0x0) tee(0xffffffffffffffff, r1, 0xbf, 0x1) syz_io_uring_setup(0x3aa1, &(0x7f00000000c0)={0x0, 0x5c06, 0x4, 0x3, 0x248, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000001c0)=0x1000, 0x0, 0x4) socket$caif_stream(0x25, 0x1, 0x4) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/41, 0x29}], 0x2, 0x3c09, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffffff8, '\x00', 0x0, r0, 0x0, 0x4, 0x4}, 0x50) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) prlimit64(r4, 0xe1c607dcfb4e6c92, &(0x7f0000000480)={0x84a9, 0x400}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000004c0)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7d63c466, @mcast1, 0x8}, {0xa, 0x4e22, 0x800, @rand_addr=' \x01\x00', 0x80000001}, r5, 0xfffffffb}}, 0x48) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f00000005c0), 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x8809}, @NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x44}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x9300}, @NFTA_CT_TIMEOUT_L3PROTO={0x6, 0x1, 0x1, 0x0, 0x6006}]}}, @NFT_MSG_NEWOBJ={0x50, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x3c, 0x4, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffaee}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7825}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffff27eb}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}, 0x1, 0x0, 0x0, 0x805}, 0x42004) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000007c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000840)={0x10, 0x30, 0xfa00, {&(0x7f0000000780), 0x3, {0xa, 0x4e23, 0xa, @private0, 0xd}, r7}}, 0x38) fsopen(&(0x7f0000000880)='bfs\x00', 0x1) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000940)={0x9d0000, 0x1, 0x2, r1, 0x0, &(0x7f0000000900)={0x980913, 0x7, '\x00', @string=&(0x7f00000008c0)=0x1a}}) sched_setscheduler(r4, 0x3, &(0x7f0000000980)=0x5) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000009c0)={0x2, {{0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e24, 0x4000, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}}, 0x108) r8 = openat$cgroup_ro(r1, &(0x7f0000000b40)='devices.list\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000b00)='bcache_btree_insert_key\x00', r8, 0x0, 0x3}, 0x18) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000c00)='hybla', 0x5) write$eventfd(r9, &(0x7f0000000c40)=0x2, 0x8) prlimit64(r4, 0xf, &(0x7f0000000c80)={0xffffffff, 0x677b}, &(0x7f0000000cc0)) 3m3.524397929s ago: executing program 39 (id=2310): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x6, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x0, &(0x7f0000000040)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) gettid() setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0x8, 0x4) 2m44.171614172s ago: executing program 40 (id=2373): keyctl$clear(0x3, 0xfffffffffffffffd) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="819b08000000fedbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe48}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r2, 0x0, 0x49, 0x53, &(0x7f00000000c0)="af357c38fcfccb7fc870dc7e0824c9a27c0d3c5d7b76a58be4ed64d4543f04462341cb48798d0311c43ee309a0e22118b8fa08553f24c2c96051d2a22da9cd4d7c40808ad4541c1f86", &(0x7f0000001080)=""/83, 0x6, 0x0, 0x43, 0xb6, &(0x7f0000001100)="f95d525671db1d8a07a4d6aaee3936e69191e042a76b6fe56b83ccf6df2145352f91bcbcce67351a2d519862f39e891f10d026ed26ca189aefb39fb8b7e47fc1dae875", &(0x7f0000001180)="e962c7dd4d542075dbf0d8173116a50d31dddf5d4d0222aff2615792fdb6c6ae3791c47f2b6fad301728d73275b1d7aa27324d66dcbd8a7a26affa16bc3dea107678d780bc2533635981aa66e38b58225f55427e9fd2a913c392d52c2d935793897c2b4651c98f7e452869929f849c609d421e9f85744374050e4ee67544fbf6ecd7de4f7098e60bc1c7b469e62b2c12e2be9279c0897b5e125fd8e437e99cf920a2dd895792b2f4f3613e4c61bdad8db5cf4850ac16", 0xa, 0x0, 0x6}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 2m22.977680958s ago: executing program 41 (id=2446): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d600"], 0x0) r0 = syz_usb_connect(0x0, 0x120, &(0x7f0000000000)=ANY=[@ANYBLOB="120101007cde0440720c130049b30000000109020e0101000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="80090300e2ffb95c78b0a700008ee2c1e7cf698f2f2f60befbbb984271ab324ec3c776f03e9aa663fc232e34c690187cb2db4c3f6a16db5b21ca4680f85d45c910e56c49ad79a0d4a7ac1150af6c36eba209a2d5d48f952a766ebdbc85ba68914ea9244f92f130e437f2c9586ad6e7c787032cee2f1a5a4e72af9151d1b0a2e46c08c05a991d0d8f4d6235b9c257df226e4c6f879201183126662b084ce10b55233ff963a277dc716dd0d83af7ae7f1c594888bfb82f9ec532bd384c568c4e87bf6131387316cd77f24cffdae9feb0ea360a22449e0c4b4a5e66435dddb11b31234a9500000000d0acad681081f37b8a483e"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x0, 0x8, 0x9b, {0x9b, 0x1, "49a9eb6b6e26f56d68addcb480dc6f836e26a4e42e1c1373ac77f796f2a9c9bcb15f201a93aae5222847a1f2657f98c85c59741592c8839d8e1e66d3e8645452a175f27ab634384762f8e35a0f067d5ed44907d3e65d4fda6af7ce4db5ef06f43d73ab7d477636d4c5135a8ed8937d2273f12a04096ec4704cb6763f87ff884689e169842f0153acad91a92be67c009545a1a37417b4a125b6"}}, &(0x7f0000000100)={0x0, 0x3, 0xa4, @string={0xa4, 0x3, "2de4bf9f34aae778b87e7f56c85d5fd8c65ffe11131f3fea4f985b66e70ea8ad780a10a5ff72b24772a3a5c1b74c719f15eccd38603fa20f36907266997e612931af8af0abeedace360bbd3c8501c2f70fd56bd856e48e6fe962298d84b999d42d9040cbca3b0d08c6e21011477479d81557795e86ef76b4e4c64747784c1a048bf78af6afc4f6ba14380ff3b707eb2f9abce59068ebcac8cc6daadb66fc7320e3bc"}}}, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x20, 0x30, 0x95, "7c84d870fee94a678a493d78a9580807c273658ed396ea0dc5e78fb9ad7c81ac1bf6844ba7f1106c942d89d4af47149ee0386f6f7d7d59fd50df0a1b07e76132a3a4ffa0cfdab4ae8a892ce6797c56c9c1c02f8f12cf4469a9b45870eb0a7e53577ded662682afbe0194120042d6df06553df99a92396605aff5bc1ddf20017817f3f0b3d05fe06e3a22d7e60348e3bd6675f69efc"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x16}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000340)={0x20, 0x0, 0xc0, {0xbe, "5bf5770cb60394c2cc356cd81d5b7a788905619ed0f25c9c9b6b513db9ee79fe64e11d881ef6148aa0845b4618595abe36bdb6139006b38868d9ad7cfc19917c46f0682d57623f9c44b8faec2232fb09de32d6df843962bc2169ee8649d75c8b3c5d3f1d87401bcfeccd815c6a57705cf7b1ea555dd8e57645e28b32b8c40721399407b1436f2b75d8a8e36bc285ba52b755d176a2ac9436a995c8e493102281ee6e2882dbcfc686f54574924991e8e6d1ec25cad48b5d461f957996e5b5"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x2a}}) 2m0.529265969s ago: executing program 42 (id=2512): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x4000080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x4, 0x0, 0xd, 0x2}, {0x8, 0x9, 0x8, 0x7}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r5, 0x89ee, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9}) 1m25.285834797s ago: executing program 43 (id=2620): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000300)={0xc, 0x5, 0xffb}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mkdir(0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0xfffffffb, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) listen(r5, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 1m22.517961883s ago: executing program 9 (id=2629): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) read$eventfd(r0, &(0x7f0000000000), 0x8) io_setup(0x7, &(0x7f0000000040)) io_pgetevents(0x0, 0x101, 0x0, &(0x7f0000000580), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086de6012259200083a0000000000000000000000ffffac1414aafe8000000000000000000000000000aa0200907800000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000008691a8be087a0300000000000000000000181100008bb7ea7d832d08ff9afcd0ad79fc662037682da85c80b1ecff5c5e93c1385405cf03596652d30000000091", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setfsgid(0xffffffffffffffff) io_setup(0x10000, &(0x7f0000000800)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x222, &(0x7f0000000180)) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f3b316c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e80400000c5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f912ff01000021ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7bd50978b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefdc01000094d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af5617ea94c9493260fad0000f96f06817fb903729a7db6ff957697c9ede7885d94ffb00600e0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) 1m19.362564412s ago: executing program 44 (id=2634): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x0, 0xff, 0xf) 1m19.319623636s ago: executing program 9 (id=2637): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/25, 0x19}, 0x7fffffff}, {{&(0x7f0000001400)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/211, 0xd3}], 0x2, &(0x7f00000025c0)=""/149, 0x95}, 0x5}, {{&(0x7f0000002680)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003800)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/200, 0xc8}], 0x2, &(0x7f0000003840)=""/245, 0xf5}, 0x9}, {{&(0x7f0000003940)=@tipc, 0x80, &(0x7f0000003c40)=[{&(0x7f00000039c0)=""/150, 0x96}, {&(0x7f0000003a80)=""/173, 0xad}, {&(0x7f0000003b40)=""/241, 0xf1}], 0x3, &(0x7f0000003c80)=""/9, 0x9}, 0xf}, {{&(0x7f0000003cc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003d40)=""/84, 0x54}], 0x1, &(0x7f0000003e00)=""/231, 0xe7}, 0x3}], 0x5, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x80]}, 0x0, 0x8) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000027) fcntl$setsig(r5, 0xa, 0x3a) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000004040), 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) readv(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 1m18.305020491s ago: executing program 9 (id=2639): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11dac}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0x82d9497c0cf75579}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) 1m17.759330924s ago: executing program 9 (id=2640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000440)='./file0\x00', r3, &(0x7f0000000400)='./file0/file0\x00', 0x143) 1m16.801229575s ago: executing program 9 (id=2642): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r3 = getpid() syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2}, 0x0, 0x0) (async) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2}, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) setns(r4, 0x24020000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r5 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) (async) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) r6 = socket(0x10, 0x80000, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r7, 0x29, 0x0, 0x0, 0x10001, 0x0, @empty, @remote, 0x10, 0x20}}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0xa, 0x300) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) (async) r8 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) dup(r8) (async) r9 = dup(r8) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r9}, 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r12, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r12, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) (async) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, r1}}, './cgroup\x00'}) 1m16.25629654s ago: executing program 9 (id=2644): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0x21) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) syz_io_uring_setup(0x867, &(0x7f0000000000)={0x0, 0x553f, 0x2000, 0x3, 0x17b}, &(0x7f0000000080), &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "42cdac1073dc0bab06f328a43c7e0a8c057c2488f51800a74a7c45e7d129d8be", "0b127a5c0f446c5916408f92894f4127ab0d85b9af2b8297cb3ddc35719b2fa7", "90c0fd72671bae4986ce4f4a90c00e11e056bf8395739dcf7d7bb8d46ae76146", "5bc0bc251e987ada9d74fc5f355e14a964111fb8db3bc84e79cbedc1b82d5a4b", "4e8ae4b3fb5e04c2b5d17d1957b4f8c71399c13f8576c257134428b61d26b7be", "78d772647c7c5ab80eb51d58", 0x4, 0x2, 0x3, 0xffc00003, 0x9}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000000), 0x4) syz_usb_connect(0x5, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x8c, 0x88, 0x7f, 0x8, 0xc10, 0x0, 0xb0a7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x3, 0x5a, 0x0, 0x74, 0x0, [], [{{0x9, 0x5, 0x81, 0xc250193fbc2d6fee, 0x20, 0xd6, 0x2, 0x6}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x2, 0x8d, 0x9}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x5, 0xc}}]}}]}}]}}, 0x0) 1m15.567759156s ago: executing program 45 (id=2644): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0x21) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) syz_io_uring_setup(0x867, &(0x7f0000000000)={0x0, 0x553f, 0x2000, 0x3, 0x17b}, &(0x7f0000000080), &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "42cdac1073dc0bab06f328a43c7e0a8c057c2488f51800a74a7c45e7d129d8be", "0b127a5c0f446c5916408f92894f4127ab0d85b9af2b8297cb3ddc35719b2fa7", "90c0fd72671bae4986ce4f4a90c00e11e056bf8395739dcf7d7bb8d46ae76146", "5bc0bc251e987ada9d74fc5f355e14a964111fb8db3bc84e79cbedc1b82d5a4b", "4e8ae4b3fb5e04c2b5d17d1957b4f8c71399c13f8576c257134428b61d26b7be", "78d772647c7c5ab80eb51d58", 0x4, 0x2, 0x3, 0xffc00003, 0x9}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000000), 0x4) syz_usb_connect(0x5, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x8c, 0x88, 0x7f, 0x8, 0xc10, 0x0, 0xb0a7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x3, 0x5a, 0x0, 0x74, 0x0, [], [{{0x9, 0x5, 0x81, 0xc250193fbc2d6fee, 0x20, 0xd6, 0x2, 0x6}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x2, 0x8d, 0x9}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x5, 0xc}}]}}]}}]}}, 0x0) 53.346894826s ago: executing program 7 (id=2682): syz_open_dev$vim2m(&(0x7f0000000000), 0x61f, 0x2) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x44}}, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0x4, @private1, 0x1}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x2800000, @ipv4={'\x00', '\xff\xff', @remote}, 0x20000000}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, @in={0x2, 0x4e21, @rand_addr=0x64010101}], 0x78) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r4, 0x0, r6, 0x0, 0x10d00, 0xf) syz_usb_control_io(r0, 0x0, 0x0) r8 = creat(0x0, 0x0) personality(0x4100001) lstat(0x0, 0x0) write$FUSE_ENTRY(r8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) 50.671709778s ago: executing program 3 (id=2690): r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x7f, 0x372, 0x401, 0x3, 0x3, 0xe}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x6, 0x6}}]}]}}}]}, 0x64}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000010180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000010140)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0xffffd000) unshare(0x22020600) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) 50.538019133s ago: executing program 3 (id=2692): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1400000029000b03000000e66fee05d25a805d48", 0x14}], 0x1}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2dc3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xe, 0x2) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x4) ioctl$vim2m_VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000040)) sendto$rose(r4, 0x0, 0x0, 0x40000005, 0x0, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501"], 0x0) 50.256510071s ago: executing program 7 (id=2693): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0xffffffffffffffff, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xf, 0x3, 0x2) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r2, &(0x7f0000004900)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xb}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x30, 0x20008008}], 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x24048040) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettfilter={0x34, 0x2e, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x13, 0x5}, {0xf, 0xb}, {0xffe0, 0xfff3}}, [{0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 50.194096131s ago: executing program 7 (id=2694): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) execveat(r6, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(0x0) 49.168290232s ago: executing program 7 (id=2696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000400)='./file0/file0\x00', 0x143) 49.078467312s ago: executing program 7 (id=2697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) fcntl$setpipe(r4, 0x407, 0xb) (async) fcntl$setpipe(r4, 0x407, 0xb) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) write$char_usb(r6, &(0x7f0000000700)="85206b1fee4412c6", 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000280)=""/143, 0x8f}, {0x0}], 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r9, 0x8800000) (async) ftruncate(r9, 0x8800000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x14}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0x1) (async) keyctl$set_reqkey_keyring(0xf, 0x1) socket$inet6(0xa, 0x2, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000800000000000000040000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5121b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe91bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6c597eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86660079f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab2127cd472a2e4a7f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}], 0x1, 0x28048005) (async) sendmmsg$inet6(r10, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000800000000000000040000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5121b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe91bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6c597eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86660079f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab2127cd472a2e4a7f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}], 0x1, 0x28048005) 48.84322335s ago: executing program 7 (id=2700): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002180)={0xd, 0xffffffff, 0x8}, 0xc) ioperm(0x4, 0x81, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r2, 0x0, 0x1003) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$sg(0x0, 0x0, 0x8002) open$dir(0x0, 0x149502, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 48.631968468s ago: executing program 46 (id=2700): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000002180)={0xd, 0xffffffff, 0x8}, 0xc) ioperm(0x4, 0x81, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r2, 0x0, 0x1003) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$sg(0x0, 0x0, 0x8002) open$dir(0x0, 0x149502, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 48.627441806s ago: executing program 6 (id=2702): setrlimit(0x40000000000008, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0xc, 0x3, {0x3, 0xf, '}'}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x44, &(0x7f00000000c0)={0x20, 0xd, 0x52, "d4ca6e7ffb7adcb5ee6b0f56d5382b54e51461d34047502bc761e45e08629aaa3f258f3c2ddf31ef71dd327e4cb13ac128e9f6391d4cc576ebd4d7e617dbc26a740a064b40257be28c5c84266f321caca716"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x70}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x6, 0x3736, 0x9, 0x2c7, 0x1, 0x9, 0x9f0, 0x7, 0x9, 0xfff, 0x4, 0x8001}}, &(0x7f0000000200)={0x20, 0x85, 0x4, 0x1ff}, &(0x7f0000000240)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000280)={0x20, 0x87, 0x2, 0x8001}, &(0x7f00000002c0)={0x20, 0x89, 0x2}}) 48.49222484s ago: executing program 3 (id=2703): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') close(0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) preadv(r8, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r11 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r11, 0x1, 0x2c, &(0x7f0000000400), 0x4) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 46.831263061s ago: executing program 3 (id=2708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000400)='./file0/file0\x00', 0x143) 46.742745393s ago: executing program 3 (id=2709): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401fcff0032c83a110000050042"], 0x18}}, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) timerfd_create(0x2, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_cancel(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0xfff, r4, &(0x7f0000000200)="36ceebcfc41f45180d8578ba23805ae23284fc41bdce88e2fe751f58ff4db9440045993c6d884bb26b449d50f01deac2cfc281d5f02de9bd63c524b2723d4a55699dcb3c2611f77451fbe4a2368c8e5920b63a8cd210912ddda0af46522ba462cbda4ad3a4deec4fa5bf4c398b0bdc45c284e268e389e716ae7c9a73a16b5c7cde70bd481b9428caef845d3f9f2eb75c817e8ee17c32809a", 0x98, 0x2, 0x0, 0x3}, &(0x7f0000000100)) io_submit(r5, 0x2, &(0x7f00000000c0)=[&(0x7f0000000440)={0x25, 0x0, 0x2, 0x6, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0xff, r4, &(0x7f00000002c0)="005b16025684aa3621ad7d382a0fca494c11e0bf5c8ab79821d9ca3e0afd3d71cf4b325259e0f2bf176522f8a1fd43bbdb0347b9e0ebe069bbce6fe2b950eb3004c655f25c63d3481dbcb2bc26ae8b7b15b2bd947958e48a853e0eb6b191ed2f0abc2d0ad77675c0b306de1564c3ffc1b318f7ea9802a222c187b852eb35991b08ab754dc7225cbb79bab99e47de06184768a840b71b567f887dc59e664bbf4d6b802f14dab2705d5cadcebcb5d3ab783be930fab44736596a700eeb696255881605857ea77bed968d", 0xc9, 0xe, 0x0, 0x2, r3}]) 46.031865646s ago: executing program 3 (id=2711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6ad40, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x2, 0x2}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x7f, 0x9, 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}}}, 0x24}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x3, 0x8000, 0x9, 0x100, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) close(r2) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1, 0x0, 0x0, 0x800}, 0x4000080) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x31, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002000000090000000000000023000000020011907800000000000000000000ffff000f907866b71b4468e24e"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @null, @bpq0, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'ipvlan1\x00', 0x2001}) 45.690976127s ago: executing program 47 (id=2711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6ad40, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x210, 0x2a8, 0x2a8, 0x210, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x2, 0x2}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0x7f, 0x9, 'syz0\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}}}, 0x24}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x3, 0x8000, 0x9, 0x100, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) close(r2) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1, 0x0, 0x0, 0x800}, 0x4000080) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x31, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002000000090000000000000023000000020011907800000000000000000000ffff000f907866b71b4468e24e"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @null, @bpq0, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'ipvlan1\x00', 0x2001}) 45.322113057s ago: executing program 6 (id=2714): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000380)="17", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01464ba, &(0x7f00000000c0)={0x183, 0x0, r1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@set_irq_handler={0xc8, 0x20, {0x34, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x1}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0xcecd, 0x10}}, @wrmsr={0x65, 0x20, {0x1b1, 0x4}}, @out_dx={0x6a, 0x28, {0x3b44, 0x1, 0x5}}, @wr_drn={0x68, 0x20, {0x6, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x4de, 0xfffffffffffffffa, 0x4, 0x3}}], 0x120}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000001c0), &(0x7f0000000200)={'L-', 0x9}, 0x16, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_delroute={0x38, 0x19, 0x1, 0x70bd07, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x14, 0x5, @local}]}, 0x38}}, 0x0) 44.96387734s ago: executing program 6 (id=2716): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x80002) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004071c0a00000000000000002100000000000100000000000002000102"], 0x70}}, 0x200000c4) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="f30f09670f05c4c3194aa1f4ffff7f480fc7ac6a53680000ea0260000002000f019836000000c4c2390468000fc75ee80f01c20f01cb", 0x36}], 0x1, 0x0, 0x0, 0x0) 44.904412902s ago: executing program 5 (id=2717): pipe2$watch_queue(&(0x7f0000001180), 0x80) (async) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) socket(0x10, 0x803, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) (rerun: 32) getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd) (async, rerun: 32) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00', @ANYRES32=0xffffffffffffffff, @ANYBLOB], 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYBLOB="000000000000000000007b8af8ff00000080000040000000ffffffb703000008000000b704000000000000c5000000590000009500"/65], 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) (async) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xdc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xdc}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2, 0x0) (async) setrlimit(0x7, &(0x7f0000000400)) (async) getpid() 44.798777149s ago: executing program 6 (id=2718): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000400)='./file0/file0\x00', 0x143) 44.726689886s ago: executing program 6 (id=2719): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000377a8840ba0d00109980010203010902120001000000000904"], 0x0) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x1}) setns(0xffffffffffffffff, 0x4000000) 44.396304757s ago: executing program 5 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401fcff0032c83a110000050042"], 0x18}}, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) timerfd_create(0x2, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_cancel(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0xfff, r4, &(0x7f0000000200)="36ceebcfc41f45180d8578ba23805ae23284fc41bdce88e2fe751f58ff4db9440045993c6d884bb26b449d50f01deac2cfc281d5f02de9bd63c524b2723d4a55699dcb3c2611f77451fbe4a2368c8e5920b63a8cd210912ddda0af46522ba462cbda4ad3a4deec4fa5bf4c398b0bdc45c284e268e389e716ae7c9a73a16b5c7cde70bd481b9428caef845d3f9f2eb75c817e8ee17c32809a", 0x98, 0x2, 0x0, 0x3}, &(0x7f0000000100)) io_submit(r5, 0x2, &(0x7f00000000c0)=[&(0x7f0000000440)={0x25, 0x0, 0x2, 0x6, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0xff, r4, &(0x7f00000002c0)="005b16025684aa3621ad7d382a0fca494c11e0bf5c8ab79821d9ca3e0afd3d71cf4b325259e0f2bf176522f8a1fd43bbdb0347b9e0ebe069bbce6fe2b950eb3004c655f25c63d3481dbcb2bc26ae8b7b15b2bd947958e48a853e0eb6b191ed2f0abc2d0ad77675c0b306de1564c3ffc1b318f7ea9802a222c187b852eb35991b08ab754dc7225cbb79bab99e47de06184768a840b71b567f887dc59e664bbf4d6b802f14dab2705d5cadcebcb5d3ab783be930fab44736596a700eeb696255881605857ea77bed968d", 0xc9, 0xe, 0x0, 0x2, r3}]) 44.26734228s ago: executing program 5 (id=2721): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0x1}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) pwritev2(r7, &(0x7f0000000700)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0xfff, 0x9, 0x1f) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x4001, 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000002ac0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES32=r4], 0xa8) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf}}}, 0x24}}, 0x240400c0) r10 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) 42.455291452s ago: executing program 6 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008a000000000000000000000085100000faffffff950d0000000000008cdb043fb7cd7fd3ae69339550b15db22fccb1780e9a4e92bddba62c2ab06d6a0f1ba7cfe8c37a2f0664d0b0c47b6f4403ddcf106e12e2d9fbea79de56a92cf0ab5a7e2b27279d5b007491c0bb564fca264db5477db450accfbd96ffa27e50acf88cfc3ad5f0d74c479be4b3e3629191adf955d857b3822e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d0000000109023600010000000009040000040341000009050a0000000000000905ffff"], 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000000)=0x2c, 0x4) 42.115899295s ago: executing program 48 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008a000000000000000000000085100000faffffff950d0000000000008cdb043fb7cd7fd3ae69339550b15db22fccb1780e9a4e92bddba62c2ab06d6a0f1ba7cfe8c37a2f0664d0b0c47b6f4403ddcf106e12e2d9fbea79de56a92cf0ab5a7e2b27279d5b007491c0bb564fca264db5477db450accfbd96ffa27e50acf88cfc3ad5f0d74c479be4b3e3629191adf955d857b3822e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d0000000109023600010000000009040000040341000009050a0000000000000905ffff"], 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000000)=0x2c, 0x4) 41.157203172s ago: executing program 5 (id=2727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000400)='./file0/file0\x00', 0x143) 41.078386424s ago: executing program 5 (id=2728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r3, &(0x7f0000000040)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x3, 0x9, 0x31d8, 0xa50}}, 0x69e003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000600)='rpc_buf_alloc\x00', r2, 0x0, 0x7}, 0x18) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0xa8040, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x13}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x3d11c3, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) fsetxattr(r6, &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f00000000c0)='memory.\x00sJ\xf5\xdf\x98\xa2(\xed\xfe\xc8\x8eT\xcc{\xdb\xa0\xe42\xbc\xa2>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xe, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x7ffffffe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', r5, 0x7, 0x8000, 0x6, 0x8, {{0x37, 0x4, 0x0, 0x2b, 0xdc, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0xde, 0x0, 0x2, [0x3, 0x1]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x34, 0xc2, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x7}, {@multicast2, 0x6}, {@loopback, 0x6}, {@empty, 0x9}, {@rand_addr=0x64010100, 0x1}]}, @generic={0x0, 0x4, "13d3"}, @cipso={0x86, 0x5a, 0x3, [{0x1, 0xc, "5f2318e6746a02578aba"}, {0x6, 0x3, "fa"}, {0x1, 0x5, "dd7eb0"}, {0x2, 0x8, "9697694afed2"}, {0x7, 0x12, "a410c0d67d7583b453db9f4e57e2f7c7"}, {0x5, 0x6, "da2da839"}, {0x5, 0xf, "834635b45d0511359527a6ef94"}, {0x5, 0xb, "dab17ad279a68b55e9"}, {0x7, 0x6, "db79f838"}]}, @lsrr={0x83, 0x7, 0x1e, [@rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x2e, [@private=0x953cbe43, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}]}, @generic={0x88, 0x9, "da95b7ae982b94"}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0xd5a1}}, './file0\x00'}) openat(r6, &(0x7f00000001c0)='./file0\x00', 0xd60e53e7b26d255c, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) syz_extract_tcp_res(&(0x7f0000000580), 0x101, 0x3f392a88) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x3, 0x7, 0x4, 0x0, 0xc, 0xffffffffffffffff}) ioprio_set$pid(0x6, r7, 0x4000) 40.559660256s ago: executing program 49 (id=2729): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xe, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x7ffffffe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', r5, 0x7, 0x8000, 0x6, 0x8, {{0x37, 0x4, 0x0, 0x2b, 0xdc, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0xde, 0x0, 0x2, [0x3, 0x1]}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x34, 0xc2, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x7}, {@multicast2, 0x6}, {@loopback, 0x6}, {@empty, 0x9}, {@rand_addr=0x64010100, 0x1}]}, @generic={0x0, 0x4, "13d3"}, @cipso={0x86, 0x5a, 0x3, [{0x1, 0xc, "5f2318e6746a02578aba"}, {0x6, 0x3, "fa"}, {0x1, 0x5, "dd7eb0"}, {0x2, 0x8, "9697694afed2"}, {0x7, 0x12, "a410c0d67d7583b453db9f4e57e2f7c7"}, {0x5, 0x6, "da2da839"}, {0x5, 0xf, "834635b45d0511359527a6ef94"}, {0x5, 0xb, "dab17ad279a68b55e9"}, {0x7, 0x6, "db79f838"}]}, @lsrr={0x83, 0x7, 0x1e, [@rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x2e, [@private=0x953cbe43, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}]}, @generic={0x88, 0x9, "da95b7ae982b94"}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0xd5a1}}, './file0\x00'}) openat(r6, &(0x7f00000001c0)='./file0\x00', 0xd60e53e7b26d255c, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) syz_extract_tcp_res(&(0x7f0000000580), 0x101, 0x3f392a88) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/232, 0xe8}], 0x1}, 0x1ff}], 0x1, 0x2, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x3, 0x7, 0x4, 0x0, 0xc, 0xffffffffffffffff}) ioprio_set$pid(0x6, r7, 0x4000) 11.191013734s ago: executing program 8 (id=2799): syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) syz_io_uring_setup(0x2eeb, 0x0, 0x0, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 10.143154097s ago: executing program 8 (id=2802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="180000400711ebc7", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@local, 0x400007, 0x0, 0x3, 0x2, 0x4000, 0x97}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRES64=r5], 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='jbd2_handle_extend\x00', r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f00000000c0)=0x7) 10.080389253s ago: executing program 4 (id=2803): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x6a, 0x0, @fd_index=0x9, 0x8000000000000001, 0x0, 0x0, 0x0, 0x1, {0x1}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000b04000/0x4000)=nil, 0x4000, 0x100000d, 0x10, r2, 0x8000000) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000040)={0xffffffff, [0x2, 0x8, 0x5], [{0x11, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x3}, {}, {0x6, 0x9}, {0x1, 0xffffffff}], 0x20}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x2, 0x1, &(0x7f0000000080)={r10, r11+10000000}, &(0x7f00000000c0)=0x2, 0x1) fsopen(0x0, 0x0) 8.999157639s ago: executing program 8 (id=2805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r3, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000002740)=0xc) (async) r9 = accept$netrom(0xffffffffffffffff, &(0x7f0000002780)={{0x3, @netrom}, [@null, @bcast, @netrom, @default, @rose, @bcast]}, &(0x7f0000002800)=0x48) r10 = fanotify_init(0x8, 0x101000) fanotify_mark(r10, 0x49, 0x8, 0xffffffffffffffff, &(0x7f0000000480)='./file0\x00') (async) r11 = syz_open_dev$radio(&(0x7f0000002840), 0x3, 0x2) (async) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002880), 0x0, 0x0) getresgid(&(0x7f0000002a40)=0x0, &(0x7f0000002a80), &(0x7f0000002ac0)) (async) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000002d00)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f00000000c0)="105af8550c72b4d28eb3ecb9", 0xc}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000100)="025946cdbd09fdf9a20f2f4b8a24a68494a14a13bcbd68c064aefac5c1d1a5a13c98aef558d4228178615118e3df66d82d55d2ad268ca055819fa23338d45c49", 0x40}, {&(0x7f0000002300)="74d6109609023566868aab88c06941f4f948ae8b16bfc6a68b931113bdd98e04bd16f5cc17ce3cceb50bacdec37bf09bee0392fd0a86e3412feb10662ec638e888d7551861752f0c176423cf544fcc1bc7ab206abbec1eb1a62004dbf2457604cdb5963503fc8293b43d5acf6b55f0d88dbee9d8e9129e670a8cfbed22f3db963e7c01bc48eac017f16dc72b3e8bf4d7634ca3d1d8fce65c4824fff697035be10835fa0d489a937741209cdd5ed0adff4f8d476613df4cfaad63401512e5ab843202982362646adce9", 0xc9}, {&(0x7f0000002400)="ff73926bbd1025a2a1ccbccd99d99c5bb96a2e5b516efb6f101e8b9ebb54a630f89fa2fa4c40d5aefc653ff6a9cdab923bdd90d4c088d443101b9734f73016f4d70d7e66214d19d7cec91ad157e25f0ac88397989400e027cb5607e524efd6aa1559c75dbe6ab8f3ffa1bade8edd0aee95605977816789377897ed431556f6b858cadf7f00069402cc2952cd4d5a8f29455b67a4162c880698f76846d8e16f9dcde8f142cb92c7e49204d5eb87e7f53bc323b3c53fc9901eeb00b864c83bce", 0xffffffffffffffae}, {&(0x7f00000024c0)="842a0c4736488c5f72b34275548dd5cb3ab81bb36055fec3bd8eed390e3da201e668448009ca3db881cbdae7804345f630faf56e8ea34f253539dcc54100bd0ae386d8d9913c3bbca04c4e1acf19742dbc4d2e06f6a2c4b85f738abd09fb43785afb1623e985f8aed4f887b04578af3553c4a4592f28c71eeb0807b80a96d287fc78b261d38d3f3f7e789b6f7457f630534c232a4b1279ddf8655b7b88e39f69cdab555168a18b7a51cca6f69577e7ad08bdb5928c3a6c61f3d2c26d44e21cea32069e0d08dfb918", 0xc8}, {&(0x7f00000025c0)="eab33fca83945355109d9d050190d858f9e35093865060edc5b79ec65f9df3dae9f42d765cedae59c15fdfb2cfd28bf734c6b9b7b4bfa1c9d1c79ba4ce42e850d8a1fc9f41b00d01615f98bdbb6c8a186645a9dda1e701643b1e1c411d7564aef11500831905b31edbb50cc7c04b360935b7ec9936cebeb8df4778b6", 0x7c}], 0x8, &(0x7f00000028c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0000000018000000000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r11, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r12, @ANYRES32=r3, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x800}}, {{&(0x7f0000002980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002a00), 0x0, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {r1, r7, r13}}}, @cred={{0x1c, 0x1, 0x2, {r1, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r6, r14, r5}}}, @cred={{0x1c, 0x1, 0x2, {r1, r7, r15}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0xa0, 0x8010}}], 0x2, 0x0) r16 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r16, 0x0, 0x0) (async) syz_usb_control_io$printer(r16, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="40160400000090b71d51"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r17 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r17, 0x8108551b, &(0x7f00000001c0)={0x2, 0x1, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) (async) r18 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r19, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async) r20 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002d80), r12) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r18, &(0x7f0000002e40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="00032bbd7000fd90ca250100000008000300056015e38b000680080006001c00000008000300c23ab45a4c4f0700000005000500be31e5e457f96868b830d4425d3d295f8deeb66aa1ac11f45ade538f8148714a7f1030e2dc6ec1e3586e3862add8655cd10eaac724311df1d072b37568ca98babb3a0d3e5add64534080a2989b8e31b1e4f1dc6ff8e367e43cc850071bc3b74f5bdfca"], 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x810) 8.06052583s ago: executing program 4 (id=2809): ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB="12011c00020000102505a1a440000000010109026500010100200009040000ff02020000052406000005240000000d240f010000000000000000001524120d00a317a88bbff64f01a607c0ffcb7e392a152412ff03a317a88b045e4f01a607c0ffcb7e392a0905820220000000000905030208000406008325ca85bbce9b16b13ec710c342bc1d72fbe4289cd499c300c4353c2eb532331fabc5c598cec1f3d837af183f8f345885b9e6ca4fe06eee19c8c1b506fdec035e3535419369290c00473fa58ac3a847e6cd810787f7b8562264ef17badc56e76979c27bc46b8bc93c3ecb9c838819d596d956159ca75bc8475c1bd4dd4e00dc84346bb5345a3cdf74decaac8791f89f0089265b0b09e5163d984645bff8c71493568db629b1"], 0x0) 8.002945744s ago: executing program 1 (id=2811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 7.817270579s ago: executing program 0 (id=2812): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r1 = syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) (async) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000dd0009000000000000000000", @ANYBLOB="447aed86ae90a217d3ddd30d235cbf95b3828b75716f23d1a54765c8209920e3c477143ba61653d0740e66638e0fef54f40a0f2ee442e58d3f252777ca500478a0275f668f4f8b75e5538b523797419a8535b9d763deddbab9b4fb612f18f1fdb700d296cb0b84e1305d8a88f9d01dab4ee9e80a4cf4ae7715dadcaf68dec2b69ee7128d801391e22f22d630d0333078c558d4e34d22fd134aec9c62a71a79b06983bf1370dad21b4cbbd4b9c51dc110415a53b37063452f81e86bc92764d62f3436bd5ea2bdc23958d8e0fdca4d4abbb4c709", @ANYRES64=r2, @ANYRESOCT=r0, @ANYRES32, @ANYRES16=r1], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000dd0009000000000000000000", @ANYBLOB="447aed86ae90a217d3ddd30d235cbf95b3828b75716f23d1a54765c8209920e3c477143ba61653d0740e66638e0fef54f40a0f2ee442e58d3f252777ca500478a0275f668f4f8b75e5538b523797419a8535b9d763deddbab9b4fb612f18f1fdb700d296cb0b84e1305d8a88f9d01dab4ee9e80a4cf4ae7715dadcaf68dec2b69ee7128d801391e22f22d630d0333078c558d4e34d22fd134aec9c62a71a79b06983bf1370dad21b4cbbd4b9c51dc110415a53b37063452f81e86bc92764d62f3436bd5ea2bdc23958d8e0fdca4d4abbb4c709", @ANYRES64=r2, @ANYRESOCT=r0, @ANYRES32, @ANYRES16=r1], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @struct={0xe, 0x3, 0x0, 0x4, 0x0, 0x80000001, [{0x8, 0x1, 0x9}, {0x9, 0x1, 0x25d}, {0x3, 0x4, 0xfffffffc}]}, @union={0x0, 0x9, 0x0, 0x5, 0x1, 0xfffffffd, [{0x1, 0x4, 0x3}, {0x5, 0x3, 0x2}, {0x0, 0x5, 0x9}, {0xe, 0x0, 0x5}, {0x2, 0x2, 0x3}, {0x1, 0x3, 0x6dac}, {0xc, 0x1, 0x5}, {0xc, 0x2, 0x3}, {0x6, 0x5, 0x4}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @fwd={0x2}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}]}}, 0x0, 0xfe, 0x0, 0x800, 0xf4, 0x10000}, 0x28) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095", @ANYRES8=r3, @ANYRES32], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x2, 0x6, 0xa5, 0xd24, r5, 0x65, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, 0x0, 0x0) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet(0x2, 0x1, 0x0) (async) socket$inet(0x2, 0x1, 0x0) 7.617622969s ago: executing program 8 (id=2814): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWINFO(r2, 0x80084803, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x6c96, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x81, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000340)='./file0\x00', r5}, 0x18) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04070620"], 0x7) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000100)={&(0x7f0000000140)=[{0x365e, 0xb00, 0x4f, &(0x7f0000000040)="d1596137019028b4e6973edf1911fbfc4c57a11c8b9430e181a0399636ff048efb6d1ff9da18c7b520508922e15ef5a43a2403935d48ed4c365d55448dc474f02bfc8c827508000000000000009cea"}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x20000, &(0x7f0000000300)='id:cb2e') io_uring_enter(r5, 0x27f0, 0xbd7b, 0x40, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000440)=0x20000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) 7.560892174s ago: executing program 0 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRESDEC=r0, @ANYBLOB='&', @ANYRES16=r0], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) 7.297025506s ago: executing program 1 (id=2816): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getnetconf={0x44, 0x52, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x85}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}]}, 0x44}}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x3c}}, 0x20000000) 7.215491683s ago: executing program 1 (id=2817): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r3, 0x0, 0x0) (async) r5 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0}]) (async) io_pgetevents(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa1}, 0x90) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r10, 0x100000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, 0x0, 0xc}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r11, &(0x7f0000000400), 0x0}, 0x20) 6.500201262s ago: executing program 1 (id=2820): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r4) (async) sendmmsg$unix(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="b483", 0x2}], 0x1, 0x0, 0x0, 0x20000010}}], 0x1, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000080)={r6, 0x79e, 0x10, 0xaf7, 0xfffffffffffffffc}, &(0x7f00000010c0)=0x18) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a242) poll(&(0x7f0000000040)=[{r8, 0x1}], 0x1, 0x101) (async) syz_usb_ep_write(0xffffffffffffffff, 0xaa, 0x38, &(0x7f0000000000)="eee6f38f2e361975529997697fa8dcd79fbaf743e7fef8e6b9b24f6c3dbbee3915ca81684e60f20ba492710bf5b633b3dc89b0503b7d764e") close_range(r0, 0xffffffffffffffff, 0x0) 6.421240509s ago: executing program 4 (id=2821): gettid() socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002100)=ANY=[], 0x0) r1 = msgget$private(0x0, 0x40) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000200)=""/228) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000002080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000020c0)={0x20000008}) read$FUSE(r3, &(0x7f00000042c0)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="001b810000008101127f032d9bb3db97fb6a2cbf1606d69e5893208c3791596f178ff738986b4b45fddb4c36ca2af473c5ba30e5a0c5f6de5549071c84580e1c95f6b56fd7ae105aa280ea2877d45e6240315b20f7a1a69c1cddc02e560fc6262c19bd1d2ec0c833c1b74181e77c721e9f6db950a1b39592c696be7e8108dde740c05df2fa16bb99493966f26d91b3724ee85c15b8415a67ff4649806b9f262ac950c245c6f59744ec13b2f8ebfcf3a99a3a06ab7b9091bdb39aa3ec25be49099ba805d3e020c9c35e4851c0a720c91f8b28e333d4f8e5c7edd736a3a5feff698fe8f0ced99b3d"], 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$notify(r4, 0x402, 0x8000001a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) 6.236053482s ago: executing program 1 (id=2822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$tcp_mem(r1, &(0x7f0000000480)={0xa3cbf97, 0x20, 0x0, 0x20, 0x5}, 0x48) read$FUSE(r1, 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x480a00, 0x21, 0x8}, 0x18) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={r1, r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = memfd_create(&(0x7f00000006c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6\xcf\xcc\xe0\x04\x93>\xb8\x88\xc0\xad\x97\xd3.\x04\xc4n\x83Sb\x83\xf6L\xb7$\xb4\xeb\x91\x88\xcfn\xccwN\x9c\x8a\xb7\xfd\x83G\x18[\x00\xee\xfe\x9e\xab\xc4\xb3\x1d-q]\vep\xee\x18\xa9\x86\xa5\x1a\xd5\x92\n,\x14\x96~\x0fW\xbb\x8a:\xf5\xa3\x9b\x004\xd8\xf8_\x0e\xee\xbe>\xd7\x90\x95\xcb^\xe2a\xf4\xe5Z5\x92~@ \x00\x9b\xca\xea\xa8\xc0,\xcc\xe9s\xca\xd3\"\x14\xf3\x11\xe5\x0e\x93\x9aY\xb6\xa2|\xe8\xfe0\x9e\xc2\x99b\xd7\xd9\xa6\x15oO\xe2\xfe\xd0F\xcc\xeb\x1a\x84\x06E\xec\xf5\x9e\xea\xccB\xdd\xd84f\xb2O\r\x12\x1a\x1d\xb8\x92Q)=\xaa?\x13T\x82\xdf-E\xa4>c\xcd\xf57\xde\x17_\xfa\x9dd]-\xdd3.\x91\xd9/r\xc6>\xe4]\x8b', 0x4) fallocate(r7, 0x0, 0x0, 0x200401) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x40c}}, 0x40000) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000100)={0x18, r9, 0x1, 0x0, &(0x7f00000004c0)=[{0xffffffffffffedca, 0xfffffffffffffff9}]}) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r11, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x2106) syz_usb_control_io$printer(r10, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) 4.701307309s ago: executing program 2 (id=2827): io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000040), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000001c0)={0x7, {{0xa, 0x4e20, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) mkdir(&(0x7f0000000480)='./bus\x00', 0x8) socket$igmp(0x2, 0x3, 0x2) io_uring_setup(0x10006506, &(0x7f0000000280)={0x0, 0x15da, 0x8, 0x3, 0xc7}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) socket(0x10, 0x3, 0x4) 4.498808706s ago: executing program 0 (id=2828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x6, 0x0, &(0x7f0000000280)) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="6a4e0866e5a71825c5a9c293b0d4c5e84161b964ac42235f39a4b1f1"], 0xfdef) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="09000000000000000000010000000c0004800500030080bd56000800010001000000080002000200000013b3e1c20885dc75e0ef8fdb4a8f487490df3b72325150518268893c8db6a0797336d0cf8d55b39fd93456af12dc5112"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x90b2, 0x0, 0x0, 0x284}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0xc0, &(0x7f0000000080)=0x1000006, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)={'c', ' *:* ', 'm\x00'}, 0x8) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) r12 = gettid() syz_open_procfs$namespace(r12, &(0x7f0000000180)='ns/user\x00') syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 3.745606689s ago: executing program 1 (id=2829): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) getpid() syz_open_dev$MSR(0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x7, 0x40) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000019300)={{0x8, 0x6, 0x8, 0x1b5, 'syz1\x00', 0x2}, 0x4, 0x100, 0x9, r2, 0x7, 0x7fffffff, 'syz0\x00', &(0x7f0000000280)=['\x00', '\x00', ')\x00', '+\'\'#,!).&]\xec\x00', '\x98/%^-\x00', '$#)},\x00', '*[\\{]]\'\x00'], 0x24}) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$security_ima(r3, &(0x7f0000000000), &(0x7f0000000080)=@md5={0x1, "256fee7be7cd23f7dae2c6985dc1d3ed"}, 0x11, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x0, 0xa}, 0x8) 3.597104169s ago: executing program 2 (id=2830): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd(0xfffff189) fallocate(r2, 0x11, 0x600, 0x7c000) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x99) 3.383350832s ago: executing program 8 (id=2831): socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000030d"], 0x80}, 0x1, 0x0, 0x0, 0x4042080}, 0x40480a1) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8380, 0x1850, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "fcaa5c44"}]}}, 0x0}, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) close(r0) 3.350499281s ago: executing program 0 (id=2832): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200003, 0x40200003, 0x0, 0x6, 0x7}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800, 0x0, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001d000003a82e7000fedbdf250a000000", @ANYRES32=r1, @ANYBLOB="0200400905000c000400000014000300090000003e3a571200000000080000000a000200bbbbbbbbbbbb0000060006004e2000000a000200aaaaaaaaaaaa000008000b0001800000"], 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040014) epoll_create1(0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r5, 0xb31765d25559b066, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd, 0x2b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x5bca24639178cf2) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x52, r7}, './file0\x00'}) write$vhost_msg(r9, &(0x7f0000000600)={0x1, {&(0x7f0000000480)=""/224, 0xe0, &(0x7f0000000580)=""/127, 0x1}}, 0x48) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r11 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r11, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) socket$nl_route(0x10, 0x3, 0x0) 3.176339482s ago: executing program 2 (id=2833): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x2) socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x240400c2) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x240400c2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0b000100010000000000000000000008000003000000f35e00"], &(0x7f0000000f40)=""/4089, 0x1b, 0xff9, 0x1}, 0x28) capset(0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80801, 0x0) ioctl$BLKTRACESTART(r7, 0x125f, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) r8 = dup2(r0, r1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) 3.173823106s ago: executing program 4 (id=2834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0xfff3, 0xd}, {0xfff1}}, [@tclass_kind_options=@c_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) gettid() r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) syz_open_dev$sndmidi(0x0, 0x2, 0x80080) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) sendto$inet(r3, &(0x7f0000000040)='^', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0xfffffffffffffffe}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$xdp(r6, 0x0, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f00000004c0), 0x2, 0x0) 2.853756947s ago: executing program 0 (id=2835): landlock_restrict_self(0xffffffffffffffff, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') 2.014845596s ago: executing program 2 (id=2836): syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) syz_io_uring_setup(0x2eeb, 0x0, 0x0, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 1.6801683s ago: executing program 0 (id=2837): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000095000006000000e9ffc500000af26e1b9577524cf214dc8371aa03486687ac975ef28279b509f78beca458be2f9e98d7c66fe2a16adbc4f04e5fd3cf6bc20ca2c802e87a6fa7315a632e05d3cbc79b97f96d19a4fe873d8acf793ebe5e40ca8fa7d77e6275a1b4273c42782bfb47c568da4bf13d19f9b710d21f3a88a3a8331fee1c3cae6d101c6ca1c609527b47408532bb6e6bec8c3905abddb1a335ce6ee8407dc8ccc9f0c9b2af33a6e6b10ee75788ddbf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000095000006000000e9ffc500000af26e1b9577524cf214dc8371aa03486687ac975ef28279b509f78beca458be2f9e98d7c66fe2a16adbc4f04e5fd3cf6bc20ca2c802e87a6fa7315a632e05d3cbc79b97f96d19a4fe873d8acf793ebe5e40ca8fa7d77e6275a1b4273c42782bfb47c568da4bf13d19f9b710d21f3a88a3a8331fee1c3cae6d101c6ca1c609527b47408532bb6e6bec8c3905abddb1a335ce6ee8407dc8ccc9f0c9b2af33a6e6b10ee75788ddbf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() (async) r1 = getpid() r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x80}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bfde, 0xe1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x80}]}}}]}, 0x44}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x8) r6 = socket$inet(0x2, 0x3, 0x6) r7 = dup3(r5, r6, 0x0) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, 0x0) (async) getsockopt$MRT(r7, 0x0, 0xcf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r7, &(0x7f0000000340)="cf", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000340)="cf", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) shutdown(r8, 0x1) setresgid(0x0, 0xee01, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') 1.244785237s ago: executing program 4 (id=2838): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0x12, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, 0x0, 0x20000000) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = getpid() sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) fcntl$lock(r0, 0x6, 0x0) fsopen(&(0x7f0000000000)='xfs\x00', 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) 249.372379ms ago: executing program 4 (id=2839): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x8}, [@typed={0x4}, @typed={0xc, 0x4, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) 240.489428ms ago: executing program 2 (id=2840): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x6b}]}}]}, 0x3c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) 111.888489ms ago: executing program 8 (id=2841): exit(0xfffffffffffffffe) r0 = socket(0x28, 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x3, 0x3, 0x3, 0x2}}, 0x26) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0x7, 0xfffd, 0x10, 0x0, 0x2, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000"], 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r10}, 0x0, &(0x7f0000000180)}, 0x20) 0s ago: executing program 2 (id=2842): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x48040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) kernel console output (not intermixed with test programs): no altset; falling back to MIDI 1.0 [ 1006.473187][T17337] veth0_vlan: entered promiscuous mode [ 1006.505740][T17337] veth1_vlan: entered promiscuous mode [ 1006.598216][T17337] veth0_macvtap: entered promiscuous mode [ 1006.626920][T17337] veth1_macvtap: entered promiscuous mode [ 1006.637653][T17435] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1006.644204][T17435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.653134][T17435] vhci_hcd vhci_hcd.0: Device attached [ 1006.702437][ T5881] usb 3-1: USB disconnect, device number 14 [ 1006.702463][T17456] vhci_hcd: connection closed [ 1006.702857][ T13] vhci_hcd vhci_hcd.3: stop threads [ 1006.720742][ T6360] usb 4-1: USB disconnect, device number 20 [ 1006.744190][T17337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.766323][ T13] vhci_hcd vhci_hcd.3: release socket [ 1006.888650][T17458] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1006.895215][T17458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.900628][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 1006.910677][T16932] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1006.937498][T17458] vhci_hcd vhci_hcd.0: Device attached [ 1006.946924][T17337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.949529][ T30] audit: type=1400 audit(2000000080.560:1650): avc: denied { read } for pid=17459 comm="syz.2.2610" path="socket:[61869]" dev="sockfs" ino=61869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1007.007224][ T2120] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.066299][ T2120] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.154567][ T2120] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.181327][T17334] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 1007.207639][ T2120] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.300236][T13280] Bluetooth: hci5: command tx timeout [ 1007.337426][T17461] vhci_hcd: connection reset by peer [ 1007.348087][ T10] usb 6-1: USB disconnect, device number 84 [ 1007.363351][ T2120] vhci_hcd vhci_hcd.5: stop threads [ 1007.375852][ T2120] vhci_hcd vhci_hcd.5: release socket [ 1007.392779][ T2120] vhci_hcd vhci_hcd.5: disconnect device [ 1007.907736][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1007.907755][ T30] audit: type=1400 audit(2000000081.550:1652): avc: denied { bind } for pid=17472 comm="syz.3.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1007.936834][ T30] audit: type=1400 audit(2000000081.590:1653): avc: denied { getopt } for pid=17472 comm="syz.3.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1007.945644][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.972172][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.001842][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.014332][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.086018][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1008.173456][T17482] overlayfs: failed to resolve './file0': -2 [ 1008.254170][T17074] udevd[17074]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1008.268834][T17485] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2615'. [ 1008.292942][ T30] audit: type=1400 audit(2000000081.910:1654): avc: denied { nlmsg_write } for pid=17484 comm="syz.5.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1008.333793][T16048] udevd[16048]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1008.376636][ T30] audit: type=1400 audit(2000000082.020:1655): avc: denied { write } for pid=17487 comm="syz.9.2617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1008.500264][ T6020] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1008.535909][T16576] udevd[16576]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1008.614345][T17074] udevd[17074]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1008.671545][ T6020] usb 6-1: Using ep0 maxpacket: 32 [ 1008.681968][ T6020] usb 6-1: config index 0 descriptor too short (expected 177, got 18) [ 1008.712579][ T6020] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1008.738434][ T6020] usb 6-1: config 0 has no interface number 0 [ 1008.754816][ T6020] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1008.832479][ T6020] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1008.851072][ T6020] usb 6-1: New USB device strings: Mfr=253, Product=141, SerialNumber=3 [ 1008.872062][ T6020] usb 6-1: Product: syz [ 1008.890325][ T6020] usb 6-1: Manufacturer: syz [ 1008.895549][ T6020] usb 6-1: SerialNumber: syz [ 1008.923446][ T6020] usb 6-1: config 0 descriptor?? [ 1008.951743][ T6020] f81534 6-1:0.12: required endpoints missing [ 1009.739005][ T30] audit: type=1326 audit(2000000083.290:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17499 comm="syz.0.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2eb8f749 code=0x7ffc0000 [ 1009.913775][ T6020] usb 6-1: USB disconnect, device number 85 [ 1009.945346][ T30] audit: type=1326 audit(2000000083.290:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17499 comm="syz.0.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2eb8f749 code=0x7ffc0000 [ 1010.002196][ T30] audit: type=1326 audit(2000000083.290:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17499 comm="syz.0.2621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9c2eb8f749 code=0x7ffc0000 [ 1010.059642][ T30] audit: type=1400 audit(2000000083.300:1659): avc: denied { mounton } for pid=17499 comm="syz.0.2621" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1010.084435][ T30] audit: type=1400 audit(2000000083.370:1660): avc: denied { remount } for pid=17499 comm="syz.0.2621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1010.117564][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1010.132770][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1010.157285][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1010.232394][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1010.289786][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1010.352539][T17074] udevd[17074]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1010.440617][T16576] udevd[16576]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1010.468684][ T2120] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.937974][T17521] can0: slcan on ttyS3. [ 1011.292135][T17521] can0 (unregistered): slcan off ttyS3. [ 1011.671000][ T2120] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.827261][T17074] udevd[17074]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1011.867517][ T2120] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.013581][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1012.039338][ T30] audit: type=1400 audit(2000000085.670:1661): avc: denied { watch watch_reads } for pid=17527 comm="syz.3.2625" path="/24" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1012.107448][T16932] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1012.518361][T13280] Bluetooth: hci1: command tx timeout [ 1012.580851][T17334] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1012.596375][ T2120] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.753495][T17074] udevd[17074]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1012.786179][T17513] chnl_net:caif_netlink_parms(): no params data found [ 1012.924568][ T30] audit: type=1400 audit(2000000086.570:1662): avc: denied { create } for pid=17549 comm="syz.3.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1013.608026][ T30] audit: type=1400 audit(2000000086.710:1663): avc: denied { setopt } for pid=17549 comm="syz.3.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1014.579943][T13280] Bluetooth: hci1: command tx timeout [ 1015.230331][T17557] Set syz1 is full, maxelem 65536 reached [ 1015.307050][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1015.495319][T17513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.505741][T17513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.516810][T17513] bridge_slave_0: entered allmulticast mode [ 1015.527094][T17513] bridge_slave_0: entered promiscuous mode [ 1015.566782][T17513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.580884][T17513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.616298][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1015.632563][T17513] bridge_slave_1: entered allmulticast mode [ 1015.654252][T17513] bridge_slave_1: entered promiscuous mode [ 1015.670674][ T2120] bridge_slave_1: left allmulticast mode [ 1015.679120][ T2120] bridge_slave_1: left promiscuous mode [ 1015.691657][ T2120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.717148][ T2120] bridge_slave_0: left allmulticast mode [ 1015.735106][ T2120] bridge_slave_0: left promiscuous mode [ 1015.752528][ T2120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.800995][T17074] udevd[17074]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1015.836226][ T2120] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1016.034345][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1016.046657][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1016.055377][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1016.064794][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1016.074070][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1016.663555][ T5830] Bluetooth: hci1: command tx timeout [ 1016.686473][T17580] slcan: can't register candev [ 1016.824657][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1016.942612][ T2120] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1016.957353][T16576] udevd[16576]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1016.971265][T17585] ubi: mtd0 is already attached to ubi31 [ 1017.310545][ T2120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.323940][ T2120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.341023][ T2120] bond0 (unregistering): Released all slaves [ 1017.570885][T17513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.598852][T17074] udevd[17074]: symlink '../../loop9' '/dev/disk/by-diskseq/83.tmp-b7:9' failed: Read-only file system [ 1018.171622][T16045] udevd[16045]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1018.197999][T17513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.278306][ T30] audit: type=1400 audit(2000000091.930:1664): avc: denied { write } for pid=17597 comm="syz.5.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1018.300039][ T30] audit: type=1400 audit(2000000091.930:1665): avc: denied { getopt } for pid=17597 comm="syz.5.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1018.500770][ T5830] Bluetooth: hci2: command tx timeout [ 1018.576635][T17513] team0: Port device team_slave_0 added [ 1018.679184][T17513] team0: Port device team_slave_1 added [ 1018.740224][ T5830] Bluetooth: hci1: command tx timeout [ 1018.814534][T17513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.834850][T17513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.919687][T17513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.981280][ T2120] hsr_slave_0: left promiscuous mode [ 1018.988031][ T2120] hsr_slave_1: left promiscuous mode [ 1018.994144][ T2120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.002417][ T2120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.011573][ T2120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1019.479626][ T2120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.514490][ T2120] veth1_macvtap: left promiscuous mode [ 1019.520740][ T2120] veth0_macvtap: left promiscuous mode [ 1019.527480][ T2120] veth1_vlan: left promiscuous mode [ 1019.532830][ T2120] veth0_vlan: left promiscuous mode [ 1019.764392][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1019.839870][T13280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1019.854275][T13280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1019.855164][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1019.888414][T13280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1019.896475][T13280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1019.904262][T13280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1020.185504][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2647'. [ 1020.579623][T13280] Bluetooth: hci2: command tx timeout [ 1020.805018][ T2120] team0 (unregistering): Port device team_slave_1 removed [ 1020.853428][ T2120] team0 (unregistering): Port device team_slave_0 removed [ 1021.145119][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1021.706824][T17513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.725645][T17513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.794043][T17513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.942603][T13280] Bluetooth: hci4: command tx timeout [ 1022.220902][T17513] hsr_slave_0: entered promiscuous mode [ 1022.240689][T17513] hsr_slave_1: entered promiscuous mode [ 1022.249683][T17513] debugfs: 'hsr0' already exists in 'hsr' [ 1022.256095][T17513] Cannot create hsr debugfs directory [ 1022.313650][T17627] Cannot find add_set index 3 as target [ 1022.659812][T13280] Bluetooth: hci2: command tx timeout [ 1022.788901][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1023.213178][ T30] audit: type=1400 audit(2000000096.730:1666): avc: denied { read } for pid=17628 comm="syz.5.2651" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1023.506488][ T30] audit: type=1400 audit(2000000096.730:1667): avc: denied { open } for pid=17628 comm="syz.5.2651" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1023.607251][ T30] audit: type=1400 audit(2000000096.740:1668): avc: denied { ioctl } for pid=17628 comm="syz.5.2651" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1023.634262][ T30] audit: type=1400 audit(2000000096.780:1669): avc: denied { connect } for pid=17628 comm="syz.5.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1023.655283][ T30] audit: type=1400 audit(2000000096.780:1670): avc: denied { write } for pid=17628 comm="syz.5.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1024.050003][T13280] Bluetooth: hci4: command tx timeout [ 1024.051313][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1024.073929][T17575] chnl_net:caif_netlink_parms(): no params data found [ 1024.170041][ T5904] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1024.234390][T17608] chnl_net:caif_netlink_parms(): no params data found [ 1024.341696][ T5904] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1024.363665][ T5904] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1024.383946][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1024.404827][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.434881][T17645] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1024.454811][ T5904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1024.554156][T17575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.578948][T17575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.593437][T17575] bridge_slave_0: entered allmulticast mode [ 1024.605092][T17575] bridge_slave_0: entered promiscuous mode [ 1024.750045][T13280] Bluetooth: hci2: command tx timeout [ 1025.001864][T17654] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1025.008552][T17654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1025.043323][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1025.076001][T17654] vhci_hcd vhci_hcd.0: Device attached [ 1025.145937][ T2120] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.260225][T17655] vhci_hcd: connection closed [ 1025.261497][T17566] vhci_hcd vhci_hcd.3: stop threads [ 1025.285355][T17566] vhci_hcd vhci_hcd.3: release socket [ 1025.306151][T17334] usb 4-1: USB disconnect, device number 21 [ 1025.313793][T17566] vhci_hcd vhci_hcd.3: disconnect device [ 1025.331341][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1025.342882][T16932] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1025.366512][T17575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.376164][T16932] usb 39-1: enqueue for inactive port 0 [ 1025.397834][T17575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.412379][T17575] bridge_slave_1: entered allmulticast mode [ 1025.435450][T17575] bridge_slave_1: entered promiscuous mode [ 1025.449703][T16932] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1025.497793][ T2120] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.685364][ T30] audit: type=1326 audit(2000000099.330:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17664 comm="syz.5.2656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54d438f749 code=0x0 [ 1025.722435][T17575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.742425][T17575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.803086][T17608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.819791][T17608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.847558][T17608] bridge_slave_0: entered allmulticast mode [ 1025.858395][T17608] bridge_slave_0: entered promiscuous mode [ 1025.912955][ T2120] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.973788][T17608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.989701][T17608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.996904][T17608] bridge_slave_1: entered allmulticast mode [ 1026.022135][T17608] bridge_slave_1: entered promiscuous mode [ 1026.076808][T17575] team0: Port device team_slave_0 added [ 1026.100901][T13280] Bluetooth: hci4: command tx timeout [ 1026.146139][ T2120] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.205678][T17575] team0: Port device team_slave_1 added [ 1026.223724][ T30] audit: type=1400 audit(2000000099.870:1672): avc: denied { create } for pid=17674 comm="syz.3.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1026.228165][T17608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.262427][ T30] audit: type=1400 audit(2000000099.900:1673): avc: denied { connect } for pid=17674 comm="syz.3.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1026.267228][T17608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.304259][ T30] audit: type=1400 audit(2000000099.910:1674): avc: denied { ioctl } for pid=17674 comm="syz.3.2658" path="socket:[63416]" dev="sockfs" ino=63416 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1026.523618][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2658'. [ 1026.757945][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1026.792242][ T30] audit: type=1400 audit(2000000100.440:1675): avc: denied { bind } for pid=17678 comm="syz.5.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1026.816389][ T30] audit: type=1400 audit(2000000100.440:1676): avc: denied { connect } for pid=17678 comm="syz.5.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1026.842538][T17575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.862702][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.893853][T17575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.912845][T17575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.925763][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.952696][T17575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.971218][T17608] team0: Port device team_slave_0 added [ 1027.036676][T17608] team0: Port device team_slave_1 added [ 1027.206328][T17513] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1027.253983][T17513] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1027.268875][T17608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.277593][T17608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.319834][T17608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.333432][T17608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.340569][T17608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.368063][T17608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.369718][ T5896] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1027.774285][T17513] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1027.794873][T17575] hsr_slave_0: entered promiscuous mode [ 1027.802298][T17575] hsr_slave_1: entered promiscuous mode [ 1027.808604][T17575] debugfs: 'hsr0' already exists in 'hsr' [ 1027.815117][T17575] Cannot create hsr debugfs directory [ 1027.822231][T17513] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1027.928998][ T2120] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.933551][ T5896] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1027.956582][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.956804][T17608] hsr_slave_0: entered promiscuous mode [ 1027.965850][ T5896] usb 6-1: Product: syz [ 1027.974529][T17608] hsr_slave_1: entered promiscuous mode [ 1027.982729][T17608] debugfs: 'hsr0' already exists in 'hsr' [ 1027.989176][T17608] Cannot create hsr debugfs directory [ 1028.000336][ T5896] usb 6-1: Manufacturer: syz [ 1028.077934][ T5896] usb 6-1: SerialNumber: syz [ 1028.090755][ T5896] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1028.117506][T15904] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.143276][ T2120] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.179798][T13280] Bluetooth: hci4: command tx timeout [ 1028.262403][ T2120] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.334456][T17695] 9pnet_fd: Insufficient options for proto=fd [ 1028.389290][ T2120] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.538673][ T5896] usb 6-1: USB disconnect, device number 86 [ 1028.839318][ T2120] bridge_slave_1: left allmulticast mode [ 1028.847481][ T2120] bridge_slave_1: left promiscuous mode [ 1028.853794][ T2120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.865725][ T2120] bridge_slave_0: left allmulticast mode [ 1028.872719][ T2120] bridge_slave_0: left promiscuous mode [ 1028.878442][ T2120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.888019][ T2120] bridge_slave_1: left allmulticast mode [ 1028.894097][ T2120] bridge_slave_1: left promiscuous mode [ 1028.900059][ T2120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.908784][ T2120] bridge_slave_0: left allmulticast mode [ 1028.915541][ T2120] bridge_slave_0: left promiscuous mode [ 1028.921634][ T2120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.165178][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1029.327029][ T2120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.337487][ T2120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.347760][ T2120] bond0 (unregistering): Released all slaves [ 1029.380416][T15904] usb 6-1: Service connection timeout for: 256 [ 1029.387239][T15904] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1029.418479][T15904] ath9k_htc: Failed to initialize the device [ 1029.435938][ T5896] usb 6-1: ath9k_htc: USB layer deinitialized [ 1029.705030][ T2120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.715599][ T2120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.725478][ T2120] bond0 (unregistering): Released all slaves [ 1029.744328][ T5896] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1029.873962][ T2120] bond1 (unregistering): Released all slaves [ 1029.925476][ T5896] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1029.936943][ T5896] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1029.999632][ T5896] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.011062][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.021838][T17513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.137226][T17697] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1030.150609][ T2120] tipc: Left network mode [ 1030.174410][ T5896] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1030.191023][T17513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.285754][T17700] tipc: Started in network mode [ 1030.293889][T17700] tipc: Node identity ac14140f, cluster identity 4711 [ 1030.310927][T17700] tipc: New replicast peer: 255.255.255.255 [ 1030.324076][T17700] tipc: Enabled bearer , priority 10 [ 1030.362159][T17701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2663'. [ 1030.384545][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.391753][ T8451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.574084][T17702] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1030.580637][T17702] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1030.617455][T17702] vhci_hcd vhci_hcd.0: Device attached [ 1030.661595][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.668918][ T8451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.853044][T17426] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 1030.914738][T17575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1030.970427][T17575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1031.007275][T17703] vhci_hcd: connection reset by peer [ 1031.014318][T17424] usb 6-1: USB disconnect, device number 87 [ 1031.039095][ T8451] vhci_hcd vhci_hcd.5: stop threads [ 1031.056720][ T8451] vhci_hcd vhci_hcd.5: release socket [ 1031.077140][ T8451] vhci_hcd vhci_hcd.5: disconnect device [ 1031.149410][T17575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1031.202706][T17575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1031.239006][T17710] syz_tun: entered allmulticast mode [ 1031.249411][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 1031.262931][ T2120] hsr_slave_0: left promiscuous mode [ 1031.270289][ T2120] hsr_slave_1: left promiscuous mode [ 1031.276416][ T2120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.286123][ T2120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.294350][ T2120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.301986][ T2120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.312381][ T2120] hsr_slave_0: left promiscuous mode [ 1031.318159][ T2120] hsr_slave_1: left promiscuous mode [ 1031.324099][ T2120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.332049][ T2120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.339869][ T2120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.347296][ T2120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.380374][ T2120] veth1_macvtap: left promiscuous mode [ 1031.385920][ T2120] veth0_macvtap: left promiscuous mode [ 1031.392627][ T2120] veth1_vlan: left promiscuous mode [ 1031.397918][ T2120] veth0_vlan: left promiscuous mode [ 1031.404546][ T2120] veth1_macvtap: left promiscuous mode [ 1031.410591][ T2120] veth0_macvtap: left promiscuous mode [ 1031.416249][ T2120] veth1_vlan: left promiscuous mode [ 1031.421513][ T2120] veth0_vlan: left promiscuous mode [ 1031.661554][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1031.686541][ T30] audit: type=1400 audit(2000000105.340:1677): avc: denied { read } for pid=17713 comm="syz.5.2666" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1031.710756][ T30] audit: type=1400 audit(2000000105.360:1678): avc: denied { open } for pid=17713 comm="syz.5.2666" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1031.740092][ T30] audit: type=1400 audit(2000000105.380:1679): avc: denied { bind } for pid=17713 comm="syz.5.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1031.760486][ T30] audit: type=1400 audit(2000000105.380:1680): avc: denied { setopt } for pid=17713 comm="syz.5.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1032.022471][ T2120] team0 (unregistering): Port device team_slave_1 removed [ 1032.069860][ T2120] team0 (unregistering): Port device team_slave_0 removed [ 1032.256364][T17334] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1032.444364][T17334] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1032.454170][T17334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.462392][T17334] usb 6-1: Product: syz [ 1032.470456][T17334] usb 6-1: Manufacturer: syz [ 1032.475115][T17334] usb 6-1: SerialNumber: syz [ 1032.591116][ T2120] pim6reg (unregistering): left allmulticast mode [ 1032.707526][T17715] netlink: 'syz.5.2666': attribute type 10 has an invalid length. [ 1033.051309][ T2120] team0 (unregistering): Port device team_slave_1 removed [ 1033.108732][ T2120] team0 (unregistering): Port device team_slave_0 removed [ 1033.740987][T17709] syz_tun (unregistering): left allmulticast mode [ 1033.756624][ T5904] tipc: Node number set to 2886997007 [ 1033.769180][T17715] team0: Port device netdevsim0 added [ 1033.782912][T17334] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1033.808275][T17334] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1033.819444][T17334] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1033.836090][T17334] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1033.878813][T17334] usb 6-1: USB disconnect, device number 88 [ 1034.177599][T17575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.280937][T17513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.323065][T17575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.450010][T17608] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1034.457825][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1034.493593][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.500709][ T8451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.563384][T17608] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1034.594000][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.601108][ T8451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.665021][T17608] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1034.683461][T17608] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1034.881492][T17334] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1035.231326][T17334] usb 6-1: Using ep0 maxpacket: 32 [ 1035.239046][T17334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.252044][T17334] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.262913][T17334] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1035.273119][T17334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.291491][T17334] usb 6-1: config 0 descriptor?? [ 1035.348760][ T30] audit: type=1400 audit(2000000108.990:1681): avc: denied { getopt } for pid=17760 comm="syz.3.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1035.397218][T17608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.424574][T17513] veth0_vlan: entered promiscuous mode [ 1035.444922][T17608] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.459201][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.466368][T12318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.477148][T17513] veth1_vlan: entered promiscuous mode [ 1035.491281][T17560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.498395][T17560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.518761][T17575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.542567][T17334] hid_mf 0003:0079:1801.0019: item fetching failed at offset 0/2 [ 1035.569380][T17334] hid_mf 0003:0079:1801.0019: HID parse failed. [ 1035.600808][T17334] hid_mf 0003:0079:1801.0019: probe with driver hid_mf failed with error -22 [ 1035.610856][T16932] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 1035.615620][T17513] veth0_macvtap: entered promiscuous mode [ 1035.643953][T17513] veth1_macvtap: entered promiscuous mode [ 1035.686464][T17513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.708294][T17513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.726729][T17560] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.748018][T17560] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.758737][ T6360] usb 6-1: USB disconnect, device number 89 [ 1035.764808][T16932] usb 4-1: device descriptor read/64, error -71 [ 1035.801109][T17560] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.847822][T17560] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.936567][T17566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.956700][T17566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.991492][ T6927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.998329][T17575] veth0_vlan: entered promiscuous mode [ 1036.008606][ T6927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.015668][T17575] veth1_vlan: entered promiscuous mode [ 1036.021441][T16932] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 1036.024338][T17426] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1036.044692][T17608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.077897][T17575] veth0_macvtap: entered promiscuous mode [ 1036.104458][T17575] veth1_macvtap: entered promiscuous mode [ 1036.152921][T17575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.180939][T17575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.219150][T17566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.252485][T17566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.255233][T16932] usb 4-1: device descriptor read/64, error -71 [ 1036.290319][T17566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.395508][T16932] usb usb4-port1: attempt power cycle [ 1036.833723][T17566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.847408][T17784] netlink: zone id is out of range [ 1036.853115][T17784] netlink: zone id is out of range [ 1036.858459][T17784] netlink: zone id is out of range [ 1036.864061][T17784] netlink: zone id is out of range [ 1036.869453][T17784] netlink: zone id is out of range [ 1036.875274][T17784] netlink: zone id is out of range [ 1036.880695][T17784] netlink: zone id is out of range [ 1036.887109][T17784] netlink: zone id is out of range [ 1036.893343][T17784] netlink: zone id is out of range [ 1037.083821][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1037.110532][T16932] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 1037.181115][T16932] usb 4-1: device descriptor read/8, error -71 [ 1037.337732][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1037.353171][ T30] audit: type=1400 audit(2000000111.000:1682): avc: denied { create } for pid=17788 comm="syz.7.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1037.449684][T16932] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 1037.470426][T16932] usb 4-1: device descriptor read/8, error -71 [ 1037.759584][T16932] usb usb4-port1: unable to enumerate USB device [ 1037.982837][ T30] audit: type=1400 audit(2000000111.320:1683): avc: denied { setopt } for pid=17788 comm="syz.7.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1038.422856][T17761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.431059][T17795] can0: slcan on ttyS3. [ 1038.432069][T17761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.524814][T17566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.554886][T17797] can0 (unregistered): slcan off ttyS3. [ 1038.571189][ T30] audit: type=1400 audit(2000000112.220:1684): avc: denied { kexec_image_load } for pid=17803 comm="syz.3.2675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1038.645971][T17566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.693105][T17608] veth0_vlan: entered promiscuous mode [ 1038.693813][T17652] udevd[17652]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1038.759520][T15603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.781057][T15603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.781188][T17608] veth1_vlan: entered promiscuous mode [ 1038.896797][T17608] veth0_macvtap: entered promiscuous mode [ 1038.910721][T17608] veth1_macvtap: entered promiscuous mode [ 1038.953363][T17608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.970420][ T10] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1038.991183][ T30] audit: type=1400 audit(2000000112.640:1685): avc: denied { setopt } for pid=17810 comm="syz.4.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1039.022794][T17608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.045380][ T8451] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.065435][ T8451] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.970403][T17811] Cannot find add_set index 0 as target [ 1040.047604][ T8451] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.067846][ T10] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1040.077670][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.081767][ T8451] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.087275][ T10] usb 6-1: Product: syz [ 1040.099049][ T10] usb 6-1: Manufacturer: syz [ 1040.115482][ T10] usb 6-1: SerialNumber: syz [ 1040.178576][ T10] usb 6-1: config 0 descriptor?? [ 1040.205797][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 1040.242847][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1040.321960][T17560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.351210][T17560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.384765][T17560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.395872][T17560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.425816][ T10] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1040.461930][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1040.491118][ T10] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1040.503754][ T30] audit: type=1400 audit(2000000114.150:1686): avc: denied { ioctl } for pid=17819 comm="syz.3.2677" path="socket:[66252]" dev="sockfs" ino=66252 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1040.510160][ T10] usb 6-1: media controller created [ 1040.537888][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'. [ 1040.570097][T17820] netlink: 'syz.3.2677': attribute type 10 has an invalid length. [ 1040.597195][T17820] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1040.614949][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1041.310165][ T10] DVB: Unable to find symbol dib7000p_attach() [ 1041.316538][ T10] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1041.584981][ T30] audit: type=1400 audit(2000000115.100:1687): avc: denied { read write } for pid=17827 comm="syz.3.2680" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1041.613180][ T30] audit: type=1400 audit(2000000115.100:1688): avc: denied { open } for pid=17827 comm="syz.3.2680" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1041.765679][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 1041.776610][ T30] audit: type=1400 audit(2000000115.420:1689): avc: denied { setopt } for pid=17835 comm="syz.7.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1041.800683][ T10] Registered IR keymap rc-empty [ 1041.807002][ T10] dvb-usb: could not initialize remote control. [ 1041.815015][ T10] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1042.070893][ T6020] usb 6-1: USB disconnect, device number 90 [ 1042.260773][ T5881] IPVS: starting estimator thread 0... [ 1042.271661][ T6020] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1042.414828][T15904] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1042.667373][T17855] can0: slcan on ttyS3. [ 1042.813204][T17855] can0 (unregistered): slcan off ttyS3. [ 1042.849618][T15904] usb 8-1: Using ep0 maxpacket: 32 [ 1042.889733][T17852] IPVS: using max 44 ests per chain, 105600 per kthread [ 1043.288750][T15904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.308380][T15904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.318407][T15904] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1043.332772][T15904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.343958][T15904] usb 8-1: config 0 descriptor?? [ 1043.352595][T15904] hub 8-1:0.0: USB hub found [ 1043.562625][T15904] hub 8-1:0.0: 1 port detected [ 1043.678268][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1043.729871][T17873] overlayfs: failed to resolve './file3': -2 [ 1043.972165][ T30] audit: type=1400 audit(2000000117.620:1690): avc: denied { read } for pid=17843 comm="syz.7.2682" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1044.020198][T16932] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1044.060661][ T30] audit: type=1400 audit(2000000117.650:1691): avc: denied { open } for pid=17843 comm="syz.7.2682" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1044.072737][T17844] netlink: 'syz.7.2682': attribute type 5 has an invalid length. [ 1044.169656][T16932] usb 5-1: device descriptor read/64, error -71 [ 1044.314223][ T6020] usb 8-1: USB disconnect, device number 65 [ 1044.365942][ T6360] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1044.510635][T16932] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1044.529793][ T6360] usb 6-1: Using ep0 maxpacket: 32 [ 1044.548040][ T6360] usb 6-1: config 8 has an invalid interface number: 203 but max is 0 [ 1044.565369][ T6360] usb 6-1: config 8 has no interface number 0 [ 1044.583930][ T6360] usb 6-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1044.610266][ T6360] usb 6-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1044.646559][ T6360] usb 6-1: config 8 interface 203 altsetting 1 endpoint 0xB has invalid wMaxPacketSize 0 [ 1044.657258][T16932] usb 5-1: device descriptor read/64, error -71 [ 1044.679623][ T6360] usb 6-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 0 [ 1044.709644][ T6360] usb 6-1: config 8 interface 203 has no altsetting 0 [ 1044.732091][ T6360] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 1044.749658][ T30] audit: type=1400 audit(2000000118.380:1692): avc: denied { write } for pid=17886 comm="syz.3.2692" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1044.780593][ T6360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.791073][T16932] usb usb5-port1: attempt power cycle [ 1044.809097][ T6360] usb 6-1: Product: syz [ 1044.813914][ T6360] usb 6-1: Manufacturer: syz [ 1044.820044][ T30] audit: type=1400 audit(2000000118.460:1693): avc: denied { create } for pid=17886 comm="syz.3.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1044.849666][ T6360] usb 6-1: SerialNumber: syz [ 1044.860845][T17873] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1044.889011][ T30] audit: type=1400 audit(2000000118.470:1694): avc: denied { write } for pid=17886 comm="syz.3.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1045.060742][ T6020] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1045.224436][ T6020] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1045.239711][T16932] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1045.283797][T16932] usb 5-1: device descriptor read/8, error -71 [ 1045.309482][T17898] xt_recent: Unsupported userspace flags (000000b1) [ 1045.388502][ T30] audit: type=1400 audit(2000000119.000:1695): avc: denied { unlink } for pid=17895 comm="syz.7.2694" name="#23" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1045.608647][ T6020] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.613396][ T30] audit: type=1400 audit(2000000119.020:1696): avc: denied { mount } for pid=17895 comm="syz.7.2694" name="/" dev="overlay" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1045.628384][ T6020] usb 4-1: config 0 has no interface number 0 [ 1045.660353][ T6020] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1045.678962][ T6020] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1045.694707][ T6020] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1045.705170][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.721798][ T6020] usb 4-1: config 0 descriptor?? [ 1045.745616][ T6020] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1045.780054][T16932] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1045.820791][T16932] usb 5-1: device descriptor read/8, error -71 [ 1045.983532][T16932] usb usb5-port1: unable to enumerate USB device [ 1046.017640][ T8446] usb 4-1: Failed to submit usb control message: -71 [ 1046.017894][ T6020] usb 4-1: USB disconnect, device number 26 [ 1046.025575][ T8446] usb 4-1: unable to send the bmi data to the device: -71 [ 1046.025646][ T8446] usb 4-1: unable to get target info from device [ 1046.025661][ T8446] usb 4-1: could not get target info (-71) [ 1046.025677][ T8446] usb 4-1: could not probe fw (-71) [ 1046.111021][ T30] audit: type=1400 audit(2000000119.750:1697): avc: denied { associate } for pid=17905 comm="syz.6.2695" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1046.279605][ T30] audit: type=1400 audit(2000000119.920:1698): avc: denied { ioctl } for pid=17912 comm="syz.6.2699" path="socket:[66366]" dev="sockfs" ino=66366 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1046.458925][ T8453] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.567533][ T8453] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.692156][ T8453] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.772526][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1046.774801][ T6360] port100 6-1:8.203: NFC: Could not get supported command types [ 1046.794042][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1046.804379][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1046.818819][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1046.827503][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1046.844794][T16576] udevd[16576]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1046.862099][ T6360] usb 6-1: USB disconnect, device number 91 [ 1047.094315][ T8453] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.272896][T16932] IPVS: starting estimator thread 0... [ 1047.464424][T17929] IPVS: using max 39 ests per chain, 93600 per kthread [ 1047.941537][T17935] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2706'. [ 1047.952959][T17935] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2706'. [ 1048.215281][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1048.338879][ T30] audit: type=1400 audit(2000000121.930:1699): avc: denied { ioctl } for pid=17936 comm="syz.5.2707" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1048.484943][ T8453] bridge_slave_1: left allmulticast mode [ 1048.491516][ T8453] bridge_slave_1: left promiscuous mode [ 1048.505314][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.563536][ T8453] bridge_slave_0: left allmulticast mode [ 1048.577915][ T8453] bridge_slave_0: left promiscuous mode [ 1048.610040][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.860276][T17424] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1048.905510][ T5830] Bluetooth: hci1: command tx timeout [ 1049.014045][T17424] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1049.024518][T17424] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.032794][T17424] usb 5-1: Product: syz [ 1049.033057][ T8453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.037086][T17424] usb 5-1: Manufacturer: syz [ 1049.051409][T17424] usb 5-1: SerialNumber: syz [ 1049.056546][ T8453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.067873][ T8453] bond0 (unregistering): Released all slaves [ 1049.071739][T17424] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1049.081583][T17424] r8152-cfgselector 5-1: config 0 descriptor?? [ 1049.194752][T17918] chnl_net:caif_netlink_parms(): no params data found [ 1049.235199][T17947] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2712'. [ 1049.262710][T17652] udevd[17652]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1049.436064][T17944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.460054][T17944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.613458][ T30] audit: type=1400 audit(2000000123.240:1700): avc: denied { create } for pid=17946 comm="syz.5.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1049.806078][ T30] audit: type=1400 audit(2000000123.250:1701): avc: denied { ioctl } for pid=17946 comm="syz.5.2712" path="socket:[66792]" dev="sockfs" ino=66792 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1050.066464][T17955] PID 17955 killed due to inadequate hugepage pool [ 1050.197595][T13280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1050.209428][T13280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1050.224383][T16576] udevd[16576]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1050.238123][T13280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1050.271258][T13280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1050.278839][T13280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1050.356526][ T30] audit: type=1400 audit(2000000124.000:1702): avc: denied { write } for pid=17965 comm="syz.6.2716" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1050.398175][ T8453] hsr_slave_0: left promiscuous mode [ 1050.411758][ T8453] hsr_slave_1: left promiscuous mode [ 1050.424857][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.440813][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.459416][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.489601][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.554584][ T8453] veth1_macvtap: left promiscuous mode [ 1050.579954][ T8453] veth0_macvtap: left promiscuous mode [ 1050.585601][ T8453] veth1_vlan: left promiscuous mode [ 1050.599692][ T8453] veth0_vlan: left promiscuous mode [ 1050.823425][T17652] udevd[17652]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1050.969163][T17652] udevd[17652]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1050.990751][T13280] Bluetooth: hci1: command tx timeout [ 1051.332395][ T8453] team0 (unregistering): Port device team_slave_1 removed [ 1051.397761][ T8453] team0 (unregistering): Port device team_slave_0 removed [ 1051.420008][ T30] audit: type=1400 audit(2000000125.070:1703): avc: denied { ioctl } for pid=17973 comm="syz.5.2721" path="socket:[66886]" dev="sockfs" ino=66886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1051.486043][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2721'. [ 1051.738106][T17424] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1051.759382][T17424] r8152-cfgselector 5-1: bad CDC descriptors [ 1051.803466][T17424] r8152-cfgselector 5-1: USB disconnect, device number 9 [ 1052.344401][T13280] Bluetooth: hci3: command tx timeout [ 1052.500083][T17918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.507906][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.515675][T17918] bridge_slave_0: entered allmulticast mode [ 1052.523021][T17918] bridge_slave_0: entered promiscuous mode [ 1052.586370][T17918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.648911][T17918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.665206][T17918] bridge_slave_1: entered allmulticast mode [ 1052.685303][T17918] bridge_slave_1: entered promiscuous mode [ 1052.826296][T17918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.867253][T17918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.015021][T17426] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1053.021363][T17918] team0: Port device team_slave_0 added [ 1053.069894][T13280] Bluetooth: hci1: command tx timeout [ 1053.087790][T17918] team0: Port device team_slave_1 added [ 1053.154636][T17918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.160281][T17426] usb 5-1: device descriptor read/64, error -71 [ 1053.168677][T17918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.225032][T17918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.246309][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1053.257257][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1053.269050][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1053.280916][T17918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.288042][T17918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.314242][T17918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.325538][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1053.333250][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1053.400040][T17426] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1053.445537][ T8453] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.493399][T17918] hsr_slave_0: entered promiscuous mode [ 1053.500111][T17918] hsr_slave_1: entered promiscuous mode [ 1053.506427][T17918] debugfs: 'hsr0' already exists in 'hsr' [ 1053.512835][T17918] Cannot create hsr debugfs directory [ 1053.530713][T17426] usb 5-1: device descriptor read/64, error -71 [ 1053.562369][ T8453] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.621533][T17957] chnl_net:caif_netlink_parms(): no params data found [ 1053.640867][T17426] usb usb5-port1: attempt power cycle [ 1053.656047][ T8453] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.769240][ T8453] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.817443][T17957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.825350][T17957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.834281][T17957] bridge_slave_0: entered allmulticast mode [ 1053.842680][T17957] bridge_slave_0: entered promiscuous mode [ 1053.855060][T17957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.868434][T17957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.875971][T17957] bridge_slave_1: entered allmulticast mode [ 1053.883080][T17957] bridge_slave_1: entered promiscuous mode [ 1053.943137][T17957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.979925][T17426] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1054.024159][T17957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.034094][T17426] usb 5-1: device descriptor read/8, error -71 [ 1054.078234][T17074] udevd[17074]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 1054.188815][T17957] team0: Port device team_slave_0 added [ 1054.197259][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.205537][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.206536][T17957] team0: Port device team_slave_1 added [ 1054.280263][T17426] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1054.302179][T17426] usb 5-1: device descriptor read/8, error -71 [ 1054.313799][T17957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.321139][T17957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.349246][T17957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.371185][T17957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.382565][T17957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.409258][T17957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.411115][T17426] usb usb5-port1: unable to enumerate USB device [ 1054.430116][T13280] Bluetooth: hci3: command tx timeout [ 1054.436494][T17988] chnl_net:caif_netlink_parms(): no params data found [ 1054.646219][ T8453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.680767][T17957] hsr_slave_0: entered promiscuous mode [ 1054.687339][T17957] hsr_slave_1: entered promiscuous mode [ 1054.695219][T17957] debugfs: 'hsr0' already exists in 'hsr' [ 1054.710510][T17957] Cannot create hsr debugfs directory [ 1054.764457][ T8453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.766430][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1054.788824][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1054.798462][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1054.806751][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1054.818941][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1054.899468][ T8453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.921294][T17988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.928495][T17988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.936241][T17988] bridge_slave_0: entered allmulticast mode [ 1054.943574][T17988] bridge_slave_0: entered promiscuous mode [ 1054.967063][ T8453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.995256][T17988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.003143][T17988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.010470][T17988] bridge_slave_1: entered allmulticast mode [ 1055.017356][T17988] bridge_slave_1: entered promiscuous mode [ 1055.094560][T17988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.131414][T17988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.141944][ T5830] Bluetooth: hci1: command tx timeout [ 1055.158681][T17918] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1055.189167][T17918] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1055.229046][T17918] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1055.242482][T17988] team0: Port device team_slave_0 added [ 1055.257313][T17988] team0: Port device team_slave_1 added [ 1055.267765][T17918] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1055.348816][T17988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.359094][T17988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.385883][ T5830] Bluetooth: hci4: command tx timeout [ 1055.392348][T17988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.403661][ T8453] bridge_slave_1: left allmulticast mode [ 1055.409394][ T8453] bridge_slave_1: left promiscuous mode [ 1055.415829][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.424898][ T8453] bridge_slave_0: left allmulticast mode [ 1055.431190][ T8453] bridge_slave_0: left promiscuous mode [ 1055.436937][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.447486][ T8453] bridge_slave_1: left allmulticast mode [ 1055.453748][ T8453] bridge_slave_1: left promiscuous mode [ 1055.459513][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.471313][ T8453] bridge_slave_0: left allmulticast mode [ 1055.476992][ T8453] bridge_slave_0: left promiscuous mode [ 1055.483879][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.908593][ T8453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.919384][ T8453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.929152][ T8453] bond0 (unregistering): Released all slaves [ 1056.239384][ T8453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.251069][ T8453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.263791][ T8453] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1056.275083][ T8453] bond0 (unregistering): Released all slaves [ 1056.290390][T17988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.297343][T17988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.325114][T17988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.450788][ T8453] tipc: Disabling bearer [ 1056.458945][ T8453] tipc: Left network mode [ 1056.519178][ T5830] Bluetooth: hci3: command tx timeout [ 1056.577624][T17988] hsr_slave_0: entered promiscuous mode [ 1056.584601][T17988] hsr_slave_1: entered promiscuous mode [ 1056.594373][T17988] debugfs: 'hsr0' already exists in 'hsr' [ 1056.601126][T17988] Cannot create hsr debugfs directory [ 1056.848705][T18004] chnl_net:caif_netlink_parms(): no params data found [ 1056.900951][ T5830] Bluetooth: hci0: command tx timeout [ 1056.916757][T17918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.995802][T18028] netlink: 'syz.4.2734': attribute type 10 has an invalid length. [ 1057.016636][T18028] team0: Port device dummy0 added [ 1057.036352][T18028] netlink: 'syz.4.2734': attribute type 10 has an invalid length. [ 1057.076829][T18028] team0: Port device dummy0 removed [ 1057.084633][T18028] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1057.131860][T18004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.142558][T18004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.166448][T18004] bridge_slave_0: entered allmulticast mode [ 1057.174739][T18004] bridge_slave_0: entered promiscuous mode [ 1057.183741][T18004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.191502][T18004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.199407][T18004] bridge_slave_1: entered allmulticast mode [ 1057.206988][T18004] bridge_slave_1: entered promiscuous mode [ 1057.221353][ T8453] hsr_slave_0: left promiscuous mode [ 1057.227221][ T8453] hsr_slave_1: left promiscuous mode [ 1057.234062][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.242054][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.251311][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.258794][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.271131][ T8453] hsr_slave_0: left promiscuous mode [ 1057.277354][ T8453] hsr_slave_1: left promiscuous mode [ 1057.284002][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.292095][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.304107][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.312808][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.343131][ T8453] veth1_macvtap: left promiscuous mode [ 1057.348804][ T8453] veth0_macvtap: left promiscuous mode [ 1057.356180][ T8453] veth1_vlan: left promiscuous mode [ 1057.362243][ T8453] veth0_vlan: left promiscuous mode [ 1057.371578][ T8453] veth1_macvtap: left promiscuous mode [ 1057.378133][ T8453] veth0_macvtap: left promiscuous mode [ 1057.385019][ T8453] veth1_vlan: left promiscuous mode [ 1057.391119][ T8453] veth0_vlan: left promiscuous mode [ 1057.459980][ T5830] Bluetooth: hci4: command tx timeout [ 1057.665101][ T30] audit: type=1400 audit(2000000131.310:1704): avc: denied { unmount } for pid=17575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1058.139491][ T8453] team0 (unregistering): Port device team_slave_1 removed [ 1058.209509][ T8453] team0 (unregistering): Port device team_slave_0 removed [ 1058.587303][ T5830] Bluetooth: hci3: command tx timeout [ 1058.982825][ T5830] Bluetooth: hci0: command tx timeout [ 1059.421848][ T8453] team0 (unregistering): Port device team_slave_1 removed [ 1059.455676][ T8453] team0 (unregistering): Port device team_slave_0 removed [ 1059.460135][ T5881] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1059.547374][ T5830] Bluetooth: hci4: command tx timeout [ 1059.622397][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1059.635956][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1059.646335][ T5881] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1059.656176][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.666927][ T5881] usb 5-1: config 0 descriptor?? [ 1059.696800][ T5881] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 1059.894330][ T30] audit: type=1400 audit(2000000133.540:1705): avc: denied { read } for pid=18047 comm="syz.4.2738" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1059.901572][T16994] usb 5-1: USB disconnect, device number 14 [ 1059.918415][ T30] audit: type=1400 audit(2000000133.540:1706): avc: denied { open } for pid=18047 comm="syz.4.2738" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1059.960100][ T30] audit: type=1400 audit(2000000133.540:1707): avc: denied { ioctl } for pid=18047 comm="syz.4.2738" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1060.126227][T18004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.166020][T17918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.214336][T18004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.283567][T18004] team0: Port device team_slave_0 added [ 1060.302043][T12562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.309145][T12562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.320671][T18004] team0: Port device team_slave_1 added [ 1060.360942][T17957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1060.415772][T17957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1060.447618][T17957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1060.469489][T12562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.476766][T12562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.497524][T18004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.507193][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.537299][T18004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.561729][T18004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.568769][T18004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.610289][T18004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.622012][T17957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1060.807442][T18004] hsr_slave_0: entered promiscuous mode [ 1060.839084][T18004] hsr_slave_1: entered promiscuous mode [ 1060.873705][T18067] bond0: (slave dummy0): Releasing backup interface [ 1061.082626][ T5830] Bluetooth: hci0: command tx timeout [ 1061.134355][ T8453] IPVS: stop unused estimator thread 0... [ 1061.147840][T17918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1061.203906][ T8453] IPVS: stop unused estimator thread 0... [ 1061.324291][ T30] audit: type=1400 audit(2000000134.860:1708): avc: denied { connect } for pid=18068 comm="syz.4.2743" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1061.592927][T17988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1061.619721][ T5830] Bluetooth: hci4: command tx timeout [ 1061.635370][T17988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1061.659423][T17988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1061.691752][T17988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1061.864440][ T8453] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.902351][T18082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1033 sclass=netlink_route_socket pid=18082 comm=syz.4.2744 [ 1061.965949][ T8453] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.997611][T18085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2744'. [ 1062.048439][ T8453] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.090835][T17918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.141521][ T8453] team0: Port device netdevsim0 removed [ 1062.151282][ T8453] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.175374][T17957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.234869][T17957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.249704][T16932] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1062.275458][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.283114][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.308052][ T2984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.315253][ T2984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.431081][T16932] usb 5-1: Using ep0 maxpacket: 16 [ 1062.461074][T16932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1062.476178][T16932] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 1062.496252][T16932] usb 5-1: config 13 has no interface number 0 [ 1062.508501][T17988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.515582][T16932] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1062.530838][T16932] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1062.547142][ T8453] bridge_slave_1: left allmulticast mode [ 1062.554313][ T8453] bridge_slave_1: left promiscuous mode [ 1062.560526][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.571214][T16932] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1062.581523][ T8453] bridge_slave_0: left allmulticast mode [ 1062.587148][ T8453] bridge_slave_0: left promiscuous mode [ 1062.592761][T16932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.600871][T16932] usb 5-1: Product: syz [ 1062.605050][T16932] usb 5-1: Manufacturer: syz [ 1062.609947][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.617389][T16932] usb 5-1: SerialNumber: syz [ 1062.635479][T18085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1063.017283][ T8453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.029177][ T8453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.041468][ T8453] bond0 (unregistering): Released all slaves [ 1063.150005][ T5830] Bluetooth: hci0: command tx timeout [ 1063.171312][T17957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1063.182676][T17957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1063.202830][T18004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1063.240811][T18004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1063.254615][T18004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1063.275252][T17988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.285444][T18004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1063.402330][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.409808][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.445990][T17253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.453523][T17253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.515286][T17918] veth0_vlan: entered promiscuous mode [ 1063.558813][ T8453] hsr_slave_0: left promiscuous mode [ 1063.565582][ T8453] hsr_slave_1: left promiscuous mode [ 1063.571819][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.579329][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.587775][ T8453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.595928][ T8453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.614884][ T8453] veth1_macvtap: left promiscuous mode [ 1063.623303][ T8453] veth0_macvtap: left promiscuous mode [ 1063.629237][ T8453] veth1_vlan: left promiscuous mode [ 1063.634769][ T8453] veth0_vlan: left promiscuous mode [ 1064.106277][ T8453] team0 (unregistering): Port device team_slave_1 removed [ 1064.155689][ T8453] team0 (unregistering): Port device team_slave_0 removed [ 1064.884528][T17918] veth1_vlan: entered promiscuous mode [ 1064.935412][T16932] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1064.947668][T16932] usb 5-1: MIDIStreaming interface descriptor not found [ 1064.986135][T17957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.073352][T16932] usb 5-1: USB disconnect, device number 15 [ 1065.181142][T16048] udevd[16048]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.190190][T17918] veth0_macvtap: entered promiscuous mode [ 1065.243072][ T30] audit: type=1400 audit(2000000138.870:1709): avc: denied { mount } for pid=18103 comm="syz.4.2745" name="/" dev="ramfs" ino=69651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1065.319023][T17918] veth1_macvtap: entered promiscuous mode [ 1065.586575][T18004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.621562][T17918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.638269][T17957] veth0_vlan: entered promiscuous mode [ 1065.669299][T17918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.728850][ T2984] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.740221][ T2984] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.750866][ T2984] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.761639][ T2984] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.881108][T18004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.888821][T17957] veth1_vlan: entered promiscuous mode [ 1066.503368][T17988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.524832][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.532808][ T7003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.573652][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.580863][ T8441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.627840][T17957] veth0_macvtap: entered promiscuous mode [ 1066.647096][T17957] veth1_macvtap: entered promiscuous mode [ 1066.742965][T17957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.759276][ T8453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.780705][T17957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.791593][ T8453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.814538][T17988] veth0_vlan: entered promiscuous mode [ 1066.849436][ T6017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.858496][ T6017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.870817][ T6017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.880188][ T7004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.888598][ T7004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.908096][ T6017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.950045][T17988] veth1_vlan: entered promiscuous mode [ 1067.160233][T18004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.395941][T18004] veth0_vlan: entered promiscuous mode [ 1067.445837][T18004] veth1_vlan: entered promiscuous mode [ 1067.455716][ T8441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.472083][T17988] veth0_macvtap: entered promiscuous mode [ 1067.488067][ T8441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.493824][T17988] veth1_macvtap: entered promiscuous mode [ 1067.536327][ T8453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.546489][ T8453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.555065][T17988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.579492][T17988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.617925][T16805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.644566][T16805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.658670][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1067.672378][T16805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.684926][T16805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.700206][T18004] veth0_macvtap: entered promiscuous mode [ 1068.013879][T18004] veth1_macvtap: entered promiscuous mode [ 1068.111546][T18004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.146139][T18004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.166071][ T7004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.177260][ T7004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.190318][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.201670][ T7004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.211967][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.219310][ T7004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.262310][T12562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.271703][T12562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.371661][ T791] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1068.392778][T17566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.412458][T17566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.466493][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.525371][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.625491][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1068.636967][ T791] usb 9-1: Using ep0 maxpacket: 8 [ 1068.652049][ T791] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.693003][ T791] usb 9-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 1068.815091][ T791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.839942][T18146] netlink: 'syz.0.2730': attribute type 1 has an invalid length. [ 1068.955240][ T791] usb 9-1: config 0 descriptor?? [ 1069.620923][ T791] usb 9-1: USB disconnect, device number 81 [ 1069.635538][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1069.681449][ T30] audit: type=1400 audit(2000000143.320:1710): avc: denied { read } for pid=18158 comm="syz.1.2752" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1069.739629][ T30] audit: type=1400 audit(2000000143.320:1711): avc: denied { open } for pid=18158 comm="syz.1.2752" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1069.766644][T18153] slcan: can't register candev [ 1069.852708][T18161] IPVS: set_ctl: invalid protocol: 0 5.0.0.0:0 [ 1069.914953][ T30] audit: type=1400 audit(2000000143.330:1712): avc: denied { ioctl } for pid=18158 comm="syz.1.2752" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1069.995087][ T791] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1070.130250][ T791] usb 2-1: device descriptor read/64, error -71 [ 1070.399637][ T791] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1070.928644][ T30] audit: type=1400 audit(2000000144.060:1713): avc: denied { bind } for pid=18168 comm="syz.0.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1071.170293][ T30] audit: type=1400 audit(2000000144.080:1714): avc: denied { listen } for pid=18168 comm="syz.0.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1071.282162][ T791] usb 2-1: device descriptor read/64, error -71 [ 1071.331178][ T30] audit: type=1400 audit(2000000144.130:1715): avc: denied { setopt } for pid=18168 comm="syz.0.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1071.353374][T16994] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1071.353475][ T30] audit: type=1400 audit(2000000144.130:1716): avc: denied { read } for pid=18168 comm="syz.0.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1071.518906][T18181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2756'. [ 1071.877546][ T30] audit: type=1400 audit(2000000145.090:1717): avc: denied { bind } for pid=18176 comm="syz.8.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1071.913956][ T791] usb usb2-port1: attempt power cycle [ 1071.988251][ T30] audit: type=1400 audit(2000000145.640:1718): avc: denied { mount } for pid=18182 comm="syz.0.2757" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1072.266105][ T791] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1072.300620][ T791] usb 2-1: device descriptor read/8, error -71 [ 1072.535750][T18186] efs: cannot read volume header [ 1072.549769][ T791] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1072.570377][ T791] usb 2-1: device descriptor read/8, error -71 [ 1072.681113][ T791] usb usb2-port1: unable to enumerate USB device [ 1072.831606][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1073.109869][ T791] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1073.239780][ T791] usb 2-1: device descriptor read/64, error -71 [ 1073.849033][T16994] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1073.884603][T16994] usb 3-1: too many configurations: 234, using maximum allowed: 8 [ 1073.925208][T16994] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1073.948648][T16994] usb 3-1: can't read configurations, error -71 [ 1073.999841][ T791] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1074.128876][ T30] audit: type=1400 audit(2000000147.600:1719): avc: denied { write } for pid=18195 comm="syz.2.2762" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1074.154945][ T30] audit: type=1400 audit(2000000147.610:1720): avc: denied { ioctl } for pid=18195 comm="syz.2.2762" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1074.215882][ T791] usb 2-1: device descriptor read/64, error -71 [ 1074.279111][ T30] audit: type=1400 audit(2000000147.920:1721): avc: denied { write } for pid=18202 comm="syz.2.2763" path="socket:[70273]" dev="sockfs" ino=70273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1074.304439][T18203] Bluetooth: MGMT ver 1.23 [ 1074.313099][T18203] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1074.340291][ T791] usb usb2-port1: attempt power cycle [ 1074.584056][T18205] nbd1: detected capacity change from 0 to 127 [ 1074.622432][ T5830] block nbd1: Receive control failed (result -104) [ 1074.959736][ T791] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1074.996740][ T791] usb 2-1: device descriptor read/8, error -71 [ 1075.008542][ T30] audit: type=1400 audit(2000000148.650:1722): avc: denied { mounton } for pid=18219 comm="syz.2.2767" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1075.644389][ T791] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1076.075982][ T791] usb 2-1: device descriptor read/8, error -71 [ 1076.098423][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1076.098439][ T30] audit: type=1400 audit(2000000149.740:1726): avc: denied { mount } for pid=18233 comm="syz.4.2771" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1076.169947][T17652] udevd[17652]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1076.189896][ T791] usb usb2-port1: unable to enumerate USB device [ 1076.366592][ T30] audit: type=1400 audit(2000000150.010:1727): avc: denied { ioctl } for pid=18241 comm="syz.4.2773" path="socket:[70328]" dev="sockfs" ino=70328 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1076.710362][ T30] audit: type=1400 audit(2000000150.360:1728): avc: denied { write } for pid=18247 comm="syz.4.2775" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1076.788903][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2775'. [ 1076.844706][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1076.866678][T18250] SET target dimension over the limit! [ 1076.873726][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1076.889218][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1076.939116][T18256] vxfs: WRONG superblock magic 00000000 at 1 [ 1076.956020][ T30] audit: type=1400 audit(2000000150.570:1729): avc: denied { map } for pid=18247 comm="syz.4.2775" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1076.971514][T18256] vxfs: WRONG superblock magic 00000000 at 8 [ 1077.026909][T18256] vxfs: can't find superblock. [ 1077.750930][T17652] udevd[17652]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1077.796121][ T30] audit: type=1400 audit(2000000151.440:1730): avc: denied { ioctl } for pid=18263 comm="syz.1.2779" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1077.895058][T16994] vxcan1 speed is unknown, defaulting to 1000 [ 1077.909582][T18255] infiniband syz2: set active [ 1077.923535][T18255] infiniband syz2: added vxcan1 [ 1077.926608][T17652] udevd[17652]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1077.950619][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 1077.971136][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 1077.978440][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 1077.986692][ T96] block nbd1: Dead connection, failed to find a fallback [ 1078.002627][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 1078.010571][ T96] block nbd1: shutting down sockets [ 1078.016374][ T96] blk_print_req_error: 138 callbacks suppressed [ 1078.016397][ T96] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.036222][ T96] buffer_io_error: 138 callbacks suppressed [ 1078.036247][ T96] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1078.052189][ T96] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.062688][ T96] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1078.071310][ T96] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.081543][ T96] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1078.089306][ T96] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.101397][ T96] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1078.112537][T17074] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.138977][T17074] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1078.178400][T17074] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.192197][T18269] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1078.249600][T17074] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1078.270163][T17074] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.289614][T17074] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1078.304890][T17074] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.319119][T18255] RDS/IB: syz2: added [ 1078.353212][T17074] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1078.379730][T17074] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.402465][T18255] smc: adding ib device syz2 with port count 1 [ 1078.407495][T17074] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1078.432248][T17074] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1078.449854][T17074] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1078.480076][T17074] ldm_validate_partition_table(): Disk read failed. [ 1078.488615][T17074] Dev nbd1: unable to read RDB block 0 [ 1078.493206][T18255] smc: ib device syz2 port 1 has no pnetid [ 1078.500024][T17074] nbd1: unable to read partition table [ 1078.534819][T17074] ldm_validate_partition_table(): Disk read failed. [ 1078.546186][T17074] Dev nbd1: unable to read RDB block 0 [ 1078.546933][T17429] vxcan1 speed is unknown, defaulting to 1000 [ 1078.552721][T17074] nbd1: unable to read partition table [ 1078.571726][T18276] kvm: pic: non byte write [ 1078.621123][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1078.667482][ T30] audit: type=1400 audit(2000000152.310:1731): avc: denied { map } for pid=18281 comm="syz.0.2784" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1078.730124][ T30] audit: type=1400 audit(2000000152.340:1732): avc: denied { execute } for pid=18281 comm="syz.0.2784" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1078.894236][ T791] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1078.903877][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1079.009060][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1079.022258][ T30] audit: type=1400 audit(2000000152.670:1733): avc: denied { bind } for pid=18281 comm="syz.0.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1079.072917][ T791] usb 9-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 1079.083188][ T30] audit: type=1400 audit(2000000152.690:1734): avc: denied { write } for pid=18281 comm="syz.0.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1079.116927][ T791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.450141][T18293] gfs2: not a GFS2 filesystem [ 1079.470617][ T30] audit: type=1400 audit(2000000152.750:1735): avc: denied { write } for pid=18281 comm="syz.0.2784" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1079.566923][T18293] sp0: Synchronizing with TNC [ 1079.649857][ T791] usb 9-1: config 0 descriptor?? [ 1079.722231][ T791] usb 9-1: unsupported MDLM descriptors [ 1079.951856][T17652] udevd[17652]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1079.969132][T18288] [U] è [ 1080.022467][T18276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.032373][T18276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.079950][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1080.724818][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1081.044512][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1082.002997][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1082.287463][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1083.036340][T18339] snd_dummy snd_dummy.0: control 5:-2147483648:0:syz0:-129 is already present [ 1083.461391][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1083.461427][ T30] audit: type=1400 audit(2000000156.650:1742): avc: denied { write } for pid=18333 comm="syz.0.2796" laddr=fe80::6cbf:57ff:fe4c:2fba lport=22353 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1083.870780][T18255] vxcan1 speed is unknown, defaulting to 1000 [ 1083.924929][ T5904] usb 9-1: USB disconnect, device number 82 [ 1084.123916][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1084.469895][T18355] can0: slcan on ttyS3. [ 1084.854840][ T5881] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1084.930694][T18359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18359 comm=syz.0.2801 [ 1084.934743][ T30] audit: type=1400 audit(2000000158.570:1743): avc: denied { listen } for pid=18358 comm="syz.0.2801" lport=56371 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1084.991653][T18355] can0 (unregistered): slcan off ttyS3. [ 1085.093626][ T5881] usb 2-1: no configurations [ 1085.121841][ T5881] usb 2-1: can't read configurations, error -22 [ 1085.280238][ T5881] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1085.475382][ T5881] usb 2-1: no configurations [ 1085.749150][T18369] 9pnet: p9_errstr2errno: server reported unknown error  [ 1085.811323][ T5881] usb 2-1: can't read configurations, error -22 [ 1085.924944][ T5881] usb usb2-port1: attempt power cycle [ 1086.376160][ T30] audit: type=1400 audit(2000000160.020:1744): avc: denied { execute } for pid=18362 comm="syz.4.2803" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=70548 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1086.659471][ T5881] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1086.679645][ T6360] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1086.690964][ T5881] usb 2-1: no configurations [ 1086.743111][ T5881] usb 2-1: can't read configurations, error -22 [ 1086.838705][ T30] audit: type=1400 audit(2000000160.480:1745): avc: denied { map } for pid=18362 comm="syz.4.2803" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1086.869371][T18363] binder: 18362:18363 ioctl c0306201 200000000680 returned -14 [ 1086.882774][ T30] audit: type=1400 audit(2000000160.510:1746): avc: denied { call } for pid=18362 comm="syz.4.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1086.905052][ T30] audit: type=1400 audit(2000000160.510:1747): avc: denied { transfer } for pid=18362 comm="syz.4.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1086.926758][ T6360] usb 9-1: config 0 has an invalid interface number: 234 but max is 0 [ 1086.935371][ T6360] usb 9-1: config 0 has no interface number 0 [ 1086.935401][ T5881] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1086.942042][ T6360] usb 9-1: too many endpoints for config 0 interface 234 altsetting 162: 140, using maximum allowed: 30 [ 1086.942095][ T6360] usb 9-1: config 0 interface 234 altsetting 162 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 1086.942123][ T6360] usb 9-1: config 0 interface 234 has no altsetting 0 [ 1086.985639][ T6360] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1087.001553][ T5881] usb 2-1: no configurations [ 1087.007873][ T5881] usb 2-1: can't read configurations, error -22 [ 1087.018098][ T5881] usb usb2-port1: unable to enumerate USB device [ 1087.029660][ T6360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.072378][ T6360] usb 9-1: Product: syz [ 1087.084717][ T6360] usb 9-1: Manufacturer: syz [ 1087.097079][ T6360] usb 9-1: SerialNumber: syz [ 1087.123746][ T6360] usb 9-1: config 0 descriptor?? [ 1087.320031][ T30] audit: type=1400 audit(2000000160.960:1748): avc: denied { bind } for pid=18391 comm="syz.2.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1087.363653][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1087.452780][ T30] audit: type=1400 audit(2000000161.010:1749): avc: denied { create } for pid=18391 comm="syz.2.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1087.476278][ T6360] i2c-tiny-usb 9-1:0.234: version 6d.cc found at bus 009 address 083 [ 1087.499673][ T5881] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1087.509054][ T6360] (null): failure setting delay to 10us [ 1087.529734][ T6360] i2c-tiny-usb 9-1:0.234: probe with driver i2c-tiny-usb failed with error -5 [ 1087.618325][ T6360] usb 9-1: USB disconnect, device number 83 [ 1087.690104][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 1087.697540][ T5881] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1087.711675][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1087.723788][ T5881] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1087.734359][ T5881] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1087.756595][ T30] audit: type=1400 audit(2000000161.400:1750): avc: denied { read write } for pid=18406 comm="syz.8.2814" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1087.757609][ T5881] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1087.793003][ T30] audit: type=1400 audit(2000000161.440:1751): avc: denied { open } for pid=18406 comm="syz.8.2814" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1087.793769][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1087.828788][T17429] hid_parser_main: 28 callbacks suppressed [ 1087.828809][T17429] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1087.857847][T17429] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1087.877725][ T5881] usb 5-1: SerialNumber: syz [ 1087.914388][T17652] udevd[17652]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1087.937052][T18390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1087.939722][T16932] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1087.971238][T18390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1088.067867][T16576] udevd[16576]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1088.151578][T16932] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 1088.165423][T16932] usb 3-1: config 0 has no interface number 0 [ 1088.179612][T16932] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1088.206072][T16932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.216853][ T5813] usb 5-1: USB disconnect, device number 16 [ 1088.244311][T16932] usb 3-1: config 0 descriptor?? [ 1088.479659][ T6360] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1088.490972][T16932] usb 3-1: string descriptor 0 read error: -71 [ 1088.518966][T16932] usb-storage 3-1:0.168: USB Mass Storage device detected [ 1088.558724][T16932] usb-storage 3-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 1088.619822][T16932] usb 3-1: USB disconnect, device number 17 [ 1088.660781][ T6360] usb 9-1: Using ep0 maxpacket: 32 [ 1088.681906][ T6360] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1088.694195][ T6360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.704279][ T6360] usb 9-1: Product: syz [ 1088.709376][ T6360] usb 9-1: Manufacturer: syz [ 1088.715200][ T6360] usb 9-1: SerialNumber: syz [ 1088.720529][ T30] audit: type=1400 audit(2000000162.370:1752): avc: denied { connect } for pid=18430 comm="syz.2.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1088.742983][T18431] 9p: Bad value for 'rfdno' [ 1088.752343][ T30] audit: type=1400 audit(2000000162.400:1753): avc: denied { write } for pid=18430 comm="syz.2.2819" path="socket:[71665]" dev="sockfs" ino=71665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1088.781301][ T6360] usb 9-1: config 0 descriptor?? [ 1088.806673][T18433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'. [ 1088.814938][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1088.831900][ T6360] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1088.863342][ T6360] dvb-usb: bulk message failed: -22 (2/0) [ 1088.879611][ T30] audit: type=1400 audit(2000000162.450:1754): avc: denied { map } for pid=18430 comm="syz.2.2819" path="socket:[71665]" dev="sockfs" ino=71665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1088.912370][ T6360] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1088.935789][ T30] audit: type=1400 audit(2000000162.450:1755): avc: denied { read accept } for pid=18430 comm="syz.2.2819" path="socket:[71665]" dev="sockfs" ino=71665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1088.948106][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1088.961797][ T6360] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1088.991808][ T6360] usb 9-1: media controller created [ 1089.695613][T18443] netlink: 640 bytes leftover after parsing attributes in process `syz.1.2822'. [ 1089.705089][T18443] netlink: 640 bytes leftover after parsing attributes in process `syz.1.2822'. [ 1089.756384][ T30] audit: type=1400 audit(2000000162.490:1756): avc: denied { write } for pid=18432 comm="syz.1.2820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1089.757042][T18412] ubi: mtd0 is already attached to ubi31 [ 1089.779967][ T6360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.785258][ T5881] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1089.799621][ T30] audit: type=1400 audit(2000000162.490:1757): avc: denied { read } for pid=18432 comm="syz.1.2820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1089.841877][ T6360] usb 9-1: selecting invalid altsetting 7 [ 1089.847635][ T6360] cxusb: set interface failed [ 1089.853180][ T6360] dvb-usb: bulk message failed: -22 (1/0) [ 1089.899728][ T6360] DVB: Unable to find symbol lgdt330x_attach() [ 1089.906336][ T6360] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1089.960002][ T5881] usb 5-1: device descriptor read/64, error -71 [ 1089.979651][ T5944] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1089.988008][ T30] audit: type=1400 audit(2000000163.630:1758): avc: denied { wake_alarm } for pid=18444 comm="syz.2.2823" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.011891][ T6360] rc_core: IR keymap rc-dvico-portable not found [ 1090.018290][ T6360] Registered IR keymap rc-empty [ 1090.028887][ T6360] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1090.041081][ T6360] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input35 [ 1090.055449][ T6360] dvb-usb: schedule remote query interval to 100 msecs. [ 1090.063037][ T6360] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1090.159844][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 1090.183628][ T6360] dvb-usb: bulk message failed: -22 (1/0) [ 1090.193624][ T5944] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1090.200101][ T5881] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1090.209576][ T5944] usb 2-1: config 0 has no interface number 0 [ 1090.216473][ T5944] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1090.229131][ T5944] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1090.242994][ T5944] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1090.251567][T18455] fuse: Unknown parameter '00000000000000000000003E' [ 1090.258603][T18455] fuse: Unknown parameter '00000000000000000000003E' [ 1090.266745][ T5944] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1090.276546][T18455] fuse: Unknown parameter '00000000000000000000003E' [ 1090.284452][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.294106][ T5944] usb 2-1: Product: syz [ 1090.302814][ T5944] usb 2-1: Manufacturer: syz [ 1090.307529][ T5944] usb 2-1: SerialNumber: syz [ 1090.329647][ T6360] dvb-usb: bulk message failed: -22 (1/0) [ 1090.340122][ T5881] usb 5-1: device descriptor read/64, error -71 [ 1090.346637][ T5944] usb 2-1: config 0 descriptor?? [ 1090.356188][T18443] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1090.363543][T18443] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1090.436290][ T30] audit: type=1400 audit(2000000164.080:1759): avc: denied { block_suspend } for pid=18460 comm="syz.2.2826" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.461763][ T6360] dvb-usb: bulk message failed: -22 (1/0) [ 1090.462297][ T5881] usb usb5-port1: attempt power cycle [ 1090.538019][ T30] audit: type=1326 audit(2000000164.180:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18462 comm="syz.2.2827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f290d78f749 code=0x0 [ 1090.577125][T18443] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1090.584450][T18443] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1090.593693][ T6360] dvb-usb: bulk message failed: -22 (1/0) [ 1090.595419][ T30] audit: type=1400 audit(2000000164.220:1761): avc: denied { read } for pid=18442 comm="syz.1.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1090.742740][ T6360] dvb-usb: bulk message failed: -22 (1/0) [ 1090.797244][ T5944] Error reading MAC address [ 1090.812774][ T5944] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 1090.830472][ T5881] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1090.843404][ T5944] usb 2-1: USB disconnect, device number 30 [ 1090.927995][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 1091.045470][ T6360] dvb-usb: bulk message failed: -22 (1/0) [ 1091.166210][ T6360] usb 9-1: USB disconnect, device number 84 [ 1091.395338][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 1091.953066][ T6360] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1091.965141][ T5881] usb 5-1: device descriptor read/8, error -71 [ 1092.489749][ T6360] usb 9-1: new full-speed USB device number 85 using dummy_hcd [ 1092.734614][ T6360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1092.825939][ T6360] usb 9-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1092.888654][ T6360] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.017949][ T6360] usb 9-1: config 0 descriptor?? [ 1093.079783][T18473] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1093.713835][ T6360] betop 0003:8380:1850.001B: report_id 1146923772 is invalid [ 1093.723063][ T6360] betop 0003:8380:1850.001B: item 0 4 1 8 parsing failed [ 1093.730710][ T6360] betop 0003:8380:1850.001B: parse failed [ 1093.736633][ T6360] betop 0003:8380:1850.001B: probe with driver betop failed with error -22 [ 1093.771153][T18493] can0: slcan on ttyS3. [ 1093.950346][T18493] can0 (unregistered): slcan off ttyS3. [ 1094.040803][T17074] udevd[17074]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 1095.030545][ T6360] usb 9-1: USB disconnect, device number 85 [ 1095.104521][T18509] netlink: 'syz.4.2839': attribute type 4 has an invalid length. [ 1098.039311][T18513] syz.8.2841 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1098.050913][T18513] CPU: 1 UID: 0 PID: 18513 Comm: syz.8.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.050950][T18513] Tainted: [L]=SOFTLOCKUP [ 1098.050956][T18513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1098.050967][T18513] Call Trace: [ 1098.050979][T18513] [ 1098.050986][T18513] dump_stack_lvl+0x16c/0x1f0 [ 1098.051016][T18513] dump_header+0x101/0x960 [ 1098.051046][T18513] oom_kill_process+0x176/0x910 [ 1098.051074][T18513] out_of_memory+0x350/0x1700 [ 1098.051100][T18513] ? __lock_acquire+0x436/0x2890 [ 1098.051123][T18513] ? __pfx_out_of_memory+0x10/0x10 [ 1098.051155][T18513] mem_cgroup_out_of_memory+0x118/0x130 [ 1098.051173][T18513] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1098.051196][T18513] ? do_raw_spin_unlock+0x172/0x230 [ 1098.051222][T18513] try_charge_memcg+0x695/0xd30 [ 1098.051250][T18513] ? __pfx_try_charge_memcg+0x10/0x10 [ 1098.051277][T18513] ? find_held_lock+0x2b/0x80 [ 1098.051306][T18513] charge_memcg+0x8a/0x230 [ 1098.051329][T18513] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1098.051356][T18513] __read_swap_cache_async+0x397/0x500 [ 1098.051378][T18513] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1098.051396][T18513] ? lock_acquire+0x179/0x330 [ 1098.051415][T18513] ? find_held_lock+0x2b/0x80 [ 1098.051444][T18513] swap_cluster_readahead+0x528/0x770 [ 1098.051463][T18513] ? find_held_lock+0x2b/0x80 [ 1098.051489][T18513] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1098.051509][T18513] ? __queue_work+0x43b/0x10e0 [ 1098.051538][T18513] ? queue_work_on+0x8b/0x1f0 [ 1098.051560][T18513] ? get_vma_policy+0x242/0x3c0 [ 1098.051586][T18513] swapin_readahead+0x160/0x1220 [ 1098.051612][T18513] ? __pfx_swapin_readahead+0x10/0x10 [ 1098.051630][T18513] ? find_held_lock+0x2b/0x80 [ 1098.051653][T18513] ? swap_cache_get_folio+0x267/0x8e0 [ 1098.051668][T18513] ? swap_cache_get_folio+0x267/0x8e0 [ 1098.051683][T18513] ? swap_cache_get_folio+0x267/0x8e0 [ 1098.051700][T18513] ? swap_cache_get_folio+0x267/0x8e0 [ 1098.051715][T18513] ? swap_cache_get_folio+0x293/0x8e0 [ 1098.051732][T18513] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1098.051747][T18513] ? __pfx_get_swap_device+0x10/0x10 [ 1098.051768][T18513] ? rcu_read_unlock+0x2d/0xb0 [ 1098.051788][T18513] ? do_swap_page+0x962/0x64a0 [ 1098.051810][T18513] do_swap_page+0x962/0x64a0 [ 1098.051838][T18513] ? __lock_acquire+0x436/0x2890 [ 1098.051863][T18513] ? __pfx_do_swap_page+0x10/0x10 [ 1098.051890][T18513] ? __pfx_default_wake_function+0x10/0x10 [ 1098.051918][T18513] ? selinux_bpf+0xdd/0x130 [ 1098.051943][T18513] ? rcu_is_watching+0x12/0xc0 [ 1098.051959][T18513] ? ___pte_offset_map+0x175/0x380 [ 1098.051982][T18513] __handle_mm_fault+0x19cb/0x2bb0 [ 1098.052011][T18513] ? reacquire_held_locks+0xcd/0x1f0 [ 1098.052031][T18513] ? __pfx___handle_mm_fault+0x10/0x10 [ 1098.052059][T18513] ? lock_vma_under_rcu+0x176/0x580 [ 1098.052099][T18513] handle_mm_fault+0x3fe/0xad0 [ 1098.052128][T18513] do_user_addr_fault+0x60c/0x1370 [ 1098.052153][T18513] ? rcu_is_watching+0x12/0xc0 [ 1098.052171][T18513] exc_page_fault+0x64/0xc0 [ 1098.052193][T18513] asm_exc_page_fault+0x26/0x30 [ 1098.052208][T18513] RIP: 0033:0x7f4898b8f75b [ 1098.052224][T18513] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 1098.052240][T18513] RSP: 002b:00007f4899a91038 EFLAGS: 00010217 [ 1098.052256][T18513] RAX: 000000000000000c RBX: 00007f4898de6090 RCX: ffffffffffffffa8 [ 1098.052267][T18513] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 0000000000000000 [ 1098.052277][T18513] RBP: 00007f4898c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1098.052286][T18513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.052296][T18513] R13: 00007f4898de6128 R14: 00007f4898de6090 R15: 00007ffd094bc208 [ 1098.052319][T18513] [ 1098.052326][T18513] memory: usage 307200kB, limit 307200kB, failcnt 7340 [ 1098.437255][T18513] memory+swap: usage 367856kB, limit 9007199254740988kB, failcnt 0 [ 1098.446182][T18513] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1098.454655][T18513] Memory cgroup stats for /syz8: [ 1098.455084][T18513] cache 4096 [ 1098.464632][T18513] rss 0 [ 1098.467375][T18513] rss_huge 0 [ 1098.470650][T18513] shmem 4096 [ 1098.474249][T18513] mapped_file 0 [ 1098.478363][T18513] dirty 0 [ 1098.481365][T18513] writeback 0 [ 1098.484627][T18513] workingset_refault_anon 304 [ 1098.489363][T18513] workingset_refault_file 0 [ 1098.494014][T18513] swap 62111744 [ 1098.497459][T18513] swapcached 0 [ 1098.500854][T18513] pgpgin 690963 [ 1098.504288][T18513] pgpgout 690962 [ 1098.507805][T18513] pgfault 508142 [ 1098.511339][T18513] pgmajfault 150 [ 1098.514859][T18513] inactive_anon 0 [ 1098.518539][T18513] active_anon 4096 [ 1098.522244][T18513] inactive_file 0 [ 1098.525934][T18513] active_file 0 [ 1098.529362][T18513] unevictable 0 [ 1098.532839][T18513] hierarchical_memory_limit 314572800 [ 1098.538185][T18513] hierarchical_memsw_limit 9223372036854771712 [ 1098.544351][T18513] total_cache 4096 [ 1098.548052][T18513] total_rss 0 [ 1098.551363][T18513] total_rss_huge 0 [ 1098.555061][T18513] total_shmem 4096 [ 1098.558756][T18513] total_mapped_file 0 [ 1098.562749][T18513] total_dirty 0 [ 1098.566186][T18513] total_writeback 0 [ 1098.570018][T18513] total_workingset_refault_anon 304 [ 1098.575317][T18513] total_workingset_refault_file 0 [ 1098.581372][T18513] total_swap 62111744 [ 1098.586009][T18513] total_swapcached 0 [ 1098.590712][T18513] total_pgpgin 690963 [ 1098.594790][T18513] total_pgpgout 690962 [ 1098.598846][T18513] total_pgfault 508142 [ 1098.602959][T18513] total_pgmajfault 150 [ 1098.607011][T18513] total_inactive_anon 0 [ 1098.611180][T18513] total_active_anon 4096 [ 1098.615785][T18513] total_inactive_file 0 [ 1098.620375][T18513] total_active_file 0 [ 1098.624335][T18513] total_unevictable 0 [ 1098.628386][T18513] anon_cost 0 [ 1098.631692][T18513] file_cost 0 [ 1098.634969][T18513] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2841,pid=18515,uid=0 [ 1098.650668][T18513] Memory cgroup out of memory: Killed process 18515 (syz.8.2841) total-vm:102296kB, anon-rss:1296kB, file-rss:61488kB, shmem-rss:128kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 1200.239489][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1200.246493][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5188/1:b..l P18509/1:b..l P18492/1:b..l [ 1200.257536][ C1] rcu: (detected by 1, t=10503 jiffies, g=94313, q=1330 ncpus=2) [ 1200.265436][ C1] task:syz.0.2837 state:R running task stack:26136 pid:18492 tgid:18488 ppid:18004 task_flags:0x40054c flags:0x00080000 [ 1200.280385][ C1] Call Trace: [ 1200.283652][ C1] [ 1200.286561][ C1] ? __schedule+0x10b9/0x6150 [ 1200.291220][ C1] __schedule+0x1139/0x6150 [ 1200.295709][ C1] ? mark_held_locks+0x49/0x80 [ 1200.300468][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1200.305657][ C1] ? __pfx___schedule+0x10/0x10 [ 1200.310491][ C1] ? unmap_page_range+0x1047/0x43c0 [ 1200.315661][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1200.321007][ C1] preempt_schedule_common+0x44/0xc0 [ 1200.326360][ C1] preempt_schedule_thunk+0x16/0x30 [ 1200.331962][ C1] _raw_spin_unlock+0x3e/0x50 [ 1200.336608][ C1] unmap_page_range+0x1047/0x43c0 [ 1200.341634][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1200.347004][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 1200.351952][ C1] ? uprobe_munmap+0x20/0x600 [ 1200.356748][ C1] unmap_single_vma+0x153/0x240 [ 1200.361662][ C1] unmap_vmas+0x218/0x470 [ 1200.366087][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1200.370920][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 1200.375860][ C1] exit_mmap+0x1b0/0xb60 [ 1200.380088][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1200.384841][ C1] ? __lock_acquire+0x436/0x2890 [ 1200.389783][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 1200.395322][ C1] __mmput+0x12a/0x410 [ 1200.399395][ C1] mmput+0x62/0x70 [ 1200.403107][ C1] do_exit+0x7d7/0x2bd0 [ 1200.407359][ C1] ? __pfx_do_exit+0x10/0x10 [ 1200.413342][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1200.418894][ C1] ? find_held_lock+0x2b/0x80 [ 1200.423840][ C1] do_group_exit+0xd3/0x2a0 [ 1200.428428][ C1] get_signal+0x2671/0x26d0 [ 1200.432950][ C1] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 1200.439127][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1200.444314][ C1] ? __pfx_get_signal+0x10/0x10 [ 1200.449219][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 1200.454755][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1200.460900][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 1200.466204][ C1] do_syscall_64+0x4ee/0xf80 [ 1200.471004][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.476899][ C1] RIP: 0033:0x7f6b2298f749 [ 1200.481296][ C1] RSP: 002b:00007f6b20bcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1200.489784][ C1] RAX: 0000200000000000 RBX: 00007f6b22be6090 RCX: 00007f6b2298f749 [ 1200.497767][ C1] RDX: b635773f06ebbee2 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1200.505722][ C1] RBP: 00007f6b22a13f91 R08: ffffffffffffffff R09: 0000000000000000 [ 1200.513676][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1200.521615][ C1] R13: 00007f6b22be6128 R14: 00007f6b22be6090 R15: 00007ffd86f46358 [ 1200.529582][ C1] [ 1200.532596][ C1] task:syz.4.2839 state:R running task stack:26368 pid:18509 tgid:18507 ppid:17575 task_flags:0x40054c flags:0x00080000 [ 1200.546050][ C1] Call Trace: [ 1200.549304][ C1] [ 1200.552208][ C1] ? __schedule+0x10b9/0x6150 [ 1200.556872][ C1] __schedule+0x1139/0x6150 [ 1200.561359][ C1] ? __pfx___schedule+0x10/0x10 [ 1200.566219][ C1] ? find_held_lock+0x2b/0x80 [ 1200.571371][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1200.576724][ C1] preempt_schedule_common+0x44/0xc0 [ 1200.581995][ C1] preempt_schedule_thunk+0x16/0x30 [ 1200.587167][ C1] _raw_spin_unlock+0x3e/0x50 [ 1200.591817][ C1] unmap_page_range+0x1047/0x43c0 [ 1200.596832][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1200.602182][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 1200.607114][ C1] ? uprobe_munmap+0x20/0x600 [ 1200.611791][ C1] unmap_single_vma+0x153/0x240 [ 1200.616731][ C1] unmap_vmas+0x218/0x470 [ 1200.621053][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1200.625878][ C1] ? mas_next_slot+0x12d3/0x1cb0 [ 1200.630797][ C1] exit_mmap+0x1b0/0xb60 [ 1200.635031][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1200.639791][ C1] ? __lock_acquire+0x436/0x2890 [ 1200.644900][ C1] ? arch_uprobe_clear_state+0x16/0x150 [ 1200.650460][ C1] __mmput+0x12a/0x410 [ 1200.654527][ C1] mmput+0x62/0x70 [ 1200.658265][ C1] do_exit+0x7d7/0x2bd0 [ 1200.662400][ C1] ? __pfx_do_exit+0x10/0x10 [ 1200.666961][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1200.671961][ C1] ? find_held_lock+0x2b/0x80 [ 1200.676624][ C1] do_group_exit+0xd3/0x2a0 [ 1200.681102][ C1] get_signal+0x2671/0x26d0 [ 1200.685592][ C1] ? __pfx_futex_wake+0x10/0x10 [ 1200.690414][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1200.695501][ C1] ? __pfx_get_signal+0x10/0x10 [ 1200.700333][ C1] ? do_futex+0x122/0x350 [ 1200.704705][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 1200.710263][ C1] ? sock_ioctl+0x3a9/0x6b0 [ 1200.714864][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1200.721017][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1200.726307][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 1200.731588][ C1] do_syscall_64+0x4ee/0xf80 [ 1200.736176][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.742071][ C1] RIP: 0033:0x7fd7bc58f749 [ 1200.746478][ C1] RSP: 002b:00007fd7bd4a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1200.754870][ C1] RAX: 0000000000000001 RBX: 00007fd7bc7e5fa8 RCX: 00007fd7bc58f749 [ 1200.762889][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd7bc7e5fac [ 1200.772093][ C1] RBP: 00007fd7bc7e5fa0 R08: 00007fd7bd4a4000 R09: 0000000000000000 [ 1200.780151][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1200.788194][ C1] R13: 00007fd7bc7e6038 R14: 00007ffffe105d50 R15: 00007ffffe105e38 [ 1200.796161][ C1] [ 1200.799154][ C1] task:udevd state:R running task stack:24760 pid:5188 tgid:5188 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1200.812593][ C1] Call Trace: [ 1200.815844][ C1] [ 1200.818754][ C1] ? __schedule+0x10b9/0x6150 [ 1200.823432][ C1] __schedule+0x1139/0x6150 [ 1200.827941][ C1] ? __pfx___schedule+0x10/0x10 [ 1200.832980][ C1] ? mark_held_locks+0x49/0x80 [ 1200.837745][ C1] preempt_schedule_irq+0x51/0x90 [ 1200.842764][ C1] irqentry_exit+0x1d8/0x8c0 [ 1200.847339][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1200.853302][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 1200.859203][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 bd ee 0e 0f 82 74 02 00 00 8b 35 ba ed ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 1200.881446][ C1] RSP: 0018:ffffc9000472f400 EFLAGS: 00000206 [ 1200.888235][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000a5d9cb75 [ 1200.896294][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7f9d RDI: ffffffff8bf2b380 [ 1200.904239][ C1] RBP: 0000000000000002 R08: 000000003371a240 R09: 0000000003371a24 [ 1200.912468][ C1] R10: 0000000000000002 R11: ffff88807cc354b0 R12: 0000000000000000 [ 1200.920444][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1200.928461][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 1200.933733][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1200.939863][ C1] unwind_next_frame+0xd1/0x20b0 [ 1200.944774][ C1] ? unwind_next_frame+0xbd/0x20b0 [ 1200.949858][ C1] ? kobject_synth_uevent+0x7d4/0x8a0 [ 1200.955222][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1200.961345][ C1] arch_stack_walk+0x94/0x100 [ 1200.965995][ C1] ? kobject_synth_uevent+0x7d4/0x8a0 [ 1200.971342][ C1] stack_trace_save+0x8e/0xc0 [ 1200.975988][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1200.981330][ C1] kasan_save_stack+0x33/0x60 [ 1200.985998][ C1] ? kasan_save_stack+0x33/0x60 [ 1200.990857][ C1] ? kasan_save_track+0x14/0x30 [ 1200.995698][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 1201.000697][ C1] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 1201.006350][ C1] ? skb_clone+0x190/0x3f0 [ 1201.010779][ C1] ? netlink_broadcast_filtered+0xb76/0xf90 [ 1201.016674][ C1] ? netlink_broadcast+0x39/0x50 [ 1201.021601][ C1] ? kobject_uevent_env+0xcbc/0x1920 [ 1201.026887][ C1] ? kobject_synth_uevent+0x7d4/0x8a0 [ 1201.032286][ C1] kasan_save_track+0x14/0x30 [ 1201.037066][ C1] __kasan_slab_alloc+0x89/0x90 [ 1201.042082][ C1] kmem_cache_alloc_noprof+0x25e/0x770 [ 1201.047563][ C1] ? skb_clone+0x190/0x3f0 [ 1201.051995][ C1] ? skb_clone+0x190/0x3f0 [ 1201.056423][ C1] skb_clone+0x190/0x3f0 [ 1201.060838][ C1] netlink_broadcast_filtered+0xb76/0xf90 [ 1201.066855][ C1] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1201.073104][ C1] ? sprintf+0xcc/0x100 [ 1201.077253][ C1] ? netlink_has_listeners+0x20f/0x430 [ 1201.082687][ C1] netlink_broadcast+0x39/0x50 [ 1201.087423][ C1] kobject_uevent_env+0xcbc/0x1920 [ 1201.092619][ C1] ? __lock_acquire+0x436/0x2890 [ 1201.098053][ C1] kobject_synth_uevent+0x7d4/0x8a0 [ 1201.103389][ C1] ? __pfx_kobject_synth_uevent+0x10/0x10 [ 1201.109153][ C1] ? find_held_lock+0x2b/0x80 [ 1201.113841][ C1] ? __pfx_uevent_store+0x10/0x10 [ 1201.119015][ C1] uevent_store+0x24/0x80 [ 1201.123441][ C1] dev_attr_store+0x58/0x80 [ 1201.128230][ C1] ? __pfx_dev_attr_store+0x10/0x10 [ 1201.134498][ C1] sysfs_kf_write+0xf2/0x150 [ 1201.141506][ C1] kernfs_fop_write_iter+0x3af/0x570 [ 1201.147074][ C1] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1201.152290][ C1] vfs_write+0x7d3/0x11d0 [ 1201.156721][ C1] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1201.162643][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1201.167728][ C1] ? __pfx___do_sys_newfstat+0x10/0x10 [ 1201.173309][ C1] ksys_write+0x12a/0x250 [ 1201.177637][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1201.182749][ C1] do_syscall_64+0xcd/0xf80 [ 1201.187708][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.193640][ C1] RIP: 0033:0x7f9610aa7407 [ 1201.198058][ C1] RSP: 002b:00007ffeb9a2ad20 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1201.206658][ C1] RAX: ffffffffffffffda RBX: 00007f96111f7880 RCX: 00007f9610aa7407 [ 1201.214620][ C1] RDX: 0000000000000007 RSI: 000055a0e8f94dd0 RDI: 000000000000000c [ 1201.222575][ C1] RBP: 000055a0e8f94dd0 R08: 0000000000000000 R09: 0000000000000000 [ 1201.230762][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000007 [ 1201.238827][ C1] R13: 000055a0e8f8e1e0 R14: 00007f9610befea0 R15: 00007ffeb9a2b060 [ 1201.246822][ C1] [ 1201.250621][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g94313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1201.262703][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1201.272858][ C1] rcu: RCU grace-period kthread stack dump: [ 1201.278741][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1201.292354][ C1] Call Trace: [ 1201.295661][ C1] [ 1201.298620][ C1] ? __schedule+0x10b9/0x6150 [ 1201.303598][ C1] __schedule+0x1139/0x6150 [ 1201.308696][ C1] ? __pfx___schedule+0x10/0x10 [ 1201.313637][ C1] ? find_held_lock+0x2b/0x80 [ 1201.318337][ C1] ? schedule+0x2d7/0x3a0 [ 1201.322677][ C1] schedule+0xe7/0x3a0 [ 1201.326747][ C1] schedule_timeout+0x123/0x290 [ 1201.332041][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1201.338133][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1201.343452][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1201.349312][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1201.354833][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1201.359870][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1201.365189][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1201.371396][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1201.376893][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 1201.382652][ C1] rcu_gp_kthread+0x26d/0x380 [ 1201.387452][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1201.392957][ C1] ? rcu_is_watching+0x12/0xc0 [ 1201.397754][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1201.403176][ C1] ? __kthread_parkme+0x19e/0x250 [ 1201.408317][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1201.413543][ C1] kthread+0x3c5/0x780 [ 1201.417632][ C1] ? __pfx_kthread+0x10/0x10 [ 1201.422406][ C1] ? rcu_is_watching+0x12/0xc0 [ 1201.427356][ C1] ? __pfx_kthread+0x10/0x10 [ 1201.431983][ C1] ret_from_fork+0x983/0xb10 [ 1201.437362][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1201.442835][ C1] ? __switch_to+0x7af/0x10d0 [ 1201.447879][ C1] ? __pfx_kthread+0x10/0x10 [ 1201.452676][ C1] ret_from_fork_asm+0x1a/0x30 [ 1201.457491][ C1] [ 1201.460732][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1201.467348][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1201.472918][ C0] NMI backtrace for cpu 0 [ 1201.472937][ C0] CPU: 0 UID: 0 PID: 18516 Comm: syz.8.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 1201.472960][ C0] Tainted: [L]=SOFTLOCKUP [ 1201.472965][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1201.472973][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 1201.472992][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 4b 5d b0 f5 cc [ 1201.473006][ C0] RSP: 0000:ffffc9000437ebe8 EFLAGS: 00000246 [ 1201.473019][ C0] RAX: 0000000000080000 RBX: ffff888140463eb8 RCX: ffffc9001c5cb000 [ 1201.473029][ C0] RDX: 0000000000080000 RSI: ffffffff82004bd1 RDI: 0000000000000005 [ 1201.473037][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 1201.473045][ C0] R10: 0000000000000004 R11: ffff888079d7d4b0 R12: 0000000000000000 [ 1201.473054][ C0] R13: 0000000000000023 R14: 0000000000000004 R15: ffff888140463a08 [ 1201.473063][ C0] FS: 00007f4899a4f6c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1201.473079][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1201.473088][ C0] CR2: 0000555575f8c4a8 CR3: 0000000028f3a000 CR4: 00000000003526f0 [ 1201.473097][ C0] Call Trace: [ 1201.473103][ C0] [ 1201.473108][ C0] try_to_shrink_lruvec+0x421/0x9b0 [ 1201.473136][ C0] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 1201.473159][ C0] shrink_lruvec+0x312/0x2b00 [ 1201.473179][ C0] ? __lock_acquire+0x436/0x2890 [ 1201.473196][ C0] ? xa_load+0x153/0x2c0 [ 1201.473214][ C0] ? __pfx_xa_load+0x10/0x10 [ 1201.473233][ C0] ? __pfx_shrink_lruvec+0x10/0x10 [ 1201.473253][ C0] ? find_held_lock+0x2b/0x80 [ 1201.473273][ C0] ? do_shrink_slab+0xa9f/0x1130 [ 1201.473293][ C0] ? shrink_slab+0x54d/0x12b0 [ 1201.473312][ C0] ? __pfx___might_resched+0x10/0x10 [ 1201.473325][ C0] ? page_counter_calculate_protection+0x23/0x720 [ 1201.473347][ C0] ? mem_cgroup_iter+0x38a/0x710 [ 1201.473366][ C0] shrink_node+0x8a6/0x3bb0 [ 1201.473385][ C0] ? __lock_acquire+0x436/0x2890 [ 1201.473410][ C0] ? __pfx_shrink_node+0x10/0x10 [ 1201.473431][ C0] ? queue_work_on+0x12a/0x1f0 [ 1201.473448][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1201.473465][ C0] ? queue_work_on+0x8b/0x1f0 [ 1201.473482][ C0] ? vmpressure+0x2b9/0x340 [ 1201.473495][ C0] ? do_try_to_free_pages+0x362/0x1920 [ 1201.473516][ C0] do_try_to_free_pages+0x362/0x1920 [ 1201.473541][ C0] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1201.473565][ C0] try_to_free_mem_cgroup_pages+0x31b/0x740 [ 1201.473579][ C0] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 1201.473598][ C0] ? psi_memstall_enter+0x225/0x310 [ 1201.473610][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1201.473628][ C0] try_charge_memcg+0x42a/0xd30 [ 1201.473647][ C0] ? __pfx_try_charge_memcg+0x10/0x10 [ 1201.473667][ C0] ? find_held_lock+0x2b/0x80 [ 1201.473687][ C0] charge_memcg+0x8a/0x230 [ 1201.473704][ C0] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1201.473726][ C0] __read_swap_cache_async+0x397/0x500 [ 1201.473742][ C0] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1201.473761][ C0] swap_cluster_readahead+0x528/0x770 [ 1201.473777][ C0] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1201.473793][ C0] ? find_held_lock+0x2b/0x80 [ 1201.473816][ C0] ? get_vma_policy+0x242/0x3c0 [ 1201.473835][ C0] swapin_readahead+0x160/0x1220 [ 1201.473853][ C0] ? __pfx_swapin_readahead+0x10/0x10 [ 1201.473867][ C0] ? find_held_lock+0x2b/0x80 [ 1201.473885][ C0] ? swap_cache_get_folio+0x267/0x8e0 [ 1201.473897][ C0] ? swap_cache_get_folio+0x267/0x8e0 [ 1201.473909][ C0] ? swap_cache_get_folio+0x267/0x8e0 [ 1201.473922][ C0] ? swap_cache_get_folio+0x267/0x8e0 [ 1201.473935][ C0] ? swap_cache_get_folio+0x293/0x8e0 [ 1201.473948][ C0] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1201.473961][ C0] ? __pfx_get_swap_device+0x10/0x10 [ 1201.473978][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1201.473992][ C0] ? do_swap_page+0x962/0x64a0 [ 1201.474011][ C0] do_swap_page+0x962/0x64a0 [ 1201.474031][ C0] ? __lock_acquire+0x436/0x2890 [ 1201.474048][ C0] ? __pfx_do_swap_page+0x10/0x10 [ 1201.474068][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 1201.474090][ C0] ? selinux_bpf+0xdd/0x130 [ 1201.474104][ C0] ? rcu_is_watching+0x12/0xc0 [ 1201.474118][ C0] ? ___pte_offset_map+0x175/0x380 [ 1201.474135][ C0] __handle_mm_fault+0x19cb/0x2bb0 [ 1201.474156][ C0] ? reacquire_held_locks+0xcd/0x1f0 [ 1201.474172][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1201.474193][ C0] ? lock_vma_under_rcu+0x176/0x580 [ 1201.474219][ C0] handle_mm_fault+0x3fe/0xad0 [ 1201.474240][ C0] do_user_addr_fault+0x60c/0x1370 [ 1201.474259][ C0] ? rcu_is_watching+0x12/0xc0 [ 1201.474272][ C0] exc_page_fault+0x64/0xc0 [ 1201.474289][ C0] asm_exc_page_fault+0x26/0x30 [ 1201.474303][ C0] RIP: 0033:0x7f4898b8f75b [ 1201.474316][ C0] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 1201.474329][ C0] RSP: 002b:00007f4899a4f038 EFLAGS: 00010217 [ 1201.474340][ C0] RAX: 000000000000000c RBX: 00007f4898de6270 RCX: ffffffffffffffa8 [ 1201.474365][ C0] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000 [ 1201.474374][ C0] RBP: 00007f4898c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1201.474382][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.474390][ C0] R13: 00007f4898de6308 R14: 00007f4898de6270 R15: 00007ffd094bc208 [ 1201.474409][ C0] [ 1202.659829][ C0] net_ratelimit: 213 callbacks suppressed [ 1202.659853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog