last executing test programs: 21m35.223802352s ago: executing program 3 (id=1362): socket$nl_rdma(0x10, 0x3, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000002c0)=[{0xff, 0x5, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/146, 0xb}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x8010) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r4, 0x8, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x60}}, 0x2000a051) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000080)="74fe", 0x2, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x71a2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x70, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x89, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) socketpair(0x1d, 0x0, 0xfffffbff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x541001, 0x0) 21m32.941148671s ago: executing program 3 (id=1370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0x14c, 0x10, 0x100, 0xbffffffd, 0x100, {{@in6=@private1, @in6=@private0, 0x1, 0x314, 0x4e21, 0x9, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x3, 0xffff, 0x8251c, 0x2, 0xffffeffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfc, 0x20}, [@algo_comp={0x5c, 0x3, {{'deflate\x00'}, 0xa0, "2316fad0ff50ef52d77b4f4acb812988403b8d1f"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000030000000000000000000000000004000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002a132b79aa3500000a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0xe, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r4, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r8, 0xffffffffffffffff, 0x7, 0x2000, 0x0, @value=r9, @void, @void, @void, r7}, 0x20) r10 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r10) r11 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r11, 0x4004662b, &(0x7f00000001c0)) 21m32.256147118s ago: executing program 4 (id=1372): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0xfffd, 0x1005, @mcast1, 0x8676}}}, 0x88) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x405480) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x10000) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60807fdf00081100fc010000000000000000000000000000ff020000000000000000000000000023fffe0e2800089078"], 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x70bd2d, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdlo=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=fscache,cachetag=']) shutdown(0xffffffffffffffff, 0x1) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x20000080) socket(0x10, 0x3, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21m31.939941731s ago: executing program 3 (id=1373): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB="7472d32d89d172646d612c706f72742d3078303030303030303030303030346532332c73713d3078423030303030303030303030303030622c00"]) madvise(&(0x7f0000c2a000/0x2000)=nil, 0x2000, 0x17) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000480)) r4 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x1) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(r2, 0x0, &(0x7f0000000000), 0x80000) r5 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f054071040403851099c300010902b901010000003f0904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 21m29.776808187s ago: executing program 4 (id=1381): write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r4) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc040080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="11b053c38200fbdbdf25010000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008984) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r6, 0x40187014, &(0x7f0000000180)) 21m28.842593322s ago: executing program 4 (id=1383): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r0, 0x59710000) write$UHID_INPUT(r0, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b43959b649a040d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee707788dfea427a9e6bb9ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9fd94c63a06f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc682a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee00008897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065e884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000", @ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0xb285f305e6b16ca5) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000080)={[{}]}) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21m28.251599269s ago: executing program 3 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="681d000010000395f5b05cca", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYRES8=r0, @ANYRES32=r0], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21m27.968071036s ago: executing program 3 (id=1388): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4b, 0x20, 0xe, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x7, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0xff, 0x6, 0xf}}]}}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x440a}}, {0x0, 0x0}, {0x0, 0x0}, {0x31, &(0x7f0000000340)=ANY=[@ANYBLOB="3103f9d2308de844daf0cc4d1382e357bf8faaca68e5e0255b42000b10fe6a5fc652851c71d45702c6040f2643f71fe41b8347b1678720de04ed3ad65cb284b31bfb2214f7511ab2db1e06983e990f0f786067d3eaeacee14c2506da7fb4060a2057ea98ec665ba901bad9334e939b0e3c7a1a55f6c974553c268f9b25a73e21eaf479e9d1d4de2cae7aafdfa70ce52b40bb22f6c20c8efdffe6f1216d7e14ea79082bba159de2a0aaa94cfca5d16fb48098a191e2079a1fb51af9846a81ab737a67d03321edff20a70d563a7eecff87d93a823448cd3c80540505b866e6a506b358a7978c82de50a77fd8"]}, {0x52, &(0x7f0000000800)=@string={0x52, 0x3, "0a9a57f2272c4a0cf9c319e0b2704c422e728816603324d267d373d6ce3ad7ebd7652628d228f755e4d9f3a57f0efe90a3361d60aa6ee4e5315e5d5531d82a62ce368d1f9ec7b7e9e342c06cfbd84929"}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x18, 0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x7b9, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x7, 0x93}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x13, 0x8, "2ea611fcb8d9bff768a6d40a238d39"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3237d5ac9ee38d}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}}, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 21m27.663969944s ago: executing program 4 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3e2ca000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz0\x00', {0x0, 0x10, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0xeaef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1], [0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffa, 0x401, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a1, 0x20000], [0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x101082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x2008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 21m26.781857328s ago: executing program 4 (id=1391): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000064a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x4, 0x0, 0x0) 21m25.161651412s ago: executing program 4 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x9) 21m23.875729296s ago: executing program 3 (id=1396): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcb, 0x27, 0x28, 0x10, 0x2717, 0x4106, 0x2892, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0x68, 0x8}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x11, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbf9, {0xa, 0x0, 0x20, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 20m42.397816654s ago: executing program 32 (id=1395): write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f00000006c0)=0x400, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r5) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc040080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="11b053c38200fbdbdf25010000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008984) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x100000000000001, 0x0, 0x4, 0x80, 0x0, "8955f60876b2ff00", 0x0, 0x3}) ioctl$RTC_ALM_READ(r7, 0x40187014, &(0x7f0000000180)) 20m42.254849438s ago: executing program 33 (id=1397): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$vim2m(&(0x7f0000000040), 0x40008, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f00000195c0)=""/102365, 0xfffffe80) syz_open_dev$dmmidi(0x0, 0x2, 0x181083) syz_open_dev$video(&(0x7f0000000440), 0x3ff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000ff0e00000000000002000900400000007026405ea9be49fa0300060000000000020032cd44500000000000000000000002000100000004d307000000000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) 20m42.186157919s ago: executing program 34 (id=1394): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, 0x0, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f00000003c0)={0x1}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000015001001800a48f634d47a6961280080001011d00", @ANYRES32, @ANYBLOB='\b\x00\n', @ANYRES32=r10, @ANYBLOB], 0x40}}, 0x2400c080) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x1b0, 0x12, 0x60a, 0x0, 0x202, 0x288, 0x2e8, 0x2e8, 0x288, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @private}, [0x0, 0x0, 0x0, 0xff000000], [], 'virt_wifi0\x00', 'veth0_to_team\x00', {}, {}, 0x38}, 0x0, 0x180, 0x1b0, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x5, 0x0, [0x2, 0xec, 0x2228, 0x1, 0x8001, 0x57, 0x40, 0x10, 0x5, 0x6, 0xdafc, 0x9, 0x2, 0xe8b, 0x4, 0x6], 0xe}}, @common=@srh1={{0x90}, {0xc, 0x5, 0x3, 0xa, 0xf, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, [0x0, 0xffffffff, 0xff, 0xff], [0xff000000, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff, 0xff], 0x8a5, 0x263}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x20}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x39e2, 0x1, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x458, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0xff, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xffffff00, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x14, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @common=@ipv6header={{0x28}, {0x21, 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0x40}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r11, 0x29, 0xcf, &(0x7f00000000c0)=0x4, 0x4) 20m42.054678065s ago: executing program 35 (id=1396): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcb, 0x27, 0x28, 0x10, 0x2717, 0x4106, 0x2892, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0x68, 0x8}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x11, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x2d2c6d60ea1da725, 0x70bd27, 0x25dfdbf9, {0xa, 0x0, 0x20, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'team_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 20m41.985327228s ago: executing program 36 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f080000030300010000000000450a00280068000005069078ac1e0301ffffffff4e204e21", @ANYRES32=0x41424344], 0xfce) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x9) 14m28.186755647s ago: executing program 9 (id=2529): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x41) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40106fffd0180090502"], 0x0) fsmount(r0, 0x0, 0x7a) 14m26.279407171s ago: executing program 9 (id=2538): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0x4, 0x101, 0x8, 0x200, 0x3d, 0x5c, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x400003, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0x2000003, 0x5, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffff9, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x400002, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xa, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1412, 0x0, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) 14m26.214654911s ago: executing program 9 (id=2539): syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000003e2066aab8dcb86dd604dc58c00180600fe80000000000000000000000000001afe8000000000000000000000000000aafffe4401", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6012fffd9078000005020000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 14m25.967699862s ago: executing program 9 (id=2541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x2b, 0x80801, 0x1) syz_io_uring_setup(0x575, &(0x7f0000000180)={0x0, 0x8006d85, 0x40, 0x2, 0x200118}, &(0x7f00000000c0), &(0x7f0000000100)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000340)={0x1, 0x0, [{0x7, 0x4, 0x0, 0x0, @irqchip={0x8, 0x81}}]}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0xce, [0x0, 0x7, 0x20010, 0x9, 0xfffffffffffffffb, 0x7fffffffffffffff], 0x0, &(0x7f00000002c0), &(0x7f0000000080)=""/206}, &(0x7f0000000240)=0x78) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x100) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x4, 0x2}, {}, @ext={0x0, 0x0}}, {0x10, 0x0, 0xe, 0x0, @tick=0x1, {}, {}, @raw8={"4e75ffd80c3c64c130a509f3"}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4, {0x6}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @result={0x7f}}], 0x70) 14m21.267641048s ago: executing program 9 (id=2551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x208, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x109, 0x1, 0x1}}, @common=@inet=@set1={{0x28}, {{0xffffffffffffffff, 0x3, 0x1}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x1}, {0xffffffffffffffff, 0x1, 0x1}, {0x0, 0x4, 0x4}, 0x3, 0x4}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0xcc0, 0x10, 0x0, 0x1}}, @common=@set={{0x40}, {{0x0, [0x4, 0x2, 0x0, 0x3, 0x4, 0x2], 0x6, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "ccc3"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b91f, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x7, 0x205, 0x1, 0xc}, 0xb, 0x800, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x5, {0xffff1c7a, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 14m20.755994161s ago: executing program 9 (id=2552): sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3fe) io_uring_enter(0xffffffffffffffff, 0x20fb, 0x30e3, 0x1c, &(0x7f00000001c0)={[0x2]}, 0x8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000340), &(0x7f00000002c0)="bb5ad7257ca96cecb81ae52b1e756da30c9aa0f7b5fdf667238e69bfcd795aa6e4ad2362ca96064523fc391e801b9ed3ba3364d87a6658ad5ab09084c06fb3", 0x3f, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) syz_usb_connect(0x0, 0x6e, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="500000001000e800000000000000", @ANYBLOB="a5f9ad8800000000300012800b00010067656e65766500002000028008000200e000000114000700ff010000000000000000000000000001", @ANYRESDEC], 0x50}}, 0x8080) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r6, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300000002cd02aafd000000000000000000004405000100060000007a3100000000050005000300000016000300686173683a6e65742c706f72742c6e65700000000000000000fffffffffffffffd00596623853117f19340e5a0b91471da5bbeff8a94e30678393ee66e5f1a27c200d496a41e"], 0x50}, 0x1, 0x0, 0x0, 0x110}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 14m19.468706128s ago: executing program 37 (id=2552): sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3fe) io_uring_enter(0xffffffffffffffff, 0x20fb, 0x30e3, 0x1c, &(0x7f00000001c0)={[0x2]}, 0x8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001040)) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000340), &(0x7f00000002c0)="bb5ad7257ca96cecb81ae52b1e756da30c9aa0f7b5fdf667238e69bfcd795aa6e4ad2362ca96064523fc391e801b9ed3ba3364d87a6658ad5ab09084c06fb3", 0x3f, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) syz_usb_connect(0x0, 0x6e, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="500000001000e800000000000000", @ANYBLOB="a5f9ad8800000000300012800b00010067656e65766500002000028008000200e000000114000700ff010000000000000000000000000001", @ANYRESDEC], 0x50}}, 0x8080) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r6, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="0300000002cd02aafd000000000000000000004405000100060000007a3100000000050005000300000016000300686173683a6e65742c706f72742c6e65700000000000000000fffffffffffffffd00596623853117f19340e5a0b91471da5bbeff8a94e30678393ee66e5f1a27c200d496a41e"], 0x50}, 0x1, 0x0, 0x0, 0x110}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m28.678492226s ago: executing program 0 (id=5341): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') read$FUSE(r0, 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x431, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x6292d1f7, 0x4) 2m28.552770807s ago: executing program 0 (id=5343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xf, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xd, 0x40}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0e8}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m27.755261199s ago: executing program 0 (id=5347): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000007c0000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3024000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 2m27.503578509s ago: executing program 0 (id=5350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r10, 0x1c}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) 2m26.312962955s ago: executing program 0 (id=5354): shutdown(0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22483, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff1100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 2m26.149003602s ago: executing program 0 (id=5355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="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", 0xfd0}], 0x1}, 0x20000000) sendto$packet(r2, &(0x7f00000001c0)="55c598a0cc11ac2dfe46a522c8b69f9c", 0x10, 0x8010, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x52102, 0x1c1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendfile(r3, r3, 0x0, 0x20000000004) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r3}, 0x18) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x109100, 0x0) ioctl$SNDCTL_MIDI_INFO(r4, 0xc074510c, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m10.891087807s ago: executing program 38 (id=5355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)="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", 0xfd0}], 0x1}, 0x20000000) sendto$packet(r2, &(0x7f00000001c0)="55c598a0cc11ac2dfe46a522c8b69f9c", 0x10, 0x8010, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x52102, 0x1c1) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) sendfile(r3, r3, 0x0, 0x20000000004) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r3}, 0x18) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x109100, 0x0) ioctl$SNDCTL_MIDI_INFO(r4, 0xc074510c, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m6.486667542s ago: executing program 8 (id=5420): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002205000000"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3a00000000080005400000001c08000a4000000000080003400000004008000f"], 0x12b4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x6, 0x2, &(0x7f00000002c0)={0x96, "79b8142115db2c05f171f5306cef4870ae7ef9335b6e140c0afd2077a025abe98e"}}) 2m3.327417512s ago: executing program 8 (id=5430): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) (async) r0 = syz_clone(0x800, &(0x7f0000000340)="c9bed140d47b65242901dec5cf0ffecbbc89a825465145fe1ad6733f26fc6fe716e43a0ab9ffc271c4ab5200037fd80726e842ebb253b7d57914c7bab25cfda16c377a858f91d1668b433afbdc3aa663032b52ff31711c74bd1e790951ceeb5f9ac1777a6a30a2612dd92d635e1d78ac1d2eefe3e2c3595942bf61851a446981d99e6f88aaf058f3afaf24021963a592e38ee20cecce3ee1643cbaf5ee0cdc98ea883b83d4baecc018fabd535bda43d8275e498e36ce165a8b45a4334d12005572c35e136c8823020d1ceb045fbc2183f64d1b3d6296bf7f88bcd12f66603961d5ea65e9", 0xe4, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000440)="e799c66c7114fdf4fcdf701c007f213dcd5b7ba5ebb70b57e07c38604bbc99807d3a117882cbfdfe4cb9516216be5038cb01a2fc8ce5d88806c7546bb3a32d3c01f10ee0a76e2f4506002ea3570177145da76e1bb8c3c9470b36ee53de25f28088a2a6e41c8eec71dffbee89355c91378f18751b847b7bda851d9339e1c2a14e9cdb6125cbe08b858fd19fbb4002e1a14d59f9f2cd2e120db482d3af9b9c259385b0341136e0b9e93110b54899a7") prlimit64(r0, 0x9, &(0x7f0000000140)={0x2000000000001000, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/199, 0xc7}, {&(0x7f0000000600)=""/250, 0xfa}, {&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f00000001c0)=""/22, 0x16}], 0x4, &(0x7f0000000800)=""/36, 0x24}, 0x80}, {{&(0x7f0000000840)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/29, 0x1d}], 0x1, &(0x7f0000000940)=""/74, 0x4a}, 0x1}, {{&(0x7f00000009c0)=@isdn, 0x80, &(0x7f0000004e80)=[{&(0x7f0000000a40)=""/195, 0xc3}, {&(0x7f0000000b40)=""/83, 0x53}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/80, 0x50}, {&(0x7f0000004c40)=""/15, 0xf}, {&(0x7f0000004c80)=""/236, 0xec}, {&(0x7f0000004d80)=""/193, 0xc1}], 0xa, &(0x7f0000004f40)=""/171, 0xab}, 0xc8}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000005000)=""/158, 0x9e}, {&(0x7f00000050c0)=""/208, 0xd0}, {&(0x7f00000051c0)=""/22, 0x16}, {&(0x7f0000005200)=""/23, 0x17}, {&(0x7f0000005240)=""/42, 0x2a}, {&(0x7f0000005280)=""/113, 0x71}, {&(0x7f0000005300)=""/108, 0x6c}, {&(0x7f0000005380)=""/137, 0x89}, {&(0x7f0000005440)=""/33, 0x21}], 0x9, &(0x7f0000005540)=""/239, 0xef}, 0x2}], 0x4, 0x2, 0x0) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) (async) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknod$loop(0x0, 0x8000, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000, 0x21) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x9) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788", 0xc, 0x4, 0x0, 0x0) 2m2.004475783s ago: executing program 8 (id=5435): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005540)={'nicvf0\x00'}) fcntl$setlease(r1, 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000003340)={0x2020}, 0x2020) openat$null(0xffffffffffffff9c, &(0x7f0000005380), 0x20000, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f00000053c0), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r5 = socket(0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setresuid(0x0, 0xee00, 0xee01) fanotify_init(0x20, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) 2m1.134335005s ago: executing program 8 (id=5441): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000001c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x121c80) 1m58.128982776s ago: executing program 8 (id=5450): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt(0xffffffffffffffff, 0x84, 0x80000084, &(0x7f0000000280)="0000000000000002", 0x8) sendto$inet6(r0, &(0x7f00000000c0)="06d20d1abdcf178b0d7c323ab4626a79f2b0be668fef408a6032cf4bed01f3c33d62c94ad3d25753c9d73b02460a99b76b94432954fcd424f3c9b8ddfd1626cd6c3d95cc9bb60c", 0x47, 0x54, &(0x7f0000000140)={0xa, 0x4e22, 0x80, @mcast1, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0xca) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000240)={0x1, 0x96d, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000001580)=ANY=[@ANYRES32=r4, @ANYRESDEC=r6, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESDEC=r4, @ANYRES32=r2, @ANYRES32=r8, @ANYRES16, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x8819) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000000), 0xc, 0x101000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) 1m58.014050732s ago: executing program 8 (id=5451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000000, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x0, 0x800000]}) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) r4 = dup2(r2, r2) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r6, 0x0, 0x0, 0x24008011, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0xf, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7897158b}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000000)={0xf3fd, 0x81, 0x8001, 0xc4a1, 0x15, 0x80}) 1m42.664153974s ago: executing program 39 (id=5451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80000000, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x0, 0x800000]}) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) r4 = dup2(r2, r2) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r6, 0x0, 0x0, 0x24008011, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0xf, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7897158b}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40206417, &(0x7f0000000000)={0xf3fd, 0x81, 0x8001, 0xc4a1, 0x15, 0x80}) 13.951080345s ago: executing program 1 (id=5715): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x48, r6, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) process_mrelease(0xffffffffffffffff, 0x2) unshare(0x40020000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r0, 0x1, 0x8) fchdir(r7) 10.856709839s ago: executing program 1 (id=5721): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff5f2624e908b2e6a832261431b850ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe8800000000000000000000000002b38f004e0000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xc0c0c0c0}) shutdown(r4, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac141400100016800c00018008000100", @ANYRES32, @ANYBLOB="08001e00af3900000600150004000000cd43cdfb859626bc880f03af8842f4fe90c7cadfdfa70af69a6070b8e71b360d666dc89fbb6605e3dc5c68f7f61a37777c6a73a2607b7ba458a23fc2d4c299e051fc29917412ce5c46430f8cdec617e74d3ced0c95899e4271669559155d35cd83718fe65b80d207045051efe1c7aa2771e123ce4a3d810fbe273ef055e8e0c73e11c9275d160d0e9aca35a00ce94c81fe1afe31f8c032e3bb04d16802966abbe545ae8694a5f3059b9cf6cc102d722334"], 0x44}}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x44, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 8.405858817s ago: executing program 2 (id=5726): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000ffff0f003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000010"], 0x0, 0x56}, 0x20) 8.137605484s ago: executing program 2 (id=5727): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x80, r4, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x4, 0x3}, @value=@ver_80211n={0x0, 0x7ffe}}, 0x1c000000000000, @default, 0x10a, @void, @val, @void, @void, @val={0x6, 0x2, 0x8}, @val={0x5, 0x3, {0x0, 0xbd}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x5, 0x9, 0xff}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x1, 0x2, 0x8, 0x8}}, @val={0x76, 0x6, {0xd0, 0x3, 0x34, 0x2}}}}]]}, 0x80}}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x678, 0x5a8, 0x168, 0x4d8, 0x0, 0x3e8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x6}, 0x0, 0x120, 0x168, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xffffff00], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0x168, 0x1a0, 0x48000000, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d3], 0xa000000, 0x4, 0x3}}, @common=@srh1={{0x90}, {0xc, 0x3, 0x4, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @private0, [0xff, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xff], [0xff000000, 0x0, 0x0, 0x80], 0x804, 0x400}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x400402) 7.875372983s ago: executing program 2 (id=5728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x63cd, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000240), {0x2f}, &(0x7f00000002c0)=""/202, 0xca, &(0x7f00000003c0)=""/82, &(0x7f00000004c0)=[0x0], 0x1, {r5}}, 0x58) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) keyctl$read(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) 6.242556655s ago: executing program 6 (id=5730): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 5.943995649s ago: executing program 6 (id=5731): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xa, 0x3, 0x12, 0x5392, 0xdbdd, 0x7, {r0, @in={{0x2, 0x4e20, @local}}, 0x81, 0xb57, 0xc, 0x4b, 0x4}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5.764409262s ago: executing program 7 (id=5732): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="adc734370000000008000a00", @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}, 0x1, 0xe4ff, 0x0, 0x20040000}, 0x0) 5.417415899s ago: executing program 1 (id=5733): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8800) r1 = syz_open_dev$hidraw(&(0x7f0000000340), 0x0, 0x2) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 5.3640133s ago: executing program 5 (id=5734): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r5, &(0x7f0000000240)=""/164, 0x131, 0x131) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x3, 0x5002) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f00000001c0)={r2}) syz_open_procfs(0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0xff1e, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040810) 5.31704491s ago: executing program 7 (id=5735): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3024000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 4.918787962s ago: executing program 7 (id=5736): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket(0x28, 0x1, 0x0) r5 = syz_io_uring_setup(0x4f8, &(0x7f0000000a40)={0x0, 0x2681, 0x100, 0x4, 0x2d0, 0x0, r3}, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47b0, 0x7bb6, 0x82, 0x0, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r8, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x2) 4.875931546s ago: executing program 1 (id=5737): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000ffffff003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000010"], 0x0, 0x56}, 0x20) 4.379680898s ago: executing program 1 (id=5738): syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, &(0x7f0000000040)=0x1000) msgrcv(0x0, 0x0, 0x0, 0x3, 0x5800) (async) msgrcv(0x0, 0x0, 0x0, 0x3, 0x5800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000340)=@gcm_128={{0x304}, "934a64527cdd4996", "7fedfa8ae30ab4754f861cdb2cda82a1", "fc497d88", "2b7071c695368184"}, 0x28) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) close(r2) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000040)={0xe7, "21a56b7ad1e74f1ff6c21e909eafafb31880decf0dc803bdc16a04d86c57f195", 0x1, 0x1}) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) fcntl$setstatus(r5, 0x4, 0x4400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) 4.368064326s ago: executing program 5 (id=5739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_io_uring_setup(0x37, &(0x7f0000000140)={0x0, 0x57d0, 0x13500}, &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008014) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xfc, 0xeb, 0xe4, 0x40, 0x547, 0x6801, 0x436f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x44, 0x13}}]}}]}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x884) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async, rerun: 64) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xae30, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r7}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async, rerun: 32) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c000180060006008035000010000280"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (rerun: 32) 4.151730847s ago: executing program 5 (id=5740): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) close_range(r2, r1, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4a", 0x3}], 0x1) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) 3.989499468s ago: executing program 1 (id=5741): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6=@private1}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800040005000000"], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYRES64=r5], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="2017de00000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r10, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r11 = fcntl$dupfd(r10, 0x406, r10) write$cgroup_pid(r11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 3.965578484s ago: executing program 2 (id=5742): ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000000)) mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000100001002cbd700020000000000000", @ANYRES32=0x0, @ANYBLOB="08009757c0200000140003006e657464657673696d3000000000000034001680300001802c000c801400010000000080"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000200000200) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000280)={0x7, 0x0, [{0x4000000d, 0xffffffff, 0x1, 0x8, 0x6, 0x4, 0x2}, {0x1, 0x3, 0x6, 0x8000, 0x27, 0x7, 0x2}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x7, 0x2bb, 0x0, 0x9, 0xa, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x8000002, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 2.188128949s ago: executing program 5 (id=5743): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380004, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x4, @multicast1}, {0x0, @broadcast}, 0x2a, {0x2, 0x0, @private=0xa010102}}) 1.906670671s ago: executing program 2 (id=5744): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.820056594s ago: executing program 2 (id=5745): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240043f0c8b580ad29ab7153f01945a2b6b1c3e3a3a6430e000001000100050016002b0000000000000000000000000000000000849ab9907a3ddc"], 0x24}}, 0x800) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ptrace(0x8, r1) chdir(&(0x7f00000000c0)='./bus\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 1.636098277s ago: executing program 6 (id=5746): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000b0000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3024000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 1.610969411s ago: executing program 7 (id=5747): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/245], 0x119) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8800) r1 = syz_open_dev$hidraw(&(0x7f0000000340), 0x0, 0x2) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0) 1.534578757s ago: executing program 6 (id=5748): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000023c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000010"], 0x0, 0x56}, 0x20) 1.379515067s ago: executing program 7 (id=5749): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000003c0)={&(0x7f0000000380), 0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)={0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000e4d020731af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x9}, 0x94) r3 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x114, 0x22, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001200)=[{}]) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x0, r1, 0x8, 0xc, 0x6ef, 0x5, 0x3}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x18, 0x52, 0x201, 0x2, 0x0, {0x2}, [@generic="de"]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x40044c4) r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000240)="021c88b59a412d878456d16c779275289834c704bdf01bbd284fadccf049d82480d04dcb6797d6fb7ff1001a49e5c5bb4c933bf9de0619511b4fd32ef620b1f0c6f82fa54fda923b164863b8f041a7ec5f455bbaa23c1e8c0dcfd9b905bf0c134b099fd81617989f0736ab2155c7b40f1664b0e36c21b762dbd2e45167d440032393c49201c6fd014be53b47f150e379294de320a7a51761310af7c6b3ec022fe2f04ff8ff1ad500814d2ba116df9d474ce25dd5cb3e1edfe0d08a637c484f89a413689387bd9b7640588786cd243d9c32ab8959566519a09707669b1c07e4cff55145bd156c7fa7d28dad396bfd", 0xa0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000140)) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0xf, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673c35d]}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a9, 0x0, 0x0, 0x0, 0xa4f7a4}}, &(0x7f0000000400)='GPL\x00', 0x10001, 0xd0, &(0x7f0000000580)=""/208, 0x40f00, 0x31, '\x00', 0x0, @sched_cls=0x36, r10, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xf, 0x2, 0x9}, 0x10, r11, r2, 0x2, &(0x7f00000007c0)=[r8, r8], &(0x7f0000000800)=[{0x4, 0x5, 0xe}, {0x2, 0x5, 0x5, 0x1}], 0x10, 0x2}, 0x94) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) setuid(0xee00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r7) 1.32968017s ago: executing program 6 (id=5750): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000480)=@ethtool_dump={0x3f, 0x300, 0x6, 0x0, "1e4ac5543b8fd33795ceb4d59178851608202076b7ad269129a6fc0d0b7a29986b5d51982351d267f2424a51f5a795e72671407a520ef7da1a8e0b43211ee5cd341a97e450e48ed0378d426b"}}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200081) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000203110209000000000000000a000005080003400000000908000540000000070800034000000001e700864600000006df3800000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x203a2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x115000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(r1, &(0x7f0000005f40), 0x0, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x4d, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x14}}, 0x0) read(r7, &(0x7f0000000640)=""/187, 0xbb) 1.30823717s ago: executing program 7 (id=5751): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xa4, 0xf5, 0x59, 0x20, 0x1bc7, 0x1041, 0x547c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0xe}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltclass={0x2c, 0x29, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x6, 0x9}, {0x0, 0xffff}}, [@tclass_kind_options=@c_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) 1.095648595s ago: executing program 5 (id=5752): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1d4c, &(0x7f0000000040)={0x0, 0xcf78, 0xc000, 0x2, 0x58}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x700) 171.061115ms ago: executing program 5 (id=5753): bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff6b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setresgid(0xee00, 0xee01, 0x0) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0xfffd, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff8984"], 0xffbf) 0s ago: executing program 6 (id=5754): ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000000)) mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="68000000100001002cbd700020000000000000", @ANYRES32=0x0, @ANYBLOB="08009757c0200000140003006e657464657673696d3000000000000034001680300001802c000c801400010000000080"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000200000200) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000280)={0x7, 0x0, [{0x4000000d, 0xffffffff, 0x1, 0x8, 0x6, 0x4, 0x2}, {0x1, 0x3, 0x6, 0x8000, 0x27, 0x7, 0x2}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x7, 0x2bb, 0x0, 0x9, 0xa, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x8000002, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) kernel console output (not intermixed with test programs): .180694][ T5862] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1675.260476][T24018] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1675.291430][T24018] usb 7-1: device descriptor read/8, error -71 [ 1675.435537][ T5862] usb 9-1: Using ep0 maxpacket: 8 [ 1675.479386][T28102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1675.555118][ T5862] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1675.634247][T24018] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1675.645484][T28072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.654069][T28072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.680439][T10625] uclogic 0003:256C:006D.0068: failed retrieving string descriptor #100: -71 [ 1675.689297][T10625] uclogic 0003:256C:006D.0068: failed retrieving pen parameters: -71 [ 1675.697544][ T5862] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 1675.706189][ T5862] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.725990][T10625] uclogic 0003:256C:006D.0068: failed probing pen v1 parameters: -71 [ 1675.736362][ T5862] usb 9-1: config 4 has no interface number 0 [ 1675.742622][T24018] usb 7-1: device descriptor read/8, error -71 [ 1675.751853][T10625] uclogic 0003:256C:006D.0068: failed probing parameters: -71 [ 1675.760761][T10625] uclogic 0003:256C:006D.0068: probe with driver uclogic failed with error -71 [ 1675.791964][ T5862] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1675.807547][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.817170][T10625] usb 6-1: USB disconnect, device number 16 [ 1675.860733][T24018] usb usb7-port1: unable to enumerate USB device [ 1675.953444][T17748] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1675.970488][T17748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1675.987829][T17748] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1675.998167][T17748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1676.011278][T17748] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1676.044022][T28095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.047998][T28107] Failed to initialize the IGMP autojoin socket (err -2) [ 1676.057084][T28095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.094295][ T5862] uvcvideo 9-1:4.147: Found multiple Units with ID 6 [ 1676.111052][ T5862] uvcvideo 9-1:4.147: Found UVC 0.02 device (04f2:b746) [ 1676.119111][ T5862] uvcvideo 9-1:4.147: No streaming interface found for terminal 32774. [ 1676.147842][ T5862] usb 9-1: USB disconnect, device number 7 [ 1676.728011][T28107] chnl_net:caif_netlink_parms(): no params data found [ 1676.833613][T28121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.991367][T28121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.113994][T28133] ubi31: attaching mtd0 [ 1677.125919][T28133] ubi31: scanning is finished [ 1677.190667][ T118] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1677.534263][ T29] audit: type=1400 audit(1771059368.812:1572): avc: denied { listen } for pid=28124 comm="syz.7.5411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1677.613594][T28133] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1677.621412][T28133] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1677.628676][T28133] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1677.635733][T28133] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1677.643402][T28133] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1677.650494][T28133] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1677.658549][T28133] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1120162453 [ 1677.662259][ T118] usb 7-1: Using ep0 maxpacket: 32 [ 1677.668653][T28133] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1677.750471][T28140] ubi31: background thread "ubi_bgt31d" started, PID 28140 [ 1677.799798][ T118] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.913600][ T118] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1677.916680][T28107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.946439][ T118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.975312][T28107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.000010][T28107] bridge_slave_0: entered allmulticast mode [ 1678.007230][ T118] usb 7-1: config 0 descriptor?? [ 1678.031218][T28107] bridge_slave_0: entered promiscuous mode [ 1678.032866][ T118] hub 7-1:0.0: USB hub found [ 1678.070450][T17748] Bluetooth: hci5: command tx timeout [ 1678.211012][T28107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.218141][T28107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.254307][T28107] bridge_slave_1: entered allmulticast mode [ 1678.257599][ T118] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1678.303863][ T118] usbhid 7-1:0.0: can't add hid device: -71 [ 1678.313994][ T118] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1678.335194][T28107] bridge_slave_1: entered promiscuous mode [ 1678.641001][ T118] usb 7-1: USB disconnect, device number 113 [ 1679.262936][T28107] team0: Port device team_slave_0 added [ 1679.280419][T24018] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1679.417329][T28107] team0: Port device team_slave_1 added [ 1679.612191][T24018] usb 6-1: device descriptor read/64, error -71 [ 1679.981150][T24018] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1680.043360][T28107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.054861][T28107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.105365][T28107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1680.142024][T28107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1680.149074][T28107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1680.180203][T24018] usb 6-1: device descriptor read/64, error -71 [ 1680.181204][T17748] Bluetooth: hci5: command tx timeout [ 1680.217612][T28107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1680.314632][T24018] usb usb6-port1: attempt power cycle [ 1680.370421][T10625] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1680.493043][T28107] hsr_slave_0: entered promiscuous mode [ 1680.526524][T28107] hsr_slave_1: entered promiscuous mode [ 1680.536603][T10625] usb 9-1: Using ep0 maxpacket: 16 [ 1680.555961][T28107] debugfs: 'hsr0' already exists in 'hsr' [ 1680.569384][T10625] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.587916][T28107] Cannot create hsr debugfs directory [ 1680.599129][T10625] usb 9-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1680.610281][ T118] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1680.670191][T24018] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1680.680835][T10625] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1680.722141][T24018] usb 6-1: device descriptor read/8, error -71 [ 1680.746323][T10625] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.783654][ T118] usb 7-1: Using ep0 maxpacket: 32 [ 1680.805512][ T118] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1680.847046][ T118] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1680.873419][ T118] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.896287][ T118] usb 7-1: Product: syz [ 1680.925224][ T118] usb 7-1: Manufacturer: syz [ 1680.947279][ T118] usb 7-1: SerialNumber: syz [ 1680.989215][ T118] usb 7-1: config 0 descriptor?? [ 1681.027169][T24018] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1681.114286][T24018] usb 6-1: device descriptor read/8, error -71 [ 1681.140332][ T2561] block nbd0: Possible stuck request ffff888027348000: control (read@0,1024B). Runtime 900 seconds [ 1681.151164][ T2561] block nbd0: Possible stuck request ffff888027348200: control (read@1024,1024B). Runtime 900 seconds [ 1681.162996][ T2561] block nbd0: Possible stuck request ffff888027348400: control (read@2048,1024B). Runtime 900 seconds [ 1681.174100][ T2561] block nbd0: Possible stuck request ffff888027348600: control (read@3072,1024B). Runtime 900 seconds [ 1681.246715][T24018] usb usb6-port1: unable to enumerate USB device [ 1681.523314][ T118] gs_usb 7-1:0.0: Configuring for 242 interfaces [ 1682.230756][T17748] Bluetooth: hci5: command tx timeout [ 1683.162204][ T5809] usb 9-1: USB disconnect, device number 8 [ 1684.310469][T17748] Bluetooth: hci5: command tx timeout [ 1684.324492][ T118] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1684.395692][T28240] veth2: entered allmulticast mode [ 1684.567949][ T118] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 1684.604115][ T118] usb 7-1: USB disconnect, device number 114 [ 1685.252672][T28107] netdevsim netdevsim1 netdevsim0: renamed from eth9 [ 1685.339111][T28107] netdevsim netdevsim1 netdevsim1: renamed from eth10 [ 1685.375497][T28107] netdevsim netdevsim1 netdevsim2: renamed from eth11 [ 1685.410192][T24018] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1685.436757][T28107] netdevsim netdevsim1 netdevsim3: renamed from eth12 [ 1685.581433][T24018] usb 7-1: Using ep0 maxpacket: 16 [ 1685.597958][T24018] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.776831][T24018] usb 7-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1685.810740][T11691] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1685.850155][T24018] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1685.859228][T24018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.980452][T11691] usb 9-1: Using ep0 maxpacket: 32 [ 1685.991206][T11691] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1686.005904][T11691] usb 9-1: config 0 has no interface number 0 [ 1686.022024][T11691] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1686.042080][T11691] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1686.058975][T28107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.060035][T11691] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.065770][ T47] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1686.076072][T11691] usb 9-1: Product: syz [ 1686.089694][T11691] usb 9-1: Manufacturer: syz [ 1686.095620][T11691] usb 9-1: SerialNumber: syz [ 1686.122622][T11691] usb 9-1: config 0 descriptor?? [ 1686.158752][T28107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.196469][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.203584][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.236576][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.243666][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.250172][ T47] usb 8-1: Using ep0 maxpacket: 32 [ 1686.268905][ T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.287371][ T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.301359][ T47] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1686.323948][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.365092][ T47] usb 8-1: config 0 descriptor?? [ 1686.917033][T11691] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1686.937506][T11691] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1686.976582][ T47] ft260 0003:0403:6030.0069: unknown main item tag 0x0 [ 1686.997863][ T47] ft260 0003:0403:6030.0069: unknown main item tag 0x0 [ 1687.036224][T28107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.174628][ T47] ft260 0003:0403:6030.0069: chip code: 0000 0000 [ 1687.198362][T28107] veth0_vlan: entered promiscuous mode [ 1687.214553][T28107] veth1_vlan: entered promiscuous mode [ 1687.319760][T28107] veth0_macvtap: entered promiscuous mode [ 1687.376351][T28107] veth1_macvtap: entered promiscuous mode [ 1687.463205][ T47] ft260 0003:0403:6030.0069: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 1687.572287][T11691] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1687.587792][T28107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.598924][T11691] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1687.617678][T11691] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1687.633930][T28107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.639502][T11691] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 1687.663859][ T47] ft260 0003:0403:6030.0069: failed to retrieve status: -32, no wakeup [ 1687.691966][T28107] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1687.712385][ T47] ft260 0003:0403:6030.0069: failed to retrieve status: -32 [ 1687.729648][T28107] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1687.771148][T28107] wireguard: wg0: Could not create IPv4 socket [ 1687.795996][T28107] wireguard: wg1: Could not create IPv4 socket [ 1687.827020][T28107] wireguard: wg2: Could not create IPv4 socket [ 1687.843665][ T47] usb 9-1: USB disconnect, device number 9 [ 1688.158840][T11691] usb 7-1: USB disconnect, device number 115 [ 1688.240208][ T47] usb 8-1: reset high-speed USB device number 13 using dummy_hcd [ 1688.609187][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5449'. [ 1688.964724][T28335] syzkaller0: entered promiscuous mode [ 1688.971143][T28335] syzkaller0: entered allmulticast mode [ 1689.091251][T28282] usb 8-1: USB disconnect, device number 13 [ 1689.947557][ T47] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1690.105537][T28372] FAULT_INJECTION: forcing a failure. [ 1690.105537][T28372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.135074][T28372] CPU: 0 UID: 0 PID: 28372 Comm: syz.7.5460 Tainted: G L syzkaller #0 PREEMPT(full) [ 1690.135105][T28372] Tainted: [L]=SOFTLOCKUP [ 1690.135111][T28372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1690.135121][T28372] Call Trace: [ 1690.135129][T28372] [ 1690.135136][T28372] dump_stack_lvl+0x100/0x190 [ 1690.135169][T28372] should_fail_ex.cold+0x5/0xa [ 1690.135193][T28372] _copy_from_user+0x2e/0xd0 [ 1690.135218][T28372] copy_msghdr_from_user+0x9f/0x4f0 [ 1690.135238][T28372] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1690.135268][T28372] ___sys_sendmsg+0x106/0x1e0 [ 1690.135287][T28372] ? __pfx____sys_sendmsg+0x10/0x10 [ 1690.135334][T28372] __sys_sendmsg+0x170/0x220 [ 1690.135356][T28372] ? __pfx___sys_sendmsg+0x10/0x10 [ 1690.135395][T28372] do_syscall_64+0x106/0xf80 [ 1690.135417][T28372] ? clear_bhb_loop+0x40/0x90 [ 1690.135445][T28372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.135463][T28372] RIP: 0033:0x7f3453f9bf79 [ 1690.135478][T28372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.135494][T28372] RSP: 002b:00007f3454ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1690.135512][T28372] RAX: ffffffffffffffda RBX: 00007f3454215fa0 RCX: 00007f3453f9bf79 [ 1690.135524][T28372] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1690.135535][T28372] RBP: 00007f3454ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 1690.135545][T28372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1690.135555][T28372] R13: 00007f3454216038 R14: 00007f3454215fa0 R15: 00007ffeb93347f8 [ 1690.135580][T28372] [ 1690.150396][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 1690.380247][ T47] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.392486][ T47] usb 6-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1690.401844][ T47] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1690.419305][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.936160][T28391] syzkaller0: entered promiscuous mode [ 1691.943608][T28391] syzkaller0: entered allmulticast mode [ 1692.035640][T11531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1692.046868][T11531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1692.065204][T11531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1692.077669][T11531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1692.085841][T11531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1692.166990][T28396] Failed to initialize the IGMP autojoin socket (err -2) [ 1692.185744][T28401] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5464'. [ 1692.195126][T28401] nbd: must specify at least one socket [ 1692.200378][T11691] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1693.283141][ T47] usb 6-1: USB disconnect, device number 21 [ 1694.050394][T11691] usb 7-1: Using ep0 maxpacket: 16 [ 1694.063158][T11691] usb 7-1: config 0 has no interfaces? [ 1694.070536][T11691] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1694.070564][T11691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.070602][T11691] usb 7-1: Product: syz [ 1694.070615][T11691] usb 7-1: Manufacturer: syz [ 1694.070627][T11691] usb 7-1: SerialNumber: syz [ 1694.095577][T11691] usb 7-1: config 0 descriptor?? [ 1694.152219][T11531] Bluetooth: hci5: command tx timeout [ 1694.303385][ T47] usb 7-1: USB disconnect, device number 116 [ 1694.350336][ T5914] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1694.515634][ T5914] usb 6-1: config index 0 descriptor too short (expected 60178, got 18) [ 1694.530870][ T5914] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1694.560743][ T5914] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1694.569674][ T5914] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1694.628157][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.658010][ T5914] usb 6-1: config 0 descriptor?? [ 1694.697099][ T5914] pwc: Creative Labs Webcam Pro Ex detected. [ 1694.748203][T28396] netdevsim netdevsim1 netdevsim0: renamed from eth9 [ 1694.774823][T28396] netdevsim netdevsim1 netdevsim1: renamed from eth10 [ 1694.792909][T28396] netdevsim netdevsim1 netdevsim2: renamed from eth11 [ 1694.819022][T28396] netdevsim netdevsim1 netdevsim3: renamed from eth12 [ 1695.069627][ T5914] pwc: Failed to set LED on/off time (-71) [ 1695.254813][ T5914] pwc: send_video_command error -71 [ 1695.300222][ T5914] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1695.358058][ T5914] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1695.395851][ T5914] usb 6-1: USB disconnect, device number 22 [ 1695.920721][T28396] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1695.977988][T28396] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1695.999116][T11531] Bluetooth: hci4: command 0x0406 tx timeout [ 1696.018184][T28396] wireguard: wg0: Could not create IPv4 socket [ 1696.036315][T28396] wireguard: wg1: Could not create IPv4 socket [ 1696.046766][T28396] wireguard: wg2: Could not create IPv4 socket [ 1696.230430][T17748] Bluetooth: hci5: command tx timeout [ 1696.447548][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5473'. [ 1696.563755][T28482] syzkaller0: entered promiscuous mode [ 1696.580906][T28482] syzkaller0: entered allmulticast mode [ 1696.863228][T28494] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5476'. [ 1696.872349][T28494] nbd: must specify at least one socket [ 1696.990432][T10625] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1698.743161][T18854] block nbd1: Possible stuck request ffff8880273f8000: control (read@0,1024B). Runtime 750 seconds [ 1698.757556][T18854] block nbd1: Possible stuck request ffff8880273f8200: control (read@1024,1024B). Runtime 750 seconds [ 1698.768838][T18854] block nbd1: Possible stuck request ffff8880273f8400: control (read@2048,1024B). Runtime 750 seconds [ 1698.800713][T18854] block nbd1: Possible stuck request ffff8880273f8600: control (read@3072,1024B). Runtime 750 seconds [ 1698.901607][T10625] usb 6-1: Using ep0 maxpacket: 16 [ 1698.925674][T10625] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.940201][T10625] usb 6-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1698.970847][T10625] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1699.011176][T10625] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.035743][T10625] usbhid 6-1:128.0: couldn't find an input interrupt endpoint [ 1699.337665][T28513] batadv_slave_0: entered promiscuous mode [ 1699.865547][T28505] batadv_slave_0: left promiscuous mode [ 1700.968819][T27277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1701.084905][T11691] usb 6-1: USB disconnect, device number 23 [ 1701.278542][ T5914] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1701.451718][ T5914] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.505914][ T5914] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1701.540261][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.548288][ T5914] usb 8-1: Product: syz [ 1701.566940][ T5914] usb 8-1: Manufacturer: syz [ 1701.582773][ T5914] usb 8-1: SerialNumber: syz [ 1701.614645][ T5914] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1702.047666][ T5914] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1702.146300][ T5914] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1702.244223][ T5914] usb 8-1: media controller created [ 1702.745786][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1703.947035][T28571] syzkaller0: entered promiscuous mode [ 1703.978940][T11531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1703.992901][T11531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1704.002355][T11531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1704.020518][T11531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1704.032832][T11531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1704.080140][T28571] syzkaller0: entered allmulticast mode [ 1704.118532][T28573] Failed to initialize the IGMP autojoin socket (err -2) [ 1704.250469][ T5914] usb 8-1: USB disconnect, device number 14 [ 1704.379785][T28563] FAULT_INJECTION: forcing a failure. [ 1704.379785][T28563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1704.421907][T28563] CPU: 0 UID: 0 PID: 28563 Comm: syz.5.5485 Tainted: G L syzkaller #0 PREEMPT(full) [ 1704.421938][T28563] Tainted: [L]=SOFTLOCKUP [ 1704.421945][T28563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1704.421955][T28563] Call Trace: [ 1704.421961][T28563] [ 1704.421969][T28563] dump_stack_lvl+0x100/0x190 [ 1704.422002][T28563] should_fail_ex.cold+0x5/0xa [ 1704.422027][T28563] _copy_from_iter+0x1f4/0x1690 [ 1704.422055][T28563] ? __asan_memset+0x23/0x50 [ 1704.422075][T28563] ? __pfx__copy_from_iter+0x10/0x10 [ 1704.422100][T28563] ? __pfx___alloc_skb+0x10/0x10 [ 1704.422132][T28563] netlink_sendmsg+0x808/0xda0 [ 1704.422163][T28563] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.422187][T28563] ? __might_fault+0x70/0x140 [ 1704.422232][T28563] ____sys_sendmsg+0xa54/0xc30 [ 1704.422263][T28563] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.422295][T28563] ? __pfx__kstrtoull+0x10/0x10 [ 1704.422318][T28563] ___sys_sendmsg+0x190/0x1e0 [ 1704.422338][T28563] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.422368][T28563] ? find_held_lock+0x2b/0x80 [ 1704.422403][T28563] __sys_sendmmsg+0x205/0x430 [ 1704.422430][T28563] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1704.422462][T28563] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1704.422499][T28563] ? fput+0x79/0x100 [ 1704.422526][T28563] ? ksys_write+0x1ac/0x250 [ 1704.422547][T28563] ? __pfx_ksys_write+0x10/0x10 [ 1704.422573][T28563] __x64_sys_sendmmsg+0x9c/0x100 [ 1704.422595][T28563] ? lockdep_hardirqs_on+0x78/0x100 [ 1704.422619][T28563] do_syscall_64+0x106/0xf80 [ 1704.422648][T28563] ? clear_bhb_loop+0x40/0x90 [ 1704.422671][T28563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.422690][T28563] RIP: 0033:0x7efcd399bf79 [ 1704.422707][T28563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.422724][T28563] RSP: 002b:00007efcd4868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1704.422741][T28563] RAX: ffffffffffffffda RBX: 00007efcd3c15fa0 RCX: 00007efcd399bf79 [ 1704.422753][T28563] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 1704.422764][T28563] RBP: 00007efcd4868090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.422775][T28563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.422786][T28563] R13: 00007efcd3c16038 R14: 00007efcd3c15fa0 R15: 00007ffd1e8dd418 [ 1704.422812][T28563] [ 1704.774142][T17748] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1704.851062][T28110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1704.985752][T28110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1705.007439][T28110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1705.026886][T28110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1705.314212][ T47] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1705.613928][T28608] batadv_slave_0: entered promiscuous mode [ 1705.620690][T28609] batadv_slave_0: left promiscuous mode [ 1705.632648][T28589] Failed to initialize the IGMP autojoin socket (err -2) [ 1705.730501][ T47] usb 8-1: Using ep0 maxpacket: 16 [ 1705.751038][ T47] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.763272][ T47] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1705.790170][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.811717][ T47] usb 8-1: config 0 descriptor?? [ 1706.011752][T24018] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1706.070741][T28110] Bluetooth: hci5: command tx timeout [ 1706.182609][T24018] usb 7-1: Using ep0 maxpacket: 16 [ 1706.226472][ T47] mcp2221 0003:04D8:00DD.006A: unknown main item tag 0x0 [ 1706.229909][T24018] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.250173][ T47] mcp2221 0003:04D8:00DD.006A: unknown main item tag 0x0 [ 1706.270369][ T47] mcp2221 0003:04D8:00DD.006A: unknown main item tag 0x0 [ 1706.277826][ T47] mcp2221 0003:04D8:00DD.006A: unknown main item tag 0x0 [ 1706.281288][T24018] usb 7-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1706.297928][ T47] mcp2221 0003:04D8:00DD.006A: unknown main item tag 0x0 [ 1706.298508][ T47] mcp2221 0003:04D8:00DD.006A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1706.361541][T24018] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1706.385991][T24018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.449501][T24018] usbhid 7-1:128.0: couldn't find an input interrupt endpoint [ 1706.720956][T28600] i2c i2c-1: unsupported multi-msg i2c transaction [ 1706.729111][ T47] usb 8-1: USB disconnect, device number 15 [ 1706.978388][T11531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1706.989267][T11531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1707.003604][T11531] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1707.012304][T11531] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1707.023027][T11531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1707.078785][T28642] Failed to initialize the IGMP autojoin socket (err -2) [ 1707.296265][T28573] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1707.321306][T28573] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1707.321619][ T118] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1707.387779][T28573] wireguard: wg0: Could not create IPv4 socket [ 1707.409226][T28573] wireguard: wg1: Could not create IPv4 socket [ 1707.428658][T28573] wireguard: wg2: Could not create IPv4 socket [ 1707.522269][ T118] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1707.534506][ T118] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.546013][ T118] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.556095][ T118] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1707.569419][ T118] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1707.579920][ T118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.590946][ T118] usb 6-1: config 0 descriptor?? [ 1708.021845][T28648] Bluetooth: MGMT ver 1.23 [ 1708.165779][T28672] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5494'. [ 1708.466568][T11531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1708.479032][T11531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1708.497627][T11531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1708.505531][ T118] usbhid 6-1:0.0: can't add hid device: -71 [ 1708.520650][T11531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1708.520733][ T118] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1708.541570][T11531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1708.574313][T28675] Failed to initialize the IGMP autojoin socket (err -2) [ 1708.583890][ T118] usb 6-1: USB disconnect, device number 24 [ 1708.799102][T24018] usb 7-1: USB disconnect, device number 117 [ 1709.149133][T28688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.337530][T28689] syzkaller0: entered promiscuous mode [ 1709.348951][T28689] syzkaller0: entered allmulticast mode [ 1709.354749][ T118] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1709.519144][ T118] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.556054][ T118] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1709.579210][ T118] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.604689][ T118] usb 6-1: Product: syz [ 1709.621636][ T118] usb 6-1: Manufacturer: syz [ 1709.627740][ T118] usb 6-1: SerialNumber: syz [ 1709.674674][ T118] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1710.105476][ T118] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1710.363893][ T118] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1710.519449][ T118] usb 6-1: media controller created [ 1710.630237][T28110] Bluetooth: hci5: command tx timeout [ 1710.693743][ T118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1711.191130][T28383] block nbd0: Possible stuck request ffff888027348000: control (read@0,1024B). Runtime 930 seconds [ 1711.201922][T28383] block nbd0: Possible stuck request ffff888027348200: control (read@1024,1024B). Runtime 930 seconds [ 1711.231476][T28383] block nbd0: Possible stuck request ffff888027348400: control (read@2048,1024B). Runtime 930 seconds [ 1711.278872][T28383] block nbd0: Possible stuck request ffff888027348600: control (read@3072,1024B). Runtime 930 seconds [ 1712.086340][ T5914] usb 6-1: USB disconnect, device number 25 [ 1712.713258][T28110] Bluetooth: hci5: command tx timeout [ 1714.487500][T28759] batadv_slave_0: entered promiscuous mode [ 1714.494239][T28760] batadv_slave_0: left promiscuous mode [ 1714.793776][T28110] Bluetooth: hci5: command tx timeout [ 1715.420561][ T47] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1715.640671][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 1715.642918][T28831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5506'. [ 1715.649080][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.805532][ T47] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1715.815153][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.825800][ T47] usb 7-1: config 0 descriptor?? [ 1715.987466][T28839] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1716.278776][T28675] netdevsim netdevsim1 netdevsim0: renamed from eth9 [ 1716.321668][T28675] netdevsim netdevsim1 netdevsim1: renamed from eth10 [ 1716.336724][ T47] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0 [ 1716.337720][T11531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1716.352911][ T47] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0 [ 1716.357557][T11531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1716.369612][T11531] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1716.372952][ T47] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0 [ 1716.378365][T11531] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1716.397684][T11531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1716.424956][ T47] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0 [ 1716.431099][T28675] netdevsim netdevsim1 netdevsim2: renamed from eth11 [ 1716.453370][T28842] Failed to initialize the IGMP autojoin socket (err -2) [ 1716.453486][ T47] mcp2221 0003:04D8:00DD.006B: unknown main item tag 0x0 [ 1716.461129][T28675] netdevsim netdevsim1 netdevsim3: renamed from eth12 [ 1716.565014][ T47] mcp2221 0003:04D8:00DD.006B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1716.781936][T28814] i2c i2c-1: unsupported multi-msg i2c transaction [ 1716.795029][ T5870] usb 7-1: USB disconnect, device number 118 [ 1716.872566][T28110] Bluetooth: hci5: command tx timeout [ 1716.990923][T24018] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1717.026869][T28675] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1717.049193][T28675] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1717.070747][T28675] wireguard: wg0: Could not create IPv4 socket [ 1717.085343][T28675] wireguard: wg1: Could not create IPv4 socket [ 1717.094625][T28675] wireguard: wg2: Could not create IPv4 socket [ 1717.166812][T24018] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.203240][T24018] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1717.220514][T24018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.240214][T24018] usb 8-1: Product: syz [ 1717.244404][T24018] usb 8-1: Manufacturer: syz [ 1717.262946][T24018] usb 8-1: SerialNumber: syz [ 1717.286251][T11531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1717.289454][T24018] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1717.308361][T11531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1717.320731][T11531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1717.332945][T11531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1717.342306][T11531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1717.416315][T28872] Failed to initialize the IGMP autojoin socket (err -2) [ 1717.652163][ T5809] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1717.711735][T24018] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1717.810901][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 1717.859245][ T5809] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1717.938415][ T5809] usb 7-1: config 0 has no interface number 0 [ 1717.997786][ T5809] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1718.099121][ T5809] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1718.159775][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.233745][ T5809] usb 7-1: Product: syz [ 1718.276310][ T5809] usb 7-1: Manufacturer: syz [ 1718.320641][ T5809] usb 7-1: SerialNumber: syz [ 1718.454419][ T5809] usb 7-1: config 0 descriptor?? [ 1719.381115][ T5809] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1719.444254][T28110] Bluetooth: hci5: command tx timeout [ 1719.446817][ T5809] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1719.492882][T24018] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1719.556316][T24018] usb 8-1: media controller created [ 1719.570343][T24018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1719.840319][T24018] usb 8-1: USB disconnect, device number 16 [ 1720.416821][T28902] batadv_slave_0: entered promiscuous mode [ 1720.478221][T28894] batadv_slave_0: left promiscuous mode [ 1720.799267][ T5809] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1720.829385][ T5809] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1721.000301][ T5809] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1721.019501][ T5809] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1721.067478][ T5809] usb 7-1: USB disconnect, device number 119 [ 1721.510424][T28110] Bluetooth: hci5: command tx timeout [ 1721.537508][ T29] audit: type=1326 audit(1771059412.592:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.7.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3453f9bf79 code=0x7ffc0000 [ 1721.596896][ T29] audit: type=1326 audit(1771059412.592:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.7.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3453f9bf79 code=0x7ffc0000 [ 1721.622082][ T29] audit: type=1326 audit(1771059412.592:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28921 comm="syz.7.5514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3453f9bf79 code=0x7ffc0000 [ 1721.646292][ T29] audit: type=1400 audit(1771059412.782:1576): avc: denied { mounton } for pid=28921 comm="syz.7.5514" path="/183/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1721.811880][T28872] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1721.895524][T28872] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1721.945251][T28872] wireguard: wg0: Could not create IPv4 socket [ 1722.045778][T28872] wireguard: wg1: Could not create IPv4 socket [ 1722.079212][T28872] wireguard: wg2: Could not create IPv4 socket [ 1722.300761][T11906] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1722.484284][T11906] usb 8-1: Using ep0 maxpacket: 8 [ 1722.501678][T11906] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1722.530036][T11906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1722.550444][T11906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1722.570400][T11906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1722.609594][T11906] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1722.631866][T11906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1722.650259][T11906] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1722.687957][T11906] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1722.714352][T11906] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1722.727888][T11906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.737086][T11906] usb 8-1: Product: syz [ 1722.742312][T11906] usb 8-1: Manufacturer: syz [ 1722.746913][T11906] usb 8-1: SerialNumber: syz [ 1722.761039][T11906] usb 8-1: config 0 descriptor?? [ 1722.780801][T28949] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1722.798390][T28949] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1722.811775][T11906] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1723.050447][ T5809] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 1723.058030][T11906] usb 8-1: USB disconnect, device number 17 [ 1723.210262][ T5809] usb 7-1: Using ep0 maxpacket: 16 [ 1723.231726][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.253004][ T5809] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1723.265908][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.303847][ T5809] usb 7-1: config 0 descriptor?? [ 1723.832409][ T5809] mcp2221 0003:04D8:00DD.006C: unknown main item tag 0x0 [ 1723.924208][ T5809] mcp2221 0003:04D8:00DD.006C: unknown main item tag 0x0 [ 1723.938482][ T5809] mcp2221 0003:04D8:00DD.006C: unknown main item tag 0x0 [ 1723.945968][ T5809] mcp2221 0003:04D8:00DD.006C: unknown main item tag 0x0 [ 1723.959722][ T5809] mcp2221 0003:04D8:00DD.006C: unknown main item tag 0x0 [ 1724.051879][T29008] batadv_slave_0: entered promiscuous mode [ 1724.437916][ T5809] mcp2221 0003:04D8:00DD.006C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1724.563670][ T5809] usb 7-1: USB disconnect, device number 120 [ 1724.603015][T29001] batadv_slave_0: left promiscuous mode [ 1725.150164][T11906] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1725.331908][T11906] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.355109][T11906] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1725.364890][T11906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.373143][T11906] usb 8-1: Product: syz [ 1725.377318][T11906] usb 8-1: Manufacturer: syz [ 1725.382206][T11906] usb 8-1: SerialNumber: syz [ 1725.396952][T11906] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1725.800525][T29050] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5525'. [ 1728.718516][ T5809] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1728.896895][T11906] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1728.907402][T11906] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1728.916111][T11906] usb 8-1: media controller created [ 1728.930370][T11906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1729.136243][T18854] block nbd1: Possible stuck request ffff8880273f8000: control (read@0,1024B). Runtime 780 seconds [ 1729.150041][T18854] block nbd1: Possible stuck request ffff8880273f8200: control (read@1024,1024B). Runtime 780 seconds [ 1729.175133][T11531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1729.190890][T18854] block nbd1: Possible stuck request ffff8880273f8400: control (read@2048,1024B). Runtime 780 seconds [ 1729.205216][T18854] block nbd1: Possible stuck request ffff8880273f8600: control (read@3072,1024B). Runtime 780 seconds [ 1729.220512][T11531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1729.238165][T11531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1729.257585][T11531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1729.275096][T11531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1729.566135][T29061] Failed to initialize the IGMP autojoin socket (err -2) [ 1729.676588][ T5946] usb 8-1: USB disconnect, device number 18 [ 1729.752541][T29062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5528'. [ 1729.771843][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.221585][T29079] 9pnet_fd: Insufficient options for proto=fd [ 1730.268938][T29088] input: syz0 as /devices/virtual/input/input88 [ 1730.276897][ T29] audit: type=1400 audit(1771059421.542:1577): avc: granted { setsecparam } for pid=29087 comm="syz.6.5533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1730.304418][T28110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1730.318395][T28110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1730.335956][T28110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1730.344716][T28110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1730.352678][T28110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1730.415502][T29090] Failed to initialize the IGMP autojoin socket (err -2) [ 1730.448862][ T5914] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1730.620169][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 1730.635630][ T5914] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1730.657949][ T5809] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1730.665868][ T5914] usb 6-1: config 0 has no interface number 0 [ 1730.676681][ T5914] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1730.694899][ T5914] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1730.706548][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.720101][ T5914] usb 6-1: Product: syz [ 1730.724274][ T5914] usb 6-1: Manufacturer: syz [ 1730.739186][ T5914] usb 6-1: SerialNumber: syz [ 1730.765576][ T5914] usb 6-1: config 0 descriptor?? [ 1730.834692][ T5809] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1730.872646][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.912723][ T5809] usb 8-1: Product: syz [ 1730.928494][ T5809] usb 8-1: Manufacturer: syz [ 1730.949241][ T5809] usb 8-1: SerialNumber: syz [ 1730.994388][ T5809] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1731.047527][ T5946] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1731.182855][T29061] netdevsim netdevsim1 netdevsim0: renamed from eth9 [ 1731.203229][T29061] netdevsim netdevsim1 netdevsim1: renamed from eth10 [ 1731.214400][T29061] netdevsim netdevsim1 netdevsim2: renamed from eth11 [ 1731.237788][T29061] netdevsim netdevsim1 netdevsim3: renamed from eth12 [ 1731.411392][ T5914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1731.441562][ T5914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1731.583974][T29061] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1731.602106][T11531] Bluetooth: hci5: command tx timeout [ 1731.620562][T29061] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1731.642389][T29061] wireguard: wg0: Could not create IPv4 socket [ 1731.652033][T29061] wireguard: wg1: Could not create IPv4 socket [ 1731.663699][T29061] wireguard: wg2: Could not create IPv4 socket [ 1731.882296][T28110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1731.902425][T28110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1731.914399][T28110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1731.927296][T28110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1731.937259][T28110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1732.000895][T29143] Failed to initialize the IGMP autojoin socket (err -2) [ 1732.150519][ T5946] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1732.182242][ T5946] ath9k_htc: Failed to initialize the device [ 1732.220483][T11691] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 1732.263612][ T5946] usb 8-1: ath9k_htc: USB layer deinitialized [ 1732.344745][ T5914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1732.365628][ T5914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1732.375923][ T5914] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1732.386267][ T5914] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1732.393511][T11691] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1732.422566][T11691] usb 7-1: not running at top speed; connect to a high speed hub [ 1732.442364][T11691] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.457278][T11691] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1732.469441][T11691] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1732.478862][T11691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.498394][T11691] usb 7-1: Product: syz [ 1732.503133][T11691] usb 7-1: Manufacturer: syz [ 1732.507791][T11691] usb 7-1: SerialNumber: syz [ 1732.753119][T11691] usb 7-1: 0:2 : does not exist [ 1732.849626][T11691] usb 7-1: USB disconnect, device number 122 [ 1732.897467][T13753] udevd[13753]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1733.226109][T29188] 9pnet_fd: Insufficient options for proto=fd [ 1733.337375][T29143] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1733.385305][T29143] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1733.431248][T29143] wireguard: wg0: Could not create IPv4 socket [ 1733.438787][T29143] wireguard: wg1: Could not create IPv4 socket [ 1733.457058][T29143] wireguard: wg2: Could not create IPv4 socket [ 1733.568433][ T47] usb 8-1: USB disconnect, device number 19 [ 1733.591958][T25569] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1733.829131][ T29] audit: type=1800 audit(1771059425.102:1578): pid=29198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5542" name="bus" dev="tmpfs" ino=1042 res=0 errno=0 [ 1734.009950][T29204] netlink: 'syz.7.5543': attribute type 3 has an invalid length. [ 1734.025036][ T29] audit: type=1400 audit(1771059425.302:1579): avc: denied { setattr } for pid=29202 comm="syz.7.5543" name="NETLINK" dev="sockfs" ino=110330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1734.129192][ T5946] usb 6-1: USB disconnect, device number 26 [ 1735.071468][T29230] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5548'. [ 1736.065418][T29256] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1736.074518][T29256] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1736.271722][T29270] veth1_to_batadv: entered promiscuous mode [ 1737.047342][ T29] audit: type=1400 audit(1771059428.322:1580): avc: denied { getattr } for pid=29293 comm="syz.7.5560" name="/" dev="nsfs" ino=4026534047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1737.282530][T29307] syzkaller0: entered promiscuous mode [ 1737.288126][T29307] syzkaller0: entered allmulticast mode [ 1738.609479][T29302] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1738.614504][ T29] audit: type=1400 audit(1771059429.882:1581): avc: denied { mount } for pid=29301 comm="syz.6.5561" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1738.641020][T29302] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1738.652010][T29302] overlayfs: failed to look up (tracing) for ino (-66) [ 1738.781908][T11691] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1738.800651][ T29] audit: type=1400 audit(1771059430.072:1582): avc: denied { unmount } for pid=23955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1738.960557][T11691] usb 8-1: Using ep0 maxpacket: 32 [ 1738.967774][T11691] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1738.979571][T11691] usb 8-1: config 0 has no interface number 0 [ 1738.995534][T29339] bridge0: port 3(batadv0) entered disabled state [ 1739.005919][T11691] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1739.035269][T29339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.042885][T11691] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.067483][T11691] usb 8-1: Product: syz [ 1739.075516][T29339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.090341][T11691] usb 8-1: Manufacturer: syz [ 1739.095137][T11691] usb 8-1: SerialNumber: syz [ 1739.102584][T11691] usb 8-1: config 0 descriptor?? [ 1739.122279][T11691] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1739.338828][T11691] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1739.407481][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1739.463869][T11691] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1739.486499][T11691] usb 8-1: USB disconnect, device number 20 [ 1739.502180][T11691] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1739.545903][T11691] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1739.573157][T11691] quatech2 8-1:0.51: device disconnected [ 1740.562099][T28110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1740.574914][T28110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1740.633730][T28110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1740.769125][T28110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1740.781678][T28110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1740.804595][T29390] Failed to initialize the IGMP autojoin socket (err -2) [ 1740.861220][ T47] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1741.020952][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 1741.085038][ T47] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1741.122694][ T47] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1741.154069][ T47] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1741.206441][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.227137][ T47] usb 7-1: Product: syz [ 1741.270844][ T2561] block nbd0: Possible stuck request ffff888027348000: control (read@0,1024B). Runtime 960 seconds [ 1741.281672][ T2561] block nbd0: Possible stuck request ffff888027348200: control (read@1024,1024B). Runtime 960 seconds [ 1741.293517][ T2561] block nbd0: Possible stuck request ffff888027348400: control (read@2048,1024B). Runtime 960 seconds [ 1741.307914][ T47] usb 7-1: Manufacturer: syz [ 1741.322529][ T47] usb 7-1: SerialNumber: syz [ 1741.331698][ T2561] block nbd0: Possible stuck request ffff888027348600: control (read@3072,1024B). Runtime 960 seconds [ 1741.374144][ T47] usb 7-1: config 0 descriptor?? [ 1741.661723][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1741.699845][ T47] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input90 [ 1741.809168][ T47] imon:send_packet: packet tx failed (-71) [ 1741.841667][ T47] imon 7-1:0.0: panel buttons/knobs setup failed [ 1741.990264][ T47] rc_core: IR keymap rc-imon-pad not found [ 1742.019208][ T47] Registered IR keymap rc-empty [ 1742.050562][ T47] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1742.074248][T29418] syzkaller0: entered promiscuous mode [ 1742.087050][ T47] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1742.094032][T29418] syzkaller0: entered allmulticast mode [ 1742.126863][ T47] imon:send_packet: packet tx failed (-71) [ 1742.160214][ T47] imon 7-1:0.0: remote input dev register failed [ 1742.185893][ T47] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 1742.274273][ T47] imon 7-1:0.0: unable to initialize intf0, err 0 [ 1742.314149][ T47] imon:imon_probe: failed to initialize context! [ 1742.330239][ T47] imon 7-1:0.0: unable to register, err -19 [ 1742.330922][T11531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1742.350157][ T5914] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1742.360684][T11531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1742.370393][T11531] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1742.382701][T11531] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1742.382792][ T47] usb 7-1: USB disconnect, device number 123 [ 1742.423161][T11531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1742.563236][ T5914] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1742.584512][T29424] Failed to initialize the IGMP autojoin socket (err -2) [ 1742.592759][T29390] netdevsim netdevsim1 netdevsim0: renamed from eth9 [ 1742.610431][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.618454][ T5914] usb 6-1: Product: syz [ 1742.640171][ T5914] usb 6-1: Manufacturer: syz [ 1742.644885][ T5914] usb 6-1: SerialNumber: syz [ 1742.647449][T29390] netdevsim netdevsim1 netdevsim1: renamed from eth10 [ 1742.671276][ T5914] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1742.694811][ T5946] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1742.724633][T29390] netdevsim netdevsim1 netdevsim2: renamed from eth11 [ 1742.791258][ T47] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1742.804956][T29390] netdevsim netdevsim1 netdevsim3: renamed from eth12 [ 1742.872118][T11531] Bluetooth: hci5: command tx timeout [ 1742.995567][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 1743.046829][ T47] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1743.085832][ T47] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1743.121314][T29445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.142422][ T47] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1743.181821][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.189912][ T47] usb 7-1: Product: syz [ 1743.190446][T29445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.253410][ T5870] usb 6-1: USB disconnect, device number 27 [ 1743.266469][ T47] usb 7-1: Manufacturer: syz [ 1743.300194][ T47] usb 7-1: SerialNumber: syz [ 1743.356376][ T47] usb 7-1: config 0 descriptor?? [ 1743.576115][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1743.585917][ T47] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input92 [ 1743.653006][ T47] imon:send_packet: packet tx failed (-71) [ 1743.689994][ T47] imon 7-1:0.0: panel buttons/knobs setup failed [ 1743.750228][ T5946] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1743.777496][ T5946] ath9k_htc: Failed to initialize the device [ 1743.791380][ T5870] usb 6-1: ath9k_htc: USB layer deinitialized [ 1743.822510][ T47] rc_core: IR keymap rc-imon-pad not found [ 1743.851474][T29390] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1743.861922][ T47] Registered IR keymap rc-empty [ 1743.880148][ T47] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1743.901622][ T47] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1743.920783][T29390] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1743.934307][ T47] imon:send_packet: packet tx failed (-71) [ 1743.980897][ T47] imon 7-1:0.0: remote input dev register failed [ 1743.982269][T29390] wireguard: wg0: Could not create IPv4 socket [ 1743.997582][ T47] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 1744.019820][T29390] wireguard: wg1: Could not create IPv4 socket [ 1744.047406][T29390] wireguard: wg2: Could not create IPv4 socket [ 1744.057771][ T47] imon 7-1:0.0: unable to initialize intf0, err 0 [ 1744.078433][ T47] imon:imon_probe: failed to initialize context! [ 1744.120783][ T47] imon 7-1:0.0: unable to register, err -19 [ 1744.162209][ T47] usb 7-1: USB disconnect, device number 124 [ 1744.761539][T28110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1744.774260][T28110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1744.790413][T28110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1744.800831][T28110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1744.808382][T28110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1744.830452][ T47] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1744.878326][T29478] Failed to initialize the IGMP autojoin socket (err -2) [ 1744.970166][ T47] usb 8-1: device descriptor read/64, error -71 [ 1745.230698][ T47] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1745.390353][ T47] usb 8-1: device descriptor read/64, error -71 [ 1745.504220][ T47] usb usb8-port1: attempt power cycle [ 1745.661862][T29495] SELinux: policydb version -269437203 does not match my version range 15-35 [ 1745.676936][T29495] SELinux: failed to load policy [ 1745.810640][T29499] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5582'. [ 1745.891280][ T47] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1745.941486][ T47] usb 8-1: device descriptor read/8, error -71 [ 1746.220508][ T47] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1746.271223][ T47] usb 8-1: device descriptor read/8, error -71 [ 1746.410637][ T47] usb usb8-port1: unable to enumerate USB device [ 1746.483913][T29507] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 1746.496076][T29507] SELinux: failed to load policy [ 1746.501991][ T5946] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1746.850417][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 1746.875559][T28110] Bluetooth: hci5: command tx timeout [ 1746.884832][ T5946] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1746.900458][ T5946] usb 6-1: config 0 has no interface number 0 [ 1746.911487][ T5946] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1746.923659][ T5946] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1746.932940][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.941034][ T5946] usb 6-1: Product: syz [ 1746.945286][ T5946] usb 6-1: Manufacturer: syz [ 1746.949927][ T5946] usb 6-1: SerialNumber: syz [ 1746.957759][ T5946] usb 6-1: config 0 descriptor?? [ 1747.314380][T29478] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1747.347057][T29478] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1747.377096][T29478] wireguard: wg0: Could not create IPv4 socket [ 1747.390178][ T47] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1747.391762][T29478] wireguard: wg1: Could not create IPv4 socket [ 1747.406588][T29478] wireguard: wg2: Could not create IPv4 socket [ 1747.570417][ T47] usb 7-1: Using ep0 maxpacket: 16 [ 1747.586292][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.598329][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1747.648416][ T47] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1747.660322][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1747.700565][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.735570][ T47] usb 7-1: config 0 descriptor?? [ 1748.072112][T29553] batadv_slave_1: entered promiscuous mode [ 1748.184232][ T47] mcp2221 0003:04D8:00DD.006D: unknown main item tag 0x0 [ 1748.200191][ T47] mcp2221 0003:04D8:00DD.006D: unknown main item tag 0x0 [ 1748.217608][ T47] mcp2221 0003:04D8:00DD.006D: unknown main item tag 0x0 [ 1748.225200][ T47] mcp2221 0003:04D8:00DD.006D: unknown main item tag 0x0 [ 1748.243304][ T47] mcp2221 0003:04D8:00DD.006D: unknown main item tag 0x0 [ 1748.264022][ T47] mcp2221 0003:04D8:00DD.006D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1748.491296][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1748.512963][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1748.535917][ T5946] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1748.560544][ T5946] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1748.611565][T29529] i2c i2c-1: unsupported multi-msg i2c transaction [ 1748.631002][ T5946] usb 7-1: USB disconnect, device number 125 [ 1750.213881][T29614] FAULT_INJECTION: forcing a failure. [ 1750.213881][T29614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1750.395867][T29614] CPU: 1 UID: 0 PID: 29614 Comm: syz.6.5593 Tainted: G L syzkaller #0 PREEMPT(full) [ 1750.395899][T29614] Tainted: [L]=SOFTLOCKUP [ 1750.395906][T29614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1750.395917][T29614] Call Trace: [ 1750.395923][T29614] [ 1750.395931][T29614] dump_stack_lvl+0x100/0x190 [ 1750.395965][T29614] should_fail_ex.cold+0x5/0xa [ 1750.395989][T29614] _copy_to_user+0x32/0xd0 [ 1750.396016][T29614] simple_read_from_buffer+0xcb/0x170 [ 1750.396043][T29614] proc_fail_nth_read+0x1af/0x230 [ 1750.396072][T29614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1750.396102][T29614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1750.396128][T29614] vfs_read+0x1e4/0xb30 [ 1750.396154][T29614] ? __pfx_vfs_read+0x10/0x10 [ 1750.396175][T29614] ? __fget_files+0x215/0x3d0 [ 1750.396205][T29614] ? __fget_files+0x21f/0x3d0 [ 1750.396236][T29614] ksys_read+0x12a/0x250 [ 1750.396257][T29614] ? __pfx_ksys_read+0x10/0x10 [ 1750.396279][T29614] ? fdget+0x18b/0x210 [ 1750.396305][T29614] do_syscall_64+0x106/0xf80 [ 1750.396330][T29614] ? clear_bhb_loop+0x40/0x90 [ 1750.396353][T29614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.396379][T29614] RIP: 0033:0x7f72cfd5c84e [ 1750.396395][T29614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1750.396412][T29614] RSP: 002b:00007f72d0bb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1750.396431][T29614] RAX: ffffffffffffffda RBX: 00007f72d0bb46c0 RCX: 00007f72cfd5c84e [ 1750.396442][T29614] RDX: 000000000000000f RSI: 00007f72d0bb40a0 RDI: 0000000000000006 [ 1750.396453][T29614] RBP: 00007f72d0bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.396464][T29614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.396475][T29614] R13: 00007f72d0016218 R14: 00007f72d0016180 R15: 00007fff83fb0d68 [ 1750.396500][T29614] [ 1750.735265][ T47] usb 6-1: USB disconnect, device number 28 [ 1750.968917][ T29] audit: type=1400 audit(1771059442.222:1583): avc: denied { ioctl } for pid=29615 comm="syz.7.5596" path="socket:[112066]" dev="sockfs" ino=112066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1751.075413][T11531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1751.094573][T11531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1751.104673][T11531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1751.114437][T11531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1751.130693][T11531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1751.191994][T29621] Failed to initialize the IGMP autojoin socket (err -2) [ 1751.494575][ T47] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1751.890179][ T47] usb 8-1: Using ep0 maxpacket: 32 [ 1752.006252][ T47] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1752.043354][ T47] usb 8-1: config 0 has no interface number 0 [ 1752.056928][ T47] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1752.081211][ T47] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1752.116066][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.196283][ T47] usb 8-1: Product: syz [ 1752.205184][ T47] usb 8-1: Manufacturer: syz [ 1752.209902][ T47] usb 8-1: SerialNumber: syz [ 1752.226978][ T47] usb 8-1: config 0 descriptor?? [ 1752.590244][ T5914] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1752.752025][ T5914] usb 6-1: Using ep0 maxpacket: 16 [ 1752.770901][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.797621][ T5914] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1752.816963][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.847221][ T47] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1752.858766][ T5914] usb 6-1: config 0 descriptor?? [ 1752.910239][ T47] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1752.950701][ T47] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1752.975157][ T47] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1752.990388][ T47] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1753.011709][ T47] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1753.023587][ T47] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 1753.199119][T28110] Bluetooth: hci5: command tx timeout [ 1753.325661][ T5914] mcp2221 0003:04D8:00DD.006E: unknown main item tag 0x0 [ 1753.351988][ T5914] mcp2221 0003:04D8:00DD.006E: unknown main item tag 0x0 [ 1753.359322][ T5914] mcp2221 0003:04D8:00DD.006E: unknown main item tag 0x0 [ 1753.366921][ T5914] mcp2221 0003:04D8:00DD.006E: unknown main item tag 0x0 [ 1753.376980][ T5914] mcp2221 0003:04D8:00DD.006E: unknown main item tag 0x0 [ 1753.384967][ T5914] mcp2221 0003:04D8:00DD.006E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1753.474686][T29621] netdevsim netdevsim1 netdevsim0: renamed from eth9 [ 1753.488315][T29621] netdevsim netdevsim1 netdevsim1: renamed from eth10 [ 1753.507363][T29621] netdevsim netdevsim1 netdevsim2: renamed from eth11 [ 1753.534079][T29621] netdevsim netdevsim1 netdevsim3: renamed from eth12 [ 1753.719596][T29662] i2c i2c-1: unsupported multi-msg i2c transaction [ 1753.737627][ T5946] usb 6-1: USB disconnect, device number 29 [ 1753.899266][T11531] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1753.912586][T11531] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1753.921700][T11531] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1753.929371][T11531] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1753.937402][T11531] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1754.003876][T29700] Failed to initialize the IGMP autojoin socket (err -2) [ 1754.081612][T29621] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1754.106139][T29621] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1754.157132][T29621] wireguard: wg0: Could not create IPv4 socket [ 1754.192228][T29621] wireguard: wg1: Could not create IPv4 socket [ 1754.221230][ T5914] usb 8-1: USB disconnect, device number 25 [ 1754.227824][T29621] wireguard: wg2: Could not create IPv4 socket [ 1755.330418][ T5914] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1755.501830][ T5914] usb 8-1: Using ep0 maxpacket: 16 [ 1755.509030][ T5914] usb 8-1: config 254 has an invalid interface number: 235 but max is 0 [ 1755.521551][ T5914] usb 8-1: config 254 has no interface number 0 [ 1755.531144][ T5914] usb 8-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1755.545532][ T5914] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1755.557786][ T5914] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid maxpacket 18357, setting to 1024 [ 1755.575719][ T5914] usb 8-1: config 254 interface 235 has no altsetting 0 [ 1755.585645][ T5914] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1755.595422][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 1755.609047][ T5914] usb 8-1: Product: syz [ 1755.613798][ T5914] usb 8-1: Manufacturer: syz [ 1755.620498][ T5914] usb 8-1: SerialNumber: syz [ 1755.664712][T29723] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1755.690445][T29723] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1755.942443][ T5914] usbtest 8-1:254.235: couldn't get endpoints, -71 [ 1755.956023][ T5914] usbtest 8-1:254.235: probe with driver usbtest failed with error -71 [ 1755.975026][ T5914] usb 8-1: USB disconnect, device number 26 [ 1756.328266][T11531] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1756.349222][T11531] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1756.361769][T11531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1756.369627][T11531] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1756.377194][T11531] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1756.652975][T29762] Failed to initialize the IGMP autojoin socket (err -2) [ 1756.744511][T29751] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 1756.754869][T29751] SELinux: failed to load policy [ 1756.877938][ T29] audit: type=1400 audit(1771059448.152:1584): avc: denied { getopt } for pid=29770 comm="syz.7.5613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1758.120369][ T5914] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1758.202009][T29805] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.5616'. [ 1758.324052][ T5914] usb 7-1: Using ep0 maxpacket: 16 [ 1758.339385][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.373430][ T5914] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1758.411945][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.449612][ T5914] usb 7-1: config 0 descriptor?? [ 1758.470906][T11531] Bluetooth: hci5: command tx timeout [ 1758.916288][ T5914] mcp2221 0003:04D8:00DD.006F: unknown main item tag 0x0 [ 1758.927684][T29814] netlink: 'syz.7.5618': attribute type 11 has an invalid length. [ 1758.940231][ T5914] mcp2221 0003:04D8:00DD.006F: unknown main item tag 0x0 [ 1758.967618][ T5914] mcp2221 0003:04D8:00DD.006F: unknown main item tag 0x0 [ 1758.998591][ T5914] mcp2221 0003:04D8:00DD.006F: unknown main item tag 0x0 [ 1759.041414][ T5914] mcp2221 0003:04D8:00DD.006F: unknown main item tag 0x0 [ 1759.068433][T29814] CUSE: DEVNAME unspecified [ 1759.080695][ T5914] mcp2221 0003:04D8:00DD.006F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1759.144185][T29823] fuse: Bad value for 'user_id' [ 1759.169398][T29823] fuse: Bad value for 'user_id' [ 1759.200306][T18854] block nbd1: Possible stuck request ffff8880273f8000: control (read@0,1024B). Runtime 810 seconds [ 1759.219821][T18854] block nbd1: Possible stuck request ffff8880273f8200: control (read@1024,1024B). Runtime 810 seconds [ 1759.281820][T29823] overlay: ./file0 is not a directory [ 1759.290422][T18854] block nbd1: Possible stuck request ffff8880273f8400: control (read@2048,1024B). Runtime 810 seconds [ 1759.310489][T18854] block nbd1: Possible stuck request ffff8880273f8600: control (read@3072,1024B). Runtime 810 seconds [ 1759.315021][ T5862] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1759.396051][T29804] i2c i2c-1: unsupported multi-msg i2c transaction [ 1759.422483][T11691] usb 7-1: USB disconnect, device number 126 [ 1759.551332][ T5862] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1759.588179][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.629819][ T5862] usb 6-1: Product: syz [ 1759.639588][ T5862] usb 6-1: Manufacturer: syz [ 1759.653024][T29762] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1759.671625][ T5862] usb 6-1: SerialNumber: syz [ 1759.691268][ T5862] usb 6-1: config 0 descriptor?? [ 1759.732327][T29835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1759.741469][T29762] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1759.858590][ T29] audit: type=1400 audit(1771059451.132:1585): avc: denied { map } for pid=29831 comm="syz.7.5621" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1759.911611][ T29] audit: type=1400 audit(1771059451.132:1586): avc: denied { execute } for pid=29831 comm="syz.7.5621" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1759.941473][ T5862] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1760.045288][T29835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.082736][T29762] wireguard: wg0: Could not create IPv4 socket [ 1760.102310][T29762] wireguard: wg1: Could not create IPv4 socket [ 1760.154818][T29762] wireguard: wg2: Could not create IPv4 socket [ 1761.425011][ T5862] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1761.450780][ T5862] usb 6-1: USB disconnect, device number 30 [ 1761.566168][T29900] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5625'. [ 1761.619282][T28110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1761.635060][T28110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1761.645683][T28110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1761.664337][T28110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1761.672448][T28110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1761.720964][ T29] audit: type=1400 audit(1771059452.982:1587): avc: denied { bind } for pid=29896 comm="syz.6.5624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1761.744797][T29903] Failed to initialize the IGMP autojoin socket (err -2) [ 1764.067591][T11531] Bluetooth: hci5: command tx timeout [ 1764.650678][T29958] 9p: Bad value for 'rfdno' [ 1764.955759][ T29] audit: type=1400 audit(1771059456.232:1588): avc: denied { bind } for pid=29967 comm="syz.6.5631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1765.050408][T29971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5635'. [ 1765.285990][ T29] audit: type=1400 audit(1771059456.552:1589): avc: denied { watch_mount } for pid=29970 comm="syz.7.5635" path="/222" dev="tmpfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1765.647715][ T9914] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1766.388238][T11531] Bluetooth: hci5: command tx timeout [ 1766.470513][ T5946] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1767.033702][ T5946] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 1767.061190][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.176934][ T5946] usb 8-1: Product: syz [ 1767.209766][ T5946] usb 8-1: Manufacturer: syz [ 1767.215918][ T5946] usb 8-1: SerialNumber: syz [ 1767.265043][ T5946] usb 8-1: config 0 descriptor?? [ 1767.353753][ T5946] go7007 8-1:0.0: probe with driver go7007 failed with error -12 [ 1767.533577][T29995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1767.571980][T29995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1767.646242][ T118] usb 8-1: USB disconnect, device number 27 [ 1768.470622][T11531] Bluetooth: hci5: command tx timeout [ 1768.473738][T29903] netdevsim netdevsim1 netdevsim0: renamed from eth9 [ 1768.506107][T29903] netdevsim netdevsim1 netdevsim1: renamed from eth10 [ 1768.532477][T29903] netdevsim netdevsim1 netdevsim2: renamed from eth11 [ 1768.554592][T29903] netdevsim netdevsim1 netdevsim3: renamed from eth12 [ 1768.836584][T25569] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.868344][T25569] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.876950][T25569] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.901121][T25569] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.918160][T25569] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.932943][T25569] netdevsim netdevsim4 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.951698][T25569] netdevsim netdevsim4 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.976133][T25569] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1768.985456][T25569] netdevsim netdevsim9 dev1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.023687][T11515] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.087925][T27272] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.995819][T27272] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.045062][T27272] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.089041][T28110] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1770.100953][T28110] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1770.109040][T28110] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1770.117541][T28110] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1770.126756][T28110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1770.137842][T30045] support for cryptoloop has been removed. Use dm-crypt instead. [ 1770.170138][ T118] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1770.192015][T27272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.220983][T27272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.229734][T27272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.281643][T11512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.289525][T11512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.342589][T27272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.360468][ T118] usb 8-1: Using ep0 maxpacket: 32 [ 1770.372496][ T118] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1770.410124][ T118] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.445483][ T118] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1770.522943][T27272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1770.549509][T27272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1770.556903][T11531] Bluetooth: hci5: command tx timeout [ 1770.600541][ T5870] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1770.694100][T30041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.702760][T30041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1770.742003][T30063] netlink: 'syz.1.5405': attribute type 1 has an invalid length. [ 1770.771946][ T5870] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1770.788287][T30044] chnl_net:caif_netlink_parms(): no params data found [ 1770.791794][T30063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1770.811190][ T5870] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1770.830567][ T5870] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1770.869956][ T5870] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1770.902524][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.932303][ T5870] usb 7-1: Product: syz [ 1770.938226][T30044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.945944][T30044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.946322][ T5870] usb 7-1: Manufacturer: syz [ 1770.953669][T30044] bridge_slave_0: entered allmulticast mode [ 1770.969315][T30044] bridge_slave_0: entered promiscuous mode [ 1770.982635][ T5870] usb 7-1: SerialNumber: syz [ 1771.000565][ T5870] usblp0: Disabling reads from problematic bidirectional printer [ 1771.016737][T30044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.044536][T30044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.080834][T30044] bridge_slave_1: entered allmulticast mode [ 1771.088126][T30044] bridge_slave_1: entered promiscuous mode [ 1771.117589][ T118] gspca_nw80x: reg_w err -71 [ 1771.132761][ T118] nw80x 8-1:3.0: probe with driver nw80x failed with error -71 [ 1771.381862][ T2561] block nbd0: Possible stuck request ffff888027348000: control (read@0,1024B). Runtime 990 seconds [ 1771.385994][T30078] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1771.392934][ T2561] block nbd0: Possible stuck request ffff888027348200: control (read@1024,1024B). Runtime 990 seconds [ 1771.406921][ T118] usb 8-1: USB disconnect, device number 28 [ 1771.414584][ T2561] block nbd0: Possible stuck request ffff888027348400: control (read@2048,1024B). Runtime 990 seconds [ 1771.431219][ T2561] block nbd0: Possible stuck request ffff888027348600: control (read@3072,1024B). Runtime 990 seconds [ 1771.445647][ T5870] usblp 7-1:4.0: usblp0: USB Unidirectional printer dev 127 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1771.465502][T30078] exFAT-fs (nullb0): invalid boot record signature [ 1771.479592][ T5870] usb 7-1: USB disconnect, device number 127 [ 1771.535377][ T5870] usblp0: removed [ 1771.551533][T30078] exFAT-fs (nullb0): failed to read boot sector [ 1771.592515][T30078] exFAT-fs (nullb0): failed to recognize exfat type [ 1771.720218][T30044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1771.733342][T30044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1771.767300][T30044] team0: Port device team_slave_0 added [ 1771.775779][T30044] team0: Port device team_slave_1 added [ 1771.953899][T30044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.027946][T30044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.059368][T30044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1772.234707][T11531] Bluetooth: hci6: command tx timeout [ 1772.246920][T30044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1772.258011][T30044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.284586][T30044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1772.434687][T30044] hsr_slave_0: entered promiscuous mode [ 1772.448783][T30044] hsr_slave_1: entered promiscuous mode [ 1772.455838][T30044] debugfs: 'hsr0' already exists in 'hsr' [ 1772.462742][T30044] Cannot create hsr debugfs directory [ 1772.600419][T24018] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1772.994326][T24018] usb 7-1: not running at top speed; connect to a high speed hub [ 1773.032836][T24018] usb 7-1: config 3 has an invalid interface number: 47 but max is 1 [ 1773.079482][T24018] usb 7-1: config 3 has no interface number 0 [ 1773.094457][T24018] usb 7-1: config 3 interface 1 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1773.119509][T24018] usb 7-1: config 3 interface 1 has no altsetting 0 [ 1773.150434][T24018] usb 7-1: config 3 interface 47 has no altsetting 0 [ 1774.254832][T24018] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=43.bd [ 1774.307496][T24018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.311135][T11531] Bluetooth: hci6: command tx timeout [ 1774.319174][T24018] usb 7-1: Product: syz [ 1774.336104][T24018] usb 7-1: Manufacturer: syz [ 1774.412022][T24018] usb 7-1: SerialNumber: syz [ 1774.465122][T30044] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.664222][T30044] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.667765][T24018] usb 7-1: selecting invalid altsetting 0 [ 1774.788678][T30044] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.835977][T24018] usb 7-1: USB disconnect, device number 2 [ 1774.917971][ T5791] udevd[5791]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 1774.944319][ T5791] udevd[5791]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1775.068336][T30044] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.442030][T30044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1775.493173][T30044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1775.505960][T30044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1775.513889][T30142] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1775.520421][T30142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1775.532905][T30044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1775.583822][T30142] vhci_hcd vhci_hcd.0: Device attached [ 1775.611887][T30143] vhci_hcd: connection closed [ 1775.612323][T25569] vhci_hcd vhci_hcd.7: stop threads [ 1775.665594][T25569] vhci_hcd vhci_hcd.7: release socket [ 1775.685598][T25569] vhci_hcd vhci_hcd.7: disconnect device [ 1775.748434][T30044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1775.832989][T30162] netlink: 'syz.6.5658': attribute type 11 has an invalid length. [ 1775.838018][T30044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1775.872672][T30162] netlink: 'syz.6.5658': attribute type 4 has an invalid length. [ 1775.887027][T30162] netlink: 'syz.6.5658': attribute type 5 has an invalid length. [ 1776.122560][T30162] netlink: 'syz.6.5658': attribute type 6 has an invalid length. [ 1776.185086][T30162] netlink: 199748 bytes leftover after parsing attributes in process `syz.6.5658'. [ 1776.211208][T25569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.218303][T25569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.288621][T25569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.295714][T25569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.331028][ T118] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 1776.395763][T11531] Bluetooth: hci6: command tx timeout [ 1776.403479][T30176] netlink: 'syz.7.5660': attribute type 1 has an invalid length. [ 1776.523484][ T118] usb 7-1: Invalid ep0 maxpacket: 64 [ 1776.690205][ T118] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 1776.853490][T30044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1776.865791][ T118] usb 7-1: Invalid ep0 maxpacket: 64 [ 1777.188801][T30044] veth0_vlan: entered promiscuous mode [ 1777.406579][T30044] veth1_vlan: entered promiscuous mode [ 1777.473795][ T118] usb usb7-port1: attempt power cycle [ 1777.481476][T30199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=30199 comm=syz.5.5663 [ 1777.811994][T30213] qnx6: unable to read the first superblock [ 1777.850207][ T118] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1777.912332][ T118] usb 7-1: Invalid ep0 maxpacket: 64 [ 1778.020595][ T5809] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1778.060266][ T118] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1778.272786][T30044] veth0_macvtap: entered promiscuous mode [ 1778.300831][T30225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5665'. [ 1778.320462][T30225] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5665'. [ 1778.330752][ T118] usb 7-1: Invalid ep0 maxpacket: 64 [ 1778.337517][T30044] veth1_macvtap: entered promiscuous mode [ 1778.351177][ T5809] usb 8-1: config 0 has no interfaces? [ 1778.362194][ T5809] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1778.373255][ T118] usb usb7-port1: unable to enumerate USB device [ 1778.390980][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.398678][T30044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.406602][ T5809] usb 8-1: Product: syz [ 1778.420337][ T5809] usb 8-1: Manufacturer: syz [ 1778.425243][ T5809] usb 8-1: SerialNumber: syz [ 1778.457325][T30044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.460564][ T5809] usb 8-1: config 0 descriptor?? [ 1778.471518][T11531] Bluetooth: hci6: command tx timeout [ 1778.477195][T25569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.514050][T25569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.534960][T25569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.540699][ T118] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1778.565014][T25569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.696489][T11515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.720630][ T118] usb 2-1: device descriptor read/64, error -71 [ 1778.727067][T11515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.786226][T25569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.815888][T25569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.980677][ T118] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1779.140163][ T118] usb 2-1: device descriptor read/64, error -71 [ 1779.250337][T11691] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1779.330733][ T118] usb usb2-port1: attempt power cycle [ 1779.423351][T11691] usb 7-1: config 0 interface 0 altsetting 164 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1779.459900][T11691] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1779.479549][T11691] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1779.509919][T11691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.547379][T11691] usb 7-1: config 0 descriptor?? [ 1779.571213][T30232] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1779.690245][ T118] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1779.721526][ T118] usb 2-1: device descriptor read/8, error -71 [ 1779.960431][ T118] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1779.995384][T11691] kye 0003:0458:0087.0070: unbalanced collection at end of report description [ 1780.018779][ T118] usb 2-1: device descriptor read/8, error -71 [ 1780.021803][T11691] kye 0003:0458:0087.0070: parse failed [ 1780.044361][T11691] kye 0003:0458:0087.0070: probe with driver kye failed with error -22 [ 1780.180507][ T118] usb usb2-port1: unable to enumerate USB device [ 1780.209161][T11691] usb 7-1: USB disconnect, device number 7 [ 1781.436046][T30257] overlayfs: missing 'lowerdir' [ 1781.497155][ T47] usb 8-1: USB disconnect, device number 29 [ 1782.285083][T30268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=30268 comm=syz.6.5676 [ 1782.439419][T30275] qnx6: unable to read the first superblock [ 1782.871363][ T29] audit: type=1400 audit(1771059474.152:1590): avc: denied { unmount } for pid=30044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1783.212415][T30290] vivid-007: disconnect [ 1783.219303][T30290] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5680'. [ 1783.741445][T30297] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5684'. [ 1783.901210][T30281] vivid-007: reconnect [ 1784.037312][T30312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=30312 comm=syz.7.5687 [ 1784.061377][T30311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5688'. [ 1784.230686][ T47] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1784.400133][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 1784.419856][ T47] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.446045][ T47] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.472680][ T47] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1784.512007][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.720628][T30333] lo speed is unknown, defaulting to 1000 [ 1784.738061][T30333] lo speed is unknown, defaulting to 1000 [ 1784.757580][T30333] lo speed is unknown, defaulting to 1000 [ 1784.806854][T30333] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1784.830359][ T5870] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1784.912564][ T29] audit: type=1400 audit(1771059476.192:1591): avc: denied { module_load } for pid=30339 comm="syz.5.5692" path="/sys/kernel/oops_count" dev="sysfs" ino=57509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1784.973135][ T47] usbhid 3-1:128.0: can't add hid device: -71 [ 1784.982614][ T47] usbhid 3-1:128.0: probe with driver usbhid failed with error -71 [ 1785.196512][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 1785.251449][T30333] lo speed is unknown, defaulting to 1000 [ 1785.262289][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.285655][T30333] lo speed is unknown, defaulting to 1000 [ 1785.331774][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.351301][T30333] lo speed is unknown, defaulting to 1000 [ 1785.358363][ T47] usb 3-1: USB disconnect, device number 63 [ 1785.383302][T30333] lo speed is unknown, defaulting to 1000 [ 1785.404442][T30333] lo speed is unknown, defaulting to 1000 [ 1785.411605][ T5870] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1785.443621][T30333] lo speed is unknown, defaulting to 1000 [ 1785.451058][T30333] lo speed is unknown, defaulting to 1000 [ 1785.468307][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.495448][T30333] lo speed is unknown, defaulting to 1000 [ 1785.511856][ T29] audit: type=1400 audit(1771059476.762:1592): avc: denied { write } for pid=30339 comm="syz.5.5692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1785.556013][ T5870] usb 2-1: config 0 descriptor?? [ 1785.600766][ T29] audit: type=1400 audit(1771059476.782:1593): avc: denied { search } for pid=30346 comm="sed" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1785.680105][ T29] audit: type=1400 audit(1771059476.782:1594): avc: denied { read } for pid=30346 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1785.768618][ T29] audit: type=1400 audit(1771059476.782:1595): avc: denied { open } for pid=30346 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1786.023153][ T29] audit: type=1400 audit(1771059476.782:1596): avc: denied { getattr } for pid=30346 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1881 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1786.048756][ T29] audit: type=1400 audit(1771059476.802:1597): avc: denied { read write } for pid=23955 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1786.383227][T30360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5694'. [ 1786.395378][T30360] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5694'. [ 1786.947996][ T29] audit: type=1400 audit(1771059476.802:1598): avc: denied { open } for pid=23955 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.024865][T30372] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1787.032882][T30372] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1787.076436][ T29] audit: type=1400 audit(1771059476.802:1599): avc: denied { ioctl } for pid=23955 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.140670][T30374] qnx6: unable to read the first superblock [ 1788.410318][ T29] audit: type=1400 audit(1771059476.872:1600): avc: denied { ioctl } for pid=30325 comm="syz.1.5690" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1788.512571][ T5870] usbhid 2-1:0.0: can't add hid device: -71 [ 1788.534597][ T5870] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1788.546437][ T29] audit: type=1400 audit(1771059476.882:1601): avc: denied { getattr } for pid=30324 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.622623][ T29] audit: type=1400 audit(1771059476.882:1602): avc: denied { add_name } for pid=30324 comm="dhcpcd-run-hook" name="resolv.conf.eth1.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.654340][ T5870] usb 2-1: USB disconnect, device number 68 [ 1788.671022][T30379] tipc: Started in network mode [ 1788.675954][T30379] tipc: Node identity aa5126fda9d5, cluster identity 4711 [ 1788.679379][ T29] audit: type=1400 audit(1771059476.882:1603): avc: denied { create } for pid=30324 comm="dhcpcd-run-hook" name="resolv.conf.eth1.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.730814][T30379] tipc: Enabled bearer , priority 0 [ 1788.730830][ T29] audit: type=1400 audit(1771059476.882:1604): avc: denied { write } for pid=30324 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.dhcp" dev="tmpfs" ino=20467 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.767881][ T29] audit: type=1400 audit(1771059476.882:1605): avc: denied { append } for pid=30324 comm="dhcpcd-run-hook" name="resolv.conf.eth1.dhcp" dev="tmpfs" ino=20467 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1788.798659][T30382] syzkaller0: entered promiscuous mode [ 1788.803618][ T29] audit: type=1400 audit(1771059477.092:1606): avc: denied { read write } for pid=30349 comm="syz.6.5693" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1788.842427][ T29] audit: type=1400 audit(1771059477.092:1607): avc: denied { open } for pid=30349 comm="syz.6.5693" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1788.887409][ T29] audit: type=1400 audit(1771059477.092:1608): avc: denied { read append } for pid=30350 comm="syz.5.5694" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1788.889184][T30382] syzkaller0: entered allmulticast mode [ 1788.956238][ T29] audit: type=1400 audit(1771059477.092:1609): avc: denied { open } for pid=30350 comm="syz.5.5694" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1788.979693][ T47] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1789.041537][T30392] tipc: Resetting bearer [ 1789.080332][T30378] tipc: Resetting bearer [ 1789.120374][ T5870] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1789.166662][ T47] usb 8-1: Using ep0 maxpacket: 8 [ 1789.181635][ T47] usb 8-1: config 0 has an invalid interface number: 232 but max is 0 [ 1789.181863][T30378] tipc: Disabling bearer [ 1789.194900][ T47] usb 8-1: config 0 has no interface number 0 [ 1789.213920][ T47] usb 8-1: config 0 interface 232 has no altsetting 0 [ 1789.232718][ T47] usb 8-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=68.51 [ 1789.250810][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.277789][T18854] block nbd1: Possible stuck request ffff8880273f8000: control (read@0,1024B). Runtime 840 seconds [ 1789.288683][T18854] block nbd1: Possible stuck request ffff8880273f8200: control (read@1024,1024B). Runtime 840 seconds [ 1789.310757][ T47] usb 8-1: Product: syz [ 1789.312687][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.320644][ T47] usb 8-1: Manufacturer: syz [ 1789.330644][T18854] block nbd1: Possible stuck request ffff8880273f8400: control (read@2048,1024B). Runtime 840 seconds [ 1789.342552][T18854] block nbd1: Possible stuck request ffff8880273f8600: control (read@3072,1024B). Runtime 840 seconds [ 1789.350149][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1789.358078][T11531] Bluetooth: hci3: command 0x0406 tx timeout [ 1789.378981][ T47] usb 8-1: SerialNumber: syz [ 1789.403451][ T47] usb 8-1: config 0 descriptor?? [ 1789.413611][ T47] keyspan_pda 8-1:0.232: required endpoints missing [ 1789.484380][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.511900][ T5870] usb 2-1: config 0 descriptor?? [ 1789.564267][T30403] fuseblk: Bad value for 'blksize' [ 1789.595347][T30405] netlink: 'syz.6.5703': attribute type 3 has an invalid length. [ 1789.608620][T30405] netlink: 'syz.6.5703': attribute type 3 has an invalid length. [ 1789.669456][ T47] usb 8-1: USB disconnect, device number 30 [ 1789.779476][T30383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1789.799637][T30383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1789.872463][T30383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1790.131651][ T5870] logitech 0003:046D:C50C.0071: unknown main item tag 0x0 [ 1790.138837][ T5870] logitech 0003:046D:C50C.0071: unknown main item tag 0x0 [ 1790.240120][ T5870] logitech 0003:046D:C50C.0071: unknown main item tag 0x0 [ 1790.247350][ T5870] logitech 0003:046D:C50C.0071: unknown main item tag 0x0 [ 1790.270139][ T5870] logitech 0003:046D:C50C.0071: unknown main item tag 0x0 [ 1790.277342][ T5870] logitech 0003:046D:C50C.0071: unknown main item tag 0x0 [ 1790.302199][ T5870] logitech 0003:046D:C50C.0071: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 1790.497211][ T5870] usb 2-1: USB disconnect, device number 69 [ 1790.761591][T30420] fido_id[30420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1791.090492][ T5946] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1791.199819][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.213350][ T1294] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1791.222696][ T1294] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1791.325368][ T5946] usb 8-1: Using ep0 maxpacket: 32 [ 1791.369386][ T5946] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1791.402759][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.422716][ T5946] usb 8-1: config 0 descriptor?? [ 1791.447797][ T5946] usb 8-1: selecting invalid altsetting 3 [ 1791.462968][T30448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=30448 comm=syz.1.5713 [ 1791.465671][ T5946] comedi comedi5: could not set alternate setting 3 in high speed [ 1791.514396][ T5946] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1791.541758][ T5946] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1791.744321][ T5946] usb 8-1: USB disconnect, device number 31 [ 1791.805063][T30454] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5714'. [ 1793.539603][T30465] lo speed is unknown, defaulting to 1000 [ 1793.619342][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 1793.619367][ T29] audit: type=1400 audit(1771059484.862:1689): avc: denied { mount } for pid=30461 comm="syz.1.5715" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1793.907683][T30473] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1794.258961][ T29] audit: type=1400 audit(1771059485.162:1690): avc: denied { mount } for pid=30468 comm="syz.7.5716" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1794.468060][ T29] audit: type=1400 audit(1771059485.182:1691): avc: denied { unlink } for pid=30468 comm="syz.7.5716" name="#78" dev="tmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1794.640381][ T29] audit: type=1400 audit(1771059485.202:1692): avc: denied { mount } for pid=30468 comm="syz.7.5716" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1794.740020][ T29] audit: type=1400 audit(1771059485.212:1693): avc: denied { map_create } for pid=30468 comm="syz.7.5716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1794.899267][ T29] audit: type=1400 audit(1771059485.212:1694): avc: denied { map_read map_write } for pid=30468 comm="syz.7.5716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1795.010348][ T29] audit: type=1400 audit(1771059485.842:1695): avc: denied { unmount } for pid=24742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1795.120146][T24018] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1795.127860][ T29] audit: type=1400 audit(1771059485.842:1696): avc: denied { create } for pid=30474 comm="syz.2.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1795.270383][ T29] audit: type=1400 audit(1771059485.862:1697): avc: denied { create } for pid=30474 comm="syz.2.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1795.356478][T24018] usb 8-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 1795.373291][ T29] audit: type=1400 audit(1771059485.952:1698): avc: denied { unmount } for pid=24742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1795.376737][T24018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.500612][ T47] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1795.547794][T24018] usb 8-1: config 0 descriptor?? [ 1795.563865][T30476] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 1795.574504][T30476] SELinux: failed to load policy [ 1795.709607][ T47] usb 6-1: Using ep0 maxpacket: 8 [ 1795.745455][ T47] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1795.815900][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.859459][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.902938][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1795.961712][ T47] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1795.978441][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.040981][T30480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.054953][T30480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.117685][ T47] usb 6-1: config 0 descriptor?? [ 1796.471594][ T47] usbhid 6-1:0.0: can't add hid device: -71 [ 1796.500185][ T5809] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1796.516478][ T47] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1796.611917][ T47] usb 6-1: USB disconnect, device number 31 [ 1796.802169][ T5809] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1796.836843][ T5809] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1796.938071][ T5809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1796.986723][ T5809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1797.022613][ T5809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1797.113502][ T5809] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1797.142938][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1797.206261][ T5809] usb 7-1: Product: syz [ 1797.237333][ T5809] usb 7-1: Manufacturer: syz [ 1797.320348][ T5809] cdc_wdm 7-1:1.0: skipping garbage [ 1797.380622][ T5809] cdc_wdm 7-1:1.0: skipping garbage [ 1797.416976][ T5809] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1797.447176][ T5809] cdc_wdm 7-1:1.0: Unknown control protocol [ 1797.904646][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1797.911487][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1797.920210][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1797.926823][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1797.933065][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1797.939645][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1797.945923][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1797.952499][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1797.958764][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1797.965347][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1797.971624][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1797.978206][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1797.984625][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1797.991214][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1797.998734][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1798.005334][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1798.012252][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1798.018852][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1798.025223][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1798.031817][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1798.039277][ T118] usb 7-1: USB disconnect, device number 8 [ 1798.045176][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1798.533755][T30547] 9p: Bad value for 'rfdno' [ 1798.551595][T30549] Cannot find add_set index 0 as target [ 1798.812511][T24018] usbhid 8-1:0.0: can't add hid device: -71 [ 1798.832669][T24018] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1798.875895][T11515] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1798.907211][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 1798.907229][ T29] audit: type=1400 audit(1771059490.182:1732): avc: denied { create } for pid=30553 comm="syz.2.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1799.013914][T24018] usb 8-1: USB disconnect, device number 32 [ 1799.125223][T30560] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5729'. [ 1800.495033][ T29] audit: type=1400 audit(1771059491.762:1733): avc: denied { create } for pid=30553 comm="syz.2.5728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1800.560382][ T29] audit: type=1400 audit(1771059491.772:1734): avc: denied { read } for pid=30553 comm="syz.2.5728" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1800.586933][T30580] autofs: Bad value for 'fd' [ 1800.797151][ T29] audit: type=1400 audit(1771059491.772:1735): avc: denied { open } for pid=30553 comm="syz.2.5728" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1800.895446][T30591] bond0: entered promiscuous mode [ 1800.910298][ T29] audit: type=1400 audit(1771059491.772:1736): avc: denied { ioctl } for pid=30553 comm="syz.2.5728" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1801.055629][T24018] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1801.057577][T30591] bond0: left promiscuous mode [ 1801.261386][T24018] usb 7-1: Using ep0 maxpacket: 32 [ 1801.267888][T24018] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1801.283646][T30596] netlink: 9 bytes leftover after parsing attributes in process `syz.7.5735'. [ 1801.285431][ T29] audit: type=1400 audit(1771059492.562:1737): avc: denied { create } for pid=30594 comm="syz.5.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1801.313944][T24018] usb 7-1: config 0 has no interface number 0 [ 1801.333606][T24018] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1801.466485][ T2561] block nbd0: Possible stuck request ffff888027348000: control (read@0,1024B). Runtime 1020 seconds [ 1801.478194][ T2561] block nbd0: Possible stuck request ffff888027348200: control (read@1024,1024B). Runtime 1020 seconds [ 1801.489930][ T2561] block nbd0: Possible stuck request ffff888027348400: control (read@2048,1024B). Runtime 1020 seconds [ 1801.501328][ T2561] block nbd0: Possible stuck request ffff888027348600: control (read@3072,1024B). Runtime 1020 seconds [ 1801.521951][T24018] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1801.611087][ T29] audit: type=1400 audit(1771059492.862:1738): avc: denied { write } for pid=30594 comm="syz.5.5734" name="unix" dev="proc" ino=4026533555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1801.920381][T24018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.928421][T24018] usb 7-1: Product: syz [ 1801.959051][ T29] audit: type=1400 audit(1771059492.872:1739): avc: denied { name_bind } for pid=30594 comm="syz.5.5734" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1801.982810][ T29] audit: type=1400 audit(1771059492.872:1740): avc: denied { node_bind } for pid=30594 comm="syz.5.5734" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1802.008673][ T29] audit: type=1400 audit(1771059492.882:1741): avc: denied { write } for pid=30594 comm="syz.5.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1802.010162][T24018] usb 7-1: Manufacturer: syz [ 1802.238647][T24018] usb 7-1: SerialNumber: syz [ 1802.270637][T24018] usb 7-1: config 0 descriptor?? [ 1802.280659][T30583] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1802.517131][T30583] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1803.284283][T30583] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.5731'. [ 1803.796931][T24018] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1804.198176][T30636] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1804.258271][T24018] asix 7-1:0.188: probe with driver asix failed with error -71 [ 1804.466132][T24018] usb 7-1: USB disconnect, device number 9 [ 1804.907330][T30653] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5746'. [ 1804.920946][ T118] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1805.054781][T30660] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1805.070334][ T118] usb 2-1: device descriptor read/64, error -71 [ 1805.179616][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1805.179633][ T29] audit: type=1400 audit(1771059496.452:1743): avc: denied { create } for pid=30666 comm="syz.7.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1805.288785][ T29] audit: type=1400 audit(1771059496.452:1744): avc: denied { setopt } for pid=30666 comm="syz.7.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1805.355281][ T29] audit: type=1400 audit(1771059496.582:1745): avc: denied { mount } for pid=30671 comm="syz.6.5750" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1805.383208][ T118] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1806.380114][T24018] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1806.421035][ T118] usb 2-1: device descriptor read/64, error -71 [ 1806.555764][ T29] audit: type=1400 audit(1771059497.832:1746): avc: denied { unmount } for pid=23955 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1806.560816][ T118] usb usb2-port1: attempt power cycle [ 1806.610361][T24018] usb 8-1: Using ep0 maxpacket: 32 [ 1806.643495][T24018] usb 8-1: New USB device found, idVendor=1bc7, idProduct=1041, bcdDevice=54.7c [ 1806.663461][T24018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.690156][T24018] usb 8-1: Product: syz [ 1806.692693][T30689] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5754'. [ 1806.700358][T24018] usb 8-1: Manufacturer: syz [ 1806.728132][T24018] usb 8-1: SerialNumber: syz [ 1806.743412][T24018] usb 8-1: config 0 descriptor?? [ 1806.961528][ T118] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1807.015410][ T118] usb 2-1: device descriptor read/8, error -71 [ 1807.140998][T24018] cdc_mbim 8-1:0.0: CDC Union missing and no IAD found [ 1807.236456][ T30] INFO: task syz.0.5355:27893 blocked for more than 143 seconds. [ 1807.320413][ T30] Tainted: G L syzkaller #0 [ 1807.451559][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1807.599636][ T30] task:syz.0.5355 state:D stack:26760 pid:27893 tgid:27892 ppid:16982 task_flags:0x400140 flags:0x00080002 [ 1807.801831][ T30] Call Trace: [ 1807.850700][ T30] [ 1807.919985][ T30] __schedule+0xfee/0x6020 [ 1807.996293][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1808.108462][ T30] ? __pfx___schedule+0x10/0x10 [ 1808.173359][ T30] ? find_held_lock+0x2b/0x80 [ 1808.241023][ T30] ? schedule+0x2bf/0x390 [ 1808.304610][ T30] schedule+0xdd/0x390 [ 1808.375998][ T30] schedule_preempt_disabled+0x13/0x30 [ 1808.437592][ T30] __mutex_lock+0xc9a/0x1b90 [ 1808.515670][ T30] ? bdev_open+0xa2/0xe40 [ 1808.581935][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1808.633283][ T30] ? bd_prepare_to_claim+0x1e0/0x280 [ 1808.662570][T24018] cdc_mbim 8-1:0.0: bind() failure [ 1808.668666][T24018] option 8-1:0.0: GSM modem (1-port) converter detected [ 1808.678654][T24018] usb 8-1: USB disconnect, device number 33 [ 1808.686131][T24018] option 8-1:0.0: device disconnected [ 1808.686296][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1808.732545][ T30] ? file_init_path+0x48e/0x670 [ 1808.737468][ T30] ? bdev_open+0xa2/0xe40 [ 1808.750207][ T30] bdev_open+0xa2/0xe40 [ 1808.757350][ T30] ? iput+0x3a/0x40 [ 1808.769293][ T30] bdev_file_open_by_dev+0x179/0x210 [ 1808.779426][ T30] setup_bdev_super+0x385/0x730 [ 1808.789897][ T30] get_tree_bdev_flags+0x363/0x620 [ 1808.802872][ T30] ? __pfx_jfs_fill_super+0x10/0x10 [ 1808.808123][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1808.822377][ T30] ? rcu_is_watching+0x12/0xc0 [ 1808.827186][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1808.832967][ T30] ? security_capable+0x80/0x260 [ 1808.837945][ T30] vfs_get_tree+0x92/0x320 [ 1808.844474][ T30] path_mount+0x7d0/0x23d0 [ 1808.848931][ T30] ? __pfx_path_mount+0x10/0x10 [ 1808.856969][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1808.865064][ T30] ? putname+0xb1/0x110 [ 1808.869251][ T30] ? kmem_cache_free+0x124/0x670 [ 1808.879970][ T30] ? __x64_sys_mount+0x293/0x310 [ 1808.885260][ T30] __x64_sys_mount+0x293/0x310 [ 1808.890297][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 1808.895617][ T30] do_syscall_64+0x106/0xf80 [ 1808.900596][ T30] ? clear_bhb_loop+0x40/0x90 [ 1808.905294][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.913099][ T30] RIP: 0033:0x7f7d0b79bf79 [ 1808.917536][ T30] RSP: 002b:00007f7d0c634028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1808.944104][ T30] RAX: ffffffffffffffda RBX: 00007f7d0ba15fa0 RCX: 00007f7d0b79bf79 [ 1808.958079][ T30] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 1808.966387][ T30] RBP: 00007f7d0b8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1808.976722][ T30] R10: 0000000001a0c000 R11: 0000000000000246 R12: 0000000000000000 [ 1808.986156][ T30] R13: 00007f7d0ba16038 R14: 00007f7d0ba15fa0 R15: 00007ffe1abd3768 [ 1809.000156][ T30] [ 1809.063159][ T30] [ 1809.063159][ T30] Showing all locks held in the system: [ 1809.092536][ T30] 1 lock held by khungtaskd/30: [ 1809.123391][ T30] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1809.137859][ T29] audit: type=1400 audit(1771059500.412:1747): avc: denied { mount } for pid=30703 comm="syz.5.5753" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1809.140085][ T30] 2 locks held by getty/5562: [ 1809.163362][T30704] syzkaller0: left promiscuous mode [ 1809.168875][ T30] #0: ffff888038f410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1809.173623][T30704] syzkaller0: left allmulticast mode [ 1809.190279][ T30] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1809.198250][T30704] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5753'. [ 1809.210085][ T30] 1 lock held by udevd/5790: [ 1809.214686][ T30] #0: ffff888027278358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1809.233693][ T30] 1 lock held by udevd/6060: [ 1809.238314][ T30] #0: ffff88802727e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1809.250082][ T30] 2 locks held by syz.0.5355/27893: [ 1809.255283][ T30] #0: ffff888046e9a0e0 (&type->s_umount_key#102/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1809.270125][ T30] #1: ffff888027278358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1809.279547][ T30] 2 locks held by syz.5.5753/30703: [ 1809.286330][ T30] #0: ffff888077699ec8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1809.300153][ T30] #1: ffffffff8e7f3238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1809.311362][ T30] [ 1809.314139][ T30] ============================================= [ 1809.314139][ T30] [ 1809.332991][ T30] NMI backtrace for cpu 0 [ 1809.333011][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1809.333038][ T30] Tainted: [L]=SOFTLOCKUP [ 1809.333045][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1809.333056][ T30] Call Trace: [ 1809.333062][ T30] [ 1809.333070][ T30] dump_stack_lvl+0x100/0x190 [ 1809.333109][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1809.333140][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1809.333166][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1809.333189][ T30] sys_info+0x141/0x190 [ 1809.333215][ T30] watchdog+0xcc3/0xfe0 [ 1809.333242][ T30] ? __pfx_watchdog+0x10/0x10 [ 1809.333264][ T30] ? __kthread_parkme+0x18c/0x230 [ 1809.333289][ T30] ? kthread+0x13a/0x450 [ 1809.333312][ T30] ? __pfx_watchdog+0x10/0x10 [ 1809.333330][ T30] kthread+0x370/0x450 [ 1809.333352][ T30] ? __pfx_kthread+0x10/0x10 [ 1809.333376][ T30] ret_from_fork+0x754/0xd80 [ 1809.333401][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1809.333428][ T30] ? __switch_to+0x7b4/0x10c0 [ 1809.333446][ T30] ? __pfx_kthread+0x10/0x10 [ 1809.333470][ T30] ret_from_fork_asm+0x1a/0x30 [ 1809.333499][ T30] [ 1809.333506][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1809.461805][ C1] NMI backtrace for cpu 1 [ 1809.461827][ C1] CPU: 1 UID: 0 PID: 30716 Comm: rm Tainted: G L syzkaller #0 PREEMPT(full) [ 1809.461847][ C1] Tainted: [L]=SOFTLOCKUP [ 1809.461852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1809.461860][ C1] RIP: 0010:write_comp_data+0x40/0x90 [ 1809.461878][ C1] Code: 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 80 bd 7c 09 8b 87 54 16 00 00 85 c0 74 f1 8b 87 30 16 00 00 <83> f8 03 75 e6 48 8b 87 38 16 00 00 8b bf 34 16 00 00 48 8b 30 48 [ 1809.461891][ C1] RSP: 0000:ffffc9000b77f9f8 EFLAGS: 00000246 [ 1809.461903][ C1] RAX: 0000000000000000 RBX: 0000000000000009 RCX: ffffffff8240e038 [ 1809.461911][ C1] RDX: 0000000000000009 RSI: 000000000000003f RDI: ffff888040df8000 [ 1809.461919][ C1] RBP: ffffc9000b77fb70 R08: 0000000000000001 R09: 000000000000003f [ 1809.461927][ C1] R10: 0000000000000009 R11: 0000000000000000 R12: 0000000000000009 [ 1809.461935][ C1] R13: ffff88814890a100 R14: dffffc0000000000 R15: 000000000000000f [ 1809.461944][ C1] FS: 0000000000000000(0000) GS:ffff88812448b000(0000) knlGS:0000000000000000 [ 1809.461958][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1809.461967][ C1] CR2: 00007f9a44672200 CR3: 00000000703e6000 CR4: 00000000003526f0 [ 1809.461976][ C1] DR0: 0000000000000070 DR1: 0000000000000000 DR2: 0000000000000000 [ 1809.461984][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1809.461992][ C1] Call Trace: [ 1809.461996][ C1] [ 1809.462001][ C1] next_uptodate_folio+0x188/0xd00 [ 1809.462020][ C1] filemap_map_pages+0x82c/0x2110 [ 1809.462037][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1809.462058][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1809.462076][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1809.462090][ C1] do_fault+0x9e5/0x1a00 [ 1809.462110][ C1] __handle_mm_fault+0x180f/0x2b60 [ 1809.462131][ C1] ? reacquire_held_locks+0xce/0x1e0 [ 1809.462148][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1809.462170][ C1] ? lock_vma_under_rcu+0x17c/0x590 [ 1809.462195][ C1] handle_mm_fault+0x36d/0xa20 [ 1809.462217][ C1] do_user_addr_fault+0x5a3/0x12f0 [ 1809.462233][ C1] exc_page_fault+0x6f/0xd0 [ 1809.462251][ C1] asm_exc_page_fault+0x26/0x30 [ 1809.462264][ C1] RIP: 0033:0x7f9a44745652 [ 1809.462275][ C1] Code: 0f 1f 84 00 00 00 00 00 3d 53 e5 74 64 75 0e 48 89 da 44 89 e6 4c 89 ef e8 5b f2 ff ff 49 3b 9d e0 02 00 00 0f 84 8e 01 00 00 <8b> 43 c8 48 83 eb 38 83 f8 04 75 d2 48 8b 53 10 49 8b 45 00 4c 8b [ 1809.462287][ C1] RSP: 002b:00007ffedc8966d0 EFLAGS: 00010293 [ 1809.462297][ C1] RAX: 000000000000003f RBX: 00007f9a44672238 RCX: 0000000000000009 [ 1809.462305][ C1] RDX: 00007f9a44672040 RSI: 0000000000000006 RDI: 000000006fffffff [ 1809.462314][ C1] RBP: 00007ffedc896820 R08: 0000000000000006 R09: 00000000effffef5 [ 1809.462322][ C1] R10: 0000000070000029 R11: 00007ffedc896908 R12: 0000000000000003 [ 1809.462330][ C1] R13: 00007f9a447340c0 R14: 00007ffedc8968c0 R15: 00007f9a44733918 [ 1809.462345][ C1] [ 1809.580605][ T29] audit: type=1400 audit(1771059500.802:1748): avc: denied { unmount } for pid=23623 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1809.589093][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1809.589114][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1809.589137][ T30] Tainted: [L]=SOFTLOCKUP [ 1809.589144][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1809.589154][ T30] Call Trace: [ 1809.589161][ T30] [ 1809.589168][ T30] dump_stack_lvl+0x100/0x190 [ 1809.589198][ T30] vpanic+0x552/0x970 [ 1809.589215][ T30] ? __pfx_vpanic+0x10/0x10 [ 1809.589231][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1809.589249][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1809.589269][ T30] panic+0xd1/0xe0 [ 1809.589284][ T30] ? __pfx_panic+0x10/0x10 [ 1809.589303][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1809.589320][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1809.589337][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1809.589353][ T30] ? watchdog.cold+0x198/0x1ca [ 1809.589370][ T30] ? watchdog+0xcd3/0xfe0 [ 1809.589390][ T30] watchdog.cold+0x1a9/0x1ca [ 1809.589414][ T30] ? __pfx_watchdog+0x10/0x10 [ 1809.589432][ T30] ? __kthread_parkme+0x18c/0x230 [ 1809.589455][ T30] ? kthread+0x13a/0x450 [ 1809.589475][ T30] ? __pfx_watchdog+0x10/0x10 [ 1809.589492][ T30] kthread+0x370/0x450 [ 1809.589514][ T30] ? __pfx_kthread+0x10/0x10 [ 1809.589537][ T30] ret_from_fork+0x754/0xd80 [ 1809.589563][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1809.589588][ T30] ? __switch_to+0x7b4/0x10c0 [ 1809.589605][ T30] ? __pfx_kthread+0x10/0x10 [ 1809.589629][ T30] ret_from_fork_asm+0x1a/0x30 [ 1809.589657][ T30] [ 1809.595864][ T30] Kernel Offset: disabled