last executing test programs: 4m47.06142067s ago: executing program 32 (id=44): r0 = socket(0x2, 0x2, 0x200001fe) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xb}, {0x4, 0xb}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4054}, 0x8004) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_emit_ethernet(0x1fd, &(0x7f0000000600)={@multicast, @random="bad4f9431624", @void, {@ipv4={0x800, @gre={{0x16, 0x4, 0x3, 0x39, 0x1ef, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast2, {[@noop, @ssrr={0x89, 0x1b, 0x59, [@remote, @multicast1, @loopback, @multicast1, @empty, @broadcast]}, @noop, @noop, @timestamp_addr={0x44, 0x14, 0x28, 0x1, 0x3, [{@loopback, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x28}}]}, @lsrr={0x83, 0xb, 0x55, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf, 0x3, [0xbea], "3229bcef507ce43a5a6e9250562fb3"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9, 0x7, 0x7], "b1e15c63d7da81fe92ea41ded684455ccf329f94d6fcf2c80b1b83dbb45dc88535d66ec48de3f3340e24427e3e2215895fc50c3e669a2162d6ff58edf08607ee9a4079441745f813bef779e77213a5aa436c3211ecd9750d472a9eca73e2e5ce21d4999d1d79e74a1b9c8f2c2f691a2eebf9f1f4959fc492abda32b3f9e0bac0e79e93fa517a9eb807aef436e9f3e6d252"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "89beff0ed7537960a548748c05f162c0349d3588e774e26b130e9832d94c684b79c82b5e102c2c5f"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0xf2}, 0x1, {0x44}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x3, 0x2, 0x0, 0x0, 0x4, 0x2f}, 0x2, {0x3, 0x3, 0x3, 0x4, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x3, "065158b891637499a9919a855dc051bfaab8b9c279f5bfabc7c0c1f6cb66a40c204a22f0bd4e1d37fd2c17bb73983a8fdade109f568d434dcded318bfd1c8ab3f942ac98919a9be787439287f85ae88624870b0b627f2b4ca48c5a63e2672d85ab4a945b933c6c64fea96eec78ba222eb5d942a3fa03e9fb588df786d457c546103e7f"}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0x0, 0xa}, {0xfff1}}}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) recvmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0xb, 0x0}, 0x120a2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0c00031000ad6ef41e"], 0xf) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f00000001c0)={0x4, 0xa, 0x2, 0x58, 0x40, 0x3}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6b, 0x0, 0x8, 0x3e, 0x0, 0x7}], 0xffffffff}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r10, &(0x7f0000000180), 0x3ef, 0x0) 4m42.685961956s ago: executing program 33 (id=54): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_emit_ethernet(0x76, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x13, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0x6, '^\x00\x00\x00'}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0xec, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x400440, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1) 4m24.18522878s ago: executing program 34 (id=110): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000780)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x20, 0x0, 0x0, 0x1, 0x6af, 0x3a, 0x10000, 0x824f, 0x0, [{0x1, 0x4, 0x10000}, {0x401, 0x3, 0x7}, {0x6, 0x4, 0x2f}, {0x5e, 0x8, 0x7}, {0x0, 0x9, 0x3}, {0x9, 0x8, 0x2}, {0xfffffffa, 0x800, 0xfff}, {0xc962, 0x0, 0x5}, {0xfffffffe, 0x8, 0x1}, {0x1, 0x8, 0x3}, {0x8, 0x101, 0x14000000}, {0x4, 0x8, 0x3ff}, {0x103, 0x1ff, 0x9}, {0x0, 0x1, 0x7}, {0x6, 0x0, 0x8128}, {0x8, 0x3, 0x2}, {0x6, 0x6, 0x100}, {0x7fff, 0xfffffffb, 0x6}, {0x5, 0x7, 0x7fff}, {0xffffff81, 0x100, 0x566}, {0x3, 0x3, 0xdd0}, {0x10, 0x80000000, 0x2}, {0x4dbc, 0x6, 0xf}, {0x7, 0x83, 0x1}, {0xeb, 0x3, 0x6}, {0x3, 0x7, 0x8}, {0x6, 0xaa, 0x80000001}, {0x33, 0x6}, {0x8001, 0x2, 0x120}, {0x8, 0x3, 0x9}, {0x2, 0x6, 0x8}, {0xd, 0x46, 0x1}, {0x1, 0x401, 0x4}, {0x9, 0x0, 0x7}, {0x80000001, 0x80, 0x1}, {0x5, 0x9, 0x5}, {0xa4, 0x85a, 0x1}, {0x3, 0x4, 0xfffffffd}, {0x80000001, 0x0, 0x1}, {0x3, 0x152, 0xcb0}, {0x5, 0x1, 0x1ff}, {0xf380000, 0x3, 0x9}, {0x80000000, 0x9, 0x5d0e72df}, {0x4, 0xff, 0x596}, {0xfffffffe, 0x21, 0xfffffffd}, {0x3, 0x7ff, 0x10001}, {0x800, 0x4, 0x3}, {0x0, 0x4, 0x4}, {0x3, 0x316, 0x7}, {0x10001, 0x869, 0xa09}, {0x9, 0xb8, 0x1}, {0x6, 0x3, 0x8}, {0x5, 0x1, 0xff}, {0x7, 0x0, 0x59a3a7a9}, {0x800, 0x7, 0x7000}, {0x10001, 0x0, 0x7}, {0xb38, 0x6096, 0x9}, {0x6, 0x5, 0x2}]}) 4m18.578380434s ago: executing program 35 (id=127): sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a440080000010109025d000101000000090400000002060000052406000005240000000d180f01000000000400000000"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) epoll_create1(0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r2, 0x0, r4) write$sndseq(r5, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0x8e}, {0x7, 0x9}, @raw8={"9e6d426f280fca85ecdec667"}}, {0x3, 0x5, 0x1, 0x0, @time={0xb4, 0x2}, {0x1, 0x2}, {0x9, 0x81}, @note={0x17, 0xf, 0x8, 0x3, 0x4}}], 0x38) 4m18.327801569s ago: executing program 36 (id=130): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "86352346"}, @local=@item_4={0x3, 0x2, 0x8, "b1cece77"}]}}, 0x0}, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x6905, 0x8000, 0xfffffffd, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f00000005c0)={0x0, 0xd70d, 0x0, 0x3, 0x255, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1000, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffed}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00"], 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @mcast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m58.117461547s ago: executing program 5 (id=207): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x2, 0x7f}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000023000/0x2000)=nil, 0x2000, 0x200000b, 0x28011, r0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29, 0x0, 0x8}]}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xfffffff7, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x10000000000000, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000180)=0x1, 0x4) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) 3m57.075311268s ago: executing program 5 (id=213): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/89, 0x59}], 0x1, &(0x7f0000000400)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000500), 0x6e, &(0x7f00000029c0)=[{&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/170, 0xaa}, {&(0x7f0000001740)=""/123, 0x7b}, {&(0x7f00000017c0)=""/55, 0x37}, {&(0x7f0000001800)=""/9, 0xfffffffffffffd2d}, {&(0x7f0000001840)=""/162, 0xa2}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/144, 0x90}], 0x9, &(0x7f0000002a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x40000141, &(0x7f0000002b40)={0x77359400}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x15}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x1, 0x3, 0xdddd1000, 0x1000, &(0x7f0000fea000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r8, 0xc018aec0, &(0x7f00000000c0)={0x1}) r9 = syz_open_dev$dvb_dvr(&(0x7f0000001040), 0x0, 0x100) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x24}, 0x4, 0x700000000000000}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x19) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) 3m56.720952715s ago: executing program 5 (id=215): syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_VMA(0x43, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r3, 0x4b4a, 0x100000000080005) r4 = fsopen(&(0x7f00000002c0)='zonefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) read$FUSE(r5, &(0x7f0000003b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_procfs(r6, &(0x7f0000000100)='oom_score\x00') socket(0x10, 0x803, 0x0) r8 = syz_io_uring_setup(0x70c3, &(0x7f0000000400)={0x0, 0x8a88, 0xc120, 0x2, 0x55}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f00000003c0)) io_uring_enter(r8, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)={0x51}) lseek(r9, 0x101, 0x1) getdents(r9, 0x0, 0x0) 3m55.262409018s ago: executing program 5 (id=220): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xfffffffff7ff8518]}, 0xffffffffffffffff, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) syz_usb_connect$uac2(0x3, 0x80, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xed, 0x50, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x6, 0xe, 0x3}, [@selector_unit={0x5, 0x24, 0xb, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xbe, 0x8, 0x9, {0x8, 0x25, 0x1, 0x1, 0x33, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x80, 0x2, {0x8, 0x25, 0x1, 0x80, 0x0, 0xf9, 0x5}}}}}}}}]}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x4e24, 0x6, @mcast1, 0x4}}}, 0x88) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 3m52.358603529s ago: executing program 9 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m51.808069102s ago: executing program 5 (id=234): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) r4 = syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x13, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0x6, '^\x00\x00\x00'}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0xec, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x400440, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1) 3m51.431335517s ago: executing program 9 (id=238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="0203000bdf0100002cbd7000ffdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af050006003c0000000a004e2400000008ff010000000000000000000000000001000000000000000002000100000000000000070c000000c005000500000000000a004e2400000009000000000000000000000000000000000600000000000000ce0108"], 0xef8}, 0x1, 0x7}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) listns(&(0x7f0000000340)={0x20, 0x0, 0x9, 0x80, 0x0, 0x1}, 0x0, 0x4e, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0xb, r4}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000240)={0x18, 0x0, 0x7, 0x280000000}) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, &(0x7f0000000500)={0x9, 0xd7, "d6adda0840525c6c24ab274293ef4b2ca956742cf0e68a2523fd9e3745bea39f7175d776db04e0c8a8ce0d3b0a1f8a2baf645d79c3fc407f3641f0976cd1c3c182c1f5eb42cde9c41fcc4ea11717c6f1c51a692d3a6def3b8ba8fc0fa8f968676afc06ed584fd50bf6fdc4000000807fe5515dbe5b2b15a6279b11dff845a9a8b1080b41b43fe531e11dad474d22809d85338ea6e1ebe226bf18982fb36ac7df0e963c15924d44cf148dbed806201f2d9f0248041bd57e7d80793e408618bb11754b6b8194e4d91d70e09ce4201ed9cfecf8a9f86b07ad"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) futex(0x0, 0x8a, 0x0, 0x0, 0x0, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@arm64={0xc1, 0x2e, 0x6, '\x00', 0x6}) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000140)={0x0, 0x7, 0x1, 0xa, 0x6, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x11f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3m51.168315408s ago: executing program 5 (id=241): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x7}}}}}}}}, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m50.153525193s ago: executing program 37 (id=241): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_usb_disconnect(r0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x7}}}}}}}}, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m50.150592587s ago: executing program 9 (id=243): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_emit_ethernet(0x76, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x13, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0x6, '^\x00\x00\x00'}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0xec, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x400440, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x673b2e72927849bd}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r7, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x4010) 3m49.142700451s ago: executing program 9 (id=244): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) syz_usb_connect$uac2(0x3, 0x80, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xed, 0x50, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x6, 0xe, 0x3}, [@selector_unit={0x5, 0x24, 0xb, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xbe, 0x8, 0x9, {0x8, 0x25, 0x1, 0x1, 0x33, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x80, 0x2, {0x8, 0x25, 0x1, 0x80, 0x0, 0xf9, 0x5}}}}}}}}]}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x4e24, 0x6, @mcast1, 0x4}}}, 0x88) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 3m47.484905668s ago: executing program 9 (id=249): socket$kcm(0x1e, 0x4, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r0) exit(0xffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1e4, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x2, 0xffffffff, 0x10, 0x7fffffff}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x7, 0xc, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7c, 0x0, &(0x7f0000000280)="87466f9cd4b3ff0ecf976ef31519f737a47ba037e130bbf9db180e02dcb01397666e1ac5715214921d5d450600c2db066013a545d6cee9aac75c5eae28e48b446148c10262d2a84365420e2e0f55c37c72979d0a4a21831bfba7a8f9a23f535064f30ef186005e8e20ddeca95f2f6362733a3eed8ca270d9b63bec8e", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) 3m47.185261144s ago: executing program 9 (id=251): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) r4 = syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x13, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0x6, '^\x00\x00\x00'}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0xec, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x400440, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1) 3m46.898952335s ago: executing program 38 (id=251): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) r4 = syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x13, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x23, 0x0, [{0x0, 0x6, '^\x00\x00\x00'}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0xec, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x400440, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1) 3m1.41716661s ago: executing program 6 (id=477): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 3m1.403959438s ago: executing program 6 (id=478): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x560b, &(0x7f00000006c0)={0x4, 0x0, 0x66, 0x0, 0x132, 0x3}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)='n', 0x1}], 0x1, 0x3) splice(r8, 0x0, r7, 0x0, 0x8000, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r5, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r5, &(0x7f00000001c0)={0x30000009}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r12, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYRES8=r9, @ANYBLOB="7bfbb302bf35ea3a26eb4cab3d067f0bfdd64d0d02894823118b87"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000010500000a2c000000180a05000000000000000000020000000c00054000000000000000010900010073797a3000000000140000001100010000000000000000000300000ab31e2fdcca3b4f39b21d7ed93556d843f7252b601515cf7ec7e5837de00237ebc9ad850e2e86946ee1b1cfc2f99e111ecb8df01a62414437f942153cf6aa1ffb6af2467d6594a9af12d2197cf1c2862557ae3e4283"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) recvmsg(r7, &(0x7f0000000540)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000480)=""/24, 0x18}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="710501"], 0x15) 2m57.352678689s ago: executing program 6 (id=496): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20050}, 0x4040010) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x60}, 0x1, 0x7}, 0x0) 2m56.633805478s ago: executing program 39 (id=496): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20050}, 0x4040010) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x60}, 0x1, 0x7}, 0x0) 2m56.541416915s ago: executing program 8 (id=498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0xf, 0x40, 0x7a, 0x4, @ipv4={'\x00', '\xff\xff', @local}, @private2, 0x80, 0x0, 0x4, 0x5}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00P\x00\x00\b\a\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0xc6, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x6e, 0x10637, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) landlock_restrict_self(r6, 0xe) 2m56.177339605s ago: executing program 8 (id=500): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7, 0x46, 0x0, 0x5, 0x8, 0x0, 0x0, 0x10ce}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) r4 = io_uring_setup(0x45e82f99, &(0x7f0000000040)={0x0, 0x3b93, 0x0, 0x3, 0x2f}) r5 = syz_ublk_setup_io_uring(0x2c1, &(0x7f00000000c0)={0x0, 0x65d9, 0x8, 0x0, 0x9c, 0x0, r4}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r6 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x1, 0x8100014e, 0x0, r5}) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) close_range(r6, r7, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x5e}, 0x28) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0x9}}}, 0x84) (async) ptrace(0x10, r10) (async) ptrace$setregset(0x4205, r10, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000380)={0x28, 0x1, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x380000000000}) (async) ptrace$setregset(0x4205, r10, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) (async) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000000c0)={&(0x7f0000001380)=[{0xdb29, 0x8000, 0x0, 0x0}], 0x1}) 2m56.124186094s ago: executing program 8 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2m56.016321283s ago: executing program 8 (id=502): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2m55.33235135s ago: executing program 8 (id=504): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r1, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/90, 0x5a}, {0x0}], 0x2, 0x5, 0x5) fanotify_mark(0xffffffffffffffff, 0x820, 0x8000009, 0xffffffffffffffff, 0xfffffffffffffffc) r3 = socket$inet(0x2, 0x1, 0x100) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r4, 0xa9, "07715ff8cdf7fe4ab0cf463550a56fe42651a3c8b26576d1477aba4db09222c5caa1245cd86b8e1dec06e83515c49c4fe72721c8d22e914a93b2be820f7c809cf96ea5eb0c342a45d3bcd12e2e9a19681f369d20d10cb54b05bf47dde4cd66cdee5faa73536308ccd4a8e64772e29536fe4bbc7dda1ffe428d9d7c121f8287f9ec402edb264bc89f673b4734bafdd33487e7f7b7e6707b57bbed71d6d1ada2dc07be62ee26fe5a5c47"}, &(0x7f0000000240)=0xb1) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 2m54.801122593s ago: executing program 8 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'netpci0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="81", 0x1}], 0x1}, 0x4) 2m54.624739075s ago: executing program 40 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x4, 0x6, 0x77}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'netpci0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="81", 0x1}], 0x1}, 0x4) 2m52.704052174s ago: executing program 2 (id=519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000380)=0xb, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000000000007000000830b040a1c01027f00000100000000001c"], 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000040900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000002c00038008"], 0xf8}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x44040) 2m52.201629591s ago: executing program 2 (id=522): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) socket$inet6(0xa, 0x80003, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6, @in=@local}}, {{@in=@local}, 0x0, @in=@private}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$ttyprintk(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x2f, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="7d88"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x400c094) 2m50.645927209s ago: executing program 2 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000270001002bbd7800fedbdf"], 0x14}}, 0x4004804) 2m50.562462923s ago: executing program 2 (id=525): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(0x0, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2m49.782932008s ago: executing program 2 (id=529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2m48.829134767s ago: executing program 2 (id=531): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab00001ea89de272fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) socket$netlink(0x10, 0x3, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r3, 0x2000000, 0xe, 0x11, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 2m48.514531828s ago: executing program 41 (id=531): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab00001ea89de272fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) socket$netlink(0x10, 0x3, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r3, 0x2000000, 0xe, 0x11, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 13.468937736s ago: executing program 7 (id=1078): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4c001) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0xd}], &(0x7f0000000280)='GPL\x00'}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019980)=""/102400, 0x19000) socket$kcm(0x10, 0x2, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f1", 0x64}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x4) 13.075004332s ago: executing program 3 (id=1083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r0], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRES32=r0], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x40008}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000480)='syzkaller\x00', 0xe, 0x39, &(0x7f00000006c0)=""/57, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xfa, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xa, 0x1, 0x6}, 0x10, 0x2e5b1, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0x1], 0x0, 0x10, 0x6}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa8041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x26000, 0xe000}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x0, 0x10000}) openat$panthor(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x12, 0x7d, 0x400000000000000, 0x8000, 0x101, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x9, 0x4, 0xff, 0x80000006, 0x400}, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) 11.783123089s ago: executing program 7 (id=1086): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xffff, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"146c87de85cb2a70d7177da67434afab", 0x0, 0x0, {0x40, 0x5}, {0x952c, 0x1ae}, 0xac70, [0x9, 0x9, 0x101, 0x28b, 0x8bcc, 0x10001, 0x1, 0x8, 0x2, 0xfffffffffffffffd, 0x3, 0x81, 0x8, 0x8, 0x3, 0x7d5]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 11.693721787s ago: executing program 7 (id=1088): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8044) syz_open_dev$sg(0x0, 0x0, 0x9840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000003c0), 0xb97a, r1, 0x600000000000000}, 0x38) 11.606598227s ago: executing program 3 (id=1089): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz0\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0xfff, 0x1000000009, 0x6, 0x7, 0xdb, 0x40000000, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x108, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0xfffd, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0xffffffffffffffff, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x2, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffdfffffffff9, 0x6, 0x8, 0x3, 0x4, 0x6, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x6, 0x1, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x200005}, 0x1, [0x2, 0x84, 0x1c00000000000002, 0x7fffffffffffffff, 0x80000003, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0xd, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x10000000000002, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0x6, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0xa, 0x9, 0x1ff]}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fcntl$addseals(r5, 0x409, 0xf) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) capget(&(0x7f0000feaff9)={0x19980330}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r7, 0x3, &(0x7f0000000400)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r6, 0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x9, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="47c709d89ca4d5f68d540379f7944e2795b98b5fefc650f6f385394ec6bde7", 0x1f, 0x3, 0x0, 0x1}]) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 10.736225368s ago: executing program 7 (id=1092): socket(0x2000000000000021, 0x2, 0x10000000000002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x9, 0x180, 0x2000000000000004, 0x10, 0x11f, 0x50, 0x7fffffffffffe, 0x6, 0x4, 0xfffffffbfffffffe, 0xfff, 0xf4a, 0x100000000, 0x6], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x24040081) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.770428365s ago: executing program 0 (id=1099): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c4ffffff7fe7f24e9829f94b53da61012ff00000a0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@mcast2, r3}, 0x14) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1) 8.399698514s ago: executing program 3 (id=1100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r0], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRES32=r0], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x40008}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000480)='syzkaller\x00', 0xe, 0x39, &(0x7f00000006c0)=""/57, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xfa, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xa, 0x1, 0x6}, 0x10, 0x2e5b1, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0x1], 0x0, 0x10, 0x6}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa8041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x26000, 0xe000}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000100)={0x0, 0x10000}) openat$panthor(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x12, 0x7d, 0x400000000000000, 0x8000, 0x101, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x9, 0x4, 0xff, 0x80000006, 0x400}, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) 6.913340737s ago: executing program 0 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101024fc08f08c016df0585b0010203010902120001c292407e090404e20003"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x3, 0x0, 0x10000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c0005"], 0x6c}}, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x8864000000000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000000000000280012800b00010062726964676500001800028005001900020000000c002300070000000000001a"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x20000040}, 0x20008000) 6.757728109s ago: executing program 7 (id=1103): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0, 0x0}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:r\xe2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98SA\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\xad\xc6\x1b\x18\xf0I\xb5\xe3\xb5\xfd\b=\xa8\x9d\xfb)#\x90\xcc\x98\x85\xe7&_\x1d\xb7E2\xb2\xb6\xdcFL\xd0O\xef\xc7\x12]\x93\xb4\x80\xdb\xdfAh@\x93\xf2\x11\x1cf\xb4\xf2EM\x1c\xc8>\x96\x99\xb2\xb2\x8e\x11t:\x94k\x88\xcd\xb1_\x18\xaa:\x11\fj\n\x05`\x9e\x10%_mW\xe1\x96\r\xca\x9e\x16Q\x11\xbb\xf4D\x134\xb1s\xefI\xa3X', 0x0) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x2, 0x0, 0xfffefffff1006000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.435858085s ago: executing program 3 (id=1106): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz0\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0xfff, 0x1000000009, 0x6, 0x7, 0xdb, 0x40000000, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x108, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0x6, 0x5, 0xfffd, 0xffffffff, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x9, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0xffffffffffffffff, 0x2, 0x40d1c, 0x0, 0x9, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x4, 0x4, 0x1, 0x9, 0xe3, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x2, 0x7, 0x5, 0x1ff, 0xa46, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffdfffffffff9, 0x6, 0x8, 0x3, 0x4, 0x6, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x3, 0x2, 0x2c, 0xa, 0x6, 0x1, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x200005}, 0x1, [0x2, 0x84, 0x1c00000000000002, 0x7fffffffffffffff, 0x80000003, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0xd, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x10000000000002, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0x6, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0xa, 0x9, 0x1ff]}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) fcntl$addseals(r5, 0x409, 0xf) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) capget(&(0x7f0000feaff9)={0x19980330}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r7, 0x3, &(0x7f0000000400)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r6, 0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x9, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000300)="47c709d89ca4d5f68d540379f7944e2795b98b5fefc650f6f385394ec6bde7", 0x1f, 0x3, 0x0, 0x1}]) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 6.354975813s ago: executing program 4 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040845}, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x4000000008, 0x1, 0x41, 0xfffffffffffffff5, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x8, 0x3, 0x79, 0x3, 0xa], 0x3332d000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000240)=@x86={0x1, 0x6, 0x5, 0x0, 0x40000005, 0x1, 0x2, 0x9, 0xff, 0x7, 0x5, 0x3, 0x0, 0xfffffffe, 0x20005, 0x1, 0xff, 0x4, 0xff, '\x00', 0xdc, 0xe6}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x26}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 5.398368027s ago: executing program 4 (id=1109): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0xffff, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"146c87de85cb2a70d7177da67434afab", 0x0, 0x0, {0x40, 0x5}, {0x952c, 0x1ae}, 0xac70, [0x9, 0x9, 0x101, 0x28b, 0x8bcc, 0x10001, 0x1, 0x8, 0x2, 0xfffffffffffffffd, 0x3, 0x81, 0x8, 0x8, 0x3, 0x7d5]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 5.334618219s ago: executing program 4 (id=1111): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500003800000098d6927b78ac1e0101ac02141e030490781200183f2500000000000000000100007f000001e00087adb8ce2fb38868000200186371ae9b1c03714b893ebaec72bd002fc8f51bffe2a0a48e69cbc27643844767c666d638c5e945d307cd6feba1a3aa94880bcbd71b4764da9ee3c13649d7e97bd8d6f711a6ae3127af735030fbb5b031783880de1811e94b1fdbbeceb49b56ca33ecaeb3e331af9c202325bf803f531285c174a2b337c2001c41034edc0f69b672bbbf282ed65bf4c72146"], 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40080e1}, 0x20040001) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4014}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0xc0010117, 0x0, 0x1}, {0x400000b3, 0x0, 0x7}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x690}, 0x20048040) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.59734742s ago: executing program 7 (id=1113): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0xf3, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00'], 0x0, 0x0, 0x0}, 0x0) 2.405702811s ago: executing program 0 (id=1114): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000080)='./file2\x00', 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/90, 0x5a}, {0x0}], 0x2, 0x5, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.280119429s ago: executing program 3 (id=1115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0)=0xb4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000520008f3a32be200fbdbdf01f0ffff03004e070000080002007908000008000600030000000800050015f8ffff070003000300000408000200010000000000000000040000a797eddff6dfbc183f999e9e9974364c494a0fd1864188a2838b9abe40f4cde70100000000000000fe833da684f05c87ae09cf1cba1e901f830b3d739ebc2c35b2ac4c6aa5fda523a7fb6c48d1165f3ce1b8639bd0dce8dc"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="7000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0815dbcb5f31a3c001280110001006272b1eb67655f736c617665000000002400058005001c0000000000050006000100000005000a000100000005001e0000000000140003006272696467655f736c6176655f30"], 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2.045385371s ago: executing program 4 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = syz_pidfd_open(r5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0xff04) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @multicast2}, 0x3, 0x0, 0x0, 0x1}}, 0x80, 0x0}, 0x80) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x1016118, 0x4) 2.044689083s ago: executing program 3 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x27, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3}}) io_setup(0x7, &(0x7f0000000280)=0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r5, 0x1, &(0x7f00000005c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x5, r6, &(0x7f0000000000), 0x53, 0x200, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000000400)="185450be602c98fb6405155ec874bffe6289b5c717590c372415c84c66a01610b6815195630d63334a76d8a2727757f02b6de60854207367fdeb0d3fd8198f5c2e345699c251926f404678866821903cc0a58d3c1c91da70c368fba2883340ee68e3254d47f163569b0449ce9e0a016fba7e4687256b126fe9d78fabd808eb8d84505b79d8c57124a5d118be1e2af767545e53b981bc211726f22c24f5d38e7fb8aac2", 0x0, 0x8000000000000001, 0x0, 0x4, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000540)="0130570a9ca4bb0e2eb95092d5cb", 0x0, 0x8, 0x0, 0x0, r6}]) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x100102, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) 1.912187696s ago: executing program 1 (id=1121): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r1 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000084ffffff000000008000000040880400", @ANYRES32, @ANYBLOB="fa00"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02000000030000000300"/20, @ANYRES32=r3, @ANYBLOB="a303765fa4a200000000532967380b8d57a1effeb596c36089bcd527474a1ca27ceea850f672c0ae8f85f0d67731070fe89107e36931c3678a0d4eee9b1e838242149a7fd03988a915166c8c832ae10e20b53582c9e81f1f552132ee7c28d85f659af8963cb2892d782e952a8e204be44e3fe68672ef1ba4ec99e3fc"], 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000800000091100001000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2fc6000000200000040000", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000006800e97900000000000000000a0000000000000008000500b683d7a89707f70228506a20cde5f200000000000027df60fe15f50a2b0496b445e53e9738969c7abbdc", @ANYRESOCT], 0x20}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) preadv(r9, &(0x7f0000000200)=[{&(0x7f0000000280)=""/78, 0x4e}], 0x1, 0xade, 0x6) (async) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000080000000300000003000006"], 0x0, 0x3c, 0x0, 0x1}, 0x28) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="20040000844e755f041e0a7e73000000000856b5c7d9e0a5f343f35c68fa001b0000000000000000"], 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 1.773007846s ago: executing program 1 (id=1122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d0000001400000011"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.77230399s ago: executing program 0 (id=1123): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x18b882) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_emit_ethernet(0x72, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x4000, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x12, 0x4, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x1f, 0x0, [{0x0, 0x6, '^\x00\x00\x00'}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}]}}}}}}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0xec, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x400440, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="030213"], 0xd, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x673b2e72927849bd}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r7, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x4010) 1.771313863s ago: executing program 1 (id=1124): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r2 = fsmount(r0, 0x1, 0xe) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) map_shadow_stack(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000040)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 1.290377957s ago: executing program 1 (id=1125): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000140)=""/116, 0x74, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1d1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 316.281332ms ago: executing program 1 (id=1126): ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x5, 0xb, 0xa}}) 293.34035ms ago: executing program 0 (id=1127): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x16a) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x820, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r1, &(0x7f0000010440)=[{&(0x7f0000029480)=""/167, 0xa7}], 0x1, 0xc03, 0x0) 138.641048ms ago: executing program 0 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008881}, 0x20008004) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a030800030101072501"], 0x0) 77.07647ms ago: executing program 1 (id=1129): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x20004080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003710559000905"], 0x0) setregid(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup3(r2, r3, 0x80000) r5 = dup(r4) read(r5, 0x0, 0x0) 29.838624ms ago: executing program 4 (id=1130): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r0, 0x100000000) 0s ago: executing program 4 (id=1131): syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$netlink(0x10, 0x3, 0x8000000004) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005700f7ff09000000ff070000010100000b002000ad6967aebacf0720d7cbd72bf049129ded8988620ab3e59bf5701a4f8bf9d02662620611eacc873eac0d7030492a404eb06ddc1748ee41564e7b63371a28e777017a76450171a15ff4000000000000"], 0x16f) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="34000000140001000400fc326cb5be250a00000004000000080008800402478014000280bf304d1637f0b0084ddd59ebe5d4142582"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r3) faccessat2(r4, &(0x7f0000000880)='\x00', 0x1, 0x1100) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7, @none, 0x8, 0x2}, 0xe) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480), &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r5, 0xffffffffffffffff, 0x36, 0x0, 0x0, @void, @value, @void, @void, r7}, 0x20) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRES64=r7], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x80000000, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r4, 0x33, 0x102c, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) kernel console output (not intermixed with test programs): ry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.242742][T10494] RIP: 0033:0x7f869cb9ce59 [ 241.242757][T10494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.242775][T10494] RSP: 002b:00007f869db38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 241.242795][T10494] RAX: ffffffffffffffda RBX: 00007f869ce15fa0 RCX: 00007f869cb9ce59 [ 241.242808][T10494] RDX: 000000000300000b RSI: 0000000000002000 RDI: 0000200000ffc000 [ 241.242821][T10494] RBP: 00007f869db38090 R08: 0000000000000003 R09: 0000000000000000 [ 241.242833][T10494] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 241.242844][T10494] R13: 00007f869ce16038 R14: 00007f869ce15fa0 R15: 00007ffd32c78358 [ 241.242864][T10494] [ 241.242949][ T4994] pwc: Failed to set LED on/off time (-71) [ 241.249012][ T24] usb 1-1: SerialNumber: syz [ 241.267799][ T4994] pwc: send_video_command error -71 [ 241.289822][ T24] usb 1-1: config 0 descriptor?? [ 241.322786][ T4926] Bluetooth: hci1: command 0x0c1a tx timeout [ 241.348721][ T24] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 241.351905][ T4994] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 241.550109][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.662301][ T5722] usb 4-1: config 0 has no interfaces? [ 241.698159][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.709791][ T4994] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 241.774282][ T4994] usb 5-1: USB disconnect, device number 21 [ 241.785319][ T5722] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 241.795275][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.808930][ T5722] usb 4-1: Product: syz [ 242.231495][ T24] usb 1-1: USB disconnect, device number 18 [ 242.301183][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.307789][ T5722] usb 4-1: Manufacturer: syz [ 242.322889][ T5722] usb 4-1: SerialNumber: syz [ 242.329826][ T5699] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 242.342200][ T5699] usb 2-1: USB disconnect, device number 25 [ 242.360465][ T5722] usb 4-1: config 0 descriptor?? [ 243.177917][T10516] policy can only be matched on NF_INET_PRE_ROUTING [ 243.177940][T10516] unable to load match [ 243.189958][ T24] usb 4-1: USB disconnect, device number 16 [ 243.223900][ T5699] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 243.393954][ T4926] Bluetooth: hci1: command 0x0c1a tx timeout [ 243.403993][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 243.418710][ T5699] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 243.429544][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.438685][ T5699] usb 2-1: Product: syz [ 243.444086][ T5699] usb 2-1: Manufacturer: syz [ 243.448771][ T5699] usb 2-1: SerialNumber: syz [ 243.454383][ T5722] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 243.577018][ T5699] usb 2-1: config 0 descriptor?? [ 243.601271][ T5699] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 243.632577][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.648210][ T5699] dvb-usb: bulk message failed: -22 (2/0) [ 243.666297][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.679626][ T5699] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 243.709743][ T5722] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 243.719796][ T5699] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 243.733857][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.741926][ T5699] usb 2-1: media controller created [ 243.757933][ T5722] usb 1-1: config 0 descriptor?? [ 243.770071][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.793776][ T4926] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 243.802705][ T4926] Bluetooth: hci0: Injecting HCI hardware error event [ 243.810805][ T4926] Bluetooth: hci0: hardware error 0x00 [ 243.811086][ T5699] dvb-usb: bulk message failed: -22 (1/0) [ 243.854100][ T5699] DVB: Unable to find symbol mt352_attach() [ 243.860314][ T5699] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 243.973026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 244.082449][T10530] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 244.082449][T10530] The task syz.1.720 (10530) triggered the difference, watch for misbehavior. [ 244.225010][ T5722] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 244.780418][T10532] random: crng reseeded on system resumption [ 245.251367][ T5722] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 245.265040][ T5722] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 245.272517][ T5722] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 245.283752][ T5722] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 245.293069][ T5699] rc_core: IR keymap rc-dvico-portable not found [ 245.299749][ T5722] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 245.311935][ T5699] Registered IR keymap rc-empty [ 245.321781][ T5699] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 245.339200][ T5699] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input18 [ 245.360198][ T5699] dvb-usb: schedule remote query interval to 100 msecs. [ 245.384854][ T5722] playstation 0003:054C:0DF2.0006: Invalid byte count transferred, expected 20 got 0 [ 245.395236][ T5699] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 245.407038][ T5722] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 245.424252][ T5699] usb 2-1: USB disconnect, device number 26 [ 245.434088][ T5722] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 245.465968][ T5722] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 245.501206][ T5722] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 245.751664][ T5699] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 245.883382][ T4926] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 245.894416][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.730'. [ 246.326348][ T5699] usb 1-1: USB disconnect, device number 19 [ 246.537711][T10565] FAULT_INJECTION: forcing a failure. [ 246.537711][T10565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.551000][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.1.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.551033][T10565] Tainted: [L]=SOFTLOCKUP [ 246.551040][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.551059][T10565] Call Trace: [ 246.551065][T10565] [ 246.551071][T10565] dump_stack_lvl+0x100/0x190 [ 246.551097][T10565] should_fail_ex.cold+0x5/0xa [ 246.551123][T10565] strncpy_from_user+0x3b/0x2d0 [ 246.551149][T10565] do_getname+0x78/0x390 [ 246.551169][T10565] __getname_maybe_null+0x6e/0x140 [ 246.551192][T10565] __do_sys_move_mount+0x201/0x780 [ 246.551212][T10565] ? __pfx___do_sys_move_mount+0x10/0x10 [ 246.551229][T10565] ? ksys_write+0x1ac/0x250 [ 246.551250][T10565] ? __pfx_ksys_write+0x10/0x10 [ 246.551271][T10565] ? rcu_is_watching+0x12/0xc0 [ 246.551294][T10565] do_syscall_64+0x115/0x870 [ 246.551311][T10565] ? clear_bhb_loop+0x40/0x90 [ 246.551333][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.551351][T10565] RIP: 0033:0x7f742dd9ce59 [ 246.551366][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.551384][T10565] RSP: 002b:00007f742ebfd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 246.551404][T10565] RAX: ffffffffffffffda RBX: 00007f742e015fa0 RCX: 00007f742dd9ce59 [ 246.551418][T10565] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000003 [ 246.551430][T10565] RBP: 00007f742ebfd090 R08: 0000000000000267 R09: 0000000000000000 [ 246.551443][T10565] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 246.551455][T10565] R13: 00007f742e016038 R14: 00007f742e015fa0 R15: 00007ffcc92599e8 [ 246.551474][T10565] [ 247.739581][T10579] overlayfs: failed lookup in lower (newroot/46, name='file1', err=-40): overlapping layers [ 247.757475][T10579] overlayfs: failed lookup in lower (newroot/46, name='bus', err=-40): overlapping layers [ 247.770110][T10579] overlayfs: failed lookup in lower (newroot/46, name='bus', err=-40): overlapping layers [ 247.827978][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 247.836005][ T29] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 248.043332][ T804] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 248.070738][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.086944][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 248.128793][ T29] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.151707][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 248.184230][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.206051][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.215331][ T804] usb 8-1: Using ep0 maxpacket: 8 [ 248.242329][ T804] usb 8-1: config 39 has an invalid interface number: 145 but max is 1 [ 248.255198][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.266944][ T29] usb 2-1: config 0 descriptor?? [ 248.288429][ T804] usb 8-1: config 39 has an invalid interface number: 94 but max is 1 [ 248.367450][ T24] usb 4-1: Product: syz [ 248.376283][ T24] usb 4-1: Manufacturer: syz [ 248.384667][ T804] usb 8-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 248.394970][ T24] usb 4-1: SerialNumber: syz [ 248.410130][ T24] usb 4-1: config 0 descriptor?? [ 248.418748][ T804] usb 8-1: config 39 has no interface number 0 [ 248.550947][ T804] usb 8-1: config 39 has no interface number 1 [ 248.566180][ T24] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 248.927183][T10587] serio: Serial port ptm0 [ 249.030340][ T804] usb 8-1: config 39 interface 94 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.379186][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.415268][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.487086][ T804] usb 8-1: config 39 interface 145 has no altsetting 0 [ 249.496090][ T804] usb 8-1: config 39 interface 94 has no altsetting 0 [ 250.184838][ T804] usb 8-1: New USB device found, idVendor=054c, idProduct=0169, bcdDevice=c7.b0 [ 250.195329][ T804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.203679][ T804] usb 8-1: Product: syz [ 250.208117][ T804] usb 8-1: Manufacturer: syz [ 250.212776][ T804] usb 8-1: SerialNumber: syz [ 250.338678][T10594] FAULT_INJECTION: forcing a failure. [ 250.338678][T10594] name failslab, interval 1, probability 0, space 0, times 0 [ 250.362952][ T24] usb 4-1: USB disconnect, device number 17 [ 250.374461][T10594] CPU: 0 UID: 0 PID: 10594 Comm: syz.4.741 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.374497][T10594] Tainted: [L]=SOFTLOCKUP [ 250.374504][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.374513][T10594] Call Trace: [ 250.374517][T10594] [ 250.374521][T10594] dump_stack_lvl+0x100/0x190 [ 250.374538][T10594] should_fail_ex.cold+0x5/0xa [ 250.374552][T10594] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 250.374572][T10594] should_failslab+0xc2/0x120 [ 250.374593][T10594] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 250.374622][T10594] ? skb_clone+0x190/0x400 [ 250.374648][T10594] skb_clone+0x190/0x400 [ 250.374663][T10594] nfnetlink_rcv_batch+0x1c8/0x2880 [ 250.374678][T10594] ? kmem_cache_free+0x127/0x6b0 [ 250.374693][T10594] ? kfree_skbmem+0x19f/0x210 [ 250.374710][T10594] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 250.374733][T10594] ? __dev_queue_xmit+0x9f0/0x4940 [ 250.374753][T10594] ? rcu_is_watching+0x12/0xc0 [ 250.374778][T10594] ? __dev_queue_xmit+0x9f0/0x4940 [ 250.374796][T10594] ? rcu_is_watching+0x12/0xc0 [ 250.374812][T10594] ? avc_has_perm_noaudit+0x145/0x3b0 [ 250.374825][T10594] ? __asan_memset+0x23/0x50 [ 250.374839][T10594] ? __nla_validate_parse+0x1e7/0x28b0 [ 250.374852][T10594] ? __pfx___nla_validate_parse+0x10/0x10 [ 250.374870][T10594] ? rcu_is_watching+0x12/0xc0 [ 250.374895][T10594] ? cap_capable+0x107/0x430 [ 250.374922][T10594] ? __nla_parse+0x40/0x60 [ 250.374941][T10594] nfnetlink_rcv+0x3bd/0x440 [ 250.374955][T10594] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 250.374970][T10594] netlink_unicast+0x585/0x850 [ 250.374981][T10594] ? __pfx_netlink_unicast+0x10/0x10 [ 250.374993][T10594] netlink_sendmsg+0x8b0/0xda0 [ 250.375011][T10594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.375036][T10594] ____sys_sendmsg+0xa4d/0xbe0 [ 250.375063][T10594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.375081][T10594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.375098][T10594] ? kstrtouint_from_user+0x13c/0x1d0 [ 250.375111][T10594] ___sys_sendmsg+0x190/0x1e0 [ 250.375121][T10594] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.375131][T10594] ? get_pid_task+0x106/0x250 [ 250.375155][T10594] ? rcu_is_watching+0x12/0xc0 [ 250.375191][T10594] __sys_sendmsg+0x160/0x210 [ 250.375214][T10594] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.375233][T10594] ? rcu_is_watching+0x12/0xc0 [ 250.375247][T10594] do_syscall_64+0x115/0x870 [ 250.375258][T10594] ? clear_bhb_loop+0x40/0x90 [ 250.375270][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.375281][T10594] RIP: 0033:0x7f093779ce59 [ 250.375297][T10594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.375316][T10594] RSP: 002b:00007f0938570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.375335][T10594] RAX: ffffffffffffffda RBX: 00007f0937a15fa0 RCX: 00007f093779ce59 [ 250.375349][T10594] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 250.375362][T10594] RBP: 00007f0938570090 R08: 0000000000000000 R09: 0000000000000000 [ 250.375369][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.375380][T10594] R13: 00007f0937a16038 R14: 00007f0937a15fa0 R15: 00007fffc1f8dca8 [ 250.375391][T10594] [ 250.376191][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.712052][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.725057][ T804] usb 8-1: active config #39 != 1 ?? [ 250.777192][ T804] cdc_mbim 8-1:39.94: probe with driver cdc_mbim failed with error -71 [ 250.822118][ T804] usb 8-1: active config #39 != 1 ?? [ 250.887222][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 250.887239][ T30] audit: type=1400 audit(1781969093.322:770): avc: denied { map } for pid=10601 comm="syz.3.744" path="socket:[33121]" dev="sockfs" ino=33121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 250.943842][ T804] usb 8-1: USB disconnect, device number 27 [ 251.289695][ T30] audit: type=1400 audit(1781969093.722:771): avc: denied { write } for pid=10595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.355187][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 251.365050][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 251.385967][ T29] usb 2-1: USB disconnect, device number 27 [ 251.446943][ T5699] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 251.490046][ T30] audit: type=1400 audit(1781969093.922:772): avc: denied { write } for pid=10622 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.725543][ T5699] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 251.740174][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.829837][T10631] FAULT_INJECTION: forcing a failure. [ 251.829837][T10631] name failslab, interval 1, probability 0, space 0, times 0 [ 251.842526][T10631] CPU: 1 UID: 0 PID: 10631 Comm: syz.7.742 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.842560][T10631] Tainted: [L]=SOFTLOCKUP [ 251.842568][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.842580][T10631] Call Trace: [ 251.842588][T10631] [ 251.842596][T10631] dump_stack_lvl+0x100/0x190 [ 251.842630][T10631] should_fail_ex.cold+0x5/0xa [ 251.842654][T10631] ? kmem_cache_alloc_noprof+0x54/0x6d0 [ 251.842686][T10631] should_failslab+0xc2/0x120 [ 251.842708][T10631] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 251.842736][T10631] ? skb_clone+0x190/0x400 [ 251.842762][T10631] skb_clone+0x190/0x400 [ 251.842786][T10631] nfnetlink_rcv_batch+0x1c8/0x2880 [ 251.842811][T10631] ? __pfx___schedule+0x10/0x10 [ 251.842842][T10631] ? do_raw_spin_lock+0x128/0x260 [ 251.842866][T10631] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 251.842890][T10631] ? rcu_is_watching+0x12/0xc0 [ 251.842916][T10631] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 251.842941][T10631] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 251.842970][T10631] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 251.843000][T10631] ? avc_has_perm_noaudit+0x145/0x3b0 [ 251.843022][T10631] ? __asan_memset+0x23/0x50 [ 251.843049][T10631] ? __nla_validate_parse+0x1e7/0x28b0 [ 251.843071][T10631] ? rcu_is_watching+0x12/0xc0 [ 251.843096][T10631] ? __pfx___nla_validate_parse+0x10/0x10 [ 251.843120][T10631] ? rcu_is_watching+0x12/0xc0 [ 251.843144][T10631] ? cap_capable+0x107/0x430 [ 251.843172][T10631] ? __nla_parse+0x40/0x60 [ 251.843192][T10631] nfnetlink_rcv+0x3bd/0x440 [ 251.843215][T10631] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 251.843243][T10631] netlink_unicast+0x585/0x850 [ 251.843264][T10631] ? __pfx_netlink_unicast+0x10/0x10 [ 251.843287][T10631] netlink_sendmsg+0x8b0/0xda0 [ 251.843308][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.843333][T10631] ____sys_sendmsg+0xa4d/0xbe0 [ 251.843360][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.843381][T10631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.843412][T10631] ? cpupri_find_fitness+0xcc/0x430 [ 251.843441][T10631] ___sys_sendmsg+0x190/0x1e0 [ 251.843460][T10631] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.843479][T10631] ? find_lock_lowest_rq+0x4a/0x860 [ 251.843508][T10631] ? rcu_is_watching+0x12/0xc0 [ 251.843543][T10631] __sys_sendmsg+0x160/0x210 [ 251.843568][T10631] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.843595][T10631] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 251.843626][T10631] ? rcu_is_watching+0x12/0xc0 [ 251.843653][T10631] do_syscall_64+0x115/0x870 [ 251.843672][T10631] ? clear_bhb_loop+0x40/0x90 [ 251.843694][T10631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.843715][T10631] RIP: 0033:0x7f869cb9ce59 [ 251.843732][T10631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.843752][T10631] RSP: 002b:00007f869daf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.843773][T10631] RAX: ffffffffffffffda RBX: 00007f869ce16180 RCX: 00007f869cb9ce59 [ 251.843787][T10631] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 251.843800][T10631] RBP: 00007f869daf6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.843812][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.843824][T10631] R13: 00007f869ce16218 R14: 00007f869ce16180 R15: 00007ffd32c78358 [ 251.843843][T10631] [ 252.455916][ T5699] usb 5-1: config 0 has no interface number 0 [ 252.463981][ T5699] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 252.487268][ T5699] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 252.507457][ T5699] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.644004][ T5699] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 252.739886][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.970079][ T5699] usb 5-1: Product: syz [ 253.103245][ T5714] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 253.170830][ T5699] usb 5-1: Manufacturer: syz [ 253.199449][T10647] Option 'Ó¾,0A–˜' to dns_resolver key: bad/missing value [ 253.207254][ T5699] usb 5-1: SerialNumber: syz [ 253.219624][ T5699] usb 5-1: config 0 descriptor?? [ 253.305502][ T5714] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.342630][ T5714] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.360462][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.403733][ T5714] usb 1-1: Product: syz [ 253.427029][ T5714] usb 1-1: Manufacturer: syz [ 253.436870][ T5714] usb 1-1: SerialNumber: syz [ 253.441838][T10610] xt_hashlimit: max too large, truncated to 1048576 [ 253.467095][ T30] audit: type=1400 audit(1781969095.902:773): avc: denied { write } for pid=10633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.470162][T10610] xt_hashlimit: overflow, try lower: 0/0 [ 253.493750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 253.582162][ T30] audit: type=1400 audit(1781969096.012:774): avc: denied { write } for pid=10646 comm="syz.7.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 253.619544][ T30] audit: type=1400 audit(1781969096.052:775): avc: denied { write } for pid=10666 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.704702][ T804] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 253.778068][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.797237][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.827352][ T24] usb 5-1: USB disconnect, device number 22 [ 253.865129][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 253.882697][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 253.912025][ T804] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.928347][ T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.951120][ T804] usb 2-1: Product: syz [ 253.965199][ T804] usb 2-1: Manufacturer: syz [ 253.974731][ T804] usb 2-1: SerialNumber: syz [ 253.991277][ T804] usb 2-1: config 0 descriptor?? [ 254.018728][ T804] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 254.080308][ T30] audit: type=1400 audit(1781969096.512:776): avc: denied { mount } for pid=10637 comm="syz.0.749" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 254.196990][ T30] audit: type=1400 audit(1781969096.632:777): avc: denied { write } for pid=10669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.223845][T10659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.250059][T10659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.467110][ T804] usb 2-1: USB disconnect, device number 28 [ 254.507236][ T30] audit: type=1400 audit(1781969096.942:778): avc: denied { write } for pid=10684 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.560157][ T5714] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 254.580268][ T5714] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 254.596617][ T5714] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 254.721559][T10693] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.758'. [ 254.733972][ T6478] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 254.745213][T10693] openvswitch: netlink: Message has 512 unknown bytes. [ 254.869008][ T5714] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 254.931957][ T5714] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 255.008482][ T6478] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.026512][ T6478] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.061642][ T6478] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.087555][ T6478] usb 8-1: config 0 descriptor?? [ 255.613192][ T4994] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 257.390698][T10705] serio: Serial port ptm0 [ 258.228670][ T5699] usb 1-1: USB disconnect, device number 20 [ 258.344933][ T30] audit: type=1400 audit(1781969100.772:779): avc: denied { unmount } for pid=8993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 258.376141][ T5699] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 258.498070][ T30] audit: type=1400 audit(1781969100.932:780): avc: denied { write } for pid=10691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.553992][ T4994] usb 2-1: device not accepting address 29, error -71 [ 258.709311][T10721] FAULT_INJECTION: forcing a failure. [ 258.709311][T10721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.787793][T10721] CPU: 0 UID: 0 PID: 10721 Comm: syz.4.762 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.787828][T10721] Tainted: [L]=SOFTLOCKUP [ 258.787835][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.787847][T10721] Call Trace: [ 258.787852][T10721] [ 258.787857][T10721] dump_stack_lvl+0x100/0x190 [ 258.787873][T10721] should_fail_ex.cold+0x5/0xa [ 258.787894][T10721] copy_folio_from_iter_atomic+0x5c8/0x2000 [ 258.787925][T10721] ? rcu_is_watching+0x12/0xc0 [ 258.787950][T10721] ? timestamp_truncate+0x22e/0x2f0 [ 258.787976][T10721] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 258.787990][T10721] ? shmem_write_begin+0x1ba/0x420 [ 258.788007][T10721] ? __pfx_shmem_write_begin+0x10/0x10 [ 258.788021][T10721] ? do_raw_spin_lock+0x128/0x260 [ 258.788040][T10721] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 258.788072][T10721] ? rcu_is_watching+0x12/0xc0 [ 258.788098][T10721] generic_perform_write+0x4cb/0xa40 [ 258.788118][T10721] ? __pfx_generic_perform_write+0x10/0x10 [ 258.788130][T10721] ? __mark_inode_dirty+0x55c/0x16e0 [ 258.788144][T10721] ? mnt_put_write_access_file+0x4e/0x100 [ 258.788159][T10721] ? file_update_time_flags+0x373/0x500 [ 258.788170][T10721] ? aio_write+0x6fc/0x920 [ 258.788196][T10721] shmem_file_write_iter+0x10e/0x140 [ 258.788218][T10721] aio_write+0x3ba/0x920 [ 258.788247][T10721] ? __pfx_aio_write+0x10/0x10 [ 258.788269][T10721] ? rcu_is_watching+0x12/0xc0 [ 258.788282][T10721] ? __might_fault+0xc5/0x140 [ 258.788296][T10721] ? lock_release+0x24d/0x310 [ 258.788308][T10721] ? io_submit_one+0x1142/0x1fb0 [ 258.788320][T10721] io_submit_one+0x1142/0x1fb0 [ 258.788341][T10721] ? rcu_is_watching+0x12/0xc0 [ 258.788371][T10721] ? __pfx_io_submit_one+0x10/0x10 [ 258.788394][T10721] ? rcu_is_watching+0x12/0xc0 [ 258.788408][T10721] ? __might_fault+0xc5/0x140 [ 258.788422][T10721] ? lock_release+0x24d/0x310 [ 258.788433][T10721] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 258.788443][T10721] __x64_sys_io_submit+0x1b1/0x3a0 [ 258.788455][T10721] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 258.788478][T10721] ? fput+0x79/0x100 [ 258.788499][T10721] ? rcu_is_watching+0x12/0xc0 [ 258.788526][T10721] do_syscall_64+0x115/0x870 [ 258.788541][T10721] ? clear_bhb_loop+0x40/0x90 [ 258.788554][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.788565][T10721] RIP: 0033:0x7f093779ce59 [ 258.788574][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.788584][T10721] RSP: 002b:00007f09359ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 258.788595][T10721] RAX: ffffffffffffffda RBX: 00007f0937a16090 RCX: 00007f093779ce59 [ 258.788606][T10721] RDX: 0000200000000780 RSI: 0000000000000020 RDI: 00007f09359ee000 [ 258.788619][T10721] RBP: 00007f09359ed090 R08: 0000000000000000 R09: 0000000000000000 [ 258.788631][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.788643][T10721] R13: 00007f0937a16128 R14: 00007f0937a16090 R15: 00007fffc1f8dca8 [ 258.788664][T10721] [ 259.533216][ T6478] usbhid 8-1:0.0: can't add hid device: -71 [ 259.608622][ T6478] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 259.723394][T10737] netlink: 'syz.4.766': attribute type 1 has an invalid length. [ 259.731168][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 259.803727][ T30] audit: type=1400 audit(1781969102.102:781): avc: denied { name_bind } for pid=10732 comm="syz.3.765" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 259.856498][ T30] audit: type=1400 audit(1781969102.232:782): avc: denied { write } for pid=10722 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.875745][ T6478] usb 8-1: USB disconnect, device number 28 [ 260.021946][ T30] audit: type=1400 audit(1781969102.442:783): avc: denied { read write } for pid=6493 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.166751][ T30] audit: type=1400 audit(1781969102.442:784): avc: denied { open } for pid=6493 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.235108][ T30] audit: type=1400 audit(1781969102.442:785): avc: denied { ioctl } for pid=6493 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.332346][ T30] audit: type=1400 audit(1781969102.722:786): avc: denied { create } for pid=10750 comm="syz.3.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.474029][ T4994] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 260.563178][ T5714] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 260.635250][ T4994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 260.649183][ T4994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 260.700173][ T4994] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 260.728441][ T4994] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.746696][ T30] audit: type=1400 audit(1781969103.172:787): avc: denied { write } for pid=10752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.752844][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 260.779977][ T4994] usb 8-1: Product: syz [ 260.792492][ T4994] usb 8-1: Manufacturer: syz [ 260.822057][ T4994] usb 8-1: SerialNumber: syz [ 260.875373][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.877085][ T4994] usb 8-1: config 0 descriptor?? [ 260.886154][T10768] tipc: Failed to remove unknown binding: 66,1,1/0:3173938415/3173938417 [ 260.887278][T10768] tipc: Failed to remove unknown binding: 66,1,1/0:3173938415/3173938417 [ 260.899586][ T30] audit: type=1400 audit(1781969103.302:788): avc: denied { bind } for pid=10767 comm="syz.4.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 260.951247][ T5714] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 260.952537][ T4994] usb 8-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 260.969837][T10768] tipc: Failed to remove unknown binding: 66,1,1/0:3173938415/3173938417 [ 261.000003][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.035849][ T5714] usb 4-1: Product: syz [ 261.049802][ T5714] usb 4-1: Manufacturer: syz [ 261.063672][ T5714] usb 4-1: SerialNumber: syz [ 261.082258][ T5714] usb 4-1: config 0 descriptor?? [ 261.104984][ T5714] usb 4-1: no audio or video endpoints found [ 261.175780][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.185114][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.204153][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 261.385934][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.386698][ T4994] usb 8-1: USB disconnect, device number 29 [ 261.449330][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.479666][ T29] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 261.509279][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.560954][ T29] usb 5-1: config 0 descriptor?? [ 261.569173][T10724] syz.0.760 (10724): drop_caches: 2 [ 262.205529][ T29] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 262.217085][ T29] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 262.233939][ T29] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 262.247442][ T29] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 262.253952][ T4994] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 262.260405][ T29] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 262.287949][ T29] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 262.407508][T10813] FAULT_INJECTION: forcing a failure. [ 262.407508][T10813] name failslab, interval 1, probability 0, space 0, times 0 [ 262.413892][ T4994] usb 8-1: Using ep0 maxpacket: 16 [ 262.441670][ T4994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.454652][T10813] CPU: 0 UID: 0 PID: 10813 Comm: syz.0.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.454685][T10813] Tainted: [L]=SOFTLOCKUP [ 262.454692][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.454704][T10813] Call Trace: [ 262.454711][T10813] [ 262.454718][T10813] dump_stack_lvl+0x100/0x190 [ 262.454745][T10813] should_fail_ex.cold+0x5/0xa [ 262.454771][T10813] should_failslab+0xc2/0x120 [ 262.454793][T10813] kmem_cache_alloc_noprof+0x7b/0x6d0 [ 262.454821][T10813] ? skb_clone+0x190/0x400 [ 262.454847][T10813] skb_clone+0x190/0x400 [ 262.454870][T10813] netlink_deliver_tap+0xaed/0xcc0 [ 262.454901][T10813] netlink_unicast+0x62b/0x850 [ 262.454922][T10813] ? __pfx_netlink_unicast+0x10/0x10 [ 262.454945][T10813] netlink_sendmsg+0x8b0/0xda0 [ 262.454966][T10813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.454989][T10813] ____sys_sendmsg+0xa4d/0xbe0 [ 262.455016][T10813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.455043][T10813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.455074][T10813] ? kstrtouint_from_user+0x13c/0x1d0 [ 262.455097][T10813] ___sys_sendmsg+0x190/0x1e0 [ 262.455114][T10813] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.455133][T10813] ? get_pid_task+0x106/0x250 [ 262.455164][T10813] ? rcu_is_watching+0x12/0xc0 [ 262.455193][T10813] __sys_sendmsg+0x160/0x210 [ 262.455217][T10813] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.455245][T10813] ? rcu_is_watching+0x12/0xc0 [ 262.455270][T10813] do_syscall_64+0x115/0x870 [ 262.455282][T10813] ? clear_bhb_loop+0x40/0x90 [ 262.455294][T10813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.455305][T10813] RIP: 0033:0x7f3a84d9ce59 [ 262.455314][T10813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.455325][T10813] RSP: 002b:00007f3a85bfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.455342][T10813] RAX: ffffffffffffffda RBX: 00007f3a85015fa0 RCX: 00007f3a84d9ce59 [ 262.455356][T10813] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.455369][T10813] RBP: 00007f3a85bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 262.455381][T10813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.455393][T10813] R13: 00007f3a85016038 R14: 00007f3a85015fa0 R15: 00007ffe470d6ee8 [ 262.455413][T10813] [ 262.692708][ T4994] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.702947][ T4994] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.716675][ T4994] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.726612][ T4994] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.754475][ T4994] usb 8-1: config 0 descriptor?? [ 262.757114][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.792411][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.843022][ T29] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 32: -71 [ 262.873768][ T29] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense firmware info: -71 [ 262.911562][ T29] playstation 0003:054C:0DF2.0007: Failed to get firmware info from DualSense [ 262.959467][ T29] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 262.982726][ T29] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -71 [ 263.018012][ T29] usb 5-1: USB disconnect, device number 23 [ 263.103585][ T5735] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 263.274446][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.295730][ T5735] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.307753][ T29] usb 4-1: USB disconnect, device number 18 [ 263.308091][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.346016][ T5735] usb 1-1: config 0 descriptor?? [ 263.506722][T10845] Invalid source name [ 263.510901][T10845] UBIFS error (pid: 10845): cannot open "ubifs", error -22 [ 263.516748][ T4994] usbhid 8-1:0.0: can't add hid device: -71 [ 263.541186][ T4994] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 264.590041][ T4994] usb 8-1: USB disconnect, device number 30 [ 264.893914][T10853] serio: Serial port ptm0 [ 266.237509][T10864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.785'. [ 266.456759][ T5735] usbhid 1-1:0.0: can't add hid device: -71 [ 266.476578][ T5735] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 266.504529][ T5735] usb 1-1: USB disconnect, device number 21 [ 266.543834][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 266.543850][ T30] audit: type=1400 audit(1781969108.982:801): avc: denied { getopt } for pid=10876 comm="syz.7.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.693881][ T29] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 267.213042][ T6478] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 267.354418][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 267.367218][ T29] usb 4-1: config 0 has no interfaces? [ 267.385084][ T29] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 267.396564][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.404718][ T29] usb 4-1: Product: syz [ 267.405340][T10880] netlink: 'syz.4.788': attribute type 64 has an invalid length. [ 267.417928][ T29] usb 4-1: Manufacturer: syz [ 267.483205][ T6478] usb 2-1: Using ep0 maxpacket: 16 [ 267.599637][ T29] usb 4-1: SerialNumber: syz [ 267.631484][ T6478] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 267.724192][ T6478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.740392][ T29] usb 4-1: config 0 descriptor?? [ 267.764127][ T6478] usb 2-1: Product: syz [ 267.768622][ T6478] usb 2-1: Manufacturer: syz [ 267.779693][ T6478] usb 2-1: SerialNumber: syz [ 267.790006][ T6478] usb 2-1: config 0 descriptor?? [ 267.804564][ T6478] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 267.981997][ T29] usb 4-1: USB disconnect, device number 19 [ 268.123463][ T804] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 268.132496][T10898] overlayfs: failed lookup in lower (newroot/148, name='file1', err=-40): overlapping layers [ 268.329852][T10873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'. [ 268.365516][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 268.836130][ T6478] pwc: Warning: more than 1 configuration available. [ 268.850799][ T6478] pwc: Failed to set LED on/off time (-71) [ 268.857380][ T6478] pwc: send_video_command error -71 [ 268.862616][ T6478] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 268.870189][ T6478] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 268.881010][ T6478] usb 2-1: USB disconnect, device number 31 [ 268.888125][ T5600] udevd[5600]: setting owner of /dev/bus/usb/002/031 to uid=0, gid=0 failed: No such file or directory [ 269.026426][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.048381][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.189532][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 269.198985][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 269.407051][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.442462][ T804] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 269.464632][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.474290][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 269.484058][T10907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 269.725225][ T804] usb 1-1: config 0 descriptor?? [ 269.749001][ T804] hub 1-1:0.0: Invalid hub with more than one config or interface [ 269.781802][ T804] hub 1-1:0.0: probe with driver hub failed with error -22 [ 269.885118][T10918] fuse: Bad value for 'group_id' [ 269.899005][T10918] fuse: Bad value for 'group_id' [ 269.954097][T10921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.804'. [ 269.967383][T10921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.804'. [ 270.025827][T10925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.066368][T10925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.717879][T10925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.744006][T10925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.778070][ T30] audit: type=1400 audit(1781969113.212:802): avc: denied { ioctl } for pid=10889 comm="syz.0.795" path="socket:[34091]" dev="sockfs" ino=34091 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.807975][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 270.903522][ T1221] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 271.025359][ T30] audit: type=1400 audit(1781969113.462:803): avc: denied { read } for pid=10939 comm="syz.3.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.063873][ T1221] usb 2-1: Using ep0 maxpacket: 32 [ 271.070533][ T1221] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 271.081876][ T1221] usb 2-1: config 0 has no interface number 0 [ 271.100262][ T1221] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.118502][ T1221] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 271.134606][ T1221] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 271.155165][ T1221] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 271.168900][ T1221] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 271.188156][ T1221] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 271.199897][ T1221] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 271.212454][ T1221] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10 [ 271.225171][ T1221] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024 [ 271.244389][ T1221] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.265235][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 271.309023][ T1221] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 271.320681][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.329512][ T1221] usb 2-1: Product: syz [ 271.335202][ T1221] usb 2-1: Manufacturer: syz [ 271.339921][ T1221] usb 2-1: SerialNumber: syz [ 271.358168][ T1221] usb 2-1: config 0 descriptor?? [ 271.366597][T10938] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 271.375675][T10938] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 271.392959][ T1221] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 271.402157][ T1221] usb 2-1: couldn't find an output bulk endpoint. Bailing out. [ 271.455706][ T1221] usb 1-1: USB disconnect, device number 22 [ 271.513930][ T804] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 271.543073][ T5706] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 271.641365][ T6478] usb 2-1: USB disconnect, device number 32 [ 271.685743][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.694467][ T804] usb 5-1: config index 0 descriptor too short (expected 64366, got 110) [ 271.703077][ T804] usb 5-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 271.713461][ T804] usb 5-1: too many endpoints for config 1 interface 1 altsetting 119: 123, using maximum allowed: 30 [ 271.725113][ T804] usb 5-1: config 1 interface 1 altsetting 119 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 271.738602][ T804] usb 5-1: config 1 interface 1 has no altsetting 0 [ 271.746007][ T5706] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 271.754535][ T5706] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 271.765125][ T5706] usb 4-1: config 220 has no interface number 2 [ 271.771452][ T5706] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 271.784949][ T5706] usb 4-1: config 220 interface 0 has no altsetting 0 [ 271.791825][ T804] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 271.800937][ T5706] usb 4-1: config 220 interface 76 has no altsetting 0 [ 271.807840][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.815849][ T5706] usb 4-1: config 220 interface 1 has no altsetting 0 [ 271.823713][ T804] usb 5-1: Product: syz [ 271.827927][ T804] usb 5-1: Manufacturer: syz [ 271.832677][ T804] usb 5-1: SerialNumber: syz [ 271.838066][ T5706] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 271.847275][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.860476][ T5706] usb 4-1: Product: syz [ 271.864726][ T5706] usb 4-1: Manufacturer: syz [ 271.869335][ T5706] usb 4-1: SerialNumber: syz [ 272.035868][T10952] block device autoloading is deprecated and will be removed. [ 272.101692][ T5706] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 272.116931][ T804] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 272.127407][ T5706] uvcvideo 4-1:220.0: No valid video chain found. [ 272.135190][ T5706] usb 4-1: selecting invalid altsetting 0 [ 272.145566][ T804] usb 5-1: USB disconnect, device number 24 [ 272.157935][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.180454][ T5706] usb 4-1: selecting invalid altsetting 0 [ 272.188303][ T5706] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 272.205239][ T5706] usb 4-1: USB disconnect, device number 20 [ 272.871173][ T1221] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 273.131687][ T1221] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 273.536694][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.573988][ T1221] usb 1-1: Product: syz [ 273.625019][T10976] FAULT_INJECTION: forcing a failure. [ 273.625019][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 273.638443][T10976] CPU: 0 UID: 0 PID: 10976 Comm: syz.3.822 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.638481][T10976] Tainted: [L]=SOFTLOCKUP [ 273.638488][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.638500][T10976] Call Trace: [ 273.638506][T10976] [ 273.638512][T10976] dump_stack_lvl+0x100/0x190 [ 273.638540][T10976] should_fail_ex.cold+0x5/0xa [ 273.638559][T10976] ? kmem_cache_alloc_lru_noprof+0x59/0x6e0 [ 273.638585][T10976] should_failslab+0xc2/0x120 [ 273.638602][T10976] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 273.638625][T10976] ? __d_alloc+0x35/0xa50 [ 273.638643][T10976] __d_alloc+0x35/0xa50 [ 273.638658][T10976] d_alloc_parallel+0x105/0x14b0 [ 273.638678][T10976] ? rcu_is_watching+0x12/0xc0 [ 273.638699][T10976] ? trace_irq_enable.constprop.0+0x122/0x160 [ 273.638719][T10976] ? irqentry_exit+0x24d/0xa00 [ 273.638735][T10976] ? __pfx_d_alloc_parallel+0x10/0x10 [ 273.638758][T10976] ? d_lookup+0xd9/0x190 [ 273.638776][T10976] ? d_lookup+0xe7/0x190 [ 273.638795][T10976] path_openat+0x271c/0x4280 [ 273.638822][T10976] ? __pfx_path_openat+0x10/0x10 [ 273.638846][T10976] do_file_open+0x20e/0x430 [ 273.638869][T10976] ? __pfx_do_file_open+0x10/0x10 [ 273.638891][T10976] ? __pfx___schedule+0x10/0x10 [ 273.638920][T10976] ? alloc_fd+0x471/0x7a0 [ 273.638943][T10976] ? do_getname+0x191/0x390 [ 273.638960][T10976] do_sys_openat2+0x10f/0x1e0 [ 273.638976][T10976] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.638996][T10976] __x64_sys_openat+0x12d/0x210 [ 273.639012][T10976] ? __pfx___x64_sys_openat+0x10/0x10 [ 273.639031][T10976] ? rcu_is_watching+0x12/0xc0 [ 273.639052][T10976] do_syscall_64+0x115/0x870 [ 273.639067][T10976] ? clear_bhb_loop+0x40/0x90 [ 273.639086][T10976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.639102][T10976] RIP: 0033:0x7fe183b9ce59 [ 273.639116][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.639132][T10976] RSP: 002b:00007fe184b0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 273.639148][T10976] RAX: ffffffffffffffda RBX: 00007fe183e16090 RCX: 00007fe183b9ce59 [ 273.639161][T10976] RDX: 000000000000275a RSI: 00002000000002c0 RDI: 0000000000000005 [ 273.639172][T10976] RBP: 00007fe184b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 273.639182][T10976] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000001 [ 273.639192][T10976] R13: 00007fe183e16128 R14: 00007fe183e16090 R15: 00007ffead4be058 [ 273.639210][T10976] [ 273.918685][ T1221] usb 1-1: Manufacturer: syz [ 273.924198][ T1221] usb 1-1: SerialNumber: syz [ 273.956106][ T1221] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 274.024461][ T4994] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 274.163018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 274.314881][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.324711][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.469713][T10991] overlay: Bad value for 'upperdir' [ 275.074198][ T4994] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 275.107887][ T4994] ath9k_htc: Failed to initialize the device [ 275.321546][ T4994] usb 1-1: ath9k_htc: USB layer deinitialized [ 275.502217][T10987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.538217][T10987] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 275.782306][ T1221] usb 1-1: USB disconnect, device number 23 [ 276.003214][ T5706] IPVS: starting estimator thread 0... [ 276.188375][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 276.198930][ T804] usb 8-1: new low-speed USB device number 31 using dummy_hcd [ 276.239142][T11018] syzkaller0: entered promiscuous mode [ 276.246430][T11018] syzkaller0: entered allmulticast mode [ 276.253271][T11010] IPVS: using max 49 ests per chain, 117600 per kthread [ 276.365189][ T804] usb 8-1: device descriptor read/64, error -71 [ 276.565840][T11025] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 276.574102][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 276.744903][ T804] usb 8-1: new low-speed USB device number 32 using dummy_hcd [ 276.893063][ T804] usb 8-1: device descriptor read/64, error -71 [ 277.252345][ T804] usb usb8-port1: attempt power cycle [ 277.643053][ T804] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 277.730514][ T804] usb 8-1: device descriptor read/8, error -71 [ 277.983063][ T804] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 278.061780][ T804] usb 8-1: device descriptor read/8, error -71 [ 278.185208][ T804] usb usb8-port1: unable to enumerate USB device [ 278.423887][ T1221] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 278.604168][ T1221] usb 1-1: Using ep0 maxpacket: 8 [ 278.645553][ T1221] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 278.665813][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 278.671242][T11067] tipc: Enabling of bearer rejected, failed to enable media [ 278.675677][ T1221] usb 1-1: Product: syz [ 278.697053][ T1221] usb 1-1: Manufacturer: syz [ 278.714564][ T1221] usb 1-1: SerialNumber: syz [ 278.727312][ T5721] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 278.770158][ T1221] usb 1-1: config 0 descriptor?? [ 278.917164][ T1221] usbtest 1-1:0.0: FX2 device [ 278.921961][ T1221] usbtest 1-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 278.930768][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 278.938316][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.957057][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.042635][ T5721] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 279.109017][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.170780][ T804] usb 1-1: USB disconnect, device number 24 [ 279.250149][ T5721] usb 2-1: config 0 descriptor?? [ 280.679646][ T5721] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 280.691834][ T5721] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 280.760594][ T5721] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 280.770065][ T5721] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -71 [ 280.991863][ T5721] usb 2-1: USB disconnect, device number 33 [ 281.149895][T11085] FAULT_INJECTION: forcing a failure. [ 281.149895][T11085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.163128][T11085] CPU: 1 UID: 0 PID: 11085 Comm: syz.0.854 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.163162][T11085] Tainted: [L]=SOFTLOCKUP [ 281.163169][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.163182][T11085] Call Trace: [ 281.163188][T11085] [ 281.163194][T11085] dump_stack_lvl+0x100/0x190 [ 281.163227][T11085] should_fail_ex.cold+0x5/0xa [ 281.163252][T11085] _copy_from_user+0x2e/0xd0 [ 281.163279][T11085] copy_msghdr_from_user+0x9f/0x4c0 [ 281.163310][T11085] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 281.163343][T11085] ? kstrtouint_from_user+0x13c/0x1d0 [ 281.163366][T11085] ___sys_sendmsg+0x106/0x1e0 [ 281.163385][T11085] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.163404][T11085] ? get_pid_task+0x106/0x250 [ 281.163435][T11085] ? rcu_is_watching+0x12/0xc0 [ 281.163471][T11085] __sys_sendmsg+0x160/0x210 [ 281.163494][T11085] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.163523][T11085] ? rcu_is_watching+0x12/0xc0 [ 281.163550][T11085] do_syscall_64+0x115/0x870 [ 281.163569][T11085] ? clear_bhb_loop+0x40/0x90 [ 281.163592][T11085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.163613][T11085] RIP: 0033:0x7f3a84d9ce59 [ 281.163628][T11085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.163648][T11085] RSP: 002b:00007f3a85bdb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.163669][T11085] RAX: ffffffffffffffda RBX: 00007f3a85016090 RCX: 00007f3a84d9ce59 [ 281.163683][T11085] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 0000000000000008 [ 281.163696][T11085] RBP: 00007f3a85bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 281.163707][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.163718][T11085] R13: 00007f3a85016128 R14: 00007f3a85016090 R15: 00007ffe470d6ee8 [ 281.163740][T11085] [ 281.494785][ T1221] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 281.659712][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.669974][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 281.691269][ T1221] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.704958][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.716952][ T1221] usb 4-1: Product: syz [ 281.721672][ T1221] usb 4-1: Manufacturer: syz [ 281.727789][ T1221] usb 4-1: SerialNumber: syz [ 281.741567][ T1221] usb 4-1: config 0 descriptor?? [ 281.749293][ T1221] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 282.009226][T11108] tipc: Enabling of bearer rejected, failed to enable media [ 282.200568][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.215786][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.417239][ T1221] usb 4-1: USB disconnect, device number 21 [ 282.984075][T11114] sch_fq: defrate 5 ignored. [ 284.113404][ T804] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 284.209360][T11130] program syz.1.868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.544081][ T1221] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 284.549114][ T804] usb 1-1: unable to get BOS descriptor or descriptor too short [ 285.025517][ T804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.041971][ T804] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 285.062254][ T804] usb 1-1: config 1 has no interface number 1 [ 285.075741][ T804] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 285.111818][ T804] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.128627][ T804] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 285.137827][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.145934][ T804] usb 1-1: Product: syz [ 285.145954][ T804] usb 1-1: Manufacturer: syz [ 285.145968][ T804] usb 1-1: SerialNumber: syz [ 285.171396][ T1221] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.172019][ T1221] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 285.172052][ T1221] usb 2-1: can't read configurations, error -71 [ 285.363653][ T4994] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 285.511330][T11153] siw: device registration error -23 [ 285.733737][ T4994] usb 5-1: Using ep0 maxpacket: 32 [ 285.740404][ T4994] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 285.764053][ T4994] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 285.784688][ T4994] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.805840][ T4994] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 285.918609][ T4994] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 285.940949][ T4994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.962608][T11132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.971200][T11132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.983094][ T4994] usb 5-1: Product: syz [ 285.998067][ T4994] usb 5-1: Manufacturer: syz [ 286.019954][ T4994] usb 5-1: SerialNumber: syz [ 286.041085][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 286.058975][ T4994] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input20 [ 286.105900][T11159] random: crng reseeded on system resumption [ 286.254275][ T4994] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 286.264382][ T4994] (id 0x00) [ 286.553601][ T4994] rc_core: IR keymap rc-imon-pad not found [ 286.566763][ T4994] Registered IR keymap rc-empty [ 286.592880][ T804] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 286.610789][ T4994] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 286.644996][ T4994] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 286.662006][ T804] usb 1-1: USB disconnect, device number 25 [ 286.678356][ T4994] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 286.718207][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.738585][ T4994] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input21 [ 287.029808][ T4994] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:25> initialized [ 288.082439][ T30] audit: type=1400 audit(1781969130.512:804): avc: denied { setopt } for pid=11194 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 288.285738][T11203] overlayfs: failed to clone upperpath [ 288.585448][ T6478] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 289.094475][ T6478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.135820][ T6478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.179514][ T6478] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.202958][ T6478] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.272113][ T6478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.272835][T11198] netlink: 'syz.7.886': attribute type 64 has an invalid length. [ 289.574789][ T6478] usb 2-1: config 0 descriptor?? [ 290.296135][ T30] audit: type=1400 audit(1781969132.732:805): avc: denied { append } for pid=11211 comm="syz.0.893" name="frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 290.494577][ T6478] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 291.551628][T11231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.897'. [ 291.586492][T11235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.931699][ T5706] usb 2-1: USB disconnect, device number 36 [ 291.955039][T11235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.228826][ T30] audit: type=1400 audit(1781969134.662:806): avc: denied { map } for pid=11238 comm="syz.0.899" path="socket:[35361]" dev="sockfs" ino=35361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 292.261897][ T30] audit: type=1400 audit(1781969134.662:807): avc: denied { accept } for pid=11238 comm="syz.0.899" path="socket:[35361]" dev="sockfs" ino=35361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 292.656179][ T30] audit: type=1400 audit(1781969134.772:808): avc: denied { connect } for pid=11238 comm="syz.0.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 292.688526][ T30] audit: type=1400 audit(1781969134.772:809): avc: denied { write } for pid=11238 comm="syz.0.899" path="socket:[35940]" dev="sockfs" ino=35940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 292.978374][T11247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.084548][T11249] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 293.255386][ T30] audit: type=1400 audit(1781969135.402:810): avc: denied { listen } for pid=11244 comm="syz.7.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.292283][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.338259][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.409696][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.902'. [ 293.619570][ T30] audit: type=1804 audit(1781969136.052:811): pid=11263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.903" name="/newroot/68/bus/bus" dev="overlay" ino=386 res=1 errno=0 [ 294.116527][ T5706] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 294.146717][ T30] audit: type=1400 audit(1781969136.582:812): avc: denied { map } for pid=11274 comm="syz.3.908" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 294.625444][ T5706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 294.669991][ T5706] usb 1-1: not running at top speed; connect to a high speed hub [ 294.694790][ T5706] usb 1-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 294.725419][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.741542][ T5706] usb 1-1: Product: syz [ 294.753909][ T5706] usb 1-1: Manufacturer: syz [ 294.762644][ T5706] usb 1-1: SerialNumber: syz [ 294.790110][ T30] audit: type=1400 audit(1781969137.222:813): avc: denied { ioctl } for pid=11279 comm="syz.3.909" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x64c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 294.833895][ T1221] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 295.386450][ T1221] usb 8-1: unable to get BOS descriptor or descriptor too short [ 295.417272][ T1221] usb 8-1: not running at top speed; connect to a high speed hub [ 295.449233][ T1221] usb 8-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 295.459587][ T1221] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.485351][ T1221] usb 8-1: Product: syz [ 295.490455][ T1221] usb 8-1: Manufacturer: syz [ 295.500105][ T1221] usb 8-1: SerialNumber: syz [ 295.821015][ T30] audit: type=1400 audit(1781969138.252:814): avc: denied { audit_write } for pid=11291 comm="syz.1.913" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 295.987871][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 296.003158][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 296.186315][T11301] NILFS (nullb0): couldn't find nilfs on the device [ 296.647562][ T5706] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.667947][ T5706] usb 1-1: MIDIStreaming interface descriptor not found [ 296.792473][ T30] audit: type=1400 audit(1781969139.222:815): avc: denied { bind } for pid=11307 comm="syz.0.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 296.825780][ T5706] usb 1-1: USB disconnect, device number 26 [ 296.854417][T11308] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 296.860952][T11308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 296.884175][T11308] vhci_hcd vhci_hcd.0: Device attached [ 296.908536][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.967301][T11313] netlink: 88 bytes leftover after parsing attributes in process `syz.3.916'. [ 296.979659][T11310] vhci_hcd: connection closed [ 296.981483][ T9081] vhci_hcd vhci_hcd.0: stop threads [ 296.981919][ T30] audit: type=1400 audit(1781969139.412:816): avc: denied { wake_alarm } for pid=11307 comm="syz.0.915" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 297.030118][ T9081] vhci_hcd vhci_hcd.0: release socket [ 297.079103][ T9081] vhci_hcd vhci_hcd.0: disconnect device [ 297.089672][T11316] netlink: 60 bytes leftover after parsing attributes in process `syz.3.916'. [ 297.112422][ T30] audit: type=1400 audit(1781969139.412:817): avc: denied { setattr } for pid=11307 comm="syz.0.915" name="[io_uring]" dev="anon_inodefs" ino=36181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 297.152041][T11316] unsupported nlmsg_type 40 [ 297.343544][ T4994] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 298.558176][ T1221] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.565670][ T1221] usb 8-1: MIDIStreaming interface descriptor not found [ 298.623868][ T4994] usb 2-1: Using ep0 maxpacket: 32 [ 298.639259][ T1221] usb 8-1: USB disconnect, device number 35 [ 298.649364][ T4994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.669753][ T4994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.690600][ T4994] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 298.702473][ T4994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.715142][ T4994] usb 2-1: config 0 descriptor?? [ 298.904668][T11340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.914206][T11340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.229798][ T4994] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 299.262844][ T4994] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 299.367727][ T4994] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 299.568910][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.577711][ T5714] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 299.577927][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.670663][ T30] audit: type=1400 audit(1781969142.102:818): avc: denied { ioctl } for pid=11315 comm="syz.1.917" path="/72/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 299.670815][ T4994] ft260 0003:0403:6030.000A: failed to retrieve system status [ 299.708456][ T4994] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -5 [ 299.773672][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 299.833622][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.875786][T11359] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 299.880543][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.892112][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.929'. [ 300.129012][ T5714] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 300.205692][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.346765][ T5714] usb 1-1: config 0 descriptor?? [ 300.433992][T11365] siw: device registration error -23 [ 300.927530][ T5714] hub 1-1:0.0: USB hub found [ 300.986903][ T5706] usb 2-1: USB disconnect, device number 37 [ 301.139910][ T5714] hub 1-1:0.0: 1 port detected [ 301.447812][T11376] kAFS: unable to lookup cell 'ÿ' [ 301.472608][T11376] kAFS: unable to lookup cell '(,c¾Ì' [ 301.539635][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.551901][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.776562][ T5706] hub 1-1:0.0: activate --> -90 [ 301.903139][ T5714] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 301.913922][ T1221] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 302.054576][ T5714] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.071894][ T5714] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.087949][ T1221] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.087946][ T5714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 302.087992][ T5714] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 302.116585][ T1221] usb 4-1: not running at top speed; connect to a high speed hub [ 302.127364][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.144366][ T1221] usb 4-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 302.158852][T11390] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 302.166804][ T5714] hub 2-1:1.0: bad descriptor, ignoring hub [ 302.173878][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.173889][ T5714] hub 2-1:1.0: probe with driver hub failed with error -5 [ 302.174262][ T5714] cdc_wdm 2-1:1.0: skipping garbage [ 302.199486][ T5714] cdc_wdm 2-1:1.0: skipping garbage [ 302.206329][ T5714] cdc_wdm 2-1:1.0: skipping garbage [ 302.221725][ T5714] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 302.233234][ T5714] cdc_wdm 2-1:1.0: Unknown control protocol [ 302.233674][ T1221] usb 4-1: Product: syz [ 302.267990][ T1221] usb 4-1: Manufacturer: syz [ 302.289021][ T1221] usb 4-1: SerialNumber: syz [ 302.496283][ T804] usb 2-1: USB disconnect, device number 38 [ 302.903055][ T804] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 303.244288][ T5706] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 303.251509][ T804] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.263870][ T5706] usb 1-1-port1: cannot reset (err = -32) [ 303.274442][ T5706] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 303.287808][ T804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 303.298894][ T804] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 303.310449][ T5706] usb 1-1-port1: cannot disable (err = -32) [ 303.321999][ T5706] usb 1-1-port1: cannot reset (err = -32) [ 303.329840][ T804] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 303.345807][ T5706] usb 1-1-port1: cannot reset (err = -32) [ 303.354815][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.364869][ T5706] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 303.400710][ T5706] usb 1-1-port1: cannot disable (err = -32) [ 303.435927][ T5706] usb 1-1-port1: attempt power cycle [ 303.480467][T11390] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 303.519941][T11408] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 303.529697][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.942'. [ 303.544954][ T804] hub 2-1:1.0: bad descriptor, ignoring hub [ 303.634604][ T804] hub 2-1:1.0: probe with driver hub failed with error -5 [ 303.736174][ T30] audit: type=1400 audit(1781969146.132:819): avc: denied { read append } for pid=11389 comm="syz.1.938" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 303.761683][ T804] cdc_wdm 2-1:1.0: skipping garbage [ 303.795735][ T30] audit: type=1400 audit(1781969146.132:820): avc: denied { ioctl open } for pid=11389 comm="syz.1.938" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 303.900095][ T804] cdc_wdm 2-1:1.0: skipping garbage [ 303.905790][ T804] cdc_wdm 2-1:1.0: skipping garbage [ 303.951593][ T804] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 303.958585][ T804] cdc_wdm 2-1:1.0: Unknown control protocol [ 304.045871][T11412] netlink: 44 bytes leftover after parsing attributes in process `syz.7.943'. [ 304.054920][T11412] netlink: 44 bytes leftover after parsing attributes in process `syz.7.943'. [ 304.063853][T11412] netlink: 44 bytes leftover after parsing attributes in process `syz.7.943'. [ 304.092450][ T5706] usb 1-1-port1: cannot reset (err = -32) [ 304.344703][ T30] audit: type=1400 audit(1781969146.132:821): avc: denied { mounton } for pid=11389 comm="syz.1.938" path="/74/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 304.372230][ T804] usb 2-1: USB disconnect, device number 39 [ 304.388898][ T5706] usb 1-1-port1: cannot reset (err = -32) [ 304.395640][ T5706] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 304.408419][ T5706] usb 1-1-port1: cannot disable (err = -32) [ 304.418442][ T5706] usb 1-1-port1: cannot reset (err = -32) [ 304.424561][ T5706] usb 1-1-port1: cannot reset (err = -32) [ 304.438845][ T5706] usb 1-1-port1: Cannot enable. Maybe the USB cable is bad? [ 304.448417][ T5706] usb 1-1-port1: cannot disable (err = -32) [ 304.454516][ T5706] usb 1-1-port1: unable to enumerate USB device [ 304.473585][ T5706] usb 1-1-port1: cannot disable (err = -32) [ 304.497633][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.507165][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.530827][ T1221] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.544723][ T1221] usb 4-1: MIDIStreaming interface descriptor not found [ 304.591988][ T1221] usb 4-1: USB disconnect, device number 22 [ 304.641118][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.171192][T11448] binder: 11439:11448 ioctl 40045566 6 returned -22 [ 307.333383][T11448] binder: 11439:11448 ioctl 5412 200000000300 returned -22 [ 308.625206][ T30] audit: type=1400 audit(1781969151.062:822): avc: denied { map } for pid=11463 comm="syz.0.955" path="socket:[36977]" dev="sockfs" ino=36977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 308.632538][T11468] 9p: Bad value for 'rfdno' [ 309.243238][ T5706] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 309.423320][ T5706] usb 8-1: Using ep0 maxpacket: 16 [ 309.465138][ T5706] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 309.497866][ T5706] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.517602][T11486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.526889][ T5706] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.596827][T11486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.671001][ T5706] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 309.763583][ T5706] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 309.772840][ T5706] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.798077][ T5706] usb 8-1: config 0 descriptor?? [ 309.873833][T11486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.214835][T11486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.593534][ T30] audit: type=1400 audit(1781969153.022:823): avc: denied { nlmsg_write } for pid=11469 comm="syz.7.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 310.648745][ T5706] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.000B/input/input22 [ 310.753253][ T5706] input: HID 0458:5013 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5013.000B/input/input23 [ 310.825617][ T5706] kye 0003:0458:5013.000B: input,hiddev1,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0 [ 310.893134][ T5706] usb 8-1: USB disconnect, device number 36 [ 310.959056][T11503] fido_id[11503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 310.994766][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.998312][ T30] audit: type=1400 audit(1781969153.432:824): avc: denied { ioctl } for pid=11507 comm="syz.4.969" path="socket:[38009]" dev="sockfs" ino=38009 ioctlcmd=0x6e82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 311.054481][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.804155][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.811148][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.225608][T11545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.978'. [ 314.875436][T11552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.889833][T11552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.919470][T11552] program syz.4.982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.949108][T11552] program syz.4.982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.484269][ T1221] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 315.520335][T11568] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.986'. [ 315.530121][T11568] openvswitch: netlink: Message has 512 unknown bytes. [ 315.654695][ T1221] usb 2-1: Using ep0 maxpacket: 8 [ 315.758846][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.781867][ T1221] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 315.792921][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.831909][ T1221] usb 2-1: config 0 descriptor?? [ 316.042665][ T1221] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 316.268950][T11578] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 316.277241][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 316.345025][T11581] overlayfs: failed to clone upperpath [ 316.633347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 317.110633][ T1221] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 317.313819][ T1221] usb 4-1: Using ep0 maxpacket: 32 [ 317.370724][ T1221] usb 4-1: config 0 has no interfaces? [ 317.408575][ T1221] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 317.497644][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.546193][ T1221] usb 4-1: Product: syz [ 317.607970][ T1221] usb 4-1: Manufacturer: syz [ 317.644990][ T1221] usb 4-1: SerialNumber: syz [ 317.699689][ T1221] usb 4-1: config 0 descriptor?? [ 317.856526][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 318.043703][ T5706] usb 2-1: USB disconnect, device number 40 [ 318.367461][ T804] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 318.494437][ T5706] usb 4-1: USB disconnect, device number 23 [ 318.601039][ T804] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.605359][T11601] netlink: 'syz.0.993': attribute type 64 has an invalid length. [ 318.645868][ T804] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.657077][ T804] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.727529][ T804] usb 8-1: Product: syz [ 318.747239][ T804] usb 8-1: Manufacturer: syz [ 318.774746][ T804] usb 8-1: SerialNumber: syz [ 318.903993][ T30] audit: type=1400 audit(1781969161.342:825): avc: denied { create } for pid=11610 comm="syz.1.999" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 318.948285][ T30] audit: type=1400 audit(1781969161.362:826): avc: denied { unlink } for pid=11610 comm="syz.1.999" name="file0" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 318.949752][T11614] overlayfs: failed to clone upperpath [ 319.139213][T11618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.160341][T11618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.355286][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.364026][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.389096][ T30] audit: type=1400 audit(1781969161.822:827): avc: denied { listen } for pid=11617 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.403952][ T1221] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 319.452795][ T30] audit: type=1400 audit(1781969161.882:828): avc: denied { accept } for pid=11617 comm="syz.0.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.479052][T11618] ufs: You didn't specify the type of your ufs filesystem [ 319.479052][T11618] [ 319.479052][T11618] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 319.479052][T11618] [ 319.479052][T11618] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 319.510784][T11618] ufs: ufstype=old is supported read-only [ 319.518637][T11618] ufs: ufs_fill_super(): bad magic number [ 319.593706][ T1221] usb 4-1: Using ep0 maxpacket: 32 [ 319.602274][ T1221] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 319.611222][ T1221] usb 4-1: config 0 has no interface number 0 [ 319.619630][ T1221] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 319.629521][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.640269][ T1221] usb 4-1: Product: syz [ 319.645386][ T1221] usb 4-1: Manufacturer: syz [ 319.650048][ T1221] usb 4-1: SerialNumber: syz [ 319.656708][ T1221] usb 4-1: config 0 descriptor?? [ 319.664084][ T1221] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 319.866669][ T1221] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 319.878357][ T1221] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 319.915686][ T804] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 319.925893][ T804] cdc_ncm 8-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 319.934372][ T804] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 320.115985][ T804] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 320.135967][ T804] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 320.277853][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 320.502505][ T1221] usb 4-1: USB disconnect, device number 24 [ 320.918133][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.979278][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.550785][ T804] usb 8-1: USB disconnect, device number 37 [ 321.592970][ T804] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 321.609287][ T1221] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 321.625697][ T1221] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 321.638426][ T1221] quatech2 4-1:0.51: device disconnected [ 321.821590][ T30] audit: type=1400 audit(1781969164.252:829): avc: denied { write } for pid=11635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.887462][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.899247][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.375196][ T30] audit: type=1400 audit(1781969164.342:830): avc: denied { write } for pid=11658 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.011360][ T30] audit: type=1400 audit(1781969166.442:831): avc: denied { write } for pid=11663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.037876][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 324.061566][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 324.079482][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 324.546107][ T29] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 324.826844][ T30] audit: type=1400 audit(1781969167.122:832): avc: denied { write } for pid=11695 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.043042][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 326.050999][ T29] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 326.062351][T11688] infiniband syz2: set active [ 326.067103][ T29] usb 2-1: config 2 has no interface number 0 [ 326.073285][ T29] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 326.083238][ T6478] xfrm0 speed is unknown, defaulting to 1000 [ 326.089320][T11688] infiniband syz2: added xfrm0 [ 326.094403][ T29] usb 2-1: config 2 interface 88 has no altsetting 0 [ 326.301133][T11688] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 326.366970][ T29] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 326.403881][T11688] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 326.406356][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.432787][T11688] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 326.451474][ T29] usb 2-1: Product: syz [ 326.461078][ T29] usb 2-1: Manufacturer: syz [ 326.469950][ T29] usb 2-1: SerialNumber: syz [ 326.478940][T11688] RDS/IB: syz2: added [ 326.481102][T11685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.504124][T11688] smc: adding ib device syz2 with port count 1 [ 326.530079][T11688] smc: ib device syz2 port 1 has no pnetid [ 326.557884][ T1221] xfrm0 speed is unknown, defaulting to 1000 [ 326.570451][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 326.673744][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 326.698863][T11683] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.925308][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 327.007084][ T29] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 327.405489][ T29] asix 2-1:2.88: probe with driver asix failed with error -71 [ 327.422521][ T29] usb 2-1: USB disconnect, device number 41 [ 327.531989][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1025'. [ 327.585976][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 327.696893][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 327.836537][T11688] xfrm0 speed is unknown, defaulting to 1000 [ 327.853867][ T1221] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 327.992165][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 328.015391][ T1221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 328.019269][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.059058][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.097932][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1030'. [ 328.134177][ T1221] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 328.148925][ T1221] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.168640][ T1221] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 328.190747][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 328.199325][ T1221] usb 2-1: Product: syz [ 328.202605][T11734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.204309][ T1221] usb 2-1: Manufacturer: syz [ 328.217705][ T1221] usb 2-1: SerialNumber: syz [ 328.225058][T11734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.936693][T11742] serio: Serial port ptm0 [ 329.417385][ T1221] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 331.455697][T11761] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1036'. [ 331.832338][T11774] FAULT_INJECTION: forcing a failure. [ 331.832338][T11774] name failslab, interval 1, probability 0, space 0, times 0 [ 331.845639][T11774] CPU: 0 UID: 0 PID: 11774 Comm: syz.3.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.845668][T11774] Tainted: [L]=SOFTLOCKUP [ 331.845674][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.845691][T11774] Call Trace: [ 331.845697][T11774] [ 331.845704][T11774] dump_stack_lvl+0x100/0x190 [ 331.845729][T11774] should_fail_ex.cold+0x5/0xa [ 331.845751][T11774] ? __kmalloc_noprof+0xba/0x840 [ 331.845775][T11774] ? fib6_info_alloc+0x40/0x160 [ 331.845800][T11774] should_failslab+0xc2/0x120 [ 331.845819][T11774] __kmalloc_noprof+0xe0/0x840 [ 331.845841][T11774] ? kasan_save_stack+0x3f/0x50 [ 331.845860][T11774] fib6_info_alloc+0x40/0x160 [ 331.845886][T11774] ip6_route_info_create+0x14c/0xad0 [ 331.845906][T11774] addrconf_f6i_alloc+0x2d9/0x670 [ 331.845931][T11774] ? __pfx_addrconf_f6i_alloc+0x10/0x10 [ 331.845967][T11774] ipv6_add_addr+0x580/0x1fb0 [ 331.845994][T11774] ? irqentry_exit+0x24d/0xa00 [ 331.846018][T11774] ? __pfx_ipv6_add_addr+0x10/0x10 [ 331.846047][T11774] ? ipv6_find_idev+0x174/0x1f0 [ 331.846070][T11774] ? lock_release+0x24d/0x310 [ 331.846088][T11774] ? ndisc_mc_map+0x107/0x750 [ 331.846109][T11774] ? add_addr+0xde/0x340 [ 331.846124][T11774] add_addr+0xde/0x340 [ 331.846141][T11774] ? __pfx_add_addr+0x10/0x10 [ 331.846157][T11774] ? mld_del_delrec+0x417/0xe30 [ 331.846184][T11774] addrconf_init_auto_addrs+0x430/0x780 [ 331.846205][T11774] addrconf_notify+0xa10/0x1ba0 [ 331.846229][T11774] ? __pfx_tls_dev_event+0x10/0x10 [ 331.846253][T11774] ? __pfx_addrconf_notify+0x10/0x10 [ 331.846276][T11774] ? ip6mr_device_event+0x1c4/0x230 [ 331.846300][T11774] notifier_call_chain+0x99/0x3f0 [ 331.846331][T11774] call_netdevice_notifiers_info+0xbe/0x110 [ 331.846360][T11774] netif_state_change+0x165/0x380 [ 331.846386][T11774] ? __pfx_netif_state_change+0x10/0x10 [ 331.846414][T11774] ? netif_change_flags+0x10d/0x160 [ 331.846439][T11774] do_setlink.isra.0+0x31ce/0x3e60 [ 331.846465][T11774] ? preempt_schedule_irq+0x7b/0x90 [ 331.846493][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.846519][T11774] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 331.846541][T11774] ? irqentry_exit+0x24d/0xa00 [ 331.846569][T11774] ? rtnl_newlink+0x8bb/0x2380 [ 331.846594][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.846617][T11774] ? lock_acquire+0x301/0x370 [ 331.846638][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.846663][T11774] ? trace_contention_end+0x126/0x160 [ 331.846687][T11774] ? __mutex_lock+0x26d/0x1bd0 [ 331.846707][T11774] ? rtnl_newlink+0x8bb/0x2380 [ 331.846735][T11774] ? __pfx___mutex_lock+0x10/0x10 [ 331.846752][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.846775][T11774] ? cap_capable+0x107/0x430 [ 331.846806][T11774] rtnl_newlink+0x1b7e/0x2380 [ 331.846834][T11774] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.846857][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.846879][T11774] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 331.846899][T11774] ? lock_release+0x24d/0x310 [ 331.846919][T11774] ? avc_has_perm_noaudit+0x145/0x3b0 [ 331.846941][T11774] ? cred_has_capability.isra.0+0x186/0x300 [ 331.846969][T11774] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 331.846998][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.847019][T11774] ? cap_capable+0x107/0x430 [ 331.847041][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.847064][T11774] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 331.847088][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.847112][T11774] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 331.847137][T11774] ? lock_release+0x24d/0x310 [ 331.847156][T11774] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.847181][T11774] rtnetlink_rcv_msg+0x95e/0xe90 [ 331.847205][T11774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.847229][T11774] ? ref_tracker_free+0x52b/0x6c0 [ 331.847249][T11774] ? ref_tracker_free+0x377/0x6c0 [ 331.847270][T11774] ? ref_tracker_free+0x37e/0x6c0 [ 331.847285][T11774] netlink_rcv_skb+0x159/0x420 [ 331.847296][T11774] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.847311][T11774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.847324][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.847339][T11774] netlink_unicast+0x585/0x850 [ 331.847351][T11774] ? __pfx_netlink_unicast+0x10/0x10 [ 331.847363][T11774] netlink_sendmsg+0x8b0/0xda0 [ 331.847374][T11774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.847384][T11774] ? ____sys_sendmsg+0x2d4/0xbe0 [ 331.847400][T11774] ? hook_socket_sendmsg+0x52/0x1c0 [ 331.847416][T11774] ____sys_sendmsg+0xa4d/0xbe0 [ 331.847431][T11774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.847442][T11774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.847460][T11774] ___sys_sendmsg+0x190/0x1e0 [ 331.847470][T11774] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.847480][T11774] ? __pfx___schedule+0x10/0x10 [ 331.847498][T11774] ? irqentry_exit+0x24d/0xa00 [ 331.847510][T11774] ? __fget_files+0x1fa/0x3d0 [ 331.847527][T11774] __sys_sendmsg+0x160/0x210 [ 331.847540][T11774] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.847555][T11774] ? rcu_is_watching+0x12/0xc0 [ 331.847575][T11774] do_syscall_64+0x115/0x870 [ 331.847585][T11774] ? clear_bhb_loop+0x40/0x90 [ 331.847598][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.847609][T11774] RIP: 0033:0x7fe183b9ce59 [ 331.847619][T11774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.847631][T11774] RSP: 002b:00007fe184aea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.847650][T11774] RAX: ffffffffffffffda RBX: 00007fe183e16180 RCX: 00007fe183b9ce59 [ 331.847658][T11774] RDX: 0000000004000000 RSI: 0000200000000300 RDI: 0000000000000009 [ 331.847665][T11774] RBP: 00007fe184aea090 R08: 0000000000000000 R09: 0000000000000000 [ 331.847672][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.847679][T11774] R13: 00007fe183e16218 R14: 00007fe183e16180 R15: 00007ffead4be058 [ 331.847690][T11774] [ 332.733585][T11782] program syz.4.1042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.730092][T11783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.794938][ T30] audit: type=1400 audit(1781969176.232:833): avc: denied { read } for pid=11776 comm="syz.7.1040" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.918205][T11783] loop8: detected capacity change from 0 to 7 [ 333.918242][ T30] audit: type=1400 audit(1781969176.262:834): avc: denied { open } for pid=11776 comm="syz.7.1040" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.988778][ T30] audit: type=1400 audit(1781969176.262:835): avc: denied { write } for pid=9246 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 334.032845][ T4994] usb 2-1: USB disconnect, device number 42 [ 334.095273][ T4994] usblp1: removed [ 334.140859][ T30] audit: type=1400 audit(1781969176.262:836): avc: denied { ioctl } for pid=9246 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 334.231632][T11783] Dev loop8: unable to read RDB block 7 [ 334.248329][T11783] loop8: unable to read partition table [ 334.259292][T11800] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 334.276090][ T30] audit: type=1400 audit(1781969176.402:837): avc: denied { read } for pid=11794 comm="syz.3.1045" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 334.328375][ T30] audit: type=1400 audit(1781969176.402:838): avc: denied { open } for pid=11794 comm="syz.3.1045" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 334.439890][T11783] loop8: partition table beyond EOD, truncated [ 334.471372][T11783] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 334.825233][T11797] netlink: 'syz.0.1043': attribute type 64 has an invalid length. [ 334.996712][ T30] audit: type=1400 audit(1781969176.402:839): avc: denied { ioctl } for pid=11794 comm="syz.3.1045" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.095157][ T30] audit: type=1400 audit(1781969176.692:840): avc: denied { create } for pid=11801 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 335.116032][ T30] audit: type=1400 audit(1781969176.692:841): avc: denied { mounton } for pid=11799 comm="syz.3.1047" path="/98/file0" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 335.168533][ T30] audit: type=1400 audit(1781969176.692:842): avc: denied { unlink } for pid=11799 comm="syz.3.1047" name="#22" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 336.162761][T11828] syzkaller0: entered promiscuous mode [ 336.175993][T11828] syzkaller0: entered allmulticast mode [ 336.253035][ T6478] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 336.742834][T11836] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 336.785997][ T6478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 336.809307][ T6478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 336.845760][ T6478] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.855131][ T6478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.871586][ T6478] usb 4-1: Product: syz [ 336.885692][ T6478] usb 4-1: Manufacturer: syz [ 336.897569][ T6478] usb 4-1: SerialNumber: syz [ 336.909935][T11848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.922318][ T6478] usb 4-1: config 0 descriptor?? [ 336.936789][ T6478] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 336.938034][T11848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.193000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 337.322995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 337.481733][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.541306][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.272175][ T6478] usb 4-1: USB disconnect, device number 25 [ 338.312255][ T5917] udevd[5917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.350767][T11857] overlayfs: workdir and upperdir must reside under the same mount [ 338.613899][ T5735] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 338.774444][ T5735] usb 8-1: Using ep0 maxpacket: 16 [ 338.802895][ T5735] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.837993][ T5735] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 338.859354][ T5735] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 338.881192][ T5735] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.914211][ T5735] usb 8-1: config 0 descriptor?? [ 339.296682][T11875] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 339.309331][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 339.309350][ T30] audit: type=1400 audit(1781969181.742:907): avc: denied { accept } for pid=11867 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 339.350605][T11875] program syz.3.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.411650][ T30] audit: type=1400 audit(1781969181.742:908): avc: denied { write } for pid=11867 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 339.451088][ T30] audit: type=1400 audit(1781969181.742:909): avc: denied { read } for pid=11867 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 339.471988][ T30] audit: type=1400 audit(1781969181.782:910): avc: denied { write } for pid=11874 comm="syz.3.1066" name="sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.512781][ T30] audit: type=1400 audit(1781969181.782:911): avc: denied { open } for pid=11874 comm="syz.3.1066" path="/dev/sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.716588][ T30] audit: type=1400 audit(1781969181.982:912): avc: denied { ioctl } for pid=11878 comm="syz.4.1068" path="socket:[39353]" dev="sockfs" ino=39353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.997653][ T30] audit: type=1400 audit(1781969182.432:913): avc: denied { create } for pid=11887 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.020793][ T30] audit: type=1400 audit(1781969182.452:914): avc: denied { create } for pid=11887 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.148473][ T30] audit: type=1400 audit(1781969182.572:915): avc: denied { create } for pid=11887 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 340.182363][ T30] audit: type=1400 audit(1781969182.582:916): avc: denied { ioctl } for pid=11887 comm="syz.1.1070" path="socket:[39376]" dev="sockfs" ino=39376 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.393052][ T6478] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 340.484365][ T804] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 340.544415][ T6478] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 340.553003][ T6478] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.569456][ T6478] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 340.579122][ T6478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.588008][ T6478] usb 2-1: Product: syz [ 340.592381][ T6478] usb 2-1: Manufacturer: syz [ 340.598164][ T6478] usb 2-1: SerialNumber: syz [ 340.608728][ T6478] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input24 [ 340.664890][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 340.689601][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 340.702957][ T804] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.713232][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.722176][ T804] usb 4-1: Product: syz [ 340.727054][ T804] usb 4-1: Manufacturer: syz [ 340.731814][ T804] usb 4-1: SerialNumber: syz [ 340.748909][ T804] usb 4-1: config 0 descriptor?? [ 340.774576][ T804] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 340.817594][ T6478] bcm5974 2-1:1.0: could not read from device [ 340.838549][ T4960] bcm5974 2-1:1.0: could not read from device [ 340.848199][ T6478] input: failed to attach handler mousedev to device input24, error: -5 [ 340.876293][ T4960] bcm5974 2-1:1.0: could not read from device [ 340.887497][ T6478] usb 2-1: USB disconnect, device number 43 [ 340.899123][ T4960] bcm5974 2-1:1.0: could not read from device [ 340.975772][T11893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.989955][T11893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.223745][ T804] usb 4-1: USB disconnect, device number 26 [ 341.252216][T11908] usb usb7: usbfs: process 11908 (syz.0.1077) did not claim interface 0 before use [ 341.266871][ T6478] usb 8-1: USB disconnect, device number 38 [ 341.571375][T11916] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1079'. [ 344.013223][ T6478] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 344.291787][T11953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.355897][T11953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.394153][T11953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.411662][T11953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.642532][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 345.642543][ T30] audit: type=1400 audit(1781969188.072:949): avc: denied { unmount } for pid=8921 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 345.994244][ T6478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.030933][T11972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.068383][T11972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.829431][ T6478] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 346.838847][ T6478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.867020][ T6478] usb 4-1: config 0 descriptor?? [ 346.878822][ T6478] usb 4-1: can't set config #0, error -71 [ 347.747684][ T6478] usb 4-1: USB disconnect, device number 27 [ 347.930070][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.964883][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.010075][T11984] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1102'. [ 348.054509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 348.091647][T11989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1102'. [ 348.104549][ T30] audit: type=1400 audit(1781969190.542:950): avc: denied { map } for pid=11987 comm="syz.4.1104" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 348.130355][T11989] netlink: 'syz.0.1102': attribute type 1 has an invalid length. [ 348.140338][ T30] audit: type=1400 audit(1781969190.572:951): avc: denied { execute } for pid=11987 comm="syz.4.1104" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 348.176122][T11989] bond1: entered promiscuous mode [ 348.184082][T11989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.208289][T11991] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 348.238976][T11991] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 348.263877][ T5735] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 348.273091][T11991] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 348.338140][T11989] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 348.413872][ T5735] usb 8-1: Using ep0 maxpacket: 32 [ 348.426528][ T5735] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 348.445355][ T5735] usb 8-1: config 0 has no interface number 0 [ 348.459632][ T5735] usb 8-1: config 0 interface 184 has no altsetting 0 [ 348.479759][ T5735] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 348.497402][ T5735] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.508619][ T5735] usb 8-1: Product: syz [ 348.512848][ T5735] usb 8-1: Manufacturer: syz [ 348.542496][ T30] audit: type=1400 audit(1781969190.972:952): avc: denied { accept } for pid=12000 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 348.548695][ T5735] usb 8-1: SerialNumber: syz [ 348.571719][ T5735] usb 8-1: config 0 descriptor?? [ 348.581317][ T30] audit: type=1400 audit(1781969191.012:953): avc: denied { map } for pid=12000 comm="syz.1.1108" path="socket:[40283]" dev="sockfs" ino=40283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 348.604174][ T5721] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 348.823123][T12007] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.037598][ T30] audit: type=1400 audit(1781969191.112:954): avc: denied { append } for pid=11998 comm="syz.4.1107" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 349.060780][ T30] audit: type=1326 audit(1781969191.272:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093779ce59 code=0x7ffc0000 [ 349.095003][ T30] audit: type=1326 audit(1781969191.272:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093779ce59 code=0x7ffc0000 [ 349.142376][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.155579][ T5721] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 349.161754][ T30] audit: type=1326 audit(1781969191.272:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f093779ce59 code=0x7ffc0000 [ 349.194212][ T30] audit: type=1326 audit(1781969191.272:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093779ce59 code=0x7ffc0000 [ 349.194292][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.242624][ T5721] usb 4-1: config 0 descriptor?? [ 349.525162][T12015] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 349.567064][ T5735] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 349.598117][ T5735] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 349.613829][T12015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.728754][T12022] serio: Serial port ptm0 [ 350.665029][ T5735] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 350.701495][ T5735] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 351.315915][ T5735] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 351.359319][ T5735] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 351.545100][ T5735] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61 [ 352.047235][T12020] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 352.074241][ T5735] usb 8-1: USB disconnect, device number 39 [ 352.280429][T12020] bond2 (unregistering): Released all slaves [ 352.467873][ T5721] usbhid 4-1:0.0: can't add hid device: -71 [ 352.520494][ T5721] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 352.569265][ T5721] usb 4-1: USB disconnect, device number 28 [ 352.824528][ T5735] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 352.996643][ T5735] usb 8-1: Using ep0 maxpacket: 32 [ 353.011401][ T5735] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.036990][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 353.037006][ T30] audit: type=1400 audit(1781969195.472:985): avc: denied { mount } for pid=12062 comm="syz.1.1124" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 353.038212][ T5735] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.077034][ T5735] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 353.087015][ T5721] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 353.096269][ T5735] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.162296][ T5735] usb 8-1: config 0 descriptor?? [ 353.223531][T12067] tipc: Enabling of bearer rejected, failed to enable media [ 353.227259][ T5735] hub 8-1:0.0: USB hub found [ 353.261696][ T5721] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.278611][ T5721] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.329055][ T5721] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.419360][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.444346][ T5735] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 353.467145][ T5721] usb 4-1: config 0 descriptor?? [ 353.499606][ T5721] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 353.519714][ T5721] dvb-usb: bulk message failed: -22 (3/0) [ 353.631368][ T5721] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 353.662112][ T5721] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 354.118200][ T30] audit: type=1400 audit(1781969196.552:986): avc: denied { read } for pid=12046 comm="syz.3.1119" name="event4" dev="devtmpfs" ino=3662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 354.145236][ T30] audit: type=1400 audit(1781969196.552:987): avc: denied { open } for pid=12046 comm="syz.3.1119" path="/dev/input/event4" dev="devtmpfs" ino=3662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 354.145839][ T5735] hid-generic 0003:046D:C31C.000C: unknown main item tag 0x0 [ 354.190327][ T30] audit: type=1400 audit(1781969196.612:988): avc: denied { write } for pid=12046 comm="syz.3.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 354.271329][ T5721] usb 4-1: media controller created [ 354.277590][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.298819][ T5721] dvb-usb: bulk message failed: -22 (6/0) [ 354.305233][ T5721] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 354.315791][ T5735] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 354.336510][ T5721] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 354.434739][ T5721] dvb-usb: schedule remote query interval to 150 msecs. [ 354.442468][ T5721] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 354.446398][ T30] audit: type=1400 audit(1781969196.862:989): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=3837 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.457971][ T5735] usb 8-1: USB disconnect, device number 40 [ 354.595075][ T5721] dvb-usb: bulk message failed: -22 (1/0) [ 354.610324][ T5721] dvb-usb: error while querying for an remote control event. [ 354.686961][T12081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.698558][T12081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.764873][T12087] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1131'. [ 354.774667][T12087] gretap0: entered promiscuous mode [ 354.782536][T12087] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1131'. [ 354.791891][T12087] 0ªî{X¹¦: renamed from gretap0 [ 354.797059][ T5721] dvb-usb: bulk message failed: -22 (1/0) [ 354.803915][T12087] 0ªî{X¹¦: left promiscuous mode [ 354.808978][T12087] 0ªî{X¹¦: entered allmulticast mode [ 354.815275][T12087] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 354.834486][ T5721] dvb-usb: error while querying for an remote control event. [ 354.842070][T12087] smc: removing ib device syz0 [ 354.852261][T12087] smbdirect: ib_dev[syz0] removed [ 355.132871][T12087] ------------[ cut here ]------------ [ 355.138385][T12087] !xa_empty(&pool->xa) [ 355.138408][T12087] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.4.1131/12087 [ 355.154128][T12087] Modules linked in: [ 355.158026][T12087] CPU: 1 UID: 0 PID: 12087 Comm: syz.4.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.168983][T12087] Tainted: [L]=SOFTLOCKUP [ 355.173347][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.183436][T12087] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 355.188908][T12087] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 86 a2 47 f9 5b e9 00 25 d8 02 e8 7b a2 47 f9 90 <0f> 0b 90 e8 72 a2 47 f9 5b c3 cc cc cc cc e8 27 13 b8 f9 eb d0 0f [ 355.208539][T12087] RSP: 0018:ffffc90005b9f180 EFLAGS: 00010246 [ 355.214611][T12087] RAX: 0000000000080000 RBX: ffff888029b0d398 RCX: ffffc900036d1000 [ 355.222580][T12087] RDX: 0000000000080000 RSI: ffffffff88c1bca5 RDI: ffff888029b0d418 [ 355.230568][T12087] RBP: ffffffff88c016d0 R08: 0000000000000005 R09: 0000000000000001 [ 355.238583][T12087] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029b0c698 [ 355.246556][T12087] R13: ffff888029b0bfe0 R14: ffff888029b0bfe0 R15: ffff888029b0d0f8 [ 355.254531][T12087] FS: 00007f09385706c0(0000) GS:ffff88812441a000(0000) knlGS:0000000000000000 [ 355.263470][T12087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.270076][T12087] CR2: 000000110c3da6c5 CR3: 0000000033ee5000 CR4: 00000000003526f0 [ 355.278053][T12087] Call Trace: [ 355.281322][T12087] [ 355.284254][T12087] rxe_dealloc+0x25/0xc0 [ 355.288493][T12087] ib_dealloc_device+0x49/0x230 [ 355.293374][T12087] __ib_unregister_device+0x396/0x480 [ 355.298752][T12087] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 355.304572][T12087] ib_unregister_device_and_put+0x5a/0x80 [ 355.310295][T12087] nldev_dellink+0x308/0x430 [ 355.314924][T12087] ? __pfx_nldev_dellink+0x10/0x10 [ 355.320046][T12087] ? consume_skb+0xd6/0x110 [ 355.324571][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.329321][T12087] ? cap_capable+0x107/0x430 [ 355.333942][T12087] ? bpf_lsm_capable+0x9/0x10 [ 355.338602][T12087] ? security_capable+0x80/0x260 [ 355.343571][T12087] ? ns_capable+0xd2/0xf0 [ 355.347918][T12087] ? __pfx_nldev_dellink+0x10/0x10 [ 355.353057][T12087] rdma_nl_rcv_msg+0x392/0x6f0 [ 355.357835][T12087] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 355.363148][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.367934][T12087] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 355.374358][T12087] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 355.381283][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.386067][T12087] ? netlink_deliver_tap+0x1ae/0xcc0 [ 355.391355][T12087] netlink_unicast+0x585/0x850 [ 355.396236][T12087] ? __pfx_netlink_unicast+0x10/0x10 [ 355.401538][T12087] netlink_sendmsg+0x8b0/0xda0 [ 355.406300][T12087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.411574][T12087] ____sys_sendmsg+0xa4d/0xbe0 [ 355.416359][T12087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.421627][T12087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.426922][T12087] ___sys_sendmsg+0x190/0x1e0 [ 355.431583][T12087] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.436794][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.441548][T12087] __sys_sendmsg+0x160/0x210 [ 355.446138][T12087] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.451251][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.456032][T12087] do_syscall_64+0x115/0x870 [ 355.460631][T12087] ? clear_bhb_loop+0x40/0x90 [ 355.465308][T12087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.471211][T12087] RIP: 0033:0x7f093779ce59 [ 355.475695][T12087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.495327][T12087] RSP: 002b:00007f0938570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.503753][T12087] RAX: ffffffffffffffda RBX: 00007f0937a15fa0 RCX: 00007f093779ce59 [ 355.511736][T12087] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 355.519747][T12087] RBP: 00007f0937832e6f R08: 0000000000000000 R09: 0000000000000000 [ 355.527718][T12087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.535707][T12087] R13: 00007f0937a16038 R14: 00007f0937a15fa0 R15: 00007fffc1f8dca8 [ 355.543705][T12087] [ 355.546721][T12087] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.553983][T12087] CPU: 1 UID: 0 PID: 12087 Comm: syz.4.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.564923][T12087] Tainted: [L]=SOFTLOCKUP [ 355.569241][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.579277][T12087] Call Trace: [ 355.582563][T12087] [ 355.585483][T12087] dump_stack_lvl+0x100/0x190 [ 355.590143][T12087] vpanic+0x552/0x970 [ 355.594114][T12087] ? __pfx_vpanic+0x10/0x10 [ 355.598626][T12087] ? lock_release+0x24d/0x310 [ 355.603308][T12087] panic+0xd1/0xe0 [ 355.607014][T12087] ? __pfx_panic+0x10/0x10 [ 355.611406][T12087] check_panic_on_warn.cold+0x19/0x34 [ 355.616751][T12087] ? rxe_pool_cleanup+0x46/0x60 [ 355.621575][T12087] __warn.cold+0x191/0x318 [ 355.625965][T12087] __report_bug+0x30f/0x440 [ 355.630444][T12087] ? rxe_pool_cleanup+0x46/0x60 [ 355.635274][T12087] ? __pfx___report_bug+0x10/0x10 [ 355.640276][T12087] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 355.646063][T12087] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 355.651861][T12087] ? __flush_workqueue+0x426/0x1200 [ 355.657044][T12087] ? rxe_pool_cleanup+0x46/0x60 [ 355.661872][T12087] report_bug+0xb2/0x220 [ 355.666096][T12087] ? rxe_pool_cleanup+0x46/0x60 [ 355.670929][T12087] handle_bug+0x16a/0x2a0 [ 355.675234][T12087] exc_invalid_op+0x17/0x50 [ 355.679714][T12087] asm_exc_invalid_op+0x1a/0x20 [ 355.684557][T12087] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 355.689992][T12087] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 86 a2 47 f9 5b e9 00 25 d8 02 e8 7b a2 47 f9 90 <0f> 0b 90 e8 72 a2 47 f9 5b c3 cc cc cc cc e8 27 13 b8 f9 eb d0 0f [ 355.709588][T12087] RSP: 0018:ffffc90005b9f180 EFLAGS: 00010246 [ 355.715637][T12087] RAX: 0000000000080000 RBX: ffff888029b0d398 RCX: ffffc900036d1000 [ 355.723589][T12087] RDX: 0000000000080000 RSI: ffffffff88c1bca5 RDI: ffff888029b0d418 [ 355.731550][T12087] RBP: ffffffff88c016d0 R08: 0000000000000005 R09: 0000000000000001 [ 355.739499][T12087] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029b0c698 [ 355.747448][T12087] R13: ffff888029b0bfe0 R14: ffff888029b0bfe0 R15: ffff888029b0d0f8 [ 355.755401][T12087] ? __pfx_rxe_dealloc+0x10/0x10 [ 355.760318][T12087] ? rxe_pool_cleanup+0x45/0x60 [ 355.765145][T12087] rxe_dealloc+0x25/0xc0 [ 355.769363][T12087] ib_dealloc_device+0x49/0x230 [ 355.774186][T12087] __ib_unregister_device+0x396/0x480 [ 355.779534][T12087] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 355.785318][T12087] ib_unregister_device_and_put+0x5a/0x80 [ 355.791015][T12087] nldev_dellink+0x308/0x430 [ 355.795583][T12087] ? __pfx_nldev_dellink+0x10/0x10 [ 355.800666][T12087] ? consume_skb+0xd6/0x110 [ 355.805162][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.809903][T12087] ? cap_capable+0x107/0x430 [ 355.814474][T12087] ? bpf_lsm_capable+0x9/0x10 [ 355.819133][T12087] ? security_capable+0x80/0x260 [ 355.824044][T12087] ? ns_capable+0xd2/0xf0 [ 355.828349][T12087] ? __pfx_nldev_dellink+0x10/0x10 [ 355.833436][T12087] rdma_nl_rcv_msg+0x392/0x6f0 [ 355.838207][T12087] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 355.843479][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.848266][T12087] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 355.854665][T12087] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 355.861597][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.866345][T12087] ? netlink_deliver_tap+0x1ae/0xcc0 [ 355.871874][T12087] netlink_unicast+0x585/0x850 [ 355.876611][T12087] ? __pfx_netlink_unicast+0x10/0x10 [ 355.881873][T12087] netlink_sendmsg+0x8b0/0xda0 [ 355.886610][T12087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.891873][T12087] ____sys_sendmsg+0xa4d/0xbe0 [ 355.896618][T12087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.901883][T12087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.907171][T12087] ___sys_sendmsg+0x190/0x1e0 [ 355.911827][T12087] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.916998][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.921744][T12087] __sys_sendmsg+0x160/0x210 [ 355.926311][T12087] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.931419][T12087] ? rcu_is_watching+0x12/0xc0 [ 355.936176][T12087] do_syscall_64+0x115/0x870 [ 355.940745][T12087] ? clear_bhb_loop+0x40/0x90 [ 355.945396][T12087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.951267][T12087] RIP: 0033:0x7f093779ce59 [ 355.955677][T12087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.975263][T12087] RSP: 002b:00007f0938570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.983657][T12087] RAX: ffffffffffffffda RBX: 00007f0937a15fa0 RCX: 00007f093779ce59 [ 355.991603][T12087] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 355.999558][T12087] RBP: 00007f0937832e6f R08: 0000000000000000 R09: 0000000000000000 [ 356.007504][T12087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.015454][T12087] R13: 00007f0937a16038 R14: 00007f0937a15fa0 R15: 00007fffc1f8dca8 [ 356.023419][T12087] [ 356.026668][T12087] Kernel Offset: disabled [ 356.030972][T12087] Rebooting in 86400 seconds..