last executing test programs: 3m52.560506602s ago: executing program 0 (id=80): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0xce, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x1b) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x20, 0x12, 0x4, "ae9c43a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) close(0x3) syz_usb_control_io$rtl8150(r1, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x0, 0x2, 0x41, {0x41, 0x16, "548bb6ee175631924395eeb604b5e51182c3f6cd199522a0d341175b12c1212bdf9929ef538ffe4dd752168c562e08e3150a9dfd6210974fc1956255982c9c"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x20, 0x14, 0xa1, "ffb247587629a88e25a2953a53acdbf0c36311b1bf225a5a824305bbfa7ec8211c78f705ee4e920af27fae1f13bfa27c43ccaa41218026c797c90369d17d13d07eacfdb15cec70df4ba33c711ee5cbcf18b71a76dbf06b31858d277eb88255bf0220626637687cd2af74d7ee777a87e65c0c81c360fe247d137faa3a50d3c1788e2b5343fe0c7043d5089a44a8eea90cdc66057b60e4e9042ac3732fe4367506be"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0xc0, 0x5, 0x3, "c5e6c7"}, &(0x7f00000005c0)={0x40, 0x5, 0x6, "f860c6ce86e0"}}) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r2, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 3m47.538455066s ago: executing program 0 (id=89): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x608801, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() getrlimit(0x2, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x24008000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2, 0x1a, 0x20f5) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) 3m46.24492497s ago: executing program 0 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x8, @private0, 0xd470}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000000)="2200000809809a85", 0x8) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x70bd2c, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x5c}, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x17, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) 3m45.306424514s ago: executing program 0 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0xc4e2}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0x7, 0x9, 0x3ff}, 0x3c) 3m45.220524277s ago: executing program 0 (id=96): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c03e9ba0102cc3c090212"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m44.748616269s ago: executing program 0 (id=97): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085a30000860000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x4, 0x80000004, 0xc, 0xb}, {0x1, 0x2, 0x4, 0x3}], 0x10, 0x1000}, 0x94) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x48000) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x105000, 0x53) openat(r4, &(0x7f0000000080)='./file0\x00', 0xc000, 0x1c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001500010328bd7000fbdbdf250c0000000c00040000000000000000004634f0656fa93ba0d4c9ec853bc3b194d3c8a6f0521ac97d24bfb025e493fafb855831e2c3692bdd24f2cfb1597b99b5b1f1d0017712c6f011f4e24f3e7388282940397d7635e287768457405b2aa3263bf5a4b08f2767e53e7dd2e3f276a7a6b5795b8386664ab018ca18d1b39464fce8413b6587867392bc7ffd"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x100, 0x80000000, 0x2, 0x400, 0xe, 0x800001, 0x75d, 0x3, 0x2, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x5, 0x7c, 0xfffffffe, 0x40000003, 0x1, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x3, 0x8, 0x8, 0x0, 0x1]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000280)={0x0, 'veth1_vlan\x00', 0x2}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc8003, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x8880) 3m44.506865025s ago: executing program 32 (id=97): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085a30000860000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x4, 0x80000004, 0xc, 0xb}, {0x1, 0x2, 0x4, 0x3}], 0x10, 0x1000}, 0x94) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x6, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x48000) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x105000, 0x53) openat(r4, &(0x7f0000000080)='./file0\x00', 0xc000, 0x1c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001500010328bd7000fbdbdf250c0000000c00040000000000000000004634f0656fa93ba0d4c9ec853bc3b194d3c8a6f0521ac97d24bfb025e493fafb855831e2c3692bdd24f2cfb1597b99b5b1f1d0017712c6f011f4e24f3e7388282940397d7635e287768457405b2aa3263bf5a4b08f2767e53e7dd2e3f276a7a6b5795b8386664ab018ca18d1b39464fce8413b6587867392bc7ffd"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x100, 0x80000000, 0x2, 0x400, 0xe, 0x800001, 0x75d, 0x3, 0x2, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x10000b, 0xfd, 0x5, 0x7c, 0xfffffffe, 0x40000003, 0x1, 0x10, 0x0, 0x0, 0x0, 0xe66, 0x3, 0x8, 0x8, 0x0, 0x1]}) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000280)={0x0, 'veth1_vlan\x00', 0x2}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc8003, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x8880) 3m41.486093406s ago: executing program 1 (id=109): syz_emit_vhci(0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x40100, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) (async) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) r2 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x6) (async) writev(0xffffffffffffffff, &(0x7f000001b700)=[{0x0}], 0x1) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, 0x0) (async) mkdirat(r3, 0x0, 0x40) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271b, &(0x7f0000000440)=""/102392, &(0x7f00000000c0)=0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, &(0x7f0000000340)=r2}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c000) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0x503, 0x70bd27, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x1d961}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0xc080) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 3m41.340877766s ago: executing program 1 (id=111): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc9073, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) gettimeofday(0xfffffffffffffffe, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ftruncate(r2, 0x7) pipe2$9p(0x0, 0x0) tee(r1, 0xffffffffffffffff, 0x81, 0xb) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x6) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0xffa6, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}}], 0x40000000000013e, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 3m39.754149156s ago: executing program 1 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r2, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9e8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4345}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x23}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x52}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3155}, @TIPC_NLA_CON_FLAG={0x4f, 0x1, 0x401}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x40) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socket(0x27, 0x6, 0x80000000) 3m39.753924997s ago: executing program 1 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0xc4e2}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) 3m38.437219883s ago: executing program 3 (id=118): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x251, 0xae, 0x31, 0xd, 0x8, 0xd9f, 0x2, 0xfe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf3, 0x3, 0x180, 0xd0, "", [{{0x9, 0x4, 0x8, 0x1, 0x1, 0x36, 0x76, 0xe7, 0x2, [], [{{0x9, 0x5, 0x2, 0x4e18af0d6fd3828f, 0x200, 0x10, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x12) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x50, r2, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x251, 0xae, 0x31, 0xd, 0x8, 0xd9f, 0x2, 0xfe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf3, 0x3, 0x180, 0xd0, "", [{{0x9, 0x4, 0x8, 0x1, 0x1, 0x36, 0x76, 0xe7, 0x2, [], [{{0x9, 0x5, 0x2, 0x4e18af0d6fd3828f, 0x200, 0x10, 0x3, 0x7}}]}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200080c1}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x12) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x50, r2, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) (async) 3m38.291882328s ago: executing program 1 (id=120): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x0) semtimedop(r2, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}, {0x4, 0xd6, 0x800}], 0x2, 0x0) unshare(0x8000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r7 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f0000000640)={0x1}, 0x0) landlock_restrict_self(r7, 0x2) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000cd0400383a00fc010000000000000000000000000000ff0200000000230000000000000000010300907800000000600bae2b00002f0000000000000000000000000000000000fe8800000000000000000000000000018700000000000000"], 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000140)={0x7, 0x100000, 0x6, 0xffff, 0x10, 0x2000004}) syz_open_pts(r5, 0x210041) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 3m37.630264517s ago: executing program 1 (id=124): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc9073, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) gettimeofday(0xfffffffffffffffe, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ftruncate(r2, 0x7) pipe2$9p(0x0, 0x0) tee(r1, 0xffffffffffffffff, 0xfff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x6) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}}], 0x40000000000013e, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 3m37.3638464s ago: executing program 33 (id=124): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc9073, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) gettimeofday(0xfffffffffffffffe, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ftruncate(r2, 0x7) pipe2$9p(0x0, 0x0) tee(r1, 0xffffffffffffffff, 0xfff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x6) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000002580)=""/4096}, {&(0x7f00000014c0)=""/155}, {&(0x7f00000024c0)=""/170}], 0x1}}], 0x40000000000013e, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 3m37.359311411s ago: executing program 3 (id=126): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x1}) socket$unix(0x1, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x4, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() sendmmsg$unix(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x20020001}}, {{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4004005}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000400)="ad40245d22aac8e23a2326b686a463c7e3118b19ce610b30e88b94d7417783d39cf9cf991fecfaeb362036eb6bb8669dde2df5e12e582b758d4d8f5a3bc8576ba0db26a8b3b6946ee3ed614fff72f1291d7b10", 0x53}, {&(0x7f00000007c0)="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", 0xfd}, {&(0x7f00000008c0)="543c447984681591af96d91293ad0350511b06145e85d5ebd24fe9f792b4254a595a302d22b2ddac293dbf4bad51a464ef1b818360695a7743105bd8c0f29fd824d9f4d8c41594ed66a46c5db00b5308fb03889c5a64d8903a25907b36c1551c8e647c4308", 0x65}, {&(0x7f0000000940)="b9fee306c33a483a9cdeca3d394ff9ae94c728d158f3200cb8fbddcaabb7a85cb8a2d051c06753fbdabcd4d48b7076860ba7c8ab2b0ec401d8fa905591585c65b3ab54bad112d4181c547b07b8a2c775", 0x50}, {&(0x7f0000000ac0)="3d093c06b9d1abdf5977bb45bb697f01869da54a23b3f74d50be11c286f7c6926b1509c0c4c6bb171ae3716ee1b1981a8ee8836a2cfea62deb038d554ff418b82bc3d7c4cc29a8b53d7a4a8bdb31545d7a989cde7e478f5f6a2f0a0c785892a7642c610f0e8139a69bec9ffc59bf6e48b990b1a01f36907a67188e6b444a076ab52cdca9d0d97c6910de9b31b2e3e3eb828073a9334707c65528c388851784207defca089fec776c01811a8f243680f69c4c07da0792854eb6b4ea0d94", 0xbd}, {&(0x7f0000000b80)="d47e3c5b0714ccfb39ca020779799672f0df73b799e3d948ce35b13cc30a5c10a9289ce2844d135ab77c6fd41a9a9a820780f8d5ec67f014537973caf50c2f4ffb8d697a8041f24e396755e8a7fa32c260fee29007d319d5face321a46229342eff203393598e10dc86ea8e3902860d20a913b4e68715cf92e30ab", 0x7b}, {&(0x7f0000000c00)="c2b95ebf141b91f3b9c9799d4040090abf1ae62b108b15f8dc9ebbae368775ea390682594c9e933c67e44236d7f3777c887a83c2230d5206d344a1d8312c12eea349c2d8dcee9d5cc7fa1ddd36259774c3ae13b3e57a7bdb94d1a3624f78d8ce391e66b636d9fd6f8c804bbd3d55381bf097b32bf31a59baf38ccb86560661741f77895172513461c3b27169919636d2a71c292622a04a2296505ba2257a4b8ad56e32e27f4bdb", 0xa7}, {&(0x7f0000000cc0)="0de4c99fa26877b9c0b47ba4de88d5b0b51c55ff0e3f2a15b9c9d5146450e3331c06cfc384f3f0361336d6a4165e0b2f888960037d6f23041a531fef4802b0e481b2778ed3e9f2e4035645fe14f26db59939e42eee38f00bfe18563d276301b28b868c111d20fc7c8b70942d38e66fc1821c64b6c55fc7fd242231c95cc0d8351676f3f1f0f5ebc0a427a46f528a8ab8a354f85eeb3d0ef4908d82e8d40e1eee28124712ddab093232454209ec438ab2fe", 0xb1}, {&(0x7f0000000d80)="19b02dee72eb77b2a42490d24beded2baa2c2bb3b70394b4208dcff6af55cab5aecac255c3153a019c92608e786b83afc5d0bdd8073af19287c4dc2acbffd4d6e13d3c5d4905cff37ac78ca62ef6d3d75d2f7558efa68bb293e2392dd9d06d4eb62788f4a88bbc1a9056f4d732cfab7a358e35c762c0a3dda7e99f99e8061364ab556fc5b5", 0x85}], 0x9, &(0x7f0000000f80), 0x0, 0x20000000}}, {{&(0x7f0000001040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001180)=[{&(0x7f00000010c0)="b9279a3e027cf2157ab4391b5866789891348f5f1e3f16d01f638119671e6d8ed7617252e891f39a5afc71c66137ad5065cbe364573b306eefb70fd6a5821efb544d3306621ddb9d5357239c933b9c7d3869a98d30fa0df2a9d7d53c5a31a0b7b95e610db9", 0x65}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002362efe50cefc8f1ec1bf63d892b28335edb7cce608106bbdd92dbe194ab5683eeaebcd757b2b1149c91e0c981470a9b45107f3c024357be761644d81ce8e789dab7e186291c2351dfb64e72d51046af2d31883288ecf4f090f75144ab14cbb61ae4573689511f29234f8daaa849d2aad608bc621a242176c20cbb715ba4e3220b4c4e1a"], 0x60, 0x4000000}}], 0x4, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0xfffffffffffffe43, 0x0}, 0x7ff}], 0x700, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) getrlimit(0x1, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r9 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9L\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd87\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4\x00v&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x8a)\xfa\x93J\xb9\x8d\xf3\xa8\xbe\x83\x12\xb6b\xef^\x1a\x81\xe9\xfa\x11g\nZ \xb7u\xf2\xf2\x06\x04\xb0\xb0Z\xd8\xf5\x13\xb6I', 0x2) execveat(r9, 0x0, 0x0, 0x0, 0x1000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000001040102000000000076"], 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20048808) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@my=0x1, 0x1}) 3m36.304592719s ago: executing program 3 (id=128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904", @ANYBLOB="85be94d3296155d32301ecf2c147d694ed18856843c48f602dd13fb753338919ff9a93c3fd9fc27d5e04c572bee3702bf207a50ce53c3d4c7ca1fb459031882ca926218c4585770aa2cc6491f40d1e1734ad8d2d9b0934f60de47423e84e55959956e7fdf8ef84e7755c4d7574bd8a3540edb402b5e83af054503e49943c50c3bfb588c9168f72663810ccb074bbb4c853cfb3b1aad59a95ead672410bc63573849d76ff7f3966b8f814a9826eb4b65580ee4d8f873148331183569e"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002c40)={0x8, {"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", 0x1000}}, 0x1006) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, 'M>D', "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"}}, 0x110) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xf4) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@generic={0x4, 0x3, "d7"}]}}}}}}}}, 0x0) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x33) 3m34.682308022s ago: executing program 3 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0xc4e2}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x0, &(0x7f0000000040), 0x5, 0x0}}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, 0x0, 0x0) 3m34.40023771s ago: executing program 3 (id=131): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000003780)=[{{&(0x7f0000000400)=@nl=@proc, 0x80, &(0x7f0000003600)=[{&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f0000000680)=""/172, 0xac}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4109, 0x100d}, {&(0x7f0000003300)=""/138, 0x8a}, {&(0x7f00000033c0)=""/89, 0x59}, {&(0x7f0000003440)=""/220, 0xdc}, {&(0x7f0000003540)=""/156, 0x9c}], 0x9, &(0x7f00000036c0)=""/183, 0xb7}, 0x3}], 0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000010000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004500090000000000000100f102000000080002"], 0x1c}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000880aa97c4085ca38b74f5000000010000008000000078382e74acb3db9eb970f4b5ab5c50d2a26695a64076d0243d608857e09abaa7d677d9b242e538681efe78835993fdd3474c9dc13c27bd7c9ef828f931782fd5c9e6684cd7c3af6237dca67acfd8488eddc1da0119242335c7975a769ce054ef6e91dbd285e0da21bf2479ea63d96adedc0ba0e2402c04c58c3a90ea7335fcde7a9f6ef9b0cbb00b276d6310a345187fd8a878785040a3b5deacb63aad6ee8e09031a64cb19c4cbc00780d3c8e2a7844ec5c650000000000000000645347b0741579bf28f97578f281b48c3849a4571a459163e7a4c4a5d0856a85d5d3b46ff32849edb58e0fec3c5e35b4238488086cb0366b8cc548086a4c6e16b12e0b2a263ec9e22c4344158670eaab6a53b3d83a9b01d227ac6467028bf07003f09e42cc7defd2b76f852f96893aa7864f757cbb7ef647b940db6449909d7c4eff385cc8568ba3bb6cb5f0a7825be6138b550cf54493d15bbb20aded00"/385, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) gettid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0x80}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000bc0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@private2, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f0000000d00)=0xe8) getpid() ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xb54c) fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3m34.111507035s ago: executing program 3 (id=132): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09970000010097", 0x7) 3m33.871987586s ago: executing program 34 (id=132): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09970000010097", 0x7) 2m34.46307137s ago: executing program 5 (id=350): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x4) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0xe02) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100003040000000000000fff00007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) 2m34.349783614s ago: executing program 5 (id=351): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7d8, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000026c0)={'syz', 0x2}, 0x0, 0x0, r0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x48, &(0x7f0000002180)=0xd, 0x4) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x1) ppoll(&(0x7f0000000340)=[{r5, 0x4000}, {r5, 0x4315}, {r3, 0xc028}, {r4, 0x1810}, {0xffffffffffffffff, 0x10}, {r4, 0x1008}], 0x6, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10, 0x800) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000002c0)={{0x2b, @rand_addr=0x64010102, 0x4e22, 0x4, 'sed\x00', 0x2, 0x7fff, 0x4e}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x4e20, 0x3, 0x7fff, 0x80000000, 0xf}}, 0x44) sendmsg$kcm(r6, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000001030000000000000000000000000000000008000840000000064000068014000400fe88000000000000000000000000010114000500fe80000000000000000000000000004114000500fe8000000000000000000000000000bb0000000000"], 0x64}}, 0x14) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7003f00) 2m33.344089488s ago: executing program 5 (id=355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x37, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x61) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r1, 0x1) 2m33.139217101s ago: executing program 5 (id=357): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c000000"], 0x50) 2m32.514708357s ago: executing program 5 (id=358): ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000004, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) memfd_create(&(0x7f0000000780)='\x03 Ad\xff\xda\x00\x01m% \xc2I\xb9\xccC\xe6\x1f\xc7\xba\xfbC\xef\xc2\x14;.\xd3L\xd8\x95R\x9f\xbb4)A\xf6\xa3\x06\xd1\xe6\xefq4\x9b\x10\xfc{\x12sD\x98\xc6\x13T\xb8\x11\x92\aD\xb1\xb3z\xeb\x94n\xfb8~\x1b\x85\xfc\xb5L5y\xae\xcc\x9e-\x98\xdf\xd9\x8c\x8a\xf7\xfc\xe8\xb1\vv\xd4\xcb~d[<%i(\xa1<\\\x10\xc0\xa3\xdd\x9b2&{}(\xb4(W\xe4i\xf9^\xaa\x93C\x8c-|c\xfeEe\x9c\xcc1:gx\x8d$\xc2\x00\xf9\xdf<\x00\x00\x00\x00<\x8aU\xd6S\\\xd0C\xa1\x0e\xab\xdd\xa3\xa4\x933\xab\x04\xcf\xa9\x1e\xa1\xbc\x1e\xb9x9\xc8\x90\xf3Q\xb3\xdb\xf8\nu\xcf\xbe\xeeY\x9a)\x90\x84\xe2C\xf6!\xe8b\\;8S\xee\xaa\xe1d\xe0\xc6b\xc2L\xea.\x12\xf3hh\xe8z\xdc\xe4\x14\xd2\'\x00\x00\x00\x00', 0x2) unshare(0x2c060000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1f, &(0x7f0000006680)) mq_open(0x0, 0x42, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "1e126781ca7f64c0cdd68849d8e85f0130b1fb723f0eb0064ba12fd500025269", 0x5, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x4, 0xf, 0x8002, 0x7, [0x0, 0x400, 0x7, 0x936d]}) r7 = io_uring_setup(0x6c97, &(0x7f0000000000)={0x0, 0x7645, 0x400, 0x3, 0x39e}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, 0xffffffffffffffff, 0x1) pread64(r0, &(0x7f0000000380)=""/140, 0x8c, 0x2000000000000f5) 2m26.793257579s ago: executing program 5 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) unshare(0x60000600) (async) sync() sync() sync() sync() (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e23, 0x3, 'wlc\x00', 0x0, 0x8, 0x3d}, 0x2c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 32) r3 = socket$kcm(0xa, 0x2, 0x0) (rerun: 32) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$sock(r4, 0x0, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 2m11.447138374s ago: executing program 35 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) unshare(0x60000600) (async) sync() sync() sync() sync() (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e23, 0x3, 'wlc\x00', 0x0, 0x8, 0x3d}, 0x2c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (async, rerun: 32) r3 = socket$kcm(0xa, 0x2, 0x0) (rerun: 32) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$sock(r4, 0x0, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 1m5.115814969s ago: executing program 8 (id=665): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0xee01, 0xee00) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 1m3.168938153s ago: executing program 8 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x101, 0x6, 0x7, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1m1.301112261s ago: executing program 8 (id=682): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x23, &(0x7f0000001340)={0x3, 0x0, 0x7}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f0000003380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003340)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x490, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x440, 0x3, 0x0, 0x1, [{0x43c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x308, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "12222976c61a8c9584fe307f327daff7accdfae67f19f09e7cec6bd200468899f82b45ca60be50526b382fd63ce1bfa60daeed496750905abfc7597ce8b8dc94b80d65b72e01727a2931a09d6597aefa991102c655618a4dcac8f48a7b44a988a7177f22e7b7a0d86c3d8355b56f68e508a38c47321b0866db3f6cdaec935e5bbdd8665060bb78205001f68221cdedeb6de5ed8701b527d1d1748027c553a7f9bf9973939f835f8a1c4c0bdbb7c50b8091b5e34d00c16d35e507ca3387e7f912ce1523d3e9224bf03614fdbdd6148540445d6bd5aaa20b58c18b672680feb9fc74edd29ed07bec8e0246d27c7f59d5b36bb54178"}, @NFTA_DATA_VALUE={0xb7, 0x1, "aaa2458faa3a8e4d766c9e41b87941ae32efe0fee98c16a34b73018c9da2dc9fb02af5046b3306dd603b7dff4dea3e1cb82ff5278d93713504dbe8808d430d6409eb9d4e53de99691025f9f878bce07e1b569309aaf20def1a8fbe1cf6b2d716a161d984b26881deba0efff109fdc8b3164d2b954f80c31864802003005e7ee9f1f51dc9ca04eb713cd4e1e83912c74515b271d20bb16d261191e3805f0cb1e64a495fce79dcd2e1e60287e7f20dd46e924176"}, @NFTA_DATA_VALUE={0xd3, 0x1, "68b1fc90f67f68fe7cb4cf0cf573f63f5617f744fe932b9e21fdd4e23c2bb406ca152b11893464818ef5a67e344a43b787f9f58d15a36df4be4202218093ddd82dd9eaa755d789a281f0b374f4ce8fc376e46d88283420233105288f55da2a4db01e665cff152206f2019c865d670ec2d3d9bdf6ce43be1852d7c8b8d60e43f80d0471f7a5446c6a64a4a8d5499570d7811afebd153666e1a94bb17ab10795d3de887b5f357bc43a28ef9085e934861794b32f47ab09e3c43f70556c96adc02ed6dc70d8b2d9baa4257143f8d921c1"}]}, @NFTA_SET_ELEM_USERDATA={0x43, 0x6, 0x1, 0x0, "55fa893d5184afe10dc813eed5a73c631134bcd5c8f90e86205e8e114053e95c1bac65fab5297618a096e76f6da64c600c7ae6dbd0217e63c70cb9685ccfc8"}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "0d44026429ec1b2c5449cfa656bd537a5971"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7c, 0x1, "ab73c5cde1ea88f18c66d7fc25b2e6930acbc53d5dea1bbd01aa4c691bdb49d2b3f281df8f9fcd30e38e1ca88d28ab0fbc2a10b3be0e8580b18888b73fff441bb00aab1c1de9837b8450d56ba6146061aa676d46ee8e1a62328bd749bc813c95b7423a75d9cea2a2637c3f2246a07dafe4cb44ccb463d0a0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x60c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x5e4, 0x3, 0x0, 0x1, [{0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x1a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "9baa43d7fc3736b0643756fc1814e33bc837a30d858a721399a761ee21604eae2d6258457377b8e7ccfa6f05d256ab19ba0ce80d04b9da35b291e6aff3abc6b6e30c96bff2f831f603abd8d21e4c2c893b00e442c911d70f1a8123b0bb575a"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3051d963d6585477}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x180, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}]}}}, {0x5c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x48}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x64, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_EXPRESSIONS={0x3c, 0xa, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x27, 0x1, "e6fd395af7701dccc63d3ab91d9bc945570bde5dfb2ae016d40e54ae9f616cbd9df72f"}, @NFTA_DATA_VALUE={0x7f, 0x1, "20e47104b89d7168bbd491347be82e86bae924eb0f8dfd44117ae0450e2c97ee3aa61ba0187fd0ed9a56bd6f0d9147f9d50ebea1a4321f5db0d042f6a99c5b7f0e04a0a0769e266604e5ea890371a7ac3995cb961d8f9f7beac0ec7b0c1334a63e1d1a54c24d20db9295bcafc489de9e75e127a962fe5f6a5e2f7a"}, @NFTA_DATA_VALUE={0x55, 0x1, "c77d251bc9f2ded80c4529c4c0527b316648171fdc37186c841dd8dddea8013b03990c0ed0a01b3e99a5cb235f644b12c033548681111089f1fc68c9933f480136a53967f83a18574b1d497bc4c9984295"}, @NFTA_DATA_VALUE={0xb5, 0x1, "3a34c692b2eda42278cfe65ba26676ad9c438d8a56d7a79be15d37ed99564d3bf185846be810fdc50a49b54a5a3295eaf2d349c6be54b776f75c4a04835bb58bcb9f82ad4c05fc72576ee42eaa28287fc23656b0295aa35bb57e199f465198b4be414332b72471ec7607dd506ea52db57be7e4b82eb91ec32cac8db5c94eeae1f44246cf4c81b6d899eccbfee5e15615bcb795e061f150f06a42c8422c8d9cea4e123cf07b794a997a0c4eb4e177106e81"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x102, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x44, 0x8, "8726396675f66d1bdd7e41414f38f21878b86c7a1475a2d576c1d57f69097669f8bf4abc8e6ef80a4daf61b4e2a186eb3aa2b224bd47957f945cbabeed6614ee"}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x603, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbbc}, 0x1, 0x0, 0x0, 0x10048000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x6, 0x10000000, 0xa02}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x10000000}) 57.325448252s ago: executing program 8 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbf9, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0xa}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x4000) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') getdents(r9, 0x0, 0x0) ioctl$KVM_GET_XCRS(r9, 0x8188aea6, &(0x7f0000000580)) 56.562536682s ago: executing program 8 (id=698): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20008041}, 0x4000080) sched_setscheduler(0x0, 0x2, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) creat(&(0x7f0000000080)='./file0\x00', 0x248) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc0403d11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 56.198002616s ago: executing program 8 (id=702): landlock_create_ruleset(&(0x7f0000000080)={0x200, 0x2}, 0x18, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bond_slave_0\x00', 0x2302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x220200, 0x0) close(r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r3, 0x0, 0x80, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000280)={0x1, 0x0, 0x8000200, 0x3, 0xe8, 0xf5, 0x8000, 0x75c, 0x0, 0x8, 0xb, 0x3}) ioctl$SNDRV_PCM_IOCTL_RESET(r8, 0x4141, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x80000000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) 55.789871414s ago: executing program 36 (id=702): landlock_create_ruleset(&(0x7f0000000080)={0x200, 0x2}, 0x18, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'bond_slave_0\x00', 0x2302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x220200, 0x0) close(r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r3, 0x0, 0x80, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000280)={0x1, 0x0, 0x8000200, 0x3, 0xe8, 0xf5, 0x8000, 0x75c, 0x0, 0x8, 0xb, 0x3}) ioctl$SNDRV_PCM_IOCTL_RESET(r8, 0x4141, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x80000000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) 13.662574872s ago: executing program 6 (id=840): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060080350000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) 13.402522792s ago: executing program 6 (id=842): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x9) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c400400"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041004f25c7f7806c8c6394f90324fc60100000", 0x17}], 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r5 = syz_clone(0xa0006411, 0x0, 0xa0c0c201e076494c, 0x0, 0x0, 0x0) waitid(0x2, r5, 0x0, 0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x12, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r8, 0x1, 0x70bd2d, 0x0, {0x1b}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x7c, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9b}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000800) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) rt_tgsigqueueinfo(r5, r9, 0x33, &(0x7f0000000100)={0x20, 0x3}) 13.232762083s ago: executing program 4 (id=844): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x100000000000004) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syz_usb_connect(0x4, 0xffffffffffffffb2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8894}, 0x8040) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, 0x0) sendmsg$TIPC_CMD_GET_NODES(r4, 0x0, 0x20040891) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000000a00010007000000050005000a00000014000300686173683a69702c706f72742c6970001400078005001500010000000800124000000009"], 0x60}}, 0x0) mount_setattr(r5, &(0x7f0000000080)='./file0/../file0\x00', 0x8800, &(0x7f0000000240)={0x70, 0x0, 0x40000}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 12.268448865s ago: executing program 6 (id=849): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYBLOB="10120bd5f61e48", @ANYRESDEC, @ANYRES32=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000003a00), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xd) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 9.6365091s ago: executing program 6 (id=854): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8000, @empty, 0x5}, {0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, r2, 0x1}}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000007c0)={{r0}, r3, 0x14, @inherit={0x98, &(0x7f0000000700)={0x1, 0xa, 0x6, 0xfffffffffffff5e1, {0x30, 0x0, 0x8, 0x6, 0x1ff}, [0x2, 0x5, 0x5, 0xa99, 0xffff, 0x1, 0x200, 0x9, 0x8000000000000000, 0x1000]}}, @subvolid=0x3}) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xe10, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.269275677s ago: executing program 4 (id=858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xb97f}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x7b, &(0x7f0000000340)=""/123, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x1, 0x2}, {0x3, 0x5, 0x2, 0xa}, {0x2, 0x4, 0x7, 0x7}, {0x3, 0x3}], 0x10, 0xdc}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x165, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x7, 0x90, 0x0, 0xa}, 0x9c) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xf9) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000001c00"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 7.980124122s ago: executing program 9 (id=859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0xfffff7fd}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0xf0ffff, 0xe, 0x0, &(0x7f00000001c0)="e09f54230f243b5ae8c3e4b39741", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.620972011s ago: executing program 9 (id=860): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x200, 0x3) landlock_restrict_self(r0, 0x7) r4 = ioctl$TIOCGPTPEER(r3, 0x80140912, 0x200000000003) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0xf8, 0x6, 0x4, 0x1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x10, 0x5, 0xd}}) sendto$packet(r6, &(0x7f0000000140)="569c14496ec18f24c979249faebc65da7791edd833fd2326e6565ca9a091ae9185debb98cd24fe279b6c7b27ed042faf838bf395e8e5cd40067b23b3237587e7557fa4a3caa769c039b438565f02abd657b59befc855df7045849e5e260661683ae22c940a7a0276", 0x68, 0x24000000, &(0x7f0000000280)={0x11, 0x16, r8, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) pwritev(r0, &(0x7f0000000fc0)=[{&(0x7f00000004c0)="53be4e30b95ae8c9ab7f8fb0e719290ea8fc281dc8065bfd6085fb52636bce02ea162534a95ba1ce3b1dd7f12f03cbee704b6483ffe176b43432624691f397efc5756d63404af1cf3aa48677f0e1cfb5d195f104937235361a3adfbe418ec9f2df2956ffb2d0f8158b7ea328340f6a5beaa83f36568bbcf6304d73b15a6c132322f16732932bcf646f14c9c510adbd4e97d31aaad8c354fc77beef49798060d7fe48cb161c705e65880ffbe2caad1bb9796d6a49c6d6d74cac26e53df6d28c6057376e1074fe24fdbc2f5f81706c6d6e320286432c9d54d8e0b2a6839e61d3eb9f07c3c0305cf8ee957e70b8fd774f30831fec34c7ffe635d00dbc02168a", 0xfe}, {&(0x7f0000000640)="412e7b50347bc008ec009871f386032b2b19dcffb6839356ecad9de95846214a31eecc5b5f4be8f5b5d5aa98d46523ff65a27a2bce5e94512210f76e21e6dd03a2f06ee645a769243a847b24cfbd0768ac1a2afb93c16ef10d5337c04400518ea27cdbcf96b1", 0x66}, {&(0x7f00000006c0)="b0923719d4cd0ff4c936b20a03c62035986240e65a618892a473c7b8e49da7189a3c35726462c0029f540125fd1e4ed2bc3cd3375a89c677c7de22a804174b48274a154839a2d7a151fb7d836a58", 0x4e}, {&(0x7f0000000dc0)="3d282770278c349c08018d58a1346aec696b4cb4774c6517766a5186e347dc9d4297554306d4a484ea967d3dbb118f3c5e8e97efd63316c50c19347ccc084ab51358b47acb7f308ba88e97549fbe18730caf47b2cc91f785c8dc4f1ea2ebd9ad8089281afffd1d52370572877fccd4cd475a3eee15d76eabb2756008c931b76d71a6156769e628af55d0ebfb42092523439898def2d0cc276b00c6905d261e55d95185ce10c5b7ddd484", 0xaa}, {&(0x7f0000000e80)="ed80be3b51e953a84db6c044e12a9411e77ca113fd051cbfe33428739154d93ee4f727c7660bd5cbaced16a4553d6d18cf095f2b30cc6129d82d65e09ef3f437c2d44aad1da3ed2b1fb77b5b5057df1f512a0669d8df3a18cb2ea003cb7599f5d7cf1dde4c92835bcfcc6bf2", 0x6c}, {&(0x7f0000000f00)="89efa71c47d57e6fd769b498aaa23ab5f5f810a1adf054a3dbd9ee4e5caeeb79b57900d9b6deee6fee1efe2de27d789a05db032d80c1746ef338ea79527f65e301c6a4566ade3ba80903ff07f9c7014ddad24a5a1decf6974d0184617fd4594b683172576ca82d2a8d1c9a2fdc0f6d4f9d48a16f6be9f646eb88d25d7654b721cc4fc5", 0x83}], 0x6, 0xf, 0x2) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000001100)={0xcbe4, 0x2, 0x9, 0x2, 0x2}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3", @ANYBLOB="a4e2a748108b3a57e8fdb5c81f63c1c51b137beb0da956e0e4c3d2d68180e0223cb8c724c7be1e7271f7a740efe8d786168e1798501287448826e278e682ade20c86eef87bacf64441342ecd4e4fcd0f44d3dc803f3d32f1508539872d", @ANYBLOB="a694085cc3795accb0a82ed608c8fe9a80b4c7dc45d0cc4f6603515df445c641328edf74758712a1de0f15bb43a06b8f7e3608f6a7e60d21b1523897699a72a0f80418957018902b3400b4141f1a63b95d3fe9a88dc4d61bd913626a18d276fd22cefc1dc9e4d154ef040b23cd39305c742f74c51fffdca89417648ee72a8e6bc794c8873a6260f5bf88f9e340256b1ca907c419ad0142dca5581d7d46160bd55a40e21de376c78e5dd025aed47286225bd1c424c0ab91165b"], 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0x8, 0x3, 0x5b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4e8, 0xffffffff, 0xffffffff, 0x4e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xff000000], 'veth0_macvtap\x00', 'bridge0\x00', {0xff}, {}, 0x0, 0x5}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d5], 0xe, 0x6, 0x1}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@local, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0xff, 0xffffffff, 0xff], @ipv6=@empty, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e25, 0x46, 0xbda}, 0x1c0, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, [], [], 'erspan0\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x61}, 0x0, 0x2f8, 0x328, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x4, 0x1, 0x0, 'syz0\x00', 0x5}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x10000e, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x618) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000740), 0x82, 0x0) ioctl$BLKRAGET(r10, 0x1263, &(0x7f00000010c0)) syz_emit_ethernet(0x52, &(0x7f0000001040)=ANY=[@ANYBLOB="0180c2948003ffffffffffbf88a8440081001a0086dd7c000000001406fffe8000000000000000ba0a0000000039fe800000000000002739e763291b248600000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5110800790780003"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c2fffb90780ffd04020000"], 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f00000000c0)={'vlan1\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 7.056858887s ago: executing program 4 (id=862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 6.976307515s ago: executing program 4 (id=863): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1d, '\x00', [@generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x60, 0x29, 0x36, {0x33, 0x9, '\x00', [@generic={0xff, 0x1f, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x190}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000500)=0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000200)={0x1, 0x3, 0x7, &(0x7f0000000040)={0x12, "cc9efc7ddb01702fa9a7ff7d040b00000000000700"}}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x8000}) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="02bbc5171f97", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.567060363s ago: executing program 2 (id=864): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x4, 0x10cba, 0x1, {0x6, @sliced={0x7072, [0x5, 0x2, 0x5, 0xe93, 0xa5ee, 0x4cd, 0x6, 0x7, 0x8, 0x3, 0xc, 0x57, 0x42d1, 0x6, 0x5, 0x101, 0x2d, 0xfffd, 0x5, 0x3e7, 0x7, 0xffff, 0x6, 0x0, 0x1, 0x5, 0x7, 0x2, 0x32, 0xffff, 0x9a, 0xff, 0x3, 0xff5a, 0x9, 0x9, 0x4, 0x1c, 0x5, 0x5, 0xf, 0x8, 0xfa3e, 0xebf4, 0x7, 0x0, 0xce, 0xfff], 0xa}}, 0x40004}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) getpeername$unix(r3, &(0x7f00000003c0), &(0x7f0000000500)=0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000001c1801000020786c2500000000002020207b1af8ff00000000bfa100040000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000d4d02f8f2a4cf556494bf4a4602fd207847c39e1dcfd2d047bbd2512c81ef32540b504c7872dda0867cbbad0d6e9c5030d5993d6620cc02b66a70923d22754c3094f8cf6db47239a28c7376607c896b9e5173cdca884b29c2aabd4fc46fa9f64de3e6b470f6740060019b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendto(0xffffffffffffffff, &(0x7f0000000000)="6f6e0239b1b2d920cc6edcd1498d4c7d21d2ad1bfbb070d9ca9412650ed8d94124ef", 0x22, 0x2000c841, &(0x7f0000000040)=@in6={0xa, 0x4e21, 0x80000001, @private1, 0x8000}, 0x80) 5.006868203s ago: executing program 2 (id=865): r0 = socket$inet(0x2, 0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r1 = io_uring_setup(0x11a4, &(0x7f0000000080)={0x0, 0xd3e8, 0x80, 0x3, 0x7}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, 0x0, 0x448c0) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) r5 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) msgsnd(r5, &(0x7f0000000240)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x20}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x24, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000200)={0xd}, 0x1) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) connect$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x3, @remote}}, 0x1e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 4.714162492s ago: executing program 7 (id=866): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x18}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x8, 0x0, 0x0, 0x1e00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x5b83cd70db20a28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r5 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, r7}, 0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, 0xffffffffffffffff}, 0x4) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r11, &(0x7f0000032240)=""/102353, 0x18fd1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x257}}, &(0x7f0000000240)='syzkaller\x00', 0xffffe6fe, 0xc8, &(0x7f0000000440)=""/200, 0x40f00, 0x24, '\x00', r7, @sched_cls=0x2e, r8, 0x8, &(0x7f0000000580)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x3, &(0x7f0000000700)=[r9, r10, r11], &(0x7f0000000740)=[{0x2, 0x4, 0x7, 0xa}, {0x1, 0x2, 0x5, 0x9}, {0x1, 0x5, 0x9, 0xb}], 0x10, 0xacd9}, 0x94) 4.591898497s ago: executing program 7 (id=867): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 4.3582947s ago: executing program 6 (id=868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000004800)={{0xffffffffffffffff, &(0x7f0000000000)='^{[#+@--#^%\xb7)\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x100, 0x5ee7]}, {0x400, 0x5, 0xa, 0x5}}, 0xc, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xffffffff}, 0x7, &(0x7f0000004700)=[{0x3, 0x0, &(0x7f00000021c0)='syzkaller\x00', &(0x7f0000002240)="193630b861123cbdc0b2b1fed5dedd15b46b4cae8af133bf8224dba0a6528732caabf68c86971a7d8e2e848d86847a9b412431d357f17816274b935dd0b3c1264749e783c9cd862443186c688fed15b1332c7bc86922c0431608986b67ee6524fcfad3c9497db26ad39f53d1c5b4f58f433eddf9a8ee662339c501191527af3a4a34adb4c56d2c5e17aeb59fd81bd43b4f881616028022f309c6255aa3517366fcb5cf331207d2186b1f284e6f9d563deb4f7bb7e12ba3702151234fb730f3c5ffe4377cf0af3970ab5cb1045a97cc94179cdf4461332a8495f172862b7b044bc27ed1d2cc555c94b9f7d7606ec998e2fd16bf127c8e36288cb257feef66a0e2202fd03c6b76491296df53211a3bd666ac6f3e9fb9cebd2be933ce1b2a7f3de6de335d4a71e37ffaa917f2d2120b3cba7288bb0c05349525bd049d4e086d40f5e897285e61def3497311156cb88984a5bd09d7964f5b5acf5677767b3533d9ff03d75e7b48af147d97cea4031c52d301bf71991120d7b8197d269312e808cb2380adffc4bed5f7f2226049f56111f3ee74fdfc4c220017a98f65ad518ea772f89b77caf07c074da200997f0dfa8daacd6595fe60c4fbaaf6f971c414147794cf50de26e11f7cf2844552d480885341fb8f1c14d20be0cb7e0b323c99a91f4272d244d31de04978cf3cf11e5263bb03052baa5ed62472e795366bd37fa6a0680b3fcf65018e96ad649bd4a7068b3c134df67f27d25c237a96fc85fb4b5b2d9be4880a331a852dd24ac179321d74f5e2f520215505f7b3d390426677eeb9b3b5603399674a4cc45123caefab628e7e5f69269f2ef0a72e6117428f56ce5126309edcedc139a88c191a8107754b5913488e6a4f86e86c7c6e97a2736e4b55a4859eacb5fe1fa83a55474801b31a9763a40c47b28157b536eb1f3db6bd19a922373a375b81c619a9245bc1fbcd3c3fa459a524173f33123c4a64aa9804e6fc60b1a6c8395f47dd77657d954d4389c80907d80e2dd7cfd086a02b49466be9a7388d8c303cd0d940373ee22cc0d114b57e5b92fae95ad59d023d8295624bc2a4d72200bafadd70ddf78b53b45eba431cfcdd535abb87472d3206ceb6be245e377e0112312efc1881959325f3ad8a56e328c1b380674e954dafb2683c33005d987940a573f2f3215b53488c8719c7e5b75196b376f3abe3d982edded622ee9ac92f607f99f6dc9a66f040f7f696b07009288ddd0d1b8c7b0866b7024e5023a0ca96f926c2c89af7cceb7617af94458157925ef72668c204543e5f124be650bc88d8598ca36f10e335a9805e30532375a32dc8f5440ff1d12273787bd33776037018a35c7d839287e227bae2324f9b2039cf627118614b801f9591e2a4295f2b92932c88860df195a4c778c28c923cccfa9a26018a2d88f2da58e1ce47d91260bc2877f609c4d9d7dceaa43d1b156f464f4ea48796b85aa26c88ed85c47872cebab1cc2e31819da6c31fb74c218a3eacb1787a902f460108f94d139f5730463375259a94f753842edec67fef595b8663189c7e6c4fd1c8179442e97ef85b996d86205cd582dcf43a7a86e689b27d2979d6dc7d57ffc0c938bde1873c7df2e10c9ea50c15e7413512a9dab1797b806d9895ad8b194817ce92ab9f7cb87e2683ff340cf392918db20ec9a6622a02f648df3be7417f2cd25fb81196c0c3ed8721749bd3cba5e306489a5d3b8efa824983d016b8a70eac036cfe0450be5c55a19af1c5be6d0e271681f3bb75dcd9e45844f68f36a0743a0864a7cc90e7b5794aace5ef32d55e5c0bf3a19bfeb3a2c91516510415ce9c0e48f7eb14274f4fd620fc6ba601f56cc1f6003719d20683d207023bd8c28adb5b09516d2d634b00928c73e6e53f04aacdff1f413f382f405f2945fbb2d0b7947d522921311b491551a41e2a3b3a9d38672c42a60f20969dddb29eb66a6473b7900923226d81559d48d6dc60f8d8efae85fbd84bcd51077bea0749c43460588c7c36d783c25c42edac7cdd0611d652ff0b3b3929e5f32b03d2450c3b50cabf69853c718c91b784384df091120e9c67da76096dc6a8528db7599ef72b9c29b1d9c070815001143edc4aa6e94e660fdf69d747fb38e97a686df19b22f18423b69377e91ad6321a8827bf3514cccee8c344e34beb99504dee18099cbf4f13b827196e4edc1515137986da40198669a8724b1fa0d0da13cf09819e7241353b09730dce0c7620cdaab5aaac323395ce054a10e84d9ef535a526d893cf596e800c408fd755f1fa992006771a7289022429c7c159572a060cd559642ac1eb6e79dfc234f1c1cfaf2ffda55a16508159683692a5392eb0e74224cd762787838ed872691ef58603d298e1f05eab303bbfeacef450e00064b54a414b9c4932e0f6a28f42a1d0d453ce6ccf72235f6cb2935bada041467a77eb12784036b6766967ee8bf3679b3f422aa8308f0baa3bab96d0a93e981bf5822b2bb28dba5cb73e7efcf1292781a5d9a6d86533e694749a56fd77b6482129f8e47c94458a1e081450b41067f0164303fd301110dc9f2a115b23df5d0b1fb7e93951a30efcd05e102f3f10b71f4f8c9fd42ad12b5f22386406f4a8189b2350003196a9849903f028c2cb6f7984184df46b851c5ba0223fb449a1566a9d9acbf78cf84dc3d08c30c38e18f2c5d50951423e2d5b253084262c926f6e4c842af2f9e98135807862198b5a1bf212eeae8a9bdd4b8d2560039b6d69cddd1d361d15c8430ac7215088f02ced8fa26371a2092295d093569d40675d1b3140c8a9ce137a62ee026d4fd6fe231cf7ce64314b6a9de46d6815890d93d66140dd3a7962748a107bafab7912f300dff62936bacef27944876ea03a363abd4f544ef03463bacebf990369062ba1afea21bde13c8492b58a9b00cd937baf1a22ec1ceaddf9830aab50bec9697b9655ae84d4b81d7ba108ea4e8f7f58a2b9ac763f1f7a8f664ac4894f923f1dfa442ae829ab3c8f853e27334c1ed144ce18bdf7ab8fb35dcf04e744b87434643ce18ec702c870d9eb77e00ca072d49e11a6b62c378a3de576da2b560d37dcc3a2c55b679be37b1b91a012c79436e02daa96ae5a5f6503fa3b4d80d0837265b82f5d0aee750d6cf58b0f0f6164113e3bc211f350165763bdc8cc102e6b2af7805e2bd5d6faf474ba6b9ec2aa60945d849f57578b538a739e5ffb51df093adf3d109121afd4a9fc2f00664622f16c0e57aa4eb2eaaeea7917bb33a7c386d30ae96d163160df97f0c109b6893a8e0b27c973de340a97c1fe27b6fc7ec802dc378409e41709aee083861d3baeb2dce0c973a4262c2657c26dd413fdcc339cdc49dc10e137a8686947fb3440f09cef8278d492959b2760e0f35db97d23a3c792a9f04ce3687108127fcaa1d2011756c850d38f4e3db2a65fd48f90d5b132afae6fa4fc21d5f63defa98c7115ae56273996fffc07cc5010b37e9f6c92d2a87018d0e31dd2597ac9d9e91c4830b806ecde1288f7e4a6ab44e0ab07c0829b08af28e1cb6b85a00b42dc2d6c0f0b0b3d89905a7ca78bbe454447789eac658743dfe00cbf9d2bb1737e66782228fad99d6d2e9ae2d97efaee8df1df1944c9aa50ea12bc9647d63b428c125c1b21ddc87856dd714b51ca3162a0a840bfd58319783dfc5bfdc796fa2cd9fcf34a9154e1eb3118654417e04657e6e95ae6faa74b2a61875adc67a506234f8e7d3cc68d4254a23c178017cd318cf7599eaab603ff89a05888a4754280bce5411c78ef6f08bea39525249f6706558df3f0784eab7e52d51f32cc6ae4fcc2865f7d4f3199bfffc22f07125da8981515b77e10d7369efde96757914326f0f6fc4c4203dd93c51fc7425c9ffbdbca040a7c37b9202f75717a21434f6a86aba974b4b9977fa18f3c7a83c6f27122b2d79680c1a3463b6219756554fd4203f35929bf620a3fbf2c1b7abf0db6564c8511d98160b36fa8cb5c0fd3e7ca3fe36c6ffcf9e66b28542a0f62284d7ea83b26529af0cf25e8310b34a34d5ecf7726a12c561562ab5d972e7a0c9a80fa551f224eb64d9a5346e333ea26105576d6398f1b00e3195b4d40ca3c966fde042a1a8fb40dc8a5386f6e50c928ac268496482e1023e81ba7613f3e8e95c822fc82aa4c187ee368d3746e370a9adb192f09b670b43610790db4fc5e5a329f92d7f2970b5384f333914dfecd5cdc0b0c17f39551017f5cb2b250c7d38d80623be927df4e50d6efaafb8101368db17132a982634cd2178946d88b2247cb39cbf4d29da738520848444a6c30d33eebe927c2144719efc73f0d32b9f59189530c6450040e53030ca75ecf9c12679d344aa32b89b0c74eebc39ea9e428afb83b215bdfaee68eb150a701a7eec45cda3743f3b9044846692ec75cde31f46e94c5fdca055b356ce573cfb30e10e5db0d5a195a1e260793a0b42e6fc34d1f80a019c0f32ff5d0281c0de0fd5e24f791b44f530626db655d1cc66ae4c61538e7a6a69af7774fc8aaceb863a7f02b7bb77b8af0c6ea927dd62614722efa2755596922001f3110500e579e90f673b5ff27c0e18d7bfa7cf8ba5ae10230fa1e90536f98f38c23e52421495b1d0768b64f5174e60906b02ba79c3391f2689a6a89bfda22d795d21088b9dac50802948409751dea6c975fb79969bfb2869776e32c30956ef2fc856bac5d2ea74550e46957f37af1aa9da876f4044f504fab3c6261312fdf91ea9e0654b5d1cb237cbed9599929d97e70c5655a8f0366093e80487d01d65dfe3665dcb620dce9ef6ba319930ee3fa19fa0c084e8e95a5d6d9f3cd3c0055cd68d0b06bab196c2215e2de6c197c9073008b331262402416f44b26b24f07f3dc9dd2ae6102b7f70c968fcdf7216c8af404696e9ef1f401e41a0f058859f5c4150aeb1c09b4cc8c73afc574de5a407f797877f56a9f6b0f3ab7eb44b37f3cbe30c091a5140cadc822863b9f686e597c1bbf78236b1334453276c568a8f4dee73c0805895a78bf1b17fac5dc08a2945ab53c069f89803defeb3f16b691e364a7bc7d4389f6c2eceeb3e617e474b0880ca17a09ef1abdaedc8b5af8a0ab3ce473dc2c94c488c445da3ffb4b2d3d99eee2a0123a6d025327cc5b12fc08e12024d3f5ce510d6c9ead984bab53abb01cbcecc084c04bacf5a6e71cf6222499ab1d61f05f69ff1b5c529b3c04a5750535d935a070935a6133fa052fc0bfc6061bd1b7b1cedf3919a11390cc189b39eb0e293e37d056d6f6a86be5bf6974c0c265b63187be09c4a40ad768d0972920ea63674fde6f2912239c5581bbe37313945ffb5a406ca76cc692bc79ef3715103b45338b1136e66d0b71297332074d50d75015ff161336c8eb16e2eda9d967f0e3606f68d703f39706319fd38d45f5ec32610bb75ad56d16ef97d7db80e2b2cbb6b8a445353777bf82b11ccef0e3e03674c71f21002e9dee133c0709fa92c3aef0fdb0cb7ce3ddbf6c24f7d6cda795b6b7fd7311b936e54bf5bc2dedd55da68112563d0f3f8c2d08a6d65d5f1ee22136d7e0b22adfbc092cf809244d2c6cda8b7c8c250e0c8e08dff41faba3ebe84008d73664b9c68a0f9aae1604c628ab7f981fa045aa3622944594a9a47a990b99e4b6ece5863c6e35338c178454d52a0d8e54d049b04b82cb1213329f7c3fa98bf75debb834b7ae2094bd3d0977979ec2df2c10ef6f5acb9fbace06b7d36d3b5dc75f42381029e3e4486fc2693609c1d4447244da0a037f82d4b9e017c608b8dfef4ad9248573c31ffc4cd3be138352b9d4", 0x1000, 0x8}, {0x2, 0x3a, &(0x7f0000003240)='fq\x00', &(0x7f0000003280)="06c6dc8ccc2f793f552b8249a5ce433be07851090248813980bffb6ba2cee4edd4826c38382b3f0fd192849d594b57294dc0d56ecc33ab192ceb14386476fef98c821624cb93c4104536c796e75fed54a5e9ac24e9a6e6b0a8240d86c86100023aa05290a439faeb9e36167ea1c61905cc01f812edd5e360d824b460b944733a79873000e34142ef26edb64a0073d9a60bfdb9e22932fea04bf84fa63971313910b482e66e65cedc80e41f902c372159a54b0881c7b84238385664c9fbfec8a13d3a05b95be29784ec087448d6898170e080b9db", 0xd4}, {0x1, 0x9, &(0x7f0000003380)='$,)(/-$\\3\x00', &(0x7f00000033c0)="d73d916b73d49649a87c61ab7e7f880aed33e7fef5a3ac46a27c5a99bacd594e17413d20e4362a13e8afdfcb1237bcf1c7197369d7ffcc54c67fb6ff6502b2febbd7c506a40e2bfbdeb6cbf108bc3331044299d5e862b5f4266d3c5e0680ed8243d8bf60f0b0e0436bd3fd84792c7ce61760bfb49c10c79233edcd7b15d7d33bb14ceece1bc3b8be7fa5c6b6f753b2c6a690d6d741a061d248248e2bb39eb9621529b1eb4e802b0d2684cb335f7f3dc7189476061908b9c4c1edf6c791f1e7e4b5e6b797cc7f6ae4b7ee846940a9fec3d27f9963005c308f85ed2b35bb0fbede16b346f3752e7e53ad0dd766f4d9c1e4941f", 0xf2, 0x28}, {0x3, 0x5, &(0x7f00000034c0)='syzkaller\x00', &(0x7f0000003500)="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", 0x1000, 0x22}, {0x2, 0x5, &(0x7f0000004500)='/proc/diskstats\x00', &(0x7f0000004540)="5f30eca49ff0fd11602a4c6760d304a358c6bd3fb6c445b4bf25232dddcc78e5690198989dd31ba1790d78533ea8aa25970a80dcd1022cb9373405a40360b66f6db6d1918e7ed5c964a685cfa456376f5375f5a515f1147034c74bcff4ad2b28dc983679e02b1907c0a0a7415545865300979d15e2ddaec00166bfc22024413a172f21f090780e9138e77f03989a5d5c5ff49a556db69f94eee010b2667d3fa57c2082fd3de97c1696ff988c", 0xac, 0x38}, {0x2, 0x9, &(0x7f0000004600)='syzkaller\x00', &(0x7f0000004640), 0x0, 0x8}, {0x3, 0x25, &(0x7f0000004680)='#\x00', &(0x7f00000046c0)="c605e70d1b5511f04375b985618becbb69be9de238a0c460cac832d352ee2b6df119d77c257724", 0x27, 0x22}]}) r1 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r1, 0x0, 0x0, 0x400001) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x39) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000004880)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000004900)={{0x4, 0x4, 0x7, 0x9, 'syz0\x00', 0xe}, 0x6, 0x100, 0xd, r2, 0x5, 0x2, 'syz0\x00', &(0x7f00000048c0)=['/proc/diskstats\x00', 'syzkaller\x00', '/proc/diskstats\x00', '$@*,\x14!%\x00', '+\x00'], 0x34}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x7}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x100}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x2024) 4.219963763s ago: executing program 7 (id=869): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x6, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)={r5}) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110105bd7000ffdbdf250a0000000c00038008000100"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r9 = dup2(r0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x40006, 0x40, 0x5, 0x100, 0x6, 0x590043, r10}) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r9, 0xc008644e, &(0x7f00000000c0)={0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x210, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0xfffffffffffffc79}, 0x2a) 4.060291394s ago: executing program 2 (id=870): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000003340)={0x20, 0x0, r1, {0x0, 0x4}}, 0x20) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01000300000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="060004"], 0x24}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x140e, 0x300, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.910791715s ago: executing program 7 (id=871): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7d8, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000026c0)={'syz', 0x2}, 0x0, 0x0, r0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x48, &(0x7f0000002180)=0xd, 0x4) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x1) ppoll(&(0x7f0000000340)=[{r5, 0x4000}, {r5, 0x4315}, {r3, 0xc028}, {r4, 0x1810}, {0xffffffffffffffff, 0x10}, {r4, 0x1008}], 0x6, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10, 0x800) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000002c0)={{0x2b, @rand_addr=0x64010102, 0x4e22, 0x4, 'sed\x00', 0x2, 0x7fff, 0x4e}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x4e20, 0x3, 0x7fff, 0x80000000, 0xf}}, 0x44) sendmsg$kcm(r6, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000001030000000000000000000000000000000008000840000000064000068014000400fe88000000000000000000000000010114000500fe80000000000000000000000000004114000500fe8000000000000000000000000000bb0000000000"], 0x64}}, 0x14) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7003f00) 3.081461403s ago: executing program 4 (id=872): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, 0x0) 3.027217299s ago: executing program 9 (id=873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 2.973877014s ago: executing program 2 (id=874): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0x67, &(0x7f0000000400)="697ab143aeb2e35669aca2aea0cef279b0644270906e1af1e733c243ca19145cf450553fb5952288eb9ad7fd825fec0168fe4fdda9f8da7ad6fcadf42722e5a61a4f82714ce9cda6d39c7a50f9e7be936c4c3211cf6d882b7d8b32759169cd5daf7daeafb7a0d3", 0x5}) 2.908141718s ago: executing program 7 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000040)={0x20, r7, &(0x7f00000001c0)=[{0x0, 0x1}], 0xdeadbeef, 0x8, 0x1}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000280)=0xd9, 0x4) r9 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 2.640926541s ago: executing program 9 (id=876): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x851, 0xf5ff) 2.5820429s ago: executing program 2 (id=877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b04, 0x0) write(r3, &(0x7f0000000140)="86", 0x1) splice(r3, &(0x7f0000000040), r2, 0x0, 0x6, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x200, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) syz_usb_connect(0x0, 0x198, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x78, 0xb0, 0xd5, 0xff, 0x19d2, 0x1278, 0x89e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x186, 0x1, 0xf, 0xb, 0xf0, 0x0, "", [{{0x9, 0x4, 0x86, 0x8, 0x2, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "331419"}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xd1b, 0xedd, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0x9, 0x1, [0x4, 0xfffd, 0xe, 0x4]}, @acm={0x4, 0x24, 0x2, 0x5}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x7, 0x6, 0x6}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x7f, 0x4, 0x3, [@generic={0xd8, 0xd, "2516a1cdfaca07705677e526f983cb173fa7081cea6850df8ecd5e47aae9878166adc426d4a1374fb49d7370723a48f92cca40d8f0df29c7448289ee10fe67834ac9707abf777d173dec07ec5fbef5f5b20345108b7832f629a649b7bfcfbbaf55503d2b29c1a95f2eff3231badb1bc8037b01bd89e10dda6c7b98b77b926acd06efaf290fc6e7ed47c3506b8d54d4dd7142390eaa4f256d91f1fe1a89d3eb341fa941dd96b5bd28714e8adcaede1b63906c54c33f501bebf79130164fac492dffebe1a66691464869ba08483419907bf969a3980b0c"}, @generic={0x58, 0x5, "022ec24d6df2b51104179e2a66c88af4a6f17dee1412491fc080d360fefb6d8a1b9b5269f4a0772c97bf77fa5d8332f1122673ede8e6943275f8bb507314893abbe3b93894cdd615fdd69e4452e038b1d0a4ebca5740"}]}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x80, 0x9, 0x6e, 0xff, 0x37}, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x2, 0x2}]}, 0x5, [{0xd6, &(0x7f00000005c0)=@string={0xd6, 0x3, "a93a0a6b2bf98b3ea124dc1d168f43b40e85b820915f48e1415581444bbc60a7341a6f808441bf48e308be95926b50e8d24113f494104cec4a224a8e16216c064ab50d34225d40ecafcce47035a87722610cf993a939c76520097e7d51f04b11e4649b0b88e6b47e4c326ab892a1a62986685285765dd640cdbc56b265842440fb4267eb17ae38db9091fea44a9211c657baff105a18f2b11769a197dc78bb91013fc9c3687062fced8c7d8fd3c33e04a06fe4dc0bb4c12c44ec336dd202fa9273af8dff813b5860bc56fbb0f4134d9e15d2d0b0"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}, {0x89, &(0x7f0000000740)=@string={0x89, 0x3, "65398e2ef723b83563db49905be047404ff45cc84626a9243e327ab5556f9639b8ed2aa41aaa5120e1f942bb2cc3f97c2a600f886a9556dc8d0c5af1fb8ca58050543e93449b92d0c3ee57d0da63273f54fc6e9e3445e9bf5315af16d17445ae702c15efc6230717f72f4672c54ec4afb5c80df29e7c0e80fb90656a255c6521fe0ea4d662438c"}}, {0x36, &(0x7f0000000800)=@string={0x36, 0x3, "d562b6945cd1e89ef673484f485fce9bd5f32e3354793ad03a1019f2b59f10388c727d3bc3f865da7b72a50bdbd95a2f12c34844"}}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) 2.51395569s ago: executing program 4 (id=878): syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) socket(0x2b, 0x80801, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) socket(0x11, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x1, &(0x7f00001dd000/0x4000)=nil, &(0x7f000008f000/0x3000)=nil, 0x3, &(0x7f0000000180)=[{0x6, 0x400, 0xffffffffffffffff}, {0x51aa, 0x3, 0x1}, {0x8, 0x0, 0x1}, {0x3d23, 0x1, 0x8}, {0x1, 0x0, 0xd1}, {0x7, 0xaae9, 0x2}, {0x42, 0x5, 0xffffffffffffffff}], 0x7, 0x8001, 0x4, 0x28, 0x60, 0x10}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x7) write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 2.497763569s ago: executing program 9 (id=879): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xb) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd']) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getlink={0x20, 0x12, 0x2fa9ccd93d5c0297, 0x70bd25, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x20096}}, 0x20}}, 0x0) (rerun: 32) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async) fsopen(&(0x7f0000000100)='esdfs\x00', 0x0) 2.47965695s ago: executing program 6 (id=880): r0 = socket$packet(0x11, 0x2, 0x300) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x4000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) ioctl$COMEDI_SUBDINFO(r2, 0x80486402, &(0x7f0000000180)) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x800, &(0x7f0000000300)='usrquota') r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4, 0x1) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$packet_int(r0, 0x107, 0x3, 0x0, 0x0) 2.171786829s ago: executing program 9 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) ioctl$BTRFS_IOC_ENCODED_READ(r7, 0x80809440, &(0x7f0000001540)={&(0x7f00000014c0)=[{&(0x7f0000000340)="48b52dd00a626c539e469520fa43c85e02aac801568b464730fbaee6cf3de9302d6815ff1cca8c8275096f3ebe842cec489c4dd5bedd6e63bd56e102316d90d4e9db59947c68e45e06141d60", 0x4c}, {&(0x7f0000001140)="acc78f0021aca312390888260b1426fa2d67d5eebb2f87e4304ad038356d0b5ca672f1aa4088053542a550ff982469f188ba2602e885d110113f4b1075b616c7390929338bf20b0a7f78678b0b9e36f7795bebf80c57686f05d84f23f3fba05ab6a226aca9e908263544628d5168fd3f33b2abb37b4a1ead2a658683dc4c9b15bbdf344b7c15fd", 0x87}, {&(0x7f0000001200)="8693f24d386b7226e43654fd0cd1ff164c5da17ac8c9437807139fb3b1b85a6e5bf45706585497f6cedcd6e0d5a50a1369b08cd482b63f530c4461fefad4f7f3c268b1d3b6b077eb3308c8a1fa4ce0a62afd38d2ebf5f1d630f2512abe9945799d21fe5cb1b36216f73bcb72b21f1ab4d74dc9e8688e1b7671e844a194eb30e831cba0d9af3cfd469f9664664a6dea0376ffdb494c56dda06ecb6fc33223de880d6a933792034952888a231d61841250b6ea9318eea5a17bb823ad2cc4ee4c8bd73a202713328ced243eab29abbf36260cb3d9fcf2c06eb70f303f6bc430075dea19c82edf4c", 0xe6}, {&(0x7f0000001300)="1543b7131caceeecaca4069be6c20940ffa260ac5fdd8e061ab0eceda6420db8a552ea0b5be01685e65ee5ceb8088e6753ec9585b6d4a90706edbeb858dc442e9680bd1de6ae410e5ce42cba1ab892271559f0dcaefb130bbc4c89cf87bc5fc1e53d25895e7c74c0b1b68b47c2472bb73571a53fe9710610148e1cf4649ba5281d5dd08a12abdba31bfa801ffd266c9a0683ec876cb309fc19d86457b5d6d0a342f3a70ee88a777e51c5e4a20d3fa80fa1edefac919de6b25dcf19327c8445b66de73a4fb499e8f74b2917637e4be59f5d49008bc4416932b9", 0xd9}, {&(0x7f0000001400)="c38f7cd44ca0161122f461a9371f71aebffa1bed46eb4f3be4c7be4c18c8fff71f2843a6ca5fc74ff47bd7962087d48b85be88831a9d49ec55c2fced85d10df824a1e90c28847471be9f289f7bd1c7b327af6b4044985df58ad347a1908494dd4814f38774aa54058a8e23cdfb028d196ffb02f0d87f89e4532a10ce60c4e26ceecc6446a360779e07148197e809e89e8a66f0ab3dfa3a5e78450208b3ffeef6b9e92b620c337d77", 0xa8}], 0x5, 0x7fffffffffffffff, 0x0, 0x9, 0x0, 0x10001, 0x6, 0x86b6}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, &(0x7f00000002c0)={0x20, 0x22, 0x2, {0x2, 0x31}}, &(0x7f0000000440)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "b19da3bcbd96c955bca4fade89c6a808f22a35eedd78ce66650675ee06c2d6b81f913f2fe28b81f5c8899493753923fcc46b0d100788fc6869"}}, 0x0, 0x0, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3000000, 0xffffffffffffffff, 0x6}, 0x70) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r9, 0x890c, &(0x7f00000000c0)={@null, 0x4, 'lo\x00'}) 264.232254ms ago: executing program 7 (id=882): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_getnetconf={0x24, 0x52, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x701, 0x0, 0xffffffff, {0x41}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xbf, 0xa8, @random="07a96498fc63e848a9b13c4ddbcae5770f85a3b15f4e747a1d362649856dafebd8bc01471af1e9eeabdbb44108e0760602677332c3e371575c1c251cfe92dedfd39308288c73a596bc6bd3a65217664694e37527b0e66c37d50bbbd4f4d31577961bbd394c1465d3d58b3893820f963772d495fa6a133dbbf27947890c9e0eccb4d3a0bd5f1e1e2e21e6cbcf62871f677a4e425f34eea9269523e943d2fd15859125f2731c4091a3772b82f8d6667e801a4c04c966bfb3fbaca63d"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000001}, 0x4880) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x30, 0x68, 0x1, 0x3, 0x80000000, {0x0, 0x0, 0x7}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x3}, {0x2, 0x3}]}, @NHA_FDB={0x4}]}, 0x30}}, 0x4000) 0s ago: executing program 2 (id=883): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8101, 0x0) r2 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000300)='L\t\xdf\x92[\r|>\xeeZ:\xd5\x80\xe7\x1b*\x82\xb6z\xe8\xb4\xf6\x80\xb9\xa9RQ\a\x8e\x80\xd0W\x94\t\t\xc8f\x8e\x8b#&)A9\xdb\x05\a\xe8\xbe\xee@\xbc\xdb\x1d\"\xf6\x05\xac\xef\xdb\x18\xaa\x9a\xcb8q\xf63\x18d\xfbO\x8c\xf4\xc6\x14\xb4\xba_9\xcb\x059&\xda\xdf\x8d\x1d\xfe\xf6\xf3Ux\xc6w\x90\xd7\x882\xf0LO\x0f\xd4@KE\x9e\xecF\x9c\x1b\xa2\xbe\nL,\xcc\xfe}Q\xdc\xe9t\x9c\x89Z\xed\x12\xb6\xd1qj\x04\xae\x97\xe0\xbd\x88K\x9c\xb5SR\x18(\x90-]\xb6h\xb1\x11\x01\xa1\xc7\xc7\xd9;Q\xd4\xc7&Q\"\xad\xf7(\x80\x0f\xde>U\x98\x83H>\xd5\xb1Y\xb6T\xb4\xcf\xd2\x01\x1a\x00', 0x0) kernel console output (not intermixed with test programs): 89323][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.691733][ T5711] usb 7-1: USB disconnect, device number 12 [ 239.881884][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.011026][ T9963] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.316810][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.333807][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.395160][ T9963] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.375409][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.515862][ T9963] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.695036][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'. [ 242.712577][ T9963] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.854608][ T72] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.876319][ T72] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.897224][ T72] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.919099][ T1162] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.935871][ T50] Bluetooth: Unexpected continuation frame (len 4) [ 242.989005][ T5711] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 243.089667][T10051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.108673][T10051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.143534][ T5711] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 243.173901][ T5711] usb 9-1: config 0 has no interfaces? [ 243.181146][ T5711] usb 9-1: config 0 has no interfaces? [ 243.190978][ T5711] usb 9-1: config 0 has no interfaces? [ 243.275508][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 243.275638][ T29] audit: type=1400 audit(1777599370.158:4040): avc: denied { prog_load } for pid=10059 comm="syz.7.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 243.299000][ T803] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 243.305848][ T29] audit: type=1400 audit(1777599370.158:4041): avc: denied { bpf } for pid=10059 comm="syz.7.603" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.317599][ T5711] usb 9-1: config 0 has no interfaces? [ 243.522941][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.526119][ T29] audit: type=1400 audit(1777599370.158:4042): avc: denied { perfmon } for pid=10059 comm="syz.7.603" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.553352][ T29] audit: type=1400 audit(1777599370.168:4043): avc: denied { create } for pid=10059 comm="syz.7.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 243.595683][ T5711] usb 9-1: config 0 has no interfaces? [ 243.604670][ T5711] usb 9-1: config 0 has no interfaces? [ 243.640998][ T5711] usb 9-1: config 0 has no interfaces? [ 243.651851][ T5711] usb 9-1: config 0 has no interfaces? [ 243.653315][ T29] audit: type=1400 audit(1777599370.218:4044): avc: denied { ioctl } for pid=10025 comm="syz.8.598" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.660428][ T5711] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 243.697224][ T803] usb 7-1: Using ep0 maxpacket: 32 [ 243.708553][ T5711] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 243.720781][ T5711] usb 9-1: Product: syz [ 243.725662][ T803] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 243.736142][ T803] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 243.749379][ T803] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 243.759459][T10066] blkio.reset_stats is deprecated [ 243.760690][ T5711] usb 9-1: Manufacturer: syz [ 243.760708][ T5711] usb 9-1: SerialNumber: syz [ 243.761815][ T803] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 243.769631][ T29] audit: type=1400 audit(1777599370.448:4045): avc: denied { ioctl } for pid=10048 comm="syz.6.601" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.772520][ T5711] usb 9-1: config 0 descriptor?? [ 243.821166][ T803] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 243.834826][ T803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.847413][ T803] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 243.872322][ T803] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 243.872371][ T29] audit: type=1400 audit(1777599370.468:4046): avc: denied { read write } for pid=10059 comm="syz.7.603" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 243.945598][ T803] usb 7-1: Product: syz [ 243.946713][T10074] fuse: fd is not a fuse device [ 243.951758][ T803] usb 7-1: Manufacturer: syz [ 243.957302][ T29] audit: type=1400 audit(1777599370.468:4047): avc: denied { open } for pid=10059 comm="syz.7.603" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 243.985972][ T803] usb 7-1: SerialNumber: syz [ 244.016748][ T803] usb 7-1: config 0 descriptor?? [ 244.020589][ T29] audit: type=1400 audit(1777599370.478:4048): avc: denied { ioctl } for pid=10025 comm="syz.8.598" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.028581][ T803] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 244.073177][T10077] netlink: 'syz.4.606': attribute type 39 has an invalid length. [ 244.079847][ T29] audit: type=1400 audit(1777599370.478:4049): avc: denied { bind } for pid=10059 comm="syz.7.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 244.109377][ T5711] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 244.129285][ T803] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 244.148202][T10028] netlink: 52 bytes leftover after parsing attributes in process `syz.8.598'. [ 244.193352][T10028] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.204445][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.229913][ T9] usb 7-1: USB disconnect, device number 13 [ 244.246848][ T9] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 244.270859][ T5711] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 244.285940][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.314333][ T5711] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.327229][ T5711] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 244.328502][ T5777] usb 9-1: USB disconnect, device number 5 [ 244.346796][ T5711] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 244.358779][ T5711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.372991][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.374168][ T5711] usb 8-1: config 0 descriptor?? [ 244.382732][ T5731] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 244.548975][ T5731] usb 5-1: Using ep0 maxpacket: 32 [ 244.555741][ T5731] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 244.565484][ T5731] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.576930][ T5731] usb 5-1: config 0 has no interface number 0 [ 244.583077][ T5731] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 244.596474][ T5731] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 244.607595][ T5731] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 244.607764][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.620036][ T5731] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 244.639613][ T5731] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 244.654731][ T5731] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 244.664960][ T5731] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 244.676914][ T5731] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.687337][ T5731] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 244.699848][ T5731] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 244.709373][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.717390][ T5731] usb 5-1: Product: syz [ 244.722035][ T5731] usb 5-1: Manufacturer: syz [ 244.726667][ T5731] usb 5-1: SerialNumber: syz [ 244.733982][ T5731] usb 5-1: config 0 descriptor?? [ 244.741670][T10082] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 244.751554][ T5731] usb 5-1: will this work? Command EP is not usually 12 [ 244.758840][ T5731] usb 5-1: will this work? Response EP is not usually 3 [ 244.766049][ T5731] usb 5-1: will this work? Image data EP is not usually 2 [ 244.778320][ T5731] scsi host1: microtekX6 [ 244.805820][ T139] usb 5-1: error -90 submitting URB [ 244.839561][ T5711] holtek_kbd 0003:04D9:A055.0008: bogus close delimiter [ 244.849008][ T139] usb 5-1: error -90 submitting URB [ 244.857545][ T5711] holtek_kbd 0003:04D9:A055.0008: item 0 4 2 10 parsing failed [ 244.869562][ T4990] usb 5-1: error -90 submitting URB [ 244.892342][ T5711] holtek_kbd 0003:04D9:A055.0008: probe with driver holtek_kbd failed with error -22 [ 244.909896][ T4990] usb 5-1: error -90 submitting URB [ 245.014310][ T5711] usb 8-1: USB disconnect, device number 19 [ 245.177224][ T5777] usb 5-1: USB disconnect, device number 28 [ 245.359528][ T5731] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 245.529561][ T5731] usb 7-1: Using ep0 maxpacket: 32 [ 245.543822][ T5731] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.571775][ T5731] usb 7-1: config 0 has no interfaces? [ 245.590966][ T5731] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 245.625812][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.640753][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.654350][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.667303][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.677036][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.687854][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.706182][ T5731] usb 7-1: config 0 descriptor?? [ 246.048377][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.611'. [ 246.124769][T10140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.196283][T10140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.367252][T10140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.409386][T10140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.362229][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.628744][ T5711] usb 7-1: USB disconnect, device number 14 [ 247.851283][T10207] syzkaller0: entered promiscuous mode [ 247.871219][T10207] syzkaller0: entered allmulticast mode [ 247.988991][ T5742] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 248.153023][ T5742] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 248.188090][ T5742] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.213234][ T5742] usb 9-1: Product: syz [ 248.229821][ T5742] usb 9-1: Manufacturer: syz [ 248.248203][ T5742] usb 9-1: SerialNumber: syz [ 248.273329][ T5742] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 248.287787][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 248.287801][ T29] audit: type=1400 audit(1777599375.198:4274): avc: denied { firmware_load } for pid=5711 comm="kworker/1:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 248.355835][ T29] audit: type=1400 audit(1777599375.198:4275): avc: denied { ioctl } for pid=10196 comm="syz.8.620" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.406992][ T29] audit: type=1400 audit(1777599375.198:4276): avc: denied { read } for pid=10222 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.441308][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.460095][ T5711] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 248.524684][ T29] audit: type=1400 audit(1777599375.238:4277): avc: denied { ioctl } for pid=10196 comm="syz.8.620" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.604564][ T29] audit: type=1400 audit(1777599375.238:4278): avc: denied { ioctl } for pid=10196 comm="syz.8.620" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.703179][ T29] audit: type=1400 audit(1777599375.258:4279): avc: denied { create } for pid=10222 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.748021][ T29] audit: type=1400 audit(1777599375.258:4280): avc: denied { ioctl } for pid=10196 comm="syz.8.620" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 248.776627][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.806858][ T29] audit: type=1400 audit(1777599375.308:4281): avc: denied { ioctl } for pid=10222 comm="syz.2.625" path="socket:[22411]" dev="sockfs" ino=22411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.875954][ T29] audit: type=1400 audit(1777599375.308:4282): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.933962][ T29] audit: type=1400 audit(1777599375.308:4284): avc: denied { write } for pid=10222 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.987582][T10233] pim6reg: entered allmulticast mode [ 249.010092][T10235] team0: entered allmulticast mode [ 249.037105][T10235] team_slave_0: entered allmulticast mode [ 249.071716][T10235] team_slave_1: entered allmulticast mode [ 249.093676][T10237] team0: left allmulticast mode [ 249.116031][T10237] team_slave_0: left allmulticast mode [ 249.144413][T10237] team_slave_1: left allmulticast mode [ 249.172540][T10237] pim6reg: left allmulticast mode [ 249.401892][T10247] xt_TCPMSS: Only works on TCP SYN packets [ 249.428247][T10247] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 249.459101][ T804] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 249.459420][T10247] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 249.485713][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.510206][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.518644][ T2035] block nbd0: Possible stuck request ffff888027800000: control (read@0,1024B). Runtime 90 seconds [ 249.531681][ T2035] block nbd0: Possible stuck request ffff8880278001c0: control (read@1024,1024B). Runtime 90 seconds [ 249.542972][ T2035] block nbd0: Possible stuck request ffff888027800380: control (read@2048,1024B). Runtime 90 seconds [ 249.554089][ T2035] block nbd0: Possible stuck request ffff888027800540: control (read@3072,1024B). Runtime 90 seconds [ 249.672049][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.694772][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 249.719501][ T5711] usb 9-1: Service connection timeout for: 256 [ 249.728825][ T5711] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 249.758427][ T804] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.781917][ T5711] ath9k_htc: Failed to initialize the device [ 249.807591][ T5711] usb 9-1: ath9k_htc: USB layer deinitialized [ 249.823756][ T804] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 249.871797][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.946679][ T804] usb 5-1: config 0 descriptor?? [ 250.083790][T10235] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 250.121909][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.176412][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.187639][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.227755][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.666784][ T5711] usb 9-1: USB disconnect, device number 6 [ 251.679226][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.903366][T10278] overlayfs: failed to clone upperpath [ 252.175467][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.759364][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.942084][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 253.118991][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 253.143201][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.187814][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.205208][ T804] usbhid 5-1:0.0: can't add hid device: -71 [ 253.218290][ T804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 253.237474][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.266249][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 253.291308][ T804] usb 5-1: USB disconnect, device number 29 [ 253.304744][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.336129][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 253.336144][ T29] audit: type=1400 audit(1777599380.238:4449): avc: denied { ioctl } for pid=10309 comm="syz.8.642" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.376465][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.645'. [ 253.389148][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.645'. [ 253.402306][ T29] audit: type=1400 audit(1777599380.278:4450): avc: denied { create } for pid=10324 comm="syz.4.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.425039][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 253.469796][ T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 253.476905][ T29] audit: type=1400 audit(1777599380.278:4451): avc: denied { write } for pid=10324 comm="syz.4.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.498996][ T5711] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 253.548166][ T29] audit: type=1400 audit(1777599380.278:4452): avc: denied { read } for pid=10324 comm="syz.4.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.589250][ T9] usb 8-1: Manufacturer: syz [ 253.604928][ T29] audit: type=1400 audit(1777599380.278:4453): avc: denied { ioctl } for pid=10324 comm="syz.4.645" path="socket:[22645]" dev="sockfs" ino=22645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.670999][ T9] usb 8-1: config 0 descriptor?? [ 253.673906][ T5711] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 253.690535][ T29] audit: type=1400 audit(1777599380.278:4454): avc: denied { write } for pid=10324 comm="syz.4.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.719686][ T5711] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.740311][ T5711] usb 9-1: Product: syz [ 253.763705][ T5711] usb 9-1: Manufacturer: syz [ 253.774625][ T29] audit: type=1400 audit(1777599380.308:4455): avc: denied { ioctl } for pid=10288 comm="syz.7.637" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.800357][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.813004][ T5711] usb 9-1: SerialNumber: syz [ 253.820007][T10335] overlayfs: failed to resolve './file2': -2 [ 253.827089][ T29] audit: type=1400 audit(1777599380.338:4456): avc: denied { read } for pid=10324 comm="syz.4.645" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 253.853755][ T29] audit: type=1400 audit(1777599380.338:4457): avc: denied { open } for pid=10324 comm="syz.4.645" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 253.885344][ T5711] usb 9-1: config 0 descriptor?? [ 253.911673][ T29] audit: type=1400 audit(1777599380.338:4458): avc: denied { ioctl } for pid=10324 comm="syz.4.645" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 254.710702][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.739553][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.783791][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.815738][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.839378][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.917256][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.998990][ T9] rc_core: IR keymap rc-hauppauge not found [ 255.016908][ T9] Registered IR keymap rc-empty [ 255.028786][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.039602][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.050547][T10356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.073143][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.091667][T10356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.121330][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 255.165670][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input21 [ 255.213145][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.241644][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.247993][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.250406][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.262567][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.300947][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.370306][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.410328][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.439068][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.479733][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.509049][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.571143][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.619877][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 255.676352][ T9] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 255.816749][ T9] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 255.886021][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.922986][ T9] usb 8-1: USB disconnect, device number 20 [ 256.042668][ T5711] usb 9-1: f81604_read: reg: 105 failed: -EPROTO [ 256.052854][ T5711] f81604 9-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 256.171787][ T5711] f81604 9-1:0.0: probe with driver f81604 failed with error -71 [ 256.190958][ T5711] usb 9-1: USB disconnect, device number 7 [ 256.219676][T10396] overlayfs: missing 'lowerdir' [ 256.929570][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.959738][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.003548][T10423] overlayfs: failed to resolve './file2': -2 [ 258.047010][T10428] hugetlbfs: Unknown parameter 'n•_inodeˆ›Á¥„Îs' [ 258.124965][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.661'. [ 258.199374][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 258.365235][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.421784][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 258.421800][ T29] audit: type=1400 audit(1777599385.328:4607): avc: denied { unmount } for pid=5605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 258.511163][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 258.522948][ T29] audit: type=1400 audit(1777599385.358:4608): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.559788][ T29] audit: type=1400 audit(1777599385.358:4609): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.586710][ T29] audit: type=1400 audit(1777599385.358:4610): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.628402][ T9] usb 8-1: config 251 has an invalid interface number: 202 but max is 0 [ 258.648299][ T9] usb 8-1: config 251 has no interface number 0 [ 258.667055][ T9] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.698580][ T9] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.839103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.398902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.612690][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.360280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.370522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 260.380150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 260.384101][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.396571][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.408522][ T29] audit: type=1400 audit(1777599385.428:4611): avc: denied { ioctl } for pid=10420 comm="syz.7.660" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.452251][ T9] usb 8-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 260.498641][ T9] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 260.542012][ T9] usb 8-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 260.557920][ T29] audit: type=1400 audit(1777599385.448:4612): avc: denied { name_bind } for pid=10438 comm="syz.4.662" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 260.602791][T10451] vcan0: tx address claim with dlc 0 [ 260.634324][ T9] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.679561][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.685728][ T9] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 260.705333][ T29] audit: type=1400 audit(1777599385.448:4613): avc: denied { node_bind } for pid=10438 comm="syz.4.662" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 260.749117][ T9] usb 8-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.769016][ T29] audit: type=1400 audit(1777599385.468:4614): avc: denied { ioctl } for pid=10420 comm="syz.7.660" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 260.795427][ T9] usb 8-1: config 251 interface 202 has no altsetting 0 [ 260.824564][ T9] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 260.839012][ T9] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 260.847069][ T29] audit: type=1400 audit(1777599385.488:4615): avc: denied { read write } for pid=6321 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 260.871105][T10464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 260.879055][ T9] usb 8-1: Product: syz [ 260.888950][ T9] usb 8-1: SerialNumber: syz [ 260.931191][ T9] cxacru 8-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 260.932239][ T42] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 260.952645][ T9] cxacru 8-1:251.202: probe with driver cxacru failed with error -22 [ 260.996954][ T9] usb 8-1: USB disconnect, device number 21 [ 261.188986][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 261.198827][ T42] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 261.211007][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.225879][ T42] usb 5-1: config 0 descriptor?? [ 261.671999][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.702183][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 261.721766][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.754962][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 261.942791][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 261.950117][ T42] usb 5-1: media controller created [ 261.965914][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.683599][ T42] az6027: usb out operation failed. (-71) [ 262.696636][ T42] az6027: usb out operation failed. (-71) [ 262.703583][ T42] stb0899_attach: Driver disabled by Kconfig [ 262.714509][ T42] az6027: no front-end attached [ 262.714509][ T42] [ 262.727876][ T42] az6027: usb out operation failed. (-71) [ 262.738451][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 262.746529][T10495] netlink: 'syz.7.671': attribute type 4 has an invalid length. [ 262.767307][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 262.783574][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.800954][T10509] overlayfs: upper fs does not support file handles, falling back to index=off. [ 262.816145][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 262.832583][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 262.875239][ T42] usb 5-1: USB disconnect, device number 30 [ 263.017192][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 263.227566][T10537] overlayfs: failed to resolve './file2': -2 [ 263.253362][T10537] fuse: Bad value for 'group_id' [ 263.264375][T10537] fuse: Bad value for 'group_id' [ 263.479966][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 263.479982][ T29] audit: type=1400 audit(1777599390.388:4784): avc: denied { mounton } for pid=10504 comm="syz.8.672" path="/24/bus" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 263.532189][ T29] audit: type=1400 audit(1777599390.418:4785): avc: denied { create } for pid=10504 comm="syz.8.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.572096][ T29] audit: type=1400 audit(1777599390.418:4786): avc: denied { write } for pid=10504 comm="syz.8.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.605238][ T29] audit: type=1400 audit(1777599390.418:4787): avc: denied { read } for pid=10504 comm="syz.8.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.650356][ T29] audit: type=1400 audit(1777599390.428:4788): avc: denied { create } for pid=10504 comm="syz.8.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.690947][ T29] audit: type=1400 audit(1777599390.428:4789): avc: denied { ioctl } for pid=10504 comm="syz.8.672" path="socket:[23731]" dev="sockfs" ino=23731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.768631][ T29] audit: type=1400 audit(1777599390.538:4790): avc: denied { create } for pid=10539 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.801902][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.854585][T10546] vcan0: tx address claim with dlc 0 [ 263.886765][ T29] audit: type=1400 audit(1777599390.628:4791): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.954427][ T29] audit: type=1400 audit(1777599390.628:4792): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.024979][ T29] audit: type=1400 audit(1777599390.628:4793): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 264.189014][ T5731] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 264.264865][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.681'. [ 264.361814][ T5731] usb 8-1: Using ep0 maxpacket: 16 [ 264.387261][ T5731] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.408509][ T5731] usb 8-1: config 0 interface 0 has no altsetting 0 [ 264.427266][ T5731] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 264.446602][ T5731] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.461365][ T5731] usb 8-1: Product: syz [ 264.470057][ T5731] usb 8-1: Manufacturer: syz [ 264.487267][ T5731] usb 8-1: SerialNumber: syz [ 264.502477][ T5731] usb 8-1: config 0 descriptor?? [ 264.529214][ T42] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 264.679238][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.727237][ T42] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 264.767208][ T42] usb 7-1: config 0 has no interface number 0 [ 264.823700][ T42] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 264.851873][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.912728][ T42] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 265.029829][ T42] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 265.080147][ T42] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 265.145008][ T42] usb 7-1: Manufacturer: syz [ 265.174300][ T42] usb 7-1: SerialNumber: syz [ 265.327161][ T42] usb 7-1: config 0 descriptor?? [ 265.566045][ T42] usbtouchscreen 7-1:0.214: Failed to read FW rev: 0 [ 265.573622][ T42] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 265.709015][ T5718] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 265.862641][ T5718] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.884175][ T5718] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 265.917588][ T5718] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.926816][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.941849][ T5718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.969589][ T5718] usb 9-1: config 0 descriptor?? [ 266.001457][ T5718] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 266.245475][ T50] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 266.462040][ T5777] usb 9-1: USB disconnect, device number 8 [ 266.999437][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.210494][ T5777] usb 7-1: USB disconnect, device number 15 [ 267.603449][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 268.014949][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.031024][ T5731] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input24 [ 268.043117][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.137278][T10628] overlayfs: failed to resolve './file2': -2 [ 268.147931][ T5731] imon:send_packet: packet tx failed (-71) [ 268.178240][T10628] fuse: Bad value for 'group_id' [ 268.189018][ T5731] imon 8-1:0.0: panel buttons/knobs setup failed [ 268.190086][T10628] fuse: Bad value for 'group_id' [ 268.237001][T10634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'. [ 268.255585][T10634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'. [ 268.275568][T10635] tipc: Invalid UDP bearer configuration [ 268.275610][T10635] tipc: Enabling of bearer rejected, failed to enable media [ 268.333893][ T5731] rc_core: IR keymap rc-imon-pad not found [ 268.341399][ T5731] Registered IR keymap rc-empty [ 268.356473][ T5731] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 268.376919][ T5731] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 268.391556][ T5731] imon:send_packet: packet tx failed (-71) [ 268.409356][ T5731] imon 8-1:0.0: remote input dev register failed [ 268.425556][ T5731] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 268.498099][ T5731] imon 8-1:0.0: unable to initialize intf0, err 0 [ 268.505344][ T5731] imon:imon_probe: failed to initialize context! [ 268.520003][ T5731] imon 8-1:0.0: unable to register, err -19 [ 268.531289][ T5731] usb 8-1: USB disconnect, device number 22 [ 268.537325][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.694'. [ 268.602158][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.694'. [ 268.623639][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.694'. [ 268.651598][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 268.651644][ T29] audit: type=1400 audit(1777599395.558:5104): avc: denied { create } for pid=10643 comm="syz.8.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.652924][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.8.694'. [ 268.709863][ T29] audit: type=1400 audit(1777599395.618:5105): avc: denied { write } for pid=10643 comm="syz.8.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.764486][ T29] audit: type=1400 audit(1777599395.618:5106): avc: denied { read } for pid=10643 comm="syz.8.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.835730][ T29] audit: type=1400 audit(1777599395.618:5107): avc: denied { ioctl } for pid=10643 comm="syz.8.694" path="socket:[23107]" dev="sockfs" ino=23107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.868269][ T29] audit: type=1400 audit(1777599395.648:5108): avc: denied { read write } for pid=6321 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.894536][ T29] audit: type=1400 audit(1777599395.648:5109): avc: denied { open } for pid=6321 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.919463][ T29] audit: type=1400 audit(1777599395.648:5110): avc: denied { ioctl } for pid=6321 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.945441][ T29] audit: type=1400 audit(1777599395.698:5111): avc: denied { write } for pid=10643 comm="syz.8.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.971104][ T29] audit: type=1400 audit(1777599395.708:5112): avc: denied { read write } for pid=10660 comm="syz.6.695" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.062547][ T29] audit: type=1400 audit(1777599395.708:5113): avc: denied { open } for pid=10660 comm="syz.6.695" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.069179][ T5718] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 269.094810][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.255464][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.697'. [ 269.292047][ T5718] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.309565][ T5718] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.354684][ T5718] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 269.383904][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.404677][ T5718] usb 7-1: config 0 descriptor?? [ 269.427490][ T5718] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 269.439007][ T5718] dvb-usb: bulk message failed: -22 (3/0) [ 269.461539][ T5718] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 269.491097][ T5718] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 269.509553][ T5718] usb 7-1: media controller created [ 269.516151][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.586778][ T5731] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 269.593635][ T5718] dvb-usb: bulk message failed: -22 (6/0) [ 269.610281][ T5718] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 269.649664][ T5969] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.651035][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.670646][ T5718] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 269.721924][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.735288][ T5718] dvb-usb: schedule remote query interval to 150 msecs. [ 269.749277][ T5718] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 269.770834][ T5731] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 269.796317][ T5731] usb 5-1: config 0 has no interface number 0 [ 269.825848][ T5731] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 269.869078][ T5731] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 269.885958][T10661] dvb-usb: bulk message failed: -22 (4/0) [ 269.892546][ T5731] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 269.893906][ T5718] usb 7-1: USB disconnect, device number 16 [ 269.903768][ T5969] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.918370][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 269.946532][ T5731] usb 5-1: Manufacturer: syz [ 269.969597][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.983680][ T5731] usb 5-1: SerialNumber: syz [ 270.012530][ T5731] usb 5-1: config 0 descriptor?? [ 270.061571][ T50] Bluetooth: Unexpected continuation frame (len 4) [ 270.076142][ T5718] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 270.120186][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.132780][ T5969] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.247457][ T5731] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 270.259485][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.269301][ T5731] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 270.278826][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.287689][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.298407][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.313493][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.357242][ T5969] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.763115][ T5969] bridge_slave_1: left allmulticast mode [ 270.776626][ T5969] bridge_slave_1: left promiscuous mode [ 270.789986][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.809567][ T5969] bridge_slave_0: left allmulticast mode [ 270.823709][ T5969] bridge_slave_0: left promiscuous mode [ 270.835590][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.878957][ T42] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 270.965372][T10770] overlayfs: failed to resolve './file2': -2 [ 270.985230][T10770] fuse: Bad value for 'group_id' [ 270.998974][T10770] fuse: Bad value for 'group_id' [ 271.042028][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.062553][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.075126][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.086304][ T42] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 271.090631][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.096262][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.118477][ T42] usb 7-1: config 0 descriptor?? [ 271.155589][ T5969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.165619][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.194582][ T5969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.206397][ T5969] bond0 (unregistering): Released all slaves [ 271.473206][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 271.518417][ T5270] 8021q: adding VLAN 0 to HW filter on device eth13 [ 271.559350][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.606590][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.622871][ T5969] hsr_slave_0: left promiscuous mode [ 271.632460][ T5969] hsr_slave_1: left promiscuous mode [ 271.636254][ T5624] Bluetooth: hci3: Malformed Event: 0x02 [ 271.638633][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.655528][ T42] usbhid 7-1:0.0: can't add hid device: -71 [ 271.655795][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.663971][ T42] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 271.685049][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.685554][ T42] usb 7-1: USB disconnect, device number 17 [ 271.723753][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.747501][ T5969] veth1_macvtap: left promiscuous mode [ 271.758579][ T5969] veth0_macvtap: left promiscuous mode [ 271.764248][ T5969] veth1_vlan: left promiscuous mode [ 271.769833][ T5969] veth0_vlan: left promiscuous mode [ 272.014584][ T5969] team0 (unregistering): Port device team_slave_1 removed [ 272.040887][ T5969] team0 (unregistering): Port device team_slave_0 removed [ 272.081386][ T5731] usb 5-1: USB disconnect, device number 31 [ 272.201197][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.372485][ T5624] Bluetooth: hci5: command tx timeout [ 273.256829][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.395711][T10728] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.443951][T10728] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.481272][T10728] bridge_slave_0: entered allmulticast mode [ 273.531220][T10728] bridge_slave_0: entered promiscuous mode [ 273.568229][T10728] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.588548][T10728] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.606046][T10728] bridge_slave_1: entered allmulticast mode [ 273.625554][T10728] bridge_slave_1: entered promiscuous mode [ 273.679214][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 273.679232][ T29] audit: type=1400 audit(1777599400.588:5521): avc: denied { mounton } for pid=10831 comm="syz.7.711" path="/99/file0" dev="tmpfs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 273.761290][T10728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.793008][T10728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.802322][ T29] audit: type=1400 audit(1777599400.588:5522): avc: denied { unlink } for pid=10831 comm="syz.7.711" name="#e" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 273.829645][ T29] audit: type=1400 audit(1777599400.618:5523): avc: denied { read write } for pid=10959 comm="syz.4.717" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.853428][ T29] audit: type=1400 audit(1777599400.618:5524): avc: denied { open } for pid=10959 comm="syz.4.717" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.870808][ T5624] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 273.878377][ T29] audit: type=1400 audit(1777599400.638:5525): avc: denied { prog_load } for pid=10851 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 273.984743][T10728] team0: Port device team_slave_0 added [ 274.034612][T10728] team0: Port device team_slave_1 added [ 274.047519][ T5270] 8021q: adding VLAN 0 to HW filter on device eth14 [ 274.188732][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.208969][ T29] audit: type=1400 audit(1777599400.638:5526): avc: denied { bpf } for pid=10851 comm="syz.2.715" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.245478][T10728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.279441][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.753606][ T5624] Bluetooth: hci5: command tx timeout [ 275.039595][ T29] audit: type=1400 audit(1777599400.638:5527): avc: denied { perfmon } for pid=10851 comm="syz.2.715" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 275.047011][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.090431][T10728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.172825][T10728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.178380][ T29] audit: type=1400 audit(1777599400.638:5528): avc: denied { prog_run } for pid=10851 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 275.179898][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.228082][T10728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.252769][T11035] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.253769][T11034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 275.320120][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.389197][ T42] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 275.399851][T10728] hsr_slave_0: entered promiscuous mode [ 275.418533][T10728] hsr_slave_1: entered promiscuous mode [ 275.442484][T10728] debugfs: 'hsr0' already exists in 'hsr' [ 275.472652][T10728] Cannot create hsr debugfs directory [ 275.728941][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 275.902816][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.970358][ T10] usb 5-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 276.019313][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.083550][ T10] usb 5-1: config 0 descriptor?? [ 276.458804][T10728] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 276.506620][T10728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.540659][T10728] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 276.585023][T10728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.601012][ T10] lenovo 0003:04B3:3108.0009: unknown main item tag 0x0 [ 276.640904][ T10] lenovo 0003:04B3:3108.0009: unknown main item tag 0x0 [ 276.650979][T10728] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 276.673448][ T10] lenovo 0003:04B3:3108.0009: unknown main item tag 0x0 [ 276.698352][T10728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.705807][ T10] lenovo 0003:04B3:3108.0009: unknown main item tag 0x0 [ 276.735432][T10728] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 276.746799][ T10] lenovo 0003:04B3:3108.0009: unknown main item tag 0x0 [ 276.777899][ T10] lenovo 0003:04B3:3108.0009: unknown main item tag 0x0 [ 276.777969][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.786550][T10728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.818339][ T10] lenovo 0003:04B3:3108.0009: unexpected long global item [ 276.842379][ T5624] Bluetooth: hci5: command tx timeout [ 276.854914][ T10] lenovo 0003:04B3:3108.0009: hid_parse failed [ 276.898959][ T10] lenovo 0003:04B3:3108.0009: probe with driver lenovo failed with error -22 [ 277.012321][ T42] usb 7-1: unable to get BOS descriptor or descriptor too short [ 277.037574][ T42] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 277.239549][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.313900][ T5270] 8021q: adding VLAN 0 to HW filter on device eth15 [ 277.495487][ T42] usb 7-1: can't read configurations, error -71 [ 277.583317][T10728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.668091][T10728] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.705846][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.713090][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.738518][T11196] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 277.769846][T11196] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 277.802416][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.581529][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.588722][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.634592][ T10] usb 5-1: USB disconnect, device number 32 [ 278.692379][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 278.692394][ T29] audit: type=1400 audit(1777599405.598:5909): avc: denied { bpf } for pid=11214 comm="syz.2.732" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.751829][ T29] audit: type=1400 audit(1777599405.598:5910): avc: denied { perfmon } for pid=11214 comm="syz.2.732" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.777422][T11225] FAULT_INJECTION: forcing a failure. [ 278.777422][T11225] name failslab, interval 1, probability 0, space 0, times 0 [ 278.825386][T11225] CPU: 0 UID: 0 PID: 11225 Comm: syz.7.731 Not tainted syzkaller #0 PREEMPT(full) [ 278.825411][T11225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.825421][T11225] Call Trace: [ 278.825427][T11225] [ 278.825434][T11225] dump_stack_lvl+0x100/0x190 [ 278.825460][T11225] should_fail_ex.cold+0x5/0xa [ 278.825484][T11225] should_failslab+0xc2/0x120 [ 278.825504][T11225] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 278.825532][T11225] ? sidtab_sid2str_get+0x17a/0x670 [ 278.825563][T11225] kmemdup_noprof+0x29/0x60 [ 278.825580][T11225] sidtab_sid2str_get+0x17a/0x670 [ 278.825607][T11225] security_sid_to_context_core+0x35a/0x6d0 [ 278.825629][T11225] ? avc_audit_post_callback+0x115/0x900 [ 278.825657][T11225] avc_audit_post_callback+0x1aa/0x900 [ 278.825684][T11225] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 278.825707][T11225] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 278.825730][T11225] ? skb_put+0x138/0x180 [ 278.825749][T11225] ? audit_log_n_string+0x256/0x550 [ 278.825773][T11225] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 278.825796][T11225] common_lsm_audit+0x23f/0x2b0 [ 278.825818][T11225] ? __pfx_common_lsm_audit+0x10/0x10 [ 278.825838][T11225] ? avc_denied+0x14a/0x190 [ 278.825867][T11225] slow_avc_audit+0x186/0x210 [ 278.825891][T11225] ? __pfx_slow_avc_audit+0x10/0x10 [ 278.825918][T11225] ? find_held_lock+0x2b/0x80 [ 278.825934][T11225] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 278.825967][T11225] avc_has_perm+0x1a6/0x1e0 [ 278.825992][T11225] ? __pfx_avc_has_perm+0x10/0x10 [ 278.826018][T11225] ? is_bpf_text_address+0x94/0x1a0 [ 278.826046][T11225] sock_has_perm+0x251/0x2f0 [ 278.826063][T11225] ? __pfx_sock_has_perm+0x10/0x10 [ 278.826083][T11225] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 278.826108][T11225] ? import_ubuf+0x1b6/0x220 [ 278.826132][T11225] ? __might_fault+0x90/0x140 [ 278.826156][T11225] ? __might_fault+0xc5/0x140 [ 278.826190][T11225] security_socket_sendmsg+0xd3/0x230 [ 278.826210][T11225] ____sys_sendmsg+0x862/0xb70 [ 278.826231][T11225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.826265][T11225] ___sys_sendmsg+0x190/0x1e0 [ 278.826287][T11225] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.826342][T11225] __sys_sendmsg+0x170/0x220 [ 278.826368][T11225] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.826402][T11225] ? rcu_is_watching+0x12/0xc0 [ 278.826431][T11225] do_syscall_64+0x10b/0xf80 [ 278.826449][T11225] ? clear_bhb_loop+0x40/0x90 [ 278.826470][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.826487][T11225] RIP: 0033:0x7fa29839cdd9 [ 278.826501][T11225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.826516][T11225] RSP: 002b:00007fa299173028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.826532][T11225] RAX: ffffffffffffffda RBX: 00007fa298615fa0 RCX: 00007fa29839cdd9 [ 278.826543][T11225] RDX: 0000000000048800 RSI: 0000200000000100 RDI: 0000000000000003 [ 278.826553][T11225] RBP: 00007fa299173090 R08: 0000000000000000 R09: 0000000000000000 [ 278.826563][T11225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.826573][T11225] R13: 00007fa298616038 R14: 00007fa298615fa0 R15: 00007ffdcd6567b8 [ 278.826599][T11225] [ 279.143490][ T29] audit: type=1400 audit(1777599405.608:5911): avc: denied { bpf } for pid=11214 comm="syz.2.732" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.144228][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.164188][ T29] audit: type=1400 audit(1777599405.608:5912): avc: denied { perfmon } for pid=11214 comm="syz.2.732" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.189511][ T5624] Bluetooth: hci5: command tx timeout [ 279.193575][ T29] audit: type=1400 audit(1777599405.608:5913): avc: denied { search } for pid=11209 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.221089][ T29] audit: type=1400 audit(1777599405.608:5914): avc: denied { read } for pid=11209 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 279.244240][ T29] audit: type=1400 audit(1777599405.608:5915): avc: denied { open } for pid=11209 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 279.269430][ T29] audit: type=1400 audit(1777599405.608:5916): avc: denied { getattr } for pid=11209 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 279.290268][T11224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.733'. [ 279.294869][ T29] audit: type=1400 audit(1777599405.628:5917): avc: denied { bpf } for pid=11214 comm="syz.2.732" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.324600][ T29] audit: type=1400 audit(1777599405.628:5918): avc: denied { perfmon } for pid=11214 comm="syz.2.732" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 279.532316][T11238] netlink: 'syz.6.735': attribute type 39 has an invalid length. [ 279.562631][ T2035] block nbd0: Possible stuck request ffff888027800000: control (read@0,1024B). Runtime 120 seconds [ 279.577714][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.577933][ T2035] block nbd0: Possible stuck request ffff8880278001c0: control (read@1024,1024B). Runtime 120 seconds [ 279.612368][ T2035] block nbd0: Possible stuck request ffff888027800380: control (read@2048,1024B). Runtime 120 seconds [ 279.625451][ T2035] block nbd0: Possible stuck request ffff888027800540: control (read@3072,1024B). Runtime 120 seconds [ 279.740530][ T5711] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 279.909118][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 279.956984][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.014687][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.074125][ T5711] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 280.101471][ T5270] 8021q: adding VLAN 0 to HW filter on device eth16 [ 280.102980][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.183688][ T5711] usb 5-1: config 0 descriptor?? [ 280.200631][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.247041][ T5711] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 280.267663][ T5711] usbhid 5-1:0.0: can't add hid device: -22 [ 280.275854][ T5711] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 280.289082][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.426547][ T5777] usb 5-1: USB disconnect, device number 33 [ 280.703397][T10728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.976699][T11287] input: syz0 as /devices/virtual/input/input28 [ 281.166426][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 281.175496][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 281.367354][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.614679][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.625949][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.635876][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.663610][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.948746][T10728] veth0_vlan: entered promiscuous mode [ 282.977056][T10728] veth1_vlan: entered promiscuous mode [ 283.037463][T10728] veth0_macvtap: entered promiscuous mode [ 283.357299][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.367417][T10728] veth1_macvtap: entered promiscuous mode [ 283.397557][T10728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.432137][T10728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.481609][ T72] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.503953][ T72] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.556914][ T72] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.585942][ T72] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.720632][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.771417][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 283.771428][ T29] audit: type=1400 audit(1777599410.678:6162): avc: denied { read } for pid=10728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 283.822896][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.980837][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.110227][ T29] audit: type=1400 audit(1777599410.708:6163): avc: denied { write } for pid=10728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.235336][ T29] audit: type=1400 audit(1777599410.718:6164): avc: denied { read } for pid=10728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.258983][ T29] audit: type=1400 audit(1777599410.718:6165): avc: denied { write } for pid=10728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.281284][ T29] audit: type=1400 audit(1777599410.728:6166): avc: denied { read } for pid=11330 comm="syz.6.746" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 284.342087][T11343] netlink: 'syz.2.747': attribute type 39 has an invalid length. [ 284.369028][ T29] audit: type=1400 audit(1777599410.728:6167): avc: denied { read open } for pid=11330 comm="syz.6.746" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 284.397959][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.407479][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.446130][ T29] audit: type=1400 audit(1777599411.188:6168): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.470959][ T29] audit: type=1400 audit(1777599411.188:6169): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.604833][ T29] audit: type=1400 audit(1777599411.188:6170): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 284.889991][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.039558][T11358] team0: entered allmulticast mode [ 285.044774][T11358] team_slave_0: entered allmulticast mode [ 285.050591][T11358] team_slave_1: entered allmulticast mode [ 285.058247][T11358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.748'. [ 285.067257][T11358] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 285.084631][ T29] audit: type=1400 audit(1777599411.238:6171): avc: denied { prog_load } for pid=11341 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 285.189127][ T5731] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 285.351178][ T5731] usb 7-1: Using ep0 maxpacket: 32 [ 285.367778][ T5731] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 285.390519][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.417391][ T5731] usb 7-1: config 0 descriptor?? [ 285.657471][ T5731] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 285.692264][ T5731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.734713][ T5731] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 285.994886][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.496649][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.504908][ T5731] usb 7-1: media controller created [ 286.518835][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.754532][ T5731] az6027: usb out operation failed. (-71) [ 286.791415][ T5731] az6027: usb out operation failed. (-71) [ 286.821248][ T5731] stb0899_attach: Driver disabled by Kconfig [ 286.832932][ T5731] az6027: no front-end attached [ 286.832932][ T5731] [ 286.881544][ T5731] az6027: usb out operation failed. (-71) [ 286.896939][ T5731] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 286.917238][ T5731] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input29 [ 286.961128][ T5731] dvb-usb: schedule remote query interval to 400 msecs. [ 286.966506][ T803] IPVS: starting estimator thread 0... [ 286.979178][ T5731] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 287.002784][ T5731] usb 7-1: USB disconnect, device number 20 [ 287.003935][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.089553][T11401] IPVS: using max 43 ests per chain, 103200 per kthread [ 287.114392][ T5731] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 287.566547][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.584375][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.593917][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.602618][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.611514][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.692423][T11433] FAULT_INJECTION: forcing a failure. [ 287.692423][T11433] name failslab, interval 1, probability 0, space 0, times 0 [ 287.746105][T11433] CPU: 0 UID: 0 PID: 11433 Comm: syz.6.757 Not tainted syzkaller #0 PREEMPT(full) [ 287.746132][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.746149][T11433] Call Trace: [ 287.746155][T11433] [ 287.746162][T11433] dump_stack_lvl+0x100/0x190 [ 287.746189][T11433] should_fail_ex.cold+0x5/0xa [ 287.746215][T11433] should_failslab+0xc2/0x120 [ 287.746235][T11433] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 287.746264][T11433] ? sidtab_sid2str_get+0x17a/0x670 [ 287.746295][T11433] kmemdup_noprof+0x29/0x60 [ 287.746313][T11433] sidtab_sid2str_get+0x17a/0x670 [ 287.746341][T11433] security_sid_to_context_core+0x35a/0x6d0 [ 287.746368][T11433] avc_audit_post_callback+0x109/0x900 [ 287.746396][T11433] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 287.746423][T11433] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 287.746448][T11433] ? skb_put+0x138/0x180 [ 287.746468][T11433] ? audit_log_n_string+0x256/0x550 [ 287.746494][T11433] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 287.746520][T11433] common_lsm_audit+0x23f/0x2b0 [ 287.746544][T11433] ? __pfx_common_lsm_audit+0x10/0x10 [ 287.746564][T11433] ? avc_denied+0x14a/0x190 [ 287.746596][T11433] slow_avc_audit+0x186/0x210 [ 287.746624][T11433] ? __pfx_slow_avc_audit+0x10/0x10 [ 287.746652][T11433] ? find_held_lock+0x2b/0x80 [ 287.746668][T11433] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 287.746705][T11433] avc_has_perm+0x1a6/0x1e0 [ 287.746734][T11433] ? __pfx_avc_has_perm+0x10/0x10 [ 287.746762][T11433] ? is_bpf_text_address+0x94/0x1a0 [ 287.746792][T11433] sock_has_perm+0x251/0x2f0 [ 287.746812][T11433] ? __pfx_sock_has_perm+0x10/0x10 [ 287.746832][T11433] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 287.746856][T11433] ? import_ubuf+0x1b6/0x220 [ 287.746882][T11433] ? __might_fault+0x90/0x140 [ 287.746906][T11433] ? __might_fault+0xc5/0x140 [ 287.746936][T11433] security_socket_sendmsg+0xd3/0x230 [ 287.746957][T11433] ____sys_sendmsg+0x862/0xb70 [ 287.746981][T11433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.747013][T11433] ___sys_sendmsg+0x190/0x1e0 [ 287.747036][T11433] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.747090][T11433] __sys_sendmsg+0x170/0x220 [ 287.747117][T11433] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.747161][T11433] ? rcu_is_watching+0x12/0xc0 [ 287.747192][T11433] do_syscall_64+0x10b/0xf80 [ 287.747227][T11433] ? clear_bhb_loop+0x40/0x90 [ 287.747249][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.747267][T11433] RIP: 0033:0x7f565699cdd9 [ 287.747283][T11433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.747300][T11433] RSP: 002b:00007f5657796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.747318][T11433] RAX: ffffffffffffffda RBX: 00007f5656c15fa0 RCX: 00007f565699cdd9 [ 287.747329][T11433] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 287.747339][T11433] RBP: 00007f5657796090 R08: 0000000000000000 R09: 0000000000000000 [ 287.747349][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.747359][T11433] R13: 00007f5656c16038 R14: 00007f5656c15fa0 R15: 00007fffe27cb0c8 [ 287.747383][T11433] [ 288.039068][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.296361][ T42] kernel write not supported for file /437/net/ip6_tables_targets (pid: 42 comm: kworker/1:1) [ 288.519478][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.528295][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.537794][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.718994][ T42] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 288.789890][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 288.789905][ T29] audit: type=1400 audit(1777599415.698:6359): avc: denied { ioctl } for pid=11448 comm="syz.9.761" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.849045][ T29] audit: type=1400 audit(1777599415.738:6360): avc: denied { module_request } for pid=11425 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 288.873422][ T29] audit: type=1400 audit(1777599415.738:6361): avc: denied { read write } for pid=6321 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.899732][ T29] audit: type=1400 audit(1777599415.738:6362): avc: denied { open } for pid=6321 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.909253][ T42] usb 10-1: Using ep0 maxpacket: 32 [ 288.924424][ T29] audit: type=1400 audit(1777599415.738:6363): avc: denied { ioctl } for pid=6321 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.978823][ T29] audit: type=1400 audit(1777599415.878:6364): avc: denied { module_request } for pid=11425 comm="syz-executor" kmod="rtnl-link-caif" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 288.981957][ T42] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 289.002325][ T29] audit: type=1400 audit(1777599415.878:6365): avc: denied { ioctl } for pid=11448 comm="syz.9.761" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.097301][ T29] audit: type=1400 audit(1777599415.888:6366): avc: denied { ioctl } for pid=11448 comm="syz.9.761" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.197322][T11536] input: syz0 as /devices/virtual/input/input30 [ 289.362285][ T29] audit: type=1400 audit(1777599415.938:6367): avc: denied { read } for pid=11508 comm="syz.6.762" name="media4" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.458121][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.559474][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.567648][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.627232][ T29] audit: type=1400 audit(1777599415.938:6368): avc: denied { open } for pid=11508 comm="syz.6.762" path="/dev/media4" dev="devtmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 289.659198][ T5624] Bluetooth: hci1: command tx timeout [ 289.922003][ T42] usb 10-1: config 0 has no interface number 0 [ 289.930704][ T42] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 289.959376][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.968704][ T42] usb 10-1: Product: syz [ 289.978935][ T42] usb 10-1: Manufacturer: syz [ 289.983813][ T42] usb 10-1: SerialNumber: syz [ 289.991930][ T42] usb 10-1: config 0 descriptor?? [ 290.006370][ T42] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 290.078265][T11425] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.097886][T11577] netlink: 'syz.4.760': attribute type 39 has an invalid length. [ 290.106203][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.130280][T11425] bridge_slave_0: entered allmulticast mode [ 290.142218][T11425] bridge_slave_0: entered promiscuous mode [ 290.168243][T11425] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.180551][T11425] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.195753][T11425] bridge_slave_1: entered allmulticast mode [ 290.224172][ T42] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 290.240822][T11425] bridge_slave_1: entered promiscuous mode [ 290.274919][ T42] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 290.325839][T11425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.350412][T11425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.443055][ T5731] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 290.510399][T11425] team0: Port device team_slave_0 added [ 290.523077][T11425] team0: Port device team_slave_1 added [ 290.572612][T11425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.582070][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.608829][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.609133][T11425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.627839][ T5731] usb 7-1: Using ep0 maxpacket: 32 [ 290.638811][T11425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.665312][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.696248][ T5731] usb 7-1: unable to get BOS descriptor or descriptor too short [ 290.764579][ T5731] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 290.779003][ T5731] usb 7-1: can't read configurations, error -71 [ 290.789250][T11425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.250072][T11425] hsr_slave_0: entered promiscuous mode [ 291.260210][T11425] hsr_slave_1: entered promiscuous mode [ 291.267672][T11425] debugfs: 'hsr0' already exists in 'hsr' [ 291.276465][T11425] Cannot create hsr debugfs directory [ 291.641973][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.719888][ T5624] Bluetooth: hci1: command tx timeout [ 291.798904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 292.296877][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 292.341704][ T5731] usb 10-1: USB disconnect, device number 2 [ 292.377721][ T5731] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 292.511664][ T5731] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 292.554145][T11425] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.570470][ T5731] quatech2 10-1:0.51: device disconnected [ 292.599919][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.680299][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.750818][T11425] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.966576][T11425] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.988385][T11425] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.999831][ T5731] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 293.123140][T11425] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.137031][T11425] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.179512][ T5731] usb 10-1: Using ep0 maxpacket: 32 [ 293.207084][ T5731] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 293.231172][ T5731] usb 10-1: config 0 has no interface number 0 [ 293.241262][ T5731] usb 10-1: config 0 interface 12 has no altsetting 0 [ 293.251361][ T804] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 293.267453][ T5731] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 293.286722][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.310846][ T5731] usb 10-1: Product: syz [ 293.342200][ T5731] usb 10-1: Manufacturer: syz [ 293.372328][ T5731] usb 10-1: SerialNumber: syz [ 293.414389][T11824] input: syz0 as /devices/virtual/input/input31 [ 293.591000][ T5731] usb 10-1: config 0 descriptor?? [ 293.721317][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.726347][ T804] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 293.801888][ T50] Bluetooth: hci1: command tx timeout [ 293.875240][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.996862][ T804] usb 5-1: Product: syz [ 294.084255][ T804] usb 5-1: Manufacturer: syz [ 294.102248][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 294.102267][ T29] audit: type=1400 audit(1777599421.008:6651): avc: denied { read write } for pid=11789 comm="syz.9.770" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 294.182679][ T804] usb 5-1: SerialNumber: syz [ 294.357925][ T29] audit: type=1400 audit(1777599421.058:6652): avc: denied { open } for pid=11789 comm="syz.9.770" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 294.384032][T11425] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.400557][T11425] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.482755][ T29] audit: type=1400 audit(1777599421.178:6653): avc: denied { execmem } for pid=11789 comm="syz.9.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 294.575768][ T29] audit: type=1400 audit(1777599421.198:6654): avc: denied { ioctl } for pid=11804 comm="syz.4.772" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.701735][ T29] audit: type=1400 audit(1777599421.228:6655): avc: denied { search } for pid=11823 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.760490][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.780809][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 294.807404][ T29] audit: type=1400 audit(1777599421.228:6656): avc: denied { read } for pid=11823 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 294.849958][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 295.023923][ T29] audit: type=1400 audit(1777599421.228:6657): avc: denied { open } for pid=11823 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 295.060467][ T29] audit: type=1400 audit(1777599421.228:6658): avc: denied { getattr } for pid=11823 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 295.087824][ T29] audit: type=1400 audit(1777599421.268:6659): avc: denied { getattr } for pid=11803 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.198199][T11425] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 295.247569][ T29] audit: type=1400 audit(1777599421.268:6660): avc: denied { add_name } for pid=11803 comm="dhcpcd-run-hook" name="resolv.conf.eth13.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.283675][T11425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.291818][T11425] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 295.307361][T11425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.325206][T11425] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 295.799571][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.871561][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.890117][ T5731] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 295.891917][ T50] Bluetooth: hci1: command tx timeout [ 295.899239][ T5731] f81534 10-1:0.12: f81534_find_config_idx: read failed: -32 [ 295.912487][ T5731] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 295.920601][ T5731] f81534 10-1:0.12: probe with driver f81534 failed with error -32 [ 295.982102][T11425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.998509][T11425] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 296.022004][T11425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.099570][ T42] usb 10-1: USB disconnect, device number 3 [ 296.341238][T11425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.419385][T11425] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.498412][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.505601][ T7160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.607086][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.614241][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.841084][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.922800][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 296.966494][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 297.004120][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 297.034473][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 297.059513][ T5731] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 297.091789][ T804] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 297.124555][ T804] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 297.174999][ T804] usb 5-1: USB disconnect, device number 34 [ 297.219230][ T5731] usb 10-1: Using ep0 maxpacket: 16 [ 297.241934][ T5731] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 297.287228][ T5731] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 297.327052][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.357805][ T5731] usb 10-1: Product: syz [ 297.375495][ T5731] usb 10-1: Manufacturer: syz [ 297.403507][ T5731] usb 10-1: SerialNumber: syz [ 297.407265][T11930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.465571][ T5731] usb 10-1: config 0 descriptor?? [ 297.494774][ T5731] hub 10-1:0.0: bad descriptor, ignoring hub [ 297.515005][ T5731] hub 10-1:0.0: probe with driver hub failed with error -5 [ 297.536564][ T5731] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.880541][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.006965][ T42] usb 10-1: USB disconnect, device number 4 [ 298.211936][T11425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.363127][T11988] syzkaller0: entered promiscuous mode [ 298.382382][T11988] syzkaller0: entered allmulticast mode [ 298.830021][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.919270][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.927420][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.513993][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 299.514007][ T29] audit: type=1400 audit(1777599426.418:7107): avc: denied { sys_module } for pid=11425 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 299.774945][ T29] audit: type=1400 audit(1777599426.418:7108): avc: denied { module_request } for pid=11425 comm="syz-executor" kmod="netdevsim7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 299.842187][ T29] audit: type=1400 audit(1777599426.458:7109): avc: denied { read } for pid=12011 comm="syz.9.788" dev="nsfs" ino=4026533074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 299.874445][T11425] veth0_vlan: entered promiscuous mode [ 299.884743][T11425] veth1_vlan: entered promiscuous mode [ 299.901229][ T29] audit: type=1400 audit(1777599426.458:7110): avc: denied { open } for pid=12011 comm="syz.9.788" path="net:[4026533074]" dev="nsfs" ino=4026533074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 299.931456][T11425] veth0_macvtap: entered promiscuous mode [ 299.942358][ T29] audit: type=1400 audit(1777599426.468:7111): avc: denied { create } for pid=12011 comm="syz.9.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 299.962243][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.971487][T11425] veth1_macvtap: entered promiscuous mode [ 299.991258][T11425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.000823][ T29] audit: type=1400 audit(1777599426.468:7112): avc: denied { prog_load } for pid=12011 comm="syz.9.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 300.023429][T11425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.034112][ T7160] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.034616][ T29] audit: type=1400 audit(1777599426.468:7113): avc: denied { bpf } for pid=12011 comm="syz.9.788" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.111256][ T7160] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.122009][ T29] audit: type=1400 audit(1777599426.468:7114): avc: denied { perfmon } for pid=12011 comm="syz.9.788" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 300.208278][ T7160] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.230204][ T29] audit: type=1400 audit(1777599426.528:7115): avc: denied { create } for pid=12011 comm="syz.9.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.268030][ T29] audit: type=1400 audit(1777599426.528:7116): avc: denied { write } for pid=12011 comm="syz.9.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.293589][ T6141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.531716][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.568666][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.769335][ T5969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.794268][ T5969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.471770][T12065] FAULT_INJECTION: forcing a failure. [ 301.471770][T12065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.509746][T12065] CPU: 0 UID: 0 PID: 12065 Comm: syz.7.797 Not tainted syzkaller #0 PREEMPT(full) [ 301.509779][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.509789][T12065] Call Trace: [ 301.509795][T12065] [ 301.509802][T12065] dump_stack_lvl+0x100/0x190 [ 301.509828][T12065] should_fail_ex.cold+0x5/0xa [ 301.509853][T12065] _copy_from_iter+0x1f4/0x1690 [ 301.509884][T12065] ? __pfx__copy_from_iter+0x10/0x10 [ 301.509910][T12065] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.509939][T12065] copy_page_from_iter+0x238/0x300 [ 301.509968][T12065] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 301.510000][T12065] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 301.510021][T12065] ? unwind_get_return_address+0x59/0xa0 [ 301.510048][T12065] ? arch_stack_walk+0xa6/0xf0 [ 301.510087][T12065] ? _kstrtoull+0x13c/0x1f0 [ 301.510104][T12065] ? __pfx__kstrtoull+0x10/0x10 [ 301.510124][T12065] tun_get_user+0x16d6/0x3c20 [ 301.510154][T12065] ? __pfx_tun_get_user+0x10/0x10 [ 301.510177][T12065] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 301.510203][T12065] ? find_held_lock+0x2b/0x80 [ 301.510219][T12065] ? tun_get+0x191/0x370 [ 301.510236][T12065] ? tun_get+0x191/0x370 [ 301.510262][T12065] tun_chr_write_iter+0xdc/0x200 [ 301.510287][T12065] vfs_write+0x6ac/0x1070 [ 301.510307][T12065] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 301.510332][T12065] ? __pfx_vfs_write+0x10/0x10 [ 301.510348][T12065] ? find_held_lock+0x2b/0x80 [ 301.510381][T12065] ksys_write+0x12a/0x250 [ 301.510399][T12065] ? __pfx_ksys_write+0x10/0x10 [ 301.510420][T12065] ? rcu_is_watching+0x12/0xc0 [ 301.510450][T12065] do_syscall_64+0x10b/0xf80 [ 301.510473][T12065] ? clear_bhb_loop+0x40/0x90 [ 301.510494][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.510512][T12065] RIP: 0033:0x7f3156b5d60e [ 301.510527][T12065] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.510544][T12065] RSP: 002b:00007f3157a60fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.510561][T12065] RAX: ffffffffffffffda RBX: 00007f3157a616c0 RCX: 00007f3156b5d60e [ 301.510573][T12065] RDX: 0000000000000036 RSI: 0000200000000b80 RDI: 00000000000000c8 [ 301.510583][T12065] RBP: 00007f3157a61090 R08: 0000000000000000 R09: 0000000000000000 [ 301.510592][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.510602][T12065] R13: 00007f3156e16038 R14: 00007f3156e15fa0 R15: 00007fffe5d3c4b8 [ 301.510626][T12065] [ 301.959677][ T5777] net_ratelimit: 1 callbacks suppressed [ 301.959719][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.039305][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.737562][ T803] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 302.850304][ T803] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.096431][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.996577][T12111] vlan2: entered promiscuous mode [ 304.028747][T12111] bridge0: entered promiscuous mode [ 304.122877][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.229390][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.244212][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 305.244229][ T29] audit: type=1400 audit(1777599431.188:7370): avc: denied { read } for pid=12120 comm="syz.6.812" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.244459][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.286794][ T29] audit: type=1400 audit(1777599431.188:7371): avc: denied { open } for pid=12120 comm="syz.6.812" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.356837][ T29] audit: type=1400 audit(1777599431.188:7372): avc: denied { ioctl } for pid=12120 comm="syz.6.812" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 305.401262][ T29] audit: type=1400 audit(1777599432.168:7373): avc: denied { read write } for pid=11425 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.726891][ T29] audit: type=1400 audit(1777599432.168:7374): avc: denied { open } for pid=11425 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.760946][ T29] audit: type=1400 audit(1777599432.168:7375): avc: denied { ioctl } for pid=11425 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.841340][ T29] audit: type=1400 audit(1777599432.228:7376): avc: denied { read write } for pid=5605 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.926341][ T29] audit: type=1400 audit(1777599432.228:7377): avc: denied { open } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.961569][ T29] audit: type=1400 audit(1777599432.228:7378): avc: denied { ioctl } for pid=5605 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 306.004976][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 306.037703][ T29] audit: type=1400 audit(1777599432.298:7379): avc: denied { read } for pid=12132 comm="syz.4.814" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 306.298641][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.330461][T12167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.749260][ T803] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 306.899120][ T5718] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 307.009725][ T803] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.042737][ T803] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.111938][ T803] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 307.157074][ T803] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.236959][ T5718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 307.250426][T12203] netlink: 164 bytes leftover after parsing attributes in process `syz.7.827'. [ 307.268770][ T803] usb 10-1: config 0 descriptor?? [ 307.276500][ T5718] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 307.380472][ T5718] usb 5-1: config 114 has no interface number 0 [ 307.411100][ T5718] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 307.423946][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.457164][ T5718] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 307.489077][ T5718] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 307.511457][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.815'. [ 307.520485][ T5718] usb 5-1: config 114 interface 240 has no altsetting 0 [ 307.550595][ T5718] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 307.576576][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.608522][ T5718] usb 5-1: Product: syz [ 307.617155][ T5718] usb 5-1: Manufacturer: syz [ 307.636965][ T5718] usb 5-1: SerialNumber: syz [ 307.671979][T12185] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 307.695844][T12185] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 308.199066][ T5613] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 308.277998][T12239] bond1: (slave bond0): Releasing backup interface [ 308.286646][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.363310][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.364359][ T5613] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.428068][ T5613] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.443145][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.469143][ T5613] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 308.488750][ T5613] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.521243][ T5613] usb 7-1: config 0 descriptor?? [ 308.631374][T12239] batman_adv: batadv0: Removing interface: bridge_slave_0 [ 308.731416][T12239] bridge_slave_1: left allmulticast mode [ 308.848069][T12239] bridge_slave_1: left promiscuous mode [ 308.907685][T12239] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.959509][ T5613] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 308.990721][ T5613] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 309.019964][ T5613] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 309.045408][ T5613] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 309.083708][ T5613] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 309.111172][ T5613] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 309.132476][ T5613] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 309.161503][T12239] bond0: (slave bond_slave_0): Releasing backup interface [ 309.171870][ T5613] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 309.202425][T12239] bond0: (slave bond_slave_1): Releasing backup interface [ 309.232702][T12239] team0: Port device team_slave_0 removed [ 309.240493][T12239] team0: Port device team_slave_1 removed [ 309.246676][T12239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.259154][T12239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.269890][ T5613] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 309.286134][T12239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.349002][ T5718] ir_usb 5-1:114.240: IR Dongle converter detected [ 309.374487][ T5718] usb 5-1: IRDA class descriptor not found, device not bound [ 309.437255][ T5718] usb 5-1: USB disconnect, device number 35 [ 309.504605][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.623408][ T9] usb 10-1: USB disconnect, device number 5 [ 309.648334][ T2035] block nbd0: Possible stuck request ffff888027800000: control (read@0,1024B). Runtime 150 seconds [ 309.659604][ T2035] block nbd0: Possible stuck request ffff8880278001c0: control (read@1024,1024B). Runtime 150 seconds [ 309.671246][ T2035] block nbd0: Possible stuck request ffff888027800380: control (read@2048,1024B). Runtime 150 seconds [ 309.684571][ T2035] block nbd0: Possible stuck request ffff888027800540: control (read@3072,1024B). Runtime 150 seconds [ 309.935754][T12228] debugfs: Bad value for 'uid' [ 309.947687][T12228] debugfs: Bad value for 'uid' [ 310.519719][ T803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.818441][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 310.818459][ T29] audit: type=1400 audit(1777599437.648:7639): avc: denied { execmem } for pid=12284 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 310.867458][ T29] audit: type=1400 audit(1777599437.768:7640): avc: denied { read write } for pid=10728 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.891883][ T29] audit: type=1400 audit(1777599437.788:7641): avc: denied { open } for pid=10728 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.922520][ T29] audit: type=1400 audit(1777599437.788:7642): avc: denied { ioctl } for pid=10728 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.981309][ T29] audit: type=1400 audit(1777599437.878:7643): avc: denied { create } for pid=12295 comm="syz.9.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.248728][ T29] audit: type=1400 audit(1777599437.908:7644): avc: denied { bind } for pid=12295 comm="syz.9.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.303961][T12241] orangefs_mount: mount request failed with -4 [ 311.332775][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.371149][ T29] audit: type=1400 audit(1777599437.908:7645): avc: denied { setopt } for pid=12295 comm="syz.9.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.549706][ T29] audit: type=1400 audit(1777599437.908:7646): avc: denied { accept } for pid=12295 comm="syz.9.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.561176][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.871234][ T29] audit: type=1400 audit(1777599437.908:7647): avc: denied { write } for pid=12295 comm="syz.9.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.878020][ T42] usb 7-1: USB disconnect, device number 23 [ 311.958024][ T29] audit: type=1400 audit(1777599437.908:7648): avc: denied { read } for pid=12295 comm="syz.9.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 312.155055][T12323] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 312.401098][T12338] fuse: fd is not a fuse device [ 312.599528][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.971035][T12358] netlink: 'syz.4.844': attribute type 1 has an invalid length. [ 312.978794][T12358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.844'. [ 313.024707][ T42] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 313.037324][T12357] bridge0: port 3(vlan3) entered blocking state [ 313.094197][T12357] bridge0: port 3(vlan3) entered disabled state [ 313.136359][T12357] vlan3: entered allmulticast mode [ 313.162253][T12357] geneve0: entered allmulticast mode [ 313.184385][T12357] vlan3: entered promiscuous mode [ 313.208354][T12357] geneve0: entered promiscuous mode [ 313.381240][ T804] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 313.822932][ T804] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 313.906146][ T804] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 314.001916][ T804] usb 5-1: Product: syz [ 314.054913][ T804] usb 5-1: SerialNumber: syz [ 314.479581][ T804] usb 5-1: config 0 descriptor?? [ 314.497223][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.556408][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.031209][T12380] netlink: 'syz.7.850': attribute type 8 has an invalid length. [ 315.359791][T12383] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.852'. [ 315.758421][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.854809][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 315.854825][ T29] audit: type=1400 audit(1777599442.758:7810): avc: denied { read write } for pid=10728 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.985902][ T29] audit: type=1400 audit(1777599442.758:7811): avc: denied { open } for pid=10728 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.018974][ T42] usb 10-1: device not accepting address 6, error -71 [ 316.112211][ T29] audit: type=1400 audit(1777599442.758:7812): avc: denied { ioctl } for pid=10728 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 316.208889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 316.228889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 316.248891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 317.134101][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.144121][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.161728][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.181092][ T29] audit: type=1400 audit(1777599442.918:7813): avc: denied { read write } for pid=6321 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.291560][ T29] audit: type=1400 audit(1777599442.918:7814): avc: denied { open } for pid=6321 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.338108][ T804] usb 5-1: USB disconnect, device number 36 [ 317.438256][ T29] audit: type=1400 audit(1777599442.918:7815): avc: denied { ioctl } for pid=6321 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.538991][ T29] audit: type=1400 audit(1777599442.948:7816): avc: denied { read write } for pid=11425 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.571616][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.624962][ T29] audit: type=1400 audit(1777599442.948:7817): avc: denied { open } for pid=11425 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.703582][ T29] audit: type=1400 audit(1777599442.948:7818): avc: denied { ioctl } for pid=11425 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.843982][ T29] audit: type=1400 audit(1777599443.058:7819): avc: denied { create } for pid=12395 comm="syz.7.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.962104][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.204125][ T5615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.501780][T12438] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20000 [ 318.511473][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 318.579009][ T5731] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 318.729154][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 318.741873][ T9] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 318.751331][ T5731] usb 8-1: Using ep0 maxpacket: 8 [ 318.763423][ T5731] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.775271][ T9] usb 10-1: config 179 has no interface number 0 [ 318.786214][ T5731] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 318.796761][ T9] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 318.811643][ T5731] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 318.824455][ T9] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 318.838735][ T5731] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 318.851513][ T9] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 164, changing to 11 [ 318.864528][ T5731] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.879024][ T9] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 318.903768][ T5731] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 318.912936][ T9] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 318.930244][ T5731] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.939791][ T9] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 318.964873][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.991649][T12424] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 319.239513][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.267131][ T5731] usb 8-1: GET_CAPABILITIES returned 0 [ 319.314806][ T5615] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 319.346727][ T5731] usbtmc 8-1:16.0: can't read capabilities [ 320.196854][ T5731] usb 8-1: USB disconnect, device number 23 [ 320.622453][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.657123][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.808952][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 320.837620][ T5615] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 320.859414][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 320.859428][ T29] audit: type=1400 audit(1777599447.768:7941): avc: denied { module_request } for pid=12471 comm="syz.2.865" kmod="net-pf-2-proto-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 320.938324][ T29] audit: type=1400 audit(1777599447.798:7942): avc: denied { read write } for pid=11425 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 320.999925][ T5615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.042710][ T29] audit: type=1400 audit(1777599447.798:7943): avc: denied { open } for pid=11425 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.112006][T12424] xt_hashlimit: size too large, truncated to 1048576 [ 321.142822][T12424] xt_hashlimit: max too large, truncated to 1048576 [ 321.182181][ T29] audit: type=1400 audit(1777599447.798:7944): avc: denied { ioctl } for pid=11425 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.211099][ T29] audit: type=1400 audit(1777599447.848:7945): avc: denied { create } for pid=12471 comm="syz.2.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.280472][ T29] audit: type=1400 audit(1777599447.868:7946): avc: denied { prog_load } for pid=12477 comm="syz.7.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 321.281007][ T5615] usb 5-1: config 0 descriptor?? [ 321.359959][ T29] audit: type=1400 audit(1777599447.868:7947): avc: denied { bpf } for pid=12477 comm="syz.7.866" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.463250][ T29] audit: type=1400 audit(1777599447.878:7948): avc: denied { create } for pid=12477 comm="syz.7.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.533059][ T29] audit: type=1400 audit(1777599447.878:7949): avc: denied { write } for pid=12477 comm="syz.7.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.642348][ T5613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.651723][ T29] audit: type=1400 audit(1777599447.878:7950): avc: denied { read } for pid=12477 comm="syz.7.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.756425][ T5613] IPVS: starting estimator thread 0... [ 321.879208][T12494] IPVS: using max 40 ests per chain, 96000 per kthread [ 322.069833][ T5615] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 322.085117][T12496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=12496 comm=syz.2.870 [ 322.152298][ T5615] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 322.188293][T12496] netlink: 'syz.2.870': attribute type 2 has an invalid length. [ 322.197769][ T5615] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 322.618452][ T804] usb 10-1: USB disconnect, device number 8 [ 322.624436][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 322.624461][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 322.680143][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.087948][T12527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 323.303136][T12541] 9pnet_fd: Insufficient options for proto=fd [ 323.547104][T12545] input: syz0 as /devices/virtual/input/input33 [ 323.719748][ T5718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.742409][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.227903][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.639839][ T30] INFO: task syz.5.375:7883 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 325.705674][ T30] Not tainted syzkaller #0 [ 325.710825][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.719576][ T30] task:syz.5.375 state:D stack:27336 pid:7883 tgid:7882 ppid:6187 task_flags:0x400140 flags:0x00080002 [ 325.733834][ T30] Call Trace: [ 325.737152][ T30] [ 325.740178][ T30] __schedule+0x10e9/0x6820 [ 325.745959][ T30] ? __pfx___schedule+0x10/0x10 [ 325.750879][ T30] ? find_held_lock+0x2b/0x80 [ 325.755804][ T30] ? schedule+0x2bf/0x390 [ 325.760837][ T30] schedule+0xdd/0x390 [ 325.764948][ T30] schedule_preempt_disabled+0x13/0x30 [ 325.770485][ T30] __mutex_lock+0xced/0x1b10 [ 325.776416][ T30] ? sync_bdevs+0x153/0x480 [ 325.781006][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 325.786081][ T30] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 325.791818][ T30] ? iput.part.0+0x1a0/0xf50 [ 325.796478][ T30] ? sync_bdevs+0x153/0x480 [ 325.801518][ T30] sync_bdevs+0x153/0x480 [ 325.805934][ T30] ksys_sync+0xb0/0xf0 [ 325.810356][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 325.815748][ T30] ? rcu_is_watching+0x12/0xc0 [ 325.820589][ T30] ? do_syscall_64+0x90/0xf80 [ 325.825318][ T30] __do_sys_sync+0xe/0x20 [ 325.830818][ T30] do_syscall_64+0x10b/0xf80 [ 325.835466][ T30] ? clear_bhb_loop+0x40/0x90 [ 325.842361][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.850395][ T30] RIP: 0033:0x7f3ed219cdd9 [ 325.855429][ T30] RSP: 002b:00007f3ed2f9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 325.868938][ T30] RAX: ffffffffffffffda RBX: 00007f3ed2415fa0 RCX: 00007f3ed219cdd9 [ 325.884320][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 325.892730][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 325.892747][ T29] audit: type=1400 audit(1777599452.778:8111): avc: denied { execmem } for pid=12550 comm="syz.9.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 326.023364][ T30] RBP: 00007f3ed2415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 326.327900][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.408579][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.438987][ T30] R13: 00007f3ed2416038 R14: 00007f3ed2415fa0 R15: 00007ffef7e8ef58 [ 326.447125][ T29] audit: type=1400 audit(1777599452.788:8112): avc: denied { create } for pid=12559 comm="syz.7.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.468446][ T30] [ 326.471694][ T30] INFO: task syz.5.375:7889 blocked for more than 144 seconds. [ 326.496192][ T30] Not tainted syzkaller #0 [ 326.526279][ T29] audit: type=1400 audit(1777599452.828:8113): avc: denied { setopt } for pid=12559 comm="syz.7.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.550885][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.570967][ T30] task:syz.5.375 state:D stack:28136 pid:7889 tgid:7882 ppid:6187 task_flags:0x400040 flags:0x00080002 [ 326.586805][ T29] audit: type=1400 audit(1777599452.908:8114): avc: denied { create } for pid=12559 comm="syz.7.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.607946][ T30] Call Trace: [ 326.611453][ T30] [ 326.617397][ T30] __schedule+0x10e9/0x6820 [ 326.625863][ T30] ? __pfx___schedule+0x10/0x10 [ 326.632774][ T30] ? find_held_lock+0x2b/0x80 [ 326.658989][ T29] audit: type=1400 audit(1777599452.908:8115): avc: denied { write } for pid=12559 comm="syz.7.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.679592][ T30] ? schedule+0x2bf/0x390 [ 326.684000][ T30] schedule+0xdd/0x390 [ 326.690326][ T30] schedule_preempt_disabled+0x13/0x30 [ 326.698933][ T30] __mutex_lock+0xced/0x1b10 [ 326.706500][ T30] ? sync_bdevs+0x153/0x480 [ 326.706509][ T29] audit: type=1400 audit(1777599452.908:8116): avc: denied { read } for pid=12559 comm="syz.7.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.706550][ T29] audit: type=1400 audit(1777599452.928:8117): avc: denied { write } for pid=12559 comm="syz.7.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.757250][ T29] audit: type=1400 audit(1777599452.998:8118): avc: denied { create } for pid=12550 comm="syz.9.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.780610][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.780834][ T29] audit: type=1400 audit(1777599453.008:8119): avc: denied { read write } for pid=12550 comm="syz.9.881" dev="sockfs" ino=27855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.811760][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 326.816816][ T30] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 326.822595][ T30] ? iput.part.0+0x1a0/0xf50 [ 326.828694][ T30] ? sync_bdevs+0x153/0x480 [ 326.836562][ T30] sync_bdevs+0x153/0x480 [ 326.841392][ T30] ksys_sync+0xb0/0xf0 [ 326.848998][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 326.869053][ T29] audit: type=1400 audit(1777599453.028:8120): avc: denied { prog_load } for pid=12550 comm="syz.9.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 326.890395][ T30] ? rcu_is_watching+0x12/0xc0 [ 326.898929][ T30] ? do_syscall_64+0x90/0xf80 [ 326.903645][ T30] __do_sys_sync+0xe/0x20 [ 326.907971][ T30] do_syscall_64+0x10b/0xf80 [ 326.922539][ T30] ? clear_bhb_loop+0x40/0x90 [ 326.927292][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.933372][ T30] RIP: 0033:0x7f3ed219cdd9 [ 326.938952][ T30] RSP: 002b:00007f3ed03f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 326.947440][ T30] RAX: ffffffffffffffda RBX: 00007f3ed2416180 RCX: 00007f3ed219cdd9 [ 326.955589][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.965176][ T30] RBP: 00007f3ed2416180 R08: 0000000000000000 R09: 0000000000000000 [ 326.973290][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.982955][ T30] R13: 00007f3ed2416218 R14: 00007f3ed2416180 R15: 00007ffef7e8ef58 [ 326.997359][ T30] [ 327.032017][ T30] [ 327.032017][ T30] Showing all locks held in the system: [ 327.131281][ T30] 1 lock held by khungtaskd/30: [ 327.136267][ T30] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 327.176811][ T30] 4 locks held by kworker/u8:3/48: [ 327.182189][ T30] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 327.196302][ T30] #1: ffffc90000b97d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 327.208210][ T30] #2: ffff888055290780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x570 [ 327.219017][ T30] #3: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 327.235958][ T30] 2 locks held by kworker/0:2/804: [ 327.248885][ T30] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 327.279018][ T30] #1: ffffc90004737d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 327.290331][ T30] 2 locks held by getty/5366: [ 327.299138][ T30] #0: ffff8880384770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 327.318924][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 327.340509][ T30] 6 locks held by kworker/1:5/5615: [ 327.350456][ T30] #0: ffff88801fede140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 327.378938][ T30] #1: ffffc90004257d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 327.390572][ T30] #2: ffff88802af3d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 327.399228][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.405214][ T30] #3: ffff8880553861d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 327.417306][ T30] #4: ffff88802dc171a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 327.426823][ T30] #5: ffffffff8e68f8e8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 327.437521][ T30] 1 lock held by udevd/5616: [ 327.442296][ T30] #0: ffff888027381350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 327.452981][ T30] 1 lock held by syz.5.375/7883: [ 327.457936][ T30] #0: ffff888027381350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 327.467681][ T30] 1 lock held by syz.5.375/7889: [ 327.472901][ T30] #0: ffff888027381350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 327.483000][ T30] 1 lock held by syz.6.880/12543: [ 327.488035][ T30] #0: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 327.499089][ T30] 4 locks held by syz.9.881/12550: [ 327.504213][ T30] #0: ffff8880561a4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 327.514228][ T30] #1: ffff8880561a40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 327.524109][ T30] #2: ffffffff90891000 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 327.534407][ T30] #3: ffff888036fff2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 327.543921][ T30] 2 locks held by syz.2.883/12562: [ 327.572794][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.626479][ T30] [ 327.639536][ T30] ============================================= [ 327.639536][ T30] [ 327.690599][ T30] NMI backtrace for cpu 0 [ 327.690616][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 327.690636][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.690647][ T30] Call Trace: [ 327.690652][ T30] [ 327.690659][ T30] dump_stack_lvl+0x100/0x190 [ 327.690685][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 327.690716][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.690740][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 327.690769][ T30] sys_info+0x141/0x190 [ 327.690790][ T30] watchdog+0xcb1/0x1030 [ 327.690817][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 327.690835][ T30] ? __pfx_watchdog+0x10/0x10 [ 327.690856][ T30] ? __kthread_parkme+0x18c/0x230 [ 327.690877][ T30] ? kthread+0x13a/0x450 [ 327.690896][ T30] ? __pfx_watchdog+0x10/0x10 [ 327.690914][ T30] kthread+0x370/0x450 [ 327.690934][ T30] ? __pfx_kthread+0x10/0x10 [ 327.690956][ T30] ret_from_fork+0x72b/0xd50 [ 327.690979][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 327.691002][ T30] ? __switch_to+0x800/0x1100 [ 327.691030][ T30] ? __pfx_kthread+0x10/0x10 [ 327.691052][ T30] ret_from_fork_asm+0x1a/0x30 [ 327.691089][ T30] [ 327.691095][ T30] Sending NMI from CPU 0 to CPUs 1: [ 327.818324][ C1] NMI backtrace for cpu 1 [ 327.818340][ C1] CPU: 1 UID: 0 PID: 12543 Comm: syz.6.880 Not tainted syzkaller #0 PREEMPT(full) [ 327.818357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 327.818365][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 327.818388][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 9b 4f e8 f5 cc [ 327.818401][ C1] RSP: 0018:ffffc90007067898 EFLAGS: 00000293 [ 327.818414][ C1] RAX: 0000000000000000 RBX: ffffea000187e3c0 RCX: ffffffff8280b7b1 [ 327.818423][ C1] RDX: ffff888027aa4a00 RSI: ffffffff828243c0 RDI: ffffea000187e3c0 [ 327.818437][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 327.818445][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 327.818453][ C1] R13: 0000000007580585 R14: 0000000000000000 R15: 0000000003b001f0 [ 327.818462][ C1] FS: 0000000000000000(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 327.818476][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.818485][ C1] CR2: 0000001b324e1ff8 CR3: 000000000e596000 CR4: 00000000003526f0 [ 327.818494][ C1] Call Trace: [ 327.818498][ C1] [ 327.818503][ C1] lookup_page_ext+0x10/0x100 [ 327.818518][ C1] __update_page_owner_free_handle.isra.0+0xa4/0x4d0 [ 327.818537][ C1] __reset_page_owner+0x93/0x190 [ 327.818555][ C1] __free_frozen_pages+0x747/0x1040 [ 327.818574][ C1] vfree+0x15f/0x8d0 [ 327.818589][ C1] ? __pfx_kcov_close+0x10/0x10 [ 327.818605][ C1] ? rcu_is_watching+0x12/0xc0 [ 327.818625][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 327.818638][ C1] ? __pfx_kcov_close+0x10/0x10 [ 327.818652][ C1] ? __pfx_kcov_close+0x10/0x10 [ 327.818667][ C1] kcov_close+0x34/0x60 [ 327.818680][ C1] __fput+0x3ff/0xb50 [ 327.818699][ C1] ? cleanup_mnt+0x263/0x450 [ 327.818716][ C1] task_work_run+0x150/0x240 [ 327.818734][ C1] ? __pfx_task_work_run+0x10/0x10 [ 327.818753][ C1] do_exit+0x8d2/0x2a60 [ 327.818767][ C1] ? kasan_save_stack+0x3f/0x50 [ 327.818786][ C1] ? kasan_save_stack+0x30/0x50 [ 327.818805][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 327.818823][ C1] ? __pfx_do_exit+0x10/0x10 [ 327.818836][ C1] ? do_raw_spin_lock+0x128/0x260 [ 327.818855][ C1] ? find_held_lock+0x2b/0x80 [ 327.818866][ C1] ? get_signal+0x7e0/0x21e0 [ 327.818887][ C1] do_group_exit+0xd5/0x2a0 [ 327.818903][ C1] get_signal+0x1ec7/0x21e0 [ 327.818925][ C1] ? __pfx_get_signal+0x10/0x10 [ 327.818946][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 327.818966][ C1] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 327.818987][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 327.819011][ C1] ? rcu_is_watching+0x12/0xc0 [ 327.819031][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 327.819048][ C1] ? do_syscall_64+0x52d/0xf80 [ 327.819063][ C1] do_syscall_64+0x706/0xf80 [ 327.819076][ C1] ? clear_bhb_loop+0x40/0x90 [ 327.819093][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.819106][ C1] RIP: 0033:0x7f565699cdd9 [ 327.819116][ C1] Code: Unable to access opcode bytes at 0x7f565699cdaf. [ 327.819122][ C1] RSP: 002b:00007fffe27cb228 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 327.819135][ C1] RAX: 0000000000000000 RBX: 00007f5656c17da0 RCX: 00007f565699cdd9 [ 327.819143][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 327.819152][ C1] RBP: 00007f5656c17da0 R08: 0000000000000006 R09: 0000000000000000 [ 327.819160][ C1] R10: 00007f5656c17cb0 R11: 0000000000000246 R12: 000000000004f708 [ 327.819168][ C1] R13: 00007f5656c1609c R14: 000000000004f6a2 R15: 00007fffe27cb330 [ 327.819182][ C1] [ 328.351272][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 328.358167][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 328.367249][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.377280][ T30] Call Trace: [ 328.380545][ T30] [ 328.383453][ T30] dump_stack_lvl+0x100/0x190 [ 328.388107][ T30] vpanic+0x552/0x970 [ 328.392066][ T30] ? __pfx_vpanic+0x10/0x10 [ 328.396542][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 328.402685][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 328.408819][ T30] panic+0xd1/0xe0 [ 328.412533][ T30] ? __pfx_panic+0x10/0x10 [ 328.416952][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 328.423114][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 328.429260][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 328.435403][ T30] ? watchdog.cold+0x1ec/0x234 [ 328.440148][ T30] ? watchdog+0xcc1/0x1030 [ 328.444538][ T30] watchdog.cold+0x1fd/0x234 [ 328.449104][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 328.454882][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.459539][ T30] ? __kthread_parkme+0x18c/0x230 [ 328.464558][ T30] ? kthread+0x13a/0x450 [ 328.468787][ T30] ? __pfx_watchdog+0x10/0x10 [ 328.473445][ T30] kthread+0x370/0x450 [ 328.477498][ T30] ? __pfx_kthread+0x10/0x10 [ 328.482075][ T30] ret_from_fork+0x72b/0xd50 [ 328.486651][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 328.491751][ T30] ? __switch_to+0x800/0x1100 [ 328.496417][ T30] ? __pfx_kthread+0x10/0x10 [ 328.500993][ T30] ret_from_fork_asm+0x1a/0x30 [ 328.505753][ T30] [ 328.509190][ T30] Kernel Offset: disabled [ 328.513494][ T30] Rebooting in 86400 seconds..