last executing test programs: 9m2.352429111s ago: executing program 32 (id=483): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f00000003c0)=0x1c, 0x14831750ac1ac564) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000400)={@private0}, &(0x7f0000000440)=0x14) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x40, &(0x7f0000000340)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) keyctl$unlink(0x9, r4, r4) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) connect$rds(r8, &(0x7f0000000480)={0x2, 0x4e22, @private=0xa010101}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}}, 0x8000800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) io_setup(0x7f, &(0x7f0000000080)) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 8m58.32780265s ago: executing program 33 (id=457): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffeffffffff, 0x448000) (async) syz_open_dev$hidraw(&(0x7f0000000080), 0xfffffffeffffffff, 0x448000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setrlimit(0xa, 0x0) (async) setrlimit(0xa, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) (async) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$llc(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000001180), 0x4000) (async) pipe2(&(0x7f0000001180), 0x4000) 2m56.173800619s ago: executing program 2 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000900)="00000fffff000000000001") seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x301c02, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x89, 0x0, @private, @local}}}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}, 0x4000c010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) gettid() socket$tipc(0x1e, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000000000000093\x00\x00\x00'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000001c0)={'wlan1\x00', 0x8}) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f00000000c0)={0x1, 0x7, 0x5, 0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800ffff00000000000000000afaff00fc00000980000000080006000100000014000500fe8000000000"], 0x44}}, 0x0) 2m55.124256887s ago: executing program 2 (id=1289): ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x5, 0x1, 0x7) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x214133, r2, 0x8971e000) signalfd4(r1, &(0x7f0000000340)={[0xe]}, 0x8, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x20) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480)='FREEZING\x00', 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000002", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r6, 0x0) ftruncate(r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) rt_sigprocmask(0x3, &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40004000080, 0xa}, 0x0, &(0x7f00000003c0)={0x401, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, 0x0) bind$phonet(r3, &(0x7f0000000380)={0x23, 0x6, 0x3, 0x2}, 0x10) 2m46.12713554s ago: executing program 34 (id=1268): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x4000000) fcntl$setstatus(r0, 0x4, 0x40800) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) (async) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0x7208, 0x5, 0x40000183}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r6, 0x6da0, 0x7721, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000050004009500000000faff00"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) (async, rerun: 32) readv(r7, &(0x7f0000000c40)=[{&(0x7f00000008c0)=""/207, 0xcf}], 0x1) (async, rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 2m39.963557978s ago: executing program 35 (id=1289): ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x5, 0x1, 0x7) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x214133, r2, 0x8971e000) signalfd4(r1, &(0x7f0000000340)={[0xe]}, 0x8, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x20) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000480)='FREEZING\x00', 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xd, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000002", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r6, 0x0) ftruncate(r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) rt_sigprocmask(0x3, &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40004000080, 0xa}, 0x0, &(0x7f00000003c0)={0x401, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, 0x0) bind$phonet(r3, &(0x7f0000000380)={0x23, 0x6, 0x3, 0x2}, 0x10) 2m37.23824386s ago: executing program 36 (id=1294): io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x4000100080009) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xe5abd000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f00000002c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x31) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20016}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000010003904000000000002020000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) 2m23.081172658s ago: executing program 37 (id=1314): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="8734230bb1405b89fea300afe167", 0xe, 0x0, &(0x7f0000000340)={0xa, 0x0, 0xfffffffc, @mcast2, 0x3}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000080)={{0x0, 0xea60}, {r1, r2/1000+10000}}, 0x0) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05816d0c"], 0x7) syz_emit_vhci(0x0, 0x88) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}}}, 0xd) socket(0x2, 0x805, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, 0xee00, &(0x7f0000000500)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000200)}) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x40400) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r0, &(0x7f0000001280)={&(0x7f0000000140)={0xa, 0x4e23, 0x2, @private0, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="bb", 0x1}], 0x1}, 0x80) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440), 0x2, 0x2}}, 0x20) 2m20.670324263s ago: executing program 5 (id=1331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x29, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) 2m19.086277536s ago: executing program 5 (id=1332): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x1, 0x40c241) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0435"], 0x9) read$msr(0xffffffffffffffff, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) syz_clone3(&(0x7f0000000700)={0x22100000, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x13}, &(0x7f0000000400)=""/240, 0xf0, &(0x7f00000005c0)=""/246, &(0x7f00000006c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) r1 = syz_open_procfs(r0, 0x0) getdents(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0xffffffffffffffff, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000a00)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x6f) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r4, r4, 0x2f, 0x0, @void}, 0x10) 2m14.510815338s ago: executing program 5 (id=1338): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x84, 0x7, 0x8, 0x0, 0x5, 0xcd, 0x5, 0x40, 0x8, 0x1, 0xc, 0x6, 0x0, 0x9, 0xd, 0x7, 0x2, 0xdc, 0x58, '\x00', 0x4, 0x45}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x50000, {0x2}, 0x0, 0xffffffffffffffff}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b00", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d1f2b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='\x10\x00\x00\x00\x00\x01\x00\x02e', 0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x400caed0, &(0x7f0000000980)={0x1, 0xff03, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000010101010000001600000000020002800c00028005000100010000004afe018088000100ac1e0101080002007f0000010c001980080002001b05000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./proc_mnt\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./proc_mnt/fs/cifs/DebugData\x00', 0x0, 0x0) read(r5, &(0x7f0000001100)=""/4096, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x180, 0x60030000, {0x0, 0xff000000}, [@common=@srh1={{0x90}, {0x3c, 0x3, 0x8, 0x12, 0x377, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private2, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xffffff00], 0x301}}, @common=@mh={{0x28}, {"7ef1", 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x0, 0x5, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0xfffffeaa}, 0x4000800) 2m12.256126906s ago: executing program 5 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 2m11.715879685s ago: executing program 5 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbd}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m11.485705725s ago: executing program 5 (id=1345): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x9, 0x8, 0x401, 0x1, 0x8, "22987746259ee93c1901d876a65ba778625812"}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvfrom$inet6(r3, &(0x7f0000000100)=""/31, 0x1f, 0x2002, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys', 0x1d) read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020) ioctl$TIOCMBIS(r5, 0x5416, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000040)={0xd28, 0x8, 0x5, 0x1, 0x6}) 2m6.887655989s ago: executing program 38 (id=1311): r0 = memfd_create(&(0x7f0000001240)='[\v\xdbX\xae[\x1a\xad\xd1md\xc8\x85HX\xa9%\f\x1a,\xe2\x9c\xb4\xd7\xbc\xf1\xb3\x86\xe2/Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xc8\f\xe5\x89\x17\xee|J\x90=5\xed\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q%\x8a\xda\x05\x00f\xe3j%\x00\x00\x1c#\xc6\xd8\xdbD\x92P\xe16W\x10\xdau\xc7\x8f\xaa\x8d\xa9\x97\x9d\xcb\x1e\x80\xe7\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\xbdD\xcc\'\xa2\xaf`\xf6L\x0e\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecM\xe4H\xb7\xaf\xa8\x96dh\xa9\xab > \xac\x00O^\x14\xcbv\x17Hkb\xe7\xcb\x9d;\xd2\x9f\x05\xd1\x00\x8b\xd3\x9f\a\x99^v\xf7\xfa\xe5\xf0h\x87l\xd9\x15\xd2\x87~?\xb1\x9d\xc1\x92`\x8a\r\xfc\xeb\x14\xd1\x94\fv\x8a\xe3\x1d\x0fj}\x9f\xedsc\xd3\xee\xe6cXw\xa1\xbc\xd0o\xf9\x9cJ\b\x00\xd8;\\ik0+\xc8\xf2\x87\xdf\t\x97\x9dB\xc1\xa0\xa71\xf25GU|]A\x1eel \x8ff\xc6\nt\xd0\x91\x9d\x8c\xa4\xe5\xde\x06\x00\xffE\xf4\x96#\x92-9\xe5\xa7\xf8%\xb0I\xd4\x91r\xbf\x1bOS\xee}\x16\x87\x05\xf2\xb9\x81\x14\xe2NZ\\I\xd0[\xc4\xf2\"\x87\xf5\xb8\x95.M\xb1S\xbd\xe4i\x00\xc1b\t]?}0\t\xebV\xbci\xa5\x05\xca\xb6\xc22\x7fL\x89&\xa0\xcfMULr0rs\xb4\n\xa6)\xe23\xf0\x8d\x9dO\xb9\xc9\x83\xabS\x013\"\x1b\x97K\x17\x16\x89\a\xee\xc903\xad\x15\x1cH\xd2\x95\x91\xb4$\x1b\xbf\xaf\xf5\x9b\xc2\x85\xe7[\xe5\xfb}\x1d@f2\x11\x13Y\x98\xa4\xecWEE\x9eI\x05\v\x11\xad\x93!^T\xe5N\xf6LI\x9a6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\x1a\xc9(a\x06>g\xe5\x00:\x9au\xef\x14\t\x1f8E\x86\xcb\xd0e\x17\xfb\xc1', 0x3) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40cf2e1, 0x800, 0x6, 0x6, 0x4, 0x5, 0x9, 0x7, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f3, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041890}, 0x20000000) (async) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0'}, 0xb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r3, 0x4b4c, 0x0) (async) copy_file_range(r0, &(0x7f0000000100)=0x7, r0, 0x0, 0xc9e9, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x10000, 0x9e) 1m56.421260644s ago: executing program 39 (id=1345): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x9, 0x8, 0x401, 0x1, 0x8, "22987746259ee93c1901d876a65ba778625812"}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/threads\x00', 0x1, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvfrom$inet6(r3, &(0x7f0000000100)=""/31, 0x1f, 0x2002, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys', 0x1d) read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020) ioctl$TIOCMBIS(r5, 0x5416, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000040)={0xd28, 0x8, 0x5, 0x1, 0x6}) 1m39.413134969s ago: executing program 9 (id=1385): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xb50dce7bc57da8d3, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69"], 0x0) 1m38.929089132s ago: executing program 9 (id=1386): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x100) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000280)={[&(0x7f00000000c0)='+3\x06\xc7F\xb2?=']}, 0x1000) syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000640)=ANY=[@ANYBLOB="12011001749a42cbd8f953f1de30cce260c54000000010351215824000010203010902700003016510000904000000010100000a240100001a0002010209240306030305047f07240804feff020901000000000000000904010101010200000905010910000510790725010081001009040200000102000009040201010102000009"], 0x0) 1m35.153039365s ago: executing program 9 (id=1389): socket$nl_xfrm(0x10, 0x3, 0x6) kexec_load(0x5, 0x5, &(0x7f0000000480)=[{&(0x7f0000000000), 0x0, 0x0, 0x3}, {&(0x7f0000000100)="4690d921ed257ab9956a77f6", 0xc, 0x5, 0x671f}, {&(0x7f0000000140)="cecf30e51940cff1cdf084767d8e1808faa5121a7e0e4d6a2f57eb2ce72f9034adf8ed99f5c648a7024d5dc6c9638562205c4d8bfc919658628cea7528bf80b25bd1f6848c505e82f1ca9f1676af1317ddc07623a7ce94c20b91c44887168ac9aa2e2eb27403f545f6ceb7481a9bba9e9a3a32cac2472f6c2ebc42929fd61f9762a5dc5c97240bf5d09f1e44e373491f828e3c80c694e8cfde8d43d540fbf05e089252ebe5b8c2015532c938cf60919e55fcf4453c5fa76389f90852ab540d4a97e9a2bb41e31693ed08938f033bd744576a53d4dadfac8ad3b6ad80af", 0xdd, 0x8, 0x6}, {0x0, 0x0, 0x3db, 0xfffffd6b}, {&(0x7f0000000400)="fab92ac8864289bdd124ac75419d1651543a1cb21a05cb367fcdf1d5545d220dd2a78328b746ba21bd2517aa86d11fbe33a544ec0481936e898070b4034585d4bf7c61b567a651679639f51dd4c0b2a9446a2c2773fbbf6909fdf9a17f11e903e5a96c0e4fecdf2b8a35", 0x6a, 0x9, 0x5}], 0xa0000) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xde@Ip]D\xd6\r\xac\v#co06\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x06X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x80800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3, 0x6d028}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x2000002}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) gettid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000080)={'wg1\x00', @ifru_flags=0x2000}) 1m23.012764493s ago: executing program 4 (id=1409): r0 = dup(0xffffffffffffffff) mkdirat(r0, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000540)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f00000005c0)='cramfs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r1, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f00000000c0)='./file0/file1\x00') mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x1000, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={0xffffffffffffffff, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000080003040000010000000400", @ANYRES32=0x0, @ANYBLOB="21a5060000000000280012800b0001006d616373656300001800028005000900010000000c000100000100000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 1m18.429645517s ago: executing program 0 (id=1418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0x13, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {0x0, 0x4}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x40}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x81}, {}, {}, {}, {0x80000}, {0x0, 0xfffffffd}, {}, {}, {0x15d, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xdff8}, {}, {}, {}, {0x0, 0xfffffffc}, {0x4}, {0x3}, {0x5, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0xe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0xd1000000}, {}, {0x800000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {0x0, 0x0, 0x10000}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0xda8, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) 1m18.300546015s ago: executing program 4 (id=1419): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) rename(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) msgget$private(0x0, 0x193) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x3c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x3c}}, 0x0) 1m18.13162763s ago: executing program 0 (id=1421): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x193) listen(r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) getsockopt$inet_int(r5, 0x0, 0x2, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x40000022, 0x0, 0xc2d}]}) r9 = accept4(r4, 0x0, 0x0, 0x0) sendto(r9, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f00000002c0)={0xa, 0x0, 0x1, @mcast1, 0x2, 0x4}, 0x20) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r10, 0x0, 0x11) write$char_usb(r11, &(0x7f0000000040)="e2", 0x918) recvfrom(r6, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x7fffffff}, 0x0, 0x0) 1m17.212266873s ago: executing program 4 (id=1422): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x84, 0x7, 0x8, 0x0, 0x5, 0xcd, 0x5, 0x40, 0x8, 0x1, 0xc, 0x6, 0x0, 0x9, 0xd, 0x7, 0x2, 0xdc, 0x58, '\x00', 0x4, 0x45}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x100, 0x0, 0x2080, {0x0, 0x50000, {0x2}, 0x0, 0xffffffffffffffff}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b00", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe2d1f2b6255614c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c955000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x400caed0, &(0x7f0000000980)={0x1, 0xff03, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000010101010000001600000000020002800c00028005000100010000004afe018088000100ac1e0101080002007f0000010c001980080002001b05000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./proc_mnt\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./proc_mnt/fs/cifs/DebugData\x00', 0x0, 0x0) read(r5, &(0x7f0000001100)=""/4096, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x180, 0x60030000, {0x0, 0xff000000}, [@common=@srh1={{0x90}, {0x3c, 0x3, 0x8, 0x12, 0x377, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private2, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xffffff00], 0x301}}, @common=@mh={{0x28}, {"7ef1", 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x0, 0x5, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0xfffffeaa}, 0x4000800) 1m16.709611728s ago: executing program 0 (id=1424): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000010540)={&(0x7f0000010500)={0x10, 0x0, 0x0, 0xfe}, 0xc, &(0x7f0000000240)={&(0x7f0000010580)={0x10, 0x3f7, 0x4, 0x70bd2c, 0xfffffffd, {0x6025, 0x3f2, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) 1m16.439736353s ago: executing program 0 (id=1426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbd}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m16.262468337s ago: executing program 0 (id=1427): syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x3, 0x103702) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, 0x0, 0x0, 0xfffffffffffffffc, 0x1000}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0x1ab1, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x804, 0x1000002, 0x237}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x3, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc914, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r4, 0x0, 0x1, 0x38, &(0x7f0000000040)="0204bfcd9bb8528c77b4cf0c9a3a1408a0a07643e73828a534814848fd32750d190dae87a62d7b31cd9cbd69315d6a1176677f7be7132e84"}) 1m16.249115268s ago: executing program 4 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x1, 0x0, 0x9}, 0x8}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, {0x0, 0x4}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x40}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {}, {0x0, 0x0, 0x2, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x81}, {}, {}, {}, {0x80000}, {0x0, 0xfffffffd}, {}, {}, {0x15d, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xdff8}, {}, {}, {}, {0x0, 0xfffffffc}, {0x4}, {0x3}, {0x5, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0xfff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0xe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0xd1000000}, {}, {0x800000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x400}, {0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff24}, {}, {0x0, 0x0, 0x2000000}, {0x0, 0x3}, {0x0, 0x0, 0x10000}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff, 0x800}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0xd}, {0xfff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0xda8, 0x2, 0x0, 0x0, 0xa}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) (fail_nth: 4) 1m15.858476599s ago: executing program 4 (id=1430): r0 = dup(0xffffffffffffffff) mkdirat(r0, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000540)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f00000005c0)='cramfs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r1, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f00000000c0)='./file0/file1\x00') mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x1000, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={0xffffffffffffffff, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000080003040000010000000400", @ANYRES32=0x0, @ANYBLOB="21a5060000000000280012800b0001006d616373656300001800028005000900010000000c000100000100000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 1m15.669042111s ago: executing program 0 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x2, &(0x7f0000000000)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_ublk_setup_io_uring(0x88a, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x1, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x3, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x360, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x0, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2001, 0x1000, 0x0, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x0, 0x400216, 0x0, r3}}], 0x4, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4, 0x1100) prlimit64(0x0, 0xa, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000000440)=""/102400, 0x19000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 1m15.639937201s ago: executing program 7 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000900)="00000fffff000000000001") seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x2, 0x103) open(&(0x7f00000000c0)='./file0\x00', 0x301c02, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x89, 0x0, @private, @local}}}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}, 0x4000c010) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) gettid() socket$tipc(0x1e, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000000000000093\x00\x00\x00'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000001c0)={'wlan1\x00', 0x8}) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f00000000c0)={0x1, 0x7, 0x5, 0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800ffff00000000000000000afaff00fc00000980000000080006000100000014000500fe8000000000"], 0x44}}, 0x0) 1m13.57640385s ago: executing program 40 (id=1400): r0 = socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}, [@FRA_FLOW={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000080)={'wg1\x00', @ifru_flags=0x2000}) 1m12.65967133s ago: executing program 7 (id=1434): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x5, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x30, 0x5f, 0x0, 0x0, 0x61, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x1}, 0x28) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xe011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x25c4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x30, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000001c0)) sendfile(r6, r7, 0x0, 0x80001d00c0d1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001700a5989567021dc8cfdf25060000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r9 = socket(0xa, 0x3, 0x3a) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=""/151, 0x97) getsockopt$MRT6(r9, 0x29, 0xcf, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m12.521060239s ago: executing program 4 (id=1435): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) socket$inet6(0xa, 0x80000, 0xfffffffe) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000440)={0x8, 0x1, 0x6, 0x7, 0xbc}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) 1m10.736882827s ago: executing program 7 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbd}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.458658482s ago: executing program 7 (id=1438): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x6, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) io_uring_setup(0x2f35, 0x0) sendmsg$nl_route(r2, 0x0, 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m7.05606138s ago: executing program 7 (id=1439): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x84, 0x7, 0x8, 0x0, 0x5, 0xcd, 0x5, 0x40, 0x8, 0x1, 0xc, 0x6, 0x0, 0x9, 0xd, 0x7, 0x2, 0xdc, 0x58, '\x00', 0x4, 0x45}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='\x10\x00\x00\x00\x00\x01\x00\x02e', 0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x400caed0, &(0x7f0000000980)={0x1, 0xff03, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000010101010000001600000000020002800c00028005000100010000004afe018088000100ac1e0101080002007f0000010c001980080002001b05000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./proc_mnt\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./proc_mnt/fs/cifs/DebugData\x00', 0x0, 0x0) read(r5, &(0x7f0000001100)=""/4096, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x180, 0x60030000, {0x0, 0xff000000}, [@common=@srh1={{0x90}, {0x3c, 0x3, 0x8, 0x12, 0x377, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private2, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xffffff00], 0x301}}, @common=@mh={{0x28}, {"7ef1", 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x0, 0x5, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0xfffffeaa}, 0x4000800) 1m5.955493362s ago: executing program 7 (id=1441): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x14b1c2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x6, 0x0, 0x0, "c9095300"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x4cbc, &(0x7f00000003c0)={0x0, 0xfb6e, 0x0, 0x4, 0xf2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x800) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='udf\x00', 0x8000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000009) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r3, &(0x7f0000000c40)=[{0x0, 0x320}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) 1m1.430458701s ago: executing program 2 (id=1433): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fffffff}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80000004) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000200)={0x34, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000002980)=[{{&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/50, 0x32}], 0x2, &(0x7f00000003c0)=""/8, 0x8}, 0x401}, {{&(0x7f0000000400)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002840)=[{&(0x7f0000000500)=""/93, 0x5d}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f0000002800)=""/12, 0xc}], 0x4, &(0x7f0000002880)=""/195, 0xc3}, 0x10}], 0x2, 0x22, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r3, 0xd, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat(r0, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x2) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(r4, &(0x7f00000000c0)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8010, 0xffffffffffffffff, 0xd9ffb000) r6 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 1m0.392710288s ago: executing program 41 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x2, &(0x7f0000000000)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_ublk_setup_io_uring(0x88a, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x1, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x3, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x360, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x0, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2001, 0x1000, 0x0, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x400, 0x0, 0x400216, 0x0, r3}}], 0x4, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4, 0x1100) prlimit64(0x0, 0xa, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000000440)=""/102400, 0x19000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 58.093091469s ago: executing program 2 (id=1451): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x7ffffffe, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0x84, 0x7, 0x8, 0x0, 0x5, 0xcd, 0x5, 0x40, 0x8, 0x1, 0xc, 0x6, 0x0, 0x9, 0xd, 0x7, 0x2, 0xdc, 0x58, '\x00', 0x4, 0x45}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='\x10\x00\x00\x00\x00\x01\x00\x02e', 0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x400caed0, &(0x7f0000000980)={0x1, 0xff03, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000010101010000001600000000020002800c00028005000100010000004afe018088000100ac1e0101080002007f0000010c001980080002001b05000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./proc_mnt\x00', &(0x7f0000001080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000010c0)='./proc_mnt/fs/cifs/DebugData\x00', 0x0, 0x0) read(r5, &(0x7f0000001100)=""/4096, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x370, 0xffffffff, 0xffffffff, 0x370, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x180, 0x60030000, {0x0, 0xff000000}, [@common=@srh1={{0x90}, {0x3c, 0x3, 0x8, 0x12, 0x377, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private2, [0xffffffff, 0xffffffff, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xffffff00], 0x301}}, @common=@mh={{0x28}, {"7ef1", 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x0, 0x5, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0xfffffeaa}, 0x4000800) 57.95673296s ago: executing program 6 (id=1452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4050) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40000c4) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0xa, 0x5, 0xfff, 0xf, 0x8, 0x9, 0x1001, 0x92e}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)) clock_adjtime(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002000010327bd700000800000020000000400030303000000"], 0x1c}}, 0xc000) r7 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000300)={0x3, @pix_mp={0x3, 0x1, 0x30314247, 0x3, 0x9, [{0x10000, 0x9ca}, {0x5, 0x7}, {0x9, 0x5}, {0x80000001, 0xbe}, {0x2f1, 0x6}, {0x5, 0xffff0000}, {0xffffffff, 0x2}, {0x8, 0x9}], 0x0, 0x9, 0x0, 0x0, 0x7}}) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000600)=0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace_dev_match', 0x88140, 0x22) read$FUSE(r8, &(0x7f0000003180)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="019800b2c6b627994520e4d57c0bb0000069706970050013000c000200000100"/42], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 57.458838674s ago: executing program 42 (id=1435): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) socket$inet6(0xa, 0x80000, 0xfffffffe) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000440)={0x8, 0x1, 0x6, 0x7, 0xbc}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) 55.903327253s ago: executing program 6 (id=1454): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x16) write(r3, &(0x7f0000000140)='0', 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x108, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xc}}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0x2b, 0x1, {0x2, 0xce10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x283, 0x13}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4bf4, 0x200}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xffffffffffffffd3, 0x1, {0x3, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xffff7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x108}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 54.997333238s ago: executing program 2 (id=1455): ptrace(0x10, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x8000000000001f8, 0x0, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180)='10000', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r6, &(0x7f0000000200)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000eb0f15bc00a1005c32ffd60b9a8eb56e2c301d0554a61dd1b3854506e1922f98e656db83b99e99000000aa735082caaa68466cab885c963d76724de56652fd0fb28fe06f1ad2c04463e99d0600000048b56391dc373c0e801e920c160a326023b75ea25cded2f8388f7df1813bdffdd78110a07ea64f920100e8ffad7d289be3e0a31a92313eca0a9ffaff4dfbf4c4ca411e4dea57cf4b36dd", @ANYRES16=r2, @ANYBLOB="15060000000000000000010000003000018014000400ff020000000000000000000000000001060005004e220000060001000a0000000800060001000000"], 0x44}, 0x5}, 0x0) r8 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x80800) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000200)) r9 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r9, 0x10001) read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) mount$nfs(&(0x7f0000000040)='\x00\x00\x00\x00\x00', &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2000, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) 54.966157735s ago: executing program 6 (id=1456): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) socket$netlink(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000c00)='cramfs\x00', 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e1f, @local}, 0x72) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='zonefs\x00', 0x208080, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000400)=0x0) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xee00) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x80000000000000, 0x0, 0x3, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0xfffffffb, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 53.069023583s ago: executing program 6 (id=1457): openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000050b790000000002000e0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400d280000001b5d0d74887de89fb65a27656d228a443e2b0854b324a56f7879"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x2, 0xffff, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, 0x80, 0xf7a8, 0x100, 0x40}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x104) write(r3, &(0x7f0000000380)="77776e6e3d3078313131313131313131313131313131312c7777706e3d307832323232323232323232323232323232e250c758245796e6bc2d618acf19cef3573ef2f44d2001451147398cf9b4705ed2ee180ba5e7882a8c7315ced6728618b415a4017e9fd340fcd5a9badbb2e34c5e9faa8978b8b786b14023e426", 0x2e) close(r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000, 0x0, r0, 0x8001, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800009f35000000000100000000000073f205ff68ce0000000000000000000400"], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r4, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) 52.496672885s ago: executing program 2 (id=1458): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000020c0), 0x0, 0x101800) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000002100)=""/54) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 50.718467789s ago: executing program 43 (id=1441): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x14b1c2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@can={{0x0, 0x1, 0x1, 0x1}, 0x3, 0x6, 0x0, 0x0, "c9095300"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x4cbc, &(0x7f00000003c0)={0x0, 0xfb6e, 0x0, 0x4, 0xf2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x800) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='udf\x00', 0x8000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000009) r3 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r3, &(0x7f0000000c40)=[{0x0, 0x320}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, &(0x7f0000000580)=0x1e) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f00000002c0)='memory.stat\x00', 0x0, 0x0) 50.673313171s ago: executing program 6 (id=1460): r0 = dup(0xffffffffffffffff) mkdirat(r0, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000540)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f00000005c0)='cramfs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r1, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f00000000c0)='./file0/file1\x00') mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x1000, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000080003040000010000000400", @ANYRES32=0x0, @ANYBLOB="21a5060000000000280012800b0001006d616373656300001800028005000900010000000c000100000100000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 47.503966838s ago: executing program 6 (id=1462): r0 = socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}, [@FRA_FLOW={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000080)={'wg1\x00', @ifru_flags=0x2000}) 37.389504869s ago: executing program 44 (id=1458): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000020c0), 0x0, 0x101800) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000002100)=""/54) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.282364133s ago: executing program 8 (id=1487): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x800000000000000}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100039040000000104008740c5e6798168956f86e936ffff90b99557560a602444ce4e12cad8f6300d26758049dcd9de5b6984678c483809300e64c8356e6e4886dc480412152f9045ef", @ANYRES32=r3, @ANYBLOB="11980400000000002800128008000100736974001c00028008000300ac1414aa06000f0002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x14008000) (async) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 33.755743001s ago: executing program 8 (id=1489): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x461, 0x4e05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfe, 0x30, 0xb, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0x26, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x6e9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7f, 0x10, 0x4, 0x20, 0x5}, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "1db7cf33dd4e6cc62253845e7979e80e"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x7e, 0x5, 0x5, 0x80, 0x81}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x80, 0xf4, 0x9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf, 0x8}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40f}}, {0x8d, &(0x7f00000001c0)=@string={0x8d, 0x3, "65e9a476206e4794713524bfbd22dbd55d83b61b50c851c6bab1b7279ad0c4d0644acbd177a85ae6aa02461a4c106633e3b5484f246735b17f34aea6269e1c9c5c9074dcf2ad639edaa41ff3bb8e0944b7890460599bcd39bbfc3df5ef7e2f5e4482510db7409e5f35bf3c8dc02a492e7ab4401580bd2fae0031162f065223d04bd93f9f8db8d0c1610099"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "5b2a31202f7698e347c99e30c809e4a237581009765a3c88"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42c}}, {0x28, &(0x7f0000000340)=@string={0x28, 0x3, "a8c5b588e3db70daf7d29ddf0fedce7905ba62fc4fd28de93c21f7ca010050b877a9ed614801"}}]}) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x461, 0x4e05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfe, 0x30, 0xb, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0x26, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x6e9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7f, 0x10, 0x4, 0x20, 0x5}, 0x39, &(0x7f0000000080)={0x5, 0xf, 0x39, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "1db7cf33dd4e6cc62253845e7979e80e"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x7e, 0x5, 0x5, 0x80, 0x81}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x80, 0xf4, 0x9, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xf, 0x8}]}, 0x8, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40f}}, {0x8d, &(0x7f00000001c0)=@string={0x8d, 0x3, "65e9a476206e4794713524bfbd22dbd55d83b61b50c851c6bab1b7279ad0c4d0644acbd177a85ae6aa02461a4c106633e3b5484f246735b17f34aea6269e1c9c5c9074dcf2ad639edaa41ff3bb8e0944b7890460599bcd39bbfc3df5ef7e2f5e4482510db7409e5f35bf3c8dc02a492e7ab4401580bd2fae0031162f065223d04bd93f9f8db8d0c1610099"}}, {0x1a, &(0x7f0000000280)=@string={0x1a, 0x3, "5b2a31202f7698e347c99e30c809e4a237581009765a3c88"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42c}}, {0x28, &(0x7f0000000340)=@string={0x28, 0x3, "a8c5b588e3db70daf7d29ddf0fedce7905ba62fc4fd28de93c21f7ca010050b877a9ed614801"}}]}) 33.567549351s ago: executing program 1 (id=1490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x803, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0x3, 0xa87}, &(0x7f00000000c0)=0x14c, 0x0, 0x9, 0x95d, 0xcd, 0x2000003, 0x7d, 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x4f5, 0x9}, 0x0, 0x0, 0x7fe, 0x2, 0xffffffff, 0x200000000400, 0x60, 0x563d}}], 0xb0, 0x29ff1109641b30e0}, 0x40) 33.135302038s ago: executing program 1 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) creat(&(0x7f0000001440)='./file0\x00', 0x0) inotify_init() openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x575, 0x7fff, 0x5, 0x59}, 0x3d, [0xfbca5ac, 0x495, 0x6, 0x40, 0x8001, 0x1ff, 0x7f, 0x9, 0x10000, 0x1, 0x77, 0x8000, 0xcd, 0x0, 0x9656, 0x285, 0x6, 0x7, 0x83, 0x41a9, 0x5, 0x100, 0x7f, 0x0, 0x100, 0x1, 0x5, 0x9, 0x400, 0x100800, 0x8165, 0x9, 0x2, 0x4, 0x101, 0x2, 0x231, 0x6, 0x7, 0x5, 0xd01, 0x4, 0x7, 0x5, 0x8, 0x26, 0x7, 0x100001c, 0x1003, 0x6, 0x9, 0x9, 0x3, 0x9, 0xfffffffb, 0x4, 0x200, 0x7, 0x3, 0x1, 0xd, 0x3, 0xfffffff8, 0x5], [0x2, 0x147, 0x3, 0x2, 0x0, 0xe467, 0x577c, 0xfffffffa, 0x1, 0x159c2521, 0x8, 0x5, 0x5, 0x401, 0x7f, 0x4, 0xc2b, 0xf61, 0x6, 0x1, 0x9, 0x5, 0xba, 0x800, 0x9, 0x9, 0xdc, 0xb7, 0x4d8, 0x1, 0x1, 0xc4, 0x5, 0xd4, 0x200, 0x9, 0x0, 0x5, 0x5, 0x4, 0xb, 0x101, 0x0, 0x10, 0xfffffffe, 0x7, 0x3, 0x9, 0x5, 0x20, 0x6, 0x0, 0x10000, 0x5, 0x7fffffff, 0x101, 0x3, 0x81, 0x401, 0x15c7, 0xffffffff, 0xfffffffb, 0x4, 0x7], [0x45, 0x0, 0x2000000, 0x8, 0x0, 0x4, 0x7f, 0x1, 0x67a, 0x10000, 0x9, 0x0, 0x8, 0x5, 0x9, 0x3, 0x100, 0x1ff, 0x0, 0x8, 0x8, 0xd, 0x80000001, 0x3, 0x5, 0xc, 0x3, 0x8, 0x1, 0x2, 0x4, 0x0, 0x7, 0x5, 0x4, 0x2, 0x9, 0x3, 0x1, 0x4, 0x9, 0x6, 0x1, 0x1, 0xd, 0x9, 0x5, 0x8, 0xdd, 0x2, 0x9, 0x7, 0x7fffffff, 0xffff, 0x734, 0x6, 0xc00, 0xfffffffc, 0x8, 0x80000000, 0x7, 0x7f, 0xffffffff, 0x31b6], [0x5, 0x1ff, 0x9, 0x1a, 0x480a2ecb, 0x1, 0x3, 0x40, 0x4, 0x3, 0x7, 0xd98, 0x4e, 0x8, 0x9, 0x400, 0x0, 0x3c9f, 0x7, 0x4, 0x77a0e46c, 0x0, 0xffff7e7e, 0x811, 0x6, 0x2, 0x0, 0x7ff, 0x3e, 0x81, 0x1c0, 0x80, 0xffffffff, 0x7ff, 0xb, 0x4, 0xfffffffa, 0xe0000000, 0x47, 0x5, 0x10000, 0x2d4285ed, 0x397f, 0xb, 0x81, 0x3, 0x5, 0x8, 0x22dee6fa, 0xffff, 0x8, 0xe1, 0xafab, 0x8, 0x5ed, 0x80, 0x0, 0x3, 0x5, 0x6, 0x1, 0x1, 0x9]}, 0x45c) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x200001d0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x24, @none={0x0, 0xfffe}}, 0x14, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4880) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000500000014000180060001000e000000080005"], 0x60}}, 0x4000180) 32.588144353s ago: executing program 3 (id=1492): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) socket(0x11, 0xa, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, r0, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) clock_getres(0xfffffffffffffffb, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff76, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000, 0x270c0}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x400c0) 32.355829387s ago: executing program 45 (id=1462): r0 = socket(0x10, 0x803, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}, [@FRA_FLOW={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000080)={'wg1\x00', @ifru_flags=0x2000}) 31.869706452s ago: executing program 3 (id=1494): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080002e226980010fff00e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e74703010093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x9000000}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6}}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x41}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) 31.838012328s ago: executing program 8 (id=1495): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) socket$netlink(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000c00)='cramfs\x00', 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e1f, @local}, 0x72) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='zonefs\x00', 0x208080, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000400)=0x0) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xee00) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x80000000000000, 0x0, 0x3, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0xfffffffb, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 29.975591549s ago: executing program 3 (id=1496): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0x0, r0) syz_usb_connect(0x0, 0x91, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002000000406d04210800010102030109027f0002010080fa09040000010e0100000d240100013f000000000001010f24020101020000000000000000001a240603820661637050ab49b8ccb3855e8d22560101010101000924030201010003"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffb) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r5, 0x2f, 0x2020, 0x4}, 0x20) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000140), 0x4) write(r6, &(0x7f0000000500)='0x08\n\x00', 0x5) 29.951738753s ago: executing program 8 (id=1497): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x0) 29.58851711s ago: executing program 1 (id=1498): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x4004, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000008000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000056182c9c351da90379000000000000000000002600000000000000"], 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0xd, 0x82, 0x200, 0x3, 0xffff, 0x4}}) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbbad4f94316248681d10add6000000000283afffe040000000000000000000000000001ff020000000000000000000000000001890490780400000000000000000000000000000010000008fe8000"/97], 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x24048800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0xff, 0xfffffffd}]}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x180, 0x0}) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r0, &(0x7f0000000280)='0', 0x1) 26.461097019s ago: executing program 1 (id=1499): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) uname(0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0xd}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x14, 0x68, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, 0x22) 25.873789312s ago: executing program 3 (id=1500): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_usb_connect(0x0, 0xc8, &(0x7f0000001300)={{0x12, 0x1, 0x250, 0xfe, 0xcc, 0x4d, 0x40, 0x187f, 0x800, 0x360b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xb6, 0x1, 0x4, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x14, 0xfd, 0x1, 0xa4, 0xb9, 0x4b, 0x0, [], [{{0x9, 0x5, 0xa, 0x11, 0x400, 0x4, 0x7, 0x8, [@generic={0x9b, 0x0, "72c76b7d9270c7d8e6ef97ffadf3b52fb93986c6d04d1ccc03ca3717c0e433353c8f5ac2d4b0882ee1c0036fc932638e25513549b02b9a88d459a649c6822dda7424e1dab28726c1f4857c15e20554e6cb2cacc70f2d95a957fe7bf41968dc124b36b8f21e608e510b3b2459a02f04b866f380ba801b4e04cef547626582349aab6cdaf9b14821de7f3dfc178779c6511ac098905fff7e61ec"}]}}]}}]}}]}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738d"], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) close(r4) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) write$evdev(r5, 0x0, 0x0) r6 = openat$kvm(0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f00000006c0)={0x6, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x40006, 0x6, 0x1}, {0x7, 0x4, 0x2000000, 0x11, 0x27, 0x7, 0x5}, {0xd, 0x8, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x88000001, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x1, 0x2000001, 0x7}, {0x80000007, 0x9, 0x1, 0x7, 0x10000, 0x8, 0x4}]}) ioctl$USBDEVFS_SUBMITURB(r0, 0x4004550d, 0x0) 25.812525089s ago: executing program 1 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r5, 0x8800000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = dup3(r7, r6, 0x0) write$UHID_INPUT(r3, &(0x7f00000015c0)={0x8, {"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", 0x1000}}, 0x1006) sendfile(r8, r5, 0x0, 0x1000009) r9 = openat$cgroup_ro(r0, &(0x7f0000000440)='memory.swap.events\x00', 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r0, r1, &(0x7f0000000140)={0x0, 0x754e, 0x20, 0x1, 0x3d8, 0x0, r0}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6c2a, 0x40, 0x2, 0x297}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd0f8, 0x2000, 0x0, 0x38f, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e39, 0x1, 0x3, 0x123}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x479d, 0x0, 0x1, 0xa6, 0x0, r8}}], 0x4, &(0x7f0000001480)={0x2e, 0x68, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, r10, '\x00', {0x3, 0x73b, 0x0, &(0x7f0000000480)=@buf_512="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"}}, &(0x7f0000001500)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r11, 0x1f, &(0x7f0000001580)={0x28, 0x12, 0x0, r12, &(0x7f0000001540)="7eb7106137c8970dff59d54cfff7b1f5db632feb1abf24d0bc0f3a7b22aa57f843e8cec6ff307d6c6b441d7b18ddcd4873068289a63381", 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r4, 0x1000}}, 0x1) write(r0, &(0x7f0000000100)='1', 0x1) r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xc) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r13, 0x4008ae48, &(0x7f0000002600)=0x2000) 24.440723496s ago: executing program 8 (id=1502): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) socket(0x11, 0xa, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, r0, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) clock_getres(0xfffffffffffffffb, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff76, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000, 0x270c0}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x400c0) 23.957323322s ago: executing program 3 (id=1503): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0xc0010141}]}) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffff) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0xe8, 0x0, 0x2f8, 0xe8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@broadcast, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x2e8}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 23.154719731s ago: executing program 1 (id=1504): r0 = dup(0xffffffffffffffff) mkdirat(r0, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f00000005c0)='cramfs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448c9, 0x0) bind$bt_hci(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r1, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f00000000c0)='./file0/file1\x00') mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x1000, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000080003040000010000000400", @ANYRES32=0x0, @ANYBLOB="21a5060000000000280012800b0001006d616373656300001800028005000900010000000c000100000100000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 22.711886954s ago: executing program 8 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, 0x0, 0x0, 0x20004004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r3, 0x8926, &(0x7f00000029c0)) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x0, 0x3000001, 0x13, 0xffffffffffffffff, 0x8000000) munlockall() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x12141, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x40) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000032680)=""/102395, &(0x7f0000000400)=0x18ffb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) 22.359388164s ago: executing program 3 (id=1506): syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x82000) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r0, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="2c385a7af3", 0x5) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x3, 0x20c01) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(r5, 0x32ce970513f32900) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="270302", 0x3}], 0x1}, 0x4005) socket$nl_generic(0x10, 0x3, 0x10) preadv(r6, &(0x7f0000001500)=[{&(0x7f0000002540)=""/4093, 0xffd}], 0x1, 0x1, 0x91e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 682.115113ms ago: executing program 46 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, 0x0, 0x0, 0x20004004) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r3, 0x8926, &(0x7f00000029c0)) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x0, 0x3000001, 0x13, 0xffffffffffffffff, 0x8000000) munlockall() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x12141, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x40) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000032680)=""/102395, &(0x7f0000000400)=0x18ffb) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) 74.167081ms ago: executing program 47 (id=1504): r0 = dup(0xffffffffffffffff) mkdirat(r0, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f00000005c0)='cramfs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x400448c9, 0x0) bind$bt_hci(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write(r1, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f00000000c0)='./file0/file1\x00') mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x1000, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, &(0x7f0000000240)="a7", &(0x7f0000001700)=""/4096}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000080003040000010000000400", @ANYRES32=0x0, @ANYBLOB="21a5060000000000280012800b0001006d616373656300001800028005000900010000000c000100000100000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) 0s ago: executing program 48 (id=1506): syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x82000) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r0, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='syscall\x00') setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="2c385a7af3", 0x5) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x3, 0x20c01) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(r5, 0x32ce970513f32900) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="270302", 0x3}], 0x1}, 0x4005) socket$nl_generic(0x10, 0x3, 0x10) preadv(r6, &(0x7f0000001500)=[{&(0x7f0000002540)=""/4093, 0xffd}], 0x1, 0x1, 0x91e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): m920x_read = error: -19 [ 733.953145][ T5705] dvb-usb: error while querying for an remote control event. [ 733.953206][ T5705] m920x_read = error: -19 [ 733.953217][ T5705] dvb-usb: error while querying for an remote control event. [ 734.067149][ T28] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 4035 jiffies old. [ 734.068299][ T5810] m920x_read = error: -19 [ 734.068323][ T5810] dvb-usb: error while querying for an remote control event. [ 734.068377][ T5810] m920x_read = error: -19 [ 734.068396][ T5810] dvb-usb: error while querying for an remote control event. [ 734.075928][T11636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.075942][T11636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.087204][ T29] audit: type=1800 audit(1787618812.371:5495): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230860 res=0 errno=0 [ 734.180929][ T5810] m920x_read = error: -19 [ 734.180956][ T5810] dvb-usb: error while querying for an remote control event. [ 734.181019][ T5810] m920x_read = error: -19 [ 734.181030][ T5810] dvb-usb: error while querying for an remote control event. [ 734.218705][T10814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.218721][T10814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.289758][ T7480] m920x_read = error: -19 [ 734.289784][ T7480] dvb-usb: error while querying for an remote control event. [ 734.289846][ T7480] m920x_read = error: -19 [ 734.289856][ T7480] dvb-usb: error while querying for an remote control event. [ 734.333687][ T29] audit: type=1400 audit(1787618812.611:5496): avc: denied { write } for pid=12037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.381925][ T29] audit: type=1800 audit(1787618812.661:5497): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15611 res=0 errno=0 [ 734.394915][ T5810] m920x_read = error: -19 [ 734.394942][ T5810] dvb-usb: error while querying for an remote control event. [ 734.395003][ T5810] m920x_read = error: -19 [ 734.395014][ T5810] dvb-usb: error while querying for an remote control event. [ 734.454161][ T29] audit: type=1800 audit(1787618812.741:5498): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15119 res=0 errno=0 [ 734.503728][ T5810] m920x_read = error: -19 [ 734.503745][ T5810] dvb-usb: error while querying for an remote control event. [ 734.503805][ T5810] m920x_read = error: -19 [ 734.503825][ T5810] dvb-usb: error while querying for an remote control event. [ 734.590282][ T29] audit: type=1400 audit(1787618812.871:5499): avc: denied { write } for pid=12051 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.615030][ T7480] m920x_read = error: -19 [ 734.615056][ T7480] dvb-usb: error while querying for an remote control event. [ 734.615120][ T7480] m920x_read = error: -19 [ 734.615140][ T7480] dvb-usb: error while querying for an remote control event. [ 734.724790][ T7477] m920x_read = error: -19 [ 734.724819][ T7477] dvb-usb: error while querying for an remote control event. [ 734.724870][ T7477] m920x_read = error: -19 [ 734.724892][ T7477] dvb-usb: error while querying for an remote control event. [ 734.822926][ T5810] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 734.836198][ T10] m920x_read = error: -19 [ 734.836216][ T10] dvb-usb: error while querying for an remote control event. [ 734.836278][ T10] m920x_read = error: -19 [ 734.836297][ T10] dvb-usb: error while querying for an remote control event. [ 734.951158][ T10] m920x_read = error: -19 [ 734.951185][ T10] dvb-usb: error while querying for an remote control event. [ 734.951248][ T10] m920x_read = error: -19 [ 734.951258][ T10] dvb-usb: error while querying for an remote control event. [ 734.981482][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 734.983765][ T5810] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 734.997257][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 734.997277][ T5810] usb 3-1: Product: syz [ 734.997297][ T5810] usb 3-1: Manufacturer: syz [ 734.997306][ T5810] usb 3-1: SerialNumber: syz [ 734.999460][ T5810] usb 3-1: config 0 descriptor?? [ 735.004613][ T5810] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 735.005728][ T29] audit: type=1800 audit(1787618813.291:5500): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230994 res=0 errno=0 [ 735.009817][ T29] audit: type=1800 audit(1787618813.291:5501): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=231026 res=0 errno=0 [ 735.015291][ T29] audit: type=1800 audit(1787618813.301:5502): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=231001 res=0 errno=0 [ 735.016333][ T29] audit: type=1800 audit(1787618813.301:5503): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=231002 res=0 errno=0 [ 735.057687][ T10] m920x_read = error: -19 [ 735.057723][ T10] dvb-usb: error while querying for an remote control event. [ 735.057786][ T10] m920x_read = error: -19 [ 735.057796][ T10] dvb-usb: error while querying for an remote control event. [ 735.168912][ T10] m920x_read = error: -19 [ 735.168951][ T10] dvb-usb: error while querying for an remote control event. [ 735.169018][ T10] m920x_read = error: -19 [ 735.169037][ T10] dvb-usb: error while querying for an remote control event. [ 735.218676][ T5810] gspca_sn9c2028: read1 error -32 [ 735.219636][ T5810] gspca_sn9c2028: read1 error -32 [ 735.221643][ T5810] gspca_sn9c2028: read1 error 0 [ 735.221706][ T5810] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -5 [ 735.274390][ T5810] m920x_read = error: -19 [ 735.274418][ T5810] dvb-usb: error while querying for an remote control event. [ 735.274487][ T5810] m920x_read = error: -19 [ 735.274499][ T5810] dvb-usb: error while querying for an remote control event. [ 735.444644][ T5810] m920x_read = error: -19 [ 735.444664][ T5810] dvb-usb: error while querying for an remote control event. [ 735.444707][ T5810] m920x_read = error: -19 [ 735.444717][ T5810] dvb-usb: error while querying for an remote control event. [ 735.552842][ T5810] m920x_read = error: -19 [ 735.552869][ T5810] dvb-usb: error while querying for an remote control event. [ 735.552931][ T5810] m920x_read = error: -19 [ 735.552941][ T5810] dvb-usb: error while querying for an remote control event. [ 735.577446][ T9483] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 735.591562][ T9483] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 735.592572][ T9483] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 735.595237][ T9483] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 735.595917][ T9483] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 735.670140][ T7477] m920x_read = error: -19 [ 735.670168][ T7477] dvb-usb: error while querying for an remote control event. [ 735.670222][ T7477] m920x_read = error: -19 [ 735.670241][ T7477] dvb-usb: error while querying for an remote control event. [ 736.624958][ T5810] m920x_read = error: -19 [ 736.624975][ T5810] dvb-usb: error while querying for an remote control event. [ 736.625853][ T5810] m920x_read = error: -19 [ 736.625865][ T5810] dvb-usb: error while querying for an remote control event. [ 736.785466][ T7480] m920x_read = error: -19 [ 736.785493][ T7480] dvb-usb: error while querying for an remote control event. [ 736.785573][ T7480] m920x_read = error: -19 [ 736.785592][ T7480] dvb-usb: error while querying for an remote control event. [ 736.897440][ T5810] m920x_read = error: -19 [ 736.897468][ T5810] dvb-usb: error while querying for an remote control event. [ 736.897532][ T5810] m920x_read = error: -19 [ 736.897542][ T5810] dvb-usb: error while querying for an remote control event. [ 737.004826][ T5810] m920x_read = error: -19 [ 737.004855][ T5810] dvb-usb: error while querying for an remote control event. [ 737.004916][ T5810] m920x_read = error: -19 [ 737.004926][ T5810] dvb-usb: error while querying for an remote control event. [ 737.113102][ T5810] m920x_read = error: -19 [ 737.113130][ T5810] dvb-usb: error while querying for an remote control event. [ 737.113192][ T5810] m920x_read = error: -19 [ 737.113202][ T5810] dvb-usb: error while querying for an remote control event. [ 737.233184][ T7477] m920x_read = error: -19 [ 737.233218][ T7477] dvb-usb: error while querying for an remote control event. [ 737.233284][ T7477] m920x_read = error: -19 [ 737.233294][ T7477] dvb-usb: error while querying for an remote control event. [ 737.347073][ T7477] m920x_read = error: -19 [ 737.347135][ T7477] dvb-usb: error while querying for an remote control event. [ 737.347198][ T7477] m920x_read = error: -19 [ 737.347208][ T7477] dvb-usb: error while querying for an remote control event. [ 737.453472][ T5810] m920x_read = error: -19 [ 737.453499][ T5810] dvb-usb: error while querying for an remote control event. [ 737.453562][ T5810] m920x_read = error: -19 [ 737.453572][ T5810] dvb-usb: error while querying for an remote control event. [ 737.533677][T12069] lo speed is unknown, defaulting to 1000 [ 737.571405][ T5810] m920x_read = error: -19 [ 737.571431][ T5810] dvb-usb: error while querying for an remote control event. [ 737.571501][ T5810] m920x_read = error: -19 [ 737.571512][ T5810] dvb-usb: error while querying for an remote control event. [ 737.663745][T10962] Bluetooth: hci11: command tx timeout [ 737.678646][ T7480] m920x_read = error: -19 [ 737.678663][ T7480] dvb-usb: error while querying for an remote control event. [ 737.678730][ T7480] m920x_read = error: -19 [ 737.678752][ T7480] dvb-usb: error while querying for an remote control event. [ 737.700088][ T7480] usb 3-1: USB disconnect, device number 45 [ 737.786233][ T5810] m920x_read = error: -19 [ 737.786269][ T5810] dvb-usb: error while querying for an remote control event. [ 737.786365][ T5810] m920x_read = error: -19 [ 737.786375][ T5810] dvb-usb: error while querying for an remote control event. [ 737.893873][ T7480] m920x_read = error: -19 [ 737.893890][ T7480] dvb-usb: error while querying for an remote control event. [ 737.893952][ T7480] m920x_read = error: -19 [ 737.893972][ T7480] dvb-usb: error while querying for an remote control event. [ 738.003234][ T7480] m920x_read = error: -19 [ 738.003261][ T7480] dvb-usb: error while querying for an remote control event. [ 738.003323][ T7480] m920x_read = error: -19 [ 738.003333][ T7480] dvb-usb: error while querying for an remote control event. [ 738.113526][ T7480] m920x_read = error: -19 [ 738.113544][ T7480] dvb-usb: error while querying for an remote control event. [ 738.113604][ T7480] m920x_read = error: -19 [ 738.113624][ T7480] dvb-usb: error while querying for an remote control event. [ 738.224497][ T7480] m920x_read = error: -19 [ 738.224525][ T7480] dvb-usb: error while querying for an remote control event. [ 738.224592][ T7480] m920x_read = error: -19 [ 738.224612][ T7480] dvb-usb: error while querying for an remote control event. [ 738.334825][ T7480] m920x_read = error: -19 [ 738.334852][ T7480] dvb-usb: error while querying for an remote control event. [ 738.334914][ T7480] m920x_read = error: -19 [ 738.334924][ T7480] dvb-usb: error while querying for an remote control event. [ 738.445615][ T7480] m920x_read = error: -19 [ 738.445643][ T7480] dvb-usb: error while querying for an remote control event. [ 738.445707][ T7480] m920x_read = error: -19 [ 738.445717][ T7480] dvb-usb: error while querying for an remote control event. [ 738.558475][ T7480] m920x_read = error: -19 [ 738.558501][ T7480] dvb-usb: error while querying for an remote control event. [ 738.558566][ T7480] m920x_read = error: -19 [ 738.558576][ T7480] dvb-usb: error while querying for an remote control event. [ 738.663961][ T7480] m920x_read = error: -19 [ 738.663990][ T7480] dvb-usb: error while querying for an remote control event. [ 738.664051][ T7480] m920x_read = error: -19 [ 738.664061][ T7480] dvb-usb: error while querying for an remote control event. [ 738.680835][T12069] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.680987][T12069] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.681090][T12069] bridge_slave_0: entered allmulticast mode [ 738.692911][T12069] bridge_slave_0: entered promiscuous mode [ 738.711317][T12069] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.711441][T12069] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.711596][T12069] bridge_slave_1: entered allmulticast mode [ 738.724022][T12069] bridge_slave_1: entered promiscuous mode [ 738.775040][ T7480] m920x_read = error: -19 [ 738.775067][ T7480] dvb-usb: error while querying for an remote control event. [ 738.775128][ T7480] m920x_read = error: -19 [ 738.775138][ T7480] dvb-usb: error while querying for an remote control event. [ 738.885790][ T7480] m920x_read = error: -19 [ 738.885807][ T7480] dvb-usb: error while querying for an remote control event. [ 738.885870][ T7480] m920x_read = error: -19 [ 738.885889][ T7480] dvb-usb: error while querying for an remote control event. [ 738.899635][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.906499][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.909080][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 738.909099][ T29] audit: type=1800 audit(1787618817.191:5518): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=234157 res=0 errno=0 [ 738.930879][ T9435] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 738.937861][ T9435] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 738.938664][ T9435] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 738.939577][ T9435] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 738.940069][ T9435] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 738.991031][ T29] audit: type=1800 audit(1787618817.271:5519): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=234168 res=0 errno=0 [ 738.995151][ T5810] m920x_read = error: -19 [ 738.995175][ T5810] dvb-usb: error while querying for an remote control event. [ 738.995236][ T5810] m920x_read = error: -19 [ 738.995246][ T5810] dvb-usb: error while querying for an remote control event. [ 739.003019][ T29] audit: type=1800 audit(1787618817.281:5520): pid=10908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=234247 res=0 errno=0 [ 739.011672][ T29] audit: type=1800 audit(1787618817.291:5521): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=234236 res=0 errno=0 [ 739.103876][ T5810] m920x_read = error: -19 [ 739.103904][ T5810] dvb-usb: error while querying for an remote control event. [ 739.103968][ T5810] m920x_read = error: -19 [ 739.103978][ T5810] dvb-usb: error while querying for an remote control event. [ 739.117083][T12069] team0: Port device team_slave_0 added [ 739.125362][T12069] team0: Port device team_slave_1 added [ 739.304956][ T5810] m920x_read = error: -19 [ 739.304985][ T5810] dvb-usb: error while querying for an remote control event. [ 739.305055][ T5810] m920x_read = error: -19 [ 739.305075][ T5810] dvb-usb: error while querying for an remote control event. [ 739.401421][T12118] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 739.406787][T12118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1452'. [ 739.417547][ T5810] m920x_read = error: -19 [ 739.417573][ T5810] dvb-usb: error while querying for an remote control event. [ 739.417636][ T5810] m920x_read = error: -19 [ 739.417646][ T5810] dvb-usb: error while querying for an remote control event. [ 739.431285][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.431306][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.431331][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.432387][ T29] audit: type=1400 audit(1787618817.711:5522): avc: denied { write } for pid=12098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.452382][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.452405][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.452430][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.531480][ T7480] m920x_read = error: -19 [ 739.531507][ T7480] dvb-usb: error while querying for an remote control event. [ 739.531569][ T7480] m920x_read = error: -19 [ 739.531580][ T7480] dvb-usb: error while querying for an remote control event. [ 739.634279][ T5810] m920x_read = error: -19 [ 739.634305][ T5810] dvb-usb: error while querying for an remote control event. [ 739.634368][ T5810] m920x_read = error: -19 [ 739.634378][ T5810] dvb-usb: error while querying for an remote control event. [ 739.699525][T12069] hsr_slave_0: entered promiscuous mode [ 739.708041][T12069] hsr_slave_1: entered promiscuous mode [ 739.709446][T12069] debugfs: 'hsr0' already exists in 'hsr' [ 739.709471][T12069] Cannot create hsr debugfs directory [ 739.743912][ T9435] Bluetooth: hci11: command tx timeout [ 739.744260][ T7477] m920x_read = error: -19 [ 739.744283][ T7477] dvb-usb: error while querying for an remote control event. [ 739.744343][ T7477] m920x_read = error: -19 [ 739.744353][ T7477] dvb-usb: error while querying for an remote control event. [ 739.921045][ T7477] m920x_read = error: -19 [ 739.921073][ T7477] dvb-usb: error while querying for an remote control event. [ 739.921137][ T7477] m920x_read = error: -19 [ 739.921147][ T7477] dvb-usb: error while querying for an remote control event. [ 739.985715][ T29] audit: type=1400 audit(1787618818.271:5523): avc: denied { write } for pid=12124 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.006000][ T29] audit: type=1800 audit(1787618818.291:5524): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15611 res=0 errno=0 [ 740.026166][ T7477] m920x_read = error: -19 [ 740.026192][ T7477] dvb-usb: error while querying for an remote control event. [ 740.026255][ T7477] m920x_read = error: -19 [ 740.026265][ T7477] dvb-usb: error while querying for an remote control event. [ 740.070915][T12123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1451'. [ 740.156150][ T10] m920x_read = error: -19 [ 740.156166][ T10] dvb-usb: error while querying for an remote control event. [ 740.156253][ T10] m920x_read = error: -19 [ 740.156263][ T10] dvb-usb: error while querying for an remote control event. [ 740.278419][ T10] m920x_read = error: -19 [ 740.278445][ T10] dvb-usb: error while querying for an remote control event. [ 740.278509][ T10] m920x_read = error: -19 [ 740.278519][ T10] dvb-usb: error while querying for an remote control event. [ 740.383900][ T10] m920x_read = error: -19 [ 740.383926][ T10] dvb-usb: error while querying for an remote control event. [ 740.383987][ T10] m920x_read = error: -19 [ 740.383998][ T10] dvb-usb: error while querying for an remote control event. [ 740.437644][T12130] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1454'. [ 740.437670][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1454'. [ 740.496421][ T5810] m920x_read = error: -19 [ 740.496438][ T5810] dvb-usb: error while querying for an remote control event. [ 740.496500][ T5810] m920x_read = error: -19 [ 740.496520][ T5810] dvb-usb: error while querying for an remote control event. [ 740.572456][ T29] audit: type=1800 audit(1787618818.851:5525): pid=12069 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24511 res=0 errno=0 [ 740.606935][ T5810] m920x_read = error: -19 [ 740.606962][ T5810] dvb-usb: error while querying for an remote control event. [ 740.607026][ T5810] m920x_read = error: -19 [ 740.607046][ T5810] dvb-usb: error while querying for an remote control event. [ 740.714507][ T10] m920x_read = error: -19 [ 740.714535][ T10] dvb-usb: error while querying for an remote control event. [ 740.714596][ T10] m920x_read = error: -19 [ 740.714607][ T10] dvb-usb: error while querying for an remote control event. [ 740.826347][ T5810] m920x_read = error: -19 [ 740.826374][ T5810] dvb-usb: error while querying for an remote control event. [ 740.826438][ T5810] m920x_read = error: -19 [ 740.826448][ T5810] dvb-usb: error while querying for an remote control event. [ 740.885568][ T29] audit: type=1800 audit(1787618819.171:5526): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15611 res=0 errno=0 [ 740.936224][ T5810] m920x_read = error: -19 [ 740.936250][ T5810] dvb-usb: error while querying for an remote control event. [ 740.936320][ T5810] m920x_read = error: -19 [ 740.936330][ T5810] dvb-usb: error while querying for an remote control event. [ 741.024425][ T9435] Bluetooth: hci12: command tx timeout [ 741.045596][ T5810] m920x_read = error: -19 [ 741.045615][ T5810] dvb-usb: error while querying for an remote control event. [ 741.045677][ T5810] m920x_read = error: -19 [ 741.045697][ T5810] dvb-usb: error while querying for an remote control event. [ 741.154604][ T5810] m920x_read = error: -19 [ 741.154632][ T5810] dvb-usb: error while querying for an remote control event. [ 741.154693][ T5810] m920x_read = error: -19 [ 741.154703][ T5810] dvb-usb: error while querying for an remote control event. [ 742.109906][ T9435] Bluetooth: hci11: command tx timeout [ 742.111027][ T5810] m920x_read = error: -19 [ 742.111055][ T5810] dvb-usb: error while querying for an remote control event. [ 742.111131][ T5810] m920x_read = error: -19 [ 742.111150][ T5810] dvb-usb: error while querying for an remote control event. [ 742.620814][ T5810] m920x_read = error: -19 [ 742.620898][ T5810] dvb-usb: error while querying for an remote control event. [ 742.620961][ T5810] m920x_read = error: -19 [ 742.620972][ T5810] dvb-usb: error while querying for an remote control event. [ 742.697252][ T29] audit: type=1400 audit(1787618820.981:5527): avc: denied { write } for pid=12131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.758233][ T5810] m920x_read = error: -19 [ 742.758250][ T5810] dvb-usb: error while querying for an remote control event. [ 742.758441][ T5810] m920x_read = error: -19 [ 742.758461][ T5810] dvb-usb: error while querying for an remote control event. [ 742.848681][T12142] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 742.856020][T12069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.866899][ T5810] m920x_read = error: -19 [ 742.866927][ T5810] dvb-usb: error while querying for an remote control event. [ 742.866990][ T5810] m920x_read = error: -19 [ 742.867000][ T5810] dvb-usb: error while querying for an remote control event. [ 742.976210][ T5810] m920x_read = error: -19 [ 742.976228][ T5810] dvb-usb: error while querying for an remote control event. [ 742.976290][ T5810] m920x_read = error: -19 [ 742.976310][ T5810] dvb-usb: error while querying for an remote control event. [ 743.028314][T12111] lo speed is unknown, defaulting to 1000 [ 743.083120][ T5810] m920x_read = error: -19 [ 743.083146][ T5810] dvb-usb: error while querying for an remote control event. [ 743.083207][ T5810] m920x_read = error: -19 [ 743.083217][ T5810] dvb-usb: error while querying for an remote control event. [ 743.089730][T12155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.090075][T12155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.109726][ T9435] Bluetooth: hci12: command tx timeout [ 743.154724][T12069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.195448][ T10] m920x_read = error: -19 [ 743.195476][ T10] dvb-usb: error while querying for an remote control event. [ 743.195539][ T10] m920x_read = error: -19 [ 743.195568][ T10] dvb-usb: error while querying for an remote control event. [ 743.304100][ T5810] m920x_read = error: -19 [ 743.304120][ T5810] dvb-usb: error while querying for an remote control event. [ 743.304181][ T5810] m920x_read = error: -19 [ 743.304200][ T5810] dvb-usb: error while querying for an remote control event. [ 743.412246][T12069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.415324][ T5810] m920x_read = error: -19 [ 743.415349][ T5810] dvb-usb: error while querying for an remote control event. [ 743.415413][ T5810] m920x_read = error: -19 [ 743.415424][ T5810] dvb-usb: error while querying for an remote control event. [ 743.514233][T12069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 743.516198][T12159] netlink: 'syz.2.1458': attribute type 13 has an invalid length. [ 743.516222][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 743.523889][ T7480] m920x_read = error: -19 [ 743.523915][ T7480] dvb-usb: error while querying for an remote control event. [ 743.523982][ T7480] m920x_read = error: -19 [ 743.523992][ T7480] dvb-usb: error while querying for an remote control event. [ 743.618401][T12159] netlink: 'syz.2.1458': attribute type 13 has an invalid length. [ 743.618427][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 743.624339][ T5980] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.624393][ T5980] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.624424][ T5980] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.634571][ T5810] m920x_read = error: -19 [ 743.634588][ T5810] dvb-usb: error while querying for an remote control event. [ 743.634647][ T5810] m920x_read = error: -19 [ 743.634658][ T5810] dvb-usb: error while querying for an remote control event. [ 743.636571][ T5980] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.750318][ T5810] m920x_read = error: -19 [ 743.750346][ T5810] dvb-usb: error while querying for an remote control event. [ 743.750400][ T5810] m920x_read = error: -19 [ 743.750419][ T5810] dvb-usb: error while querying for an remote control event. [ 743.854601][ T7480] m920x_read = error: -19 [ 743.854629][ T7480] dvb-usb: error while querying for an remote control event. [ 743.854688][ T7480] m920x_read = error: -19 [ 743.854698][ T7480] dvb-usb: error while querying for an remote control event. [ 743.963146][ T7477] m920x_read = error: -19 [ 743.963164][ T7477] dvb-usb: error while querying for an remote control event. [ 743.963222][ T7477] m920x_read = error: -19 [ 743.963233][ T7477] dvb-usb: error while querying for an remote control event. [ 744.076468][ T5810] m920x_read = error: -19 [ 744.076496][ T5810] dvb-usb: error while querying for an remote control event. [ 744.076546][ T5810] m920x_read = error: -19 [ 744.076566][ T5810] dvb-usb: error while querying for an remote control event. [ 744.143542][ T9435] Bluetooth: hci11: command tx timeout [ 744.184783][ T5810] m920x_read = error: -19 [ 744.184810][ T5810] dvb-usb: error while querying for an remote control event. [ 744.184873][ T5810] m920x_read = error: -19 [ 744.184884][ T5810] dvb-usb: error while querying for an remote control event. [ 744.298180][ T5810] m920x_read = error: -19 [ 744.298198][ T5810] dvb-usb: error while querying for an remote control event. [ 744.298256][ T5810] m920x_read = error: -19 [ 744.298276][ T5810] dvb-usb: error while querying for an remote control event. [ 744.341058][T12069] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 744.352231][T12069] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 744.353015][T12069] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 744.357296][T12069] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 744.377543][T12111] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.377613][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.377722][T12111] bridge_slave_0: entered allmulticast mode [ 744.381398][T12111] bridge_slave_0: entered promiscuous mode [ 744.385885][T12069] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 744.388689][T12069] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.391537][T12069] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 744.396649][T12069] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.397284][T12111] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.397350][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.398387][T12111] bridge_slave_1: entered allmulticast mode [ 744.400423][T12111] bridge_slave_1: entered promiscuous mode [ 744.407303][ T7477] m920x_read = error: -19 [ 744.407330][ T7477] dvb-usb: error while querying for an remote control event. [ 744.407380][ T7477] m920x_read = error: -19 [ 744.407399][ T7477] dvb-usb: error while querying for an remote control event. [ 744.485334][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.494176][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.516431][ T7477] m920x_read = error: -19 [ 744.516458][ T7477] dvb-usb: error while querying for an remote control event. [ 744.516517][ T7477] m920x_read = error: -19 [ 744.516527][ T7477] dvb-usb: error while querying for an remote control event. [ 744.563941][T12111] team0: Port device team_slave_0 added [ 744.565937][T12111] team0: Port device team_slave_1 added [ 744.612269][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.612282][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.612306][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.617026][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.617039][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.617063][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.625550][ T10] m920x_read = error: -19 [ 744.625583][ T10] dvb-usb: error while querying for an remote control event. [ 744.625648][ T10] m920x_read = error: -19 [ 744.625658][ T10] dvb-usb: error while querying for an remote control event. [ 744.710823][T12111] hsr_slave_0: entered promiscuous mode [ 744.715235][T12111] hsr_slave_1: entered promiscuous mode [ 744.715806][T12111] debugfs: 'hsr0' already exists in 'hsr' [ 744.715830][T12111] Cannot create hsr debugfs directory [ 744.735291][ T10] m920x_read = error: -19 [ 744.735319][ T10] dvb-usb: error while querying for an remote control event. [ 744.735368][ T10] m920x_read = error: -19 [ 744.735388][ T10] dvb-usb: error while querying for an remote control event. [ 744.830096][T12069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.848049][ T10] m920x_read = error: -19 [ 744.848076][ T10] dvb-usb: error while querying for an remote control event. [ 744.848125][ T10] m920x_read = error: -19 [ 744.848144][ T10] dvb-usb: error while querying for an remote control event. [ 744.948591][T12069] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.953278][ T10] m920x_read = error: -19 [ 744.953304][ T10] dvb-usb: error while querying for an remote control event. [ 744.953362][ T10] m920x_read = error: -19 [ 744.953372][ T10] dvb-usb: error while querying for an remote control event. [ 745.001569][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.001641][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.011764][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 745.011775][ T29] audit: type=1800 audit(1787618823.291:5533): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24511 res=0 errno=0 [ 745.015531][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.015639][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.022526][ T29] audit: type=1800 audit(1787618823.301:5534): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24510 res=0 errno=0 [ 745.043354][ T29] audit: type=1800 audit(1787618823.331:5535): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243036 res=0 errno=0 [ 745.063857][ T10] m920x_read = error: -19 [ 745.063874][ T10] dvb-usb: error while querying for an remote control event. [ 745.063935][ T10] m920x_read = error: -19 [ 745.063954][ T10] dvb-usb: error while querying for an remote control event. [ 745.138028][ T29] audit: type=1800 audit(1787618823.421:5536): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15611 res=0 errno=0 [ 745.200120][ T9435] Bluetooth: hci12: command tx timeout [ 745.206189][ T10] m920x_read = error: -19 [ 745.206215][ T10] dvb-usb: error while querying for an remote control event. [ 745.206280][ T10] m920x_read = error: -19 [ 745.206290][ T10] dvb-usb: error while querying for an remote control event. [ 745.317598][ T7477] m920x_read = error: -19 [ 745.317626][ T7477] dvb-usb: error while querying for an remote control event. [ 745.317688][ T7477] m920x_read = error: -19 [ 745.317698][ T7477] dvb-usb: error while querying for an remote control event. [ 745.423202][ T7480] m920x_read = error: -19 [ 745.423221][ T7480] dvb-usb: error while querying for an remote control event. [ 745.423278][ T7480] m920x_read = error: -19 [ 745.423289][ T7480] dvb-usb: error while querying for an remote control event. [ 745.534854][ T7480] m920x_read = error: -19 [ 745.534882][ T7480] dvb-usb: error while querying for an remote control event. [ 745.534931][ T7480] m920x_read = error: -19 [ 745.534952][ T7480] dvb-usb: error while querying for an remote control event. [ 745.576705][ T29] audit: type=1800 audit(1787618823.861:5537): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243138 res=0 errno=0 [ 745.603124][ T29] audit: type=1800 audit(1787618823.891:5538): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243149 res=0 errno=0 [ 745.606878][T10962] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 745.617197][T10962] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 745.618114][T10962] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 745.622352][T10962] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 745.626305][T10962] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 745.644269][ T10] m920x_read = error: -19 [ 745.644298][ T10] dvb-usb: error while querying for an remote control event. [ 745.644347][ T10] m920x_read = error: -19 [ 745.644367][ T10] dvb-usb: error while querying for an remote control event. [ 745.664000][ T29] audit: type=1800 audit(1787618823.951:5539): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243168 res=0 errno=0 [ 745.669069][ T29] audit: type=1800 audit(1787618823.951:5540): pid=10908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243179 res=0 errno=0 [ 745.755460][ T5810] m920x_read = error: -19 [ 745.755488][ T5810] dvb-usb: error while querying for an remote control event. [ 745.755562][ T5810] m920x_read = error: -19 [ 745.755581][ T5810] dvb-usb: error while querying for an remote control event. [ 745.809425][ T29] audit: type=1326 audit(1787618824.091:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.6.1460" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7679e0d9 code=0x7ffc0000 [ 745.809754][ T29] audit: type=1326 audit(1787618824.091:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12174 comm="syz.6.1460" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7679e0d9 code=0x7ffc0000 [ 745.864534][ T5810] m920x_read = error: -19 [ 745.864551][ T5810] dvb-usb: error while querying for an remote control event. [ 745.864609][ T5810] m920x_read = error: -19 [ 745.864620][ T5810] dvb-usb: error while querying for an remote control event. [ 745.976478][ T10] m920x_read = error: -19 [ 745.976506][ T10] dvb-usb: error while querying for an remote control event. [ 745.976573][ T10] m920x_read = error: -19 [ 745.976583][ T10] dvb-usb: error while querying for an remote control event. [ 746.027635][T12111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 746.037431][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.038486][T12111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 746.054582][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.055266][T12111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 746.061909][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.069588][T12111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 746.075900][T12111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.085758][ T7480] m920x_read = error: -19 [ 746.085777][ T7480] dvb-usb: error while querying for an remote control event. [ 746.085835][ T7480] m920x_read = error: -19 [ 746.085856][ T7480] dvb-usb: error while querying for an remote control event. [ 746.088796][T12181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=12181 comm=syz.6.1460 [ 746.201178][ T10] m920x_read = error: -19 [ 746.201205][ T10] dvb-usb: error while querying for an remote control event. [ 746.201256][ T10] m920x_read = error: -19 [ 746.201275][ T10] dvb-usb: error while querying for an remote control event. [ 746.304395][ T10] m920x_read = error: -19 [ 746.304413][ T10] dvb-usb: error while querying for an remote control event. [ 746.304472][ T10] m920x_read = error: -19 [ 746.304491][ T10] dvb-usb: error while querying for an remote control event. [ 746.381172][T12111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.415848][ T7501] m920x_read = error: -19 [ 746.415875][ T7501] dvb-usb: error while querying for an remote control event. [ 746.415924][ T7501] m920x_read = error: -19 [ 746.415943][ T7501] dvb-usb: error while querying for an remote control event. [ 746.426163][T12111] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.449495][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.451376][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.470126][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.470205][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.524734][ T5810] m920x_read = error: -19 [ 746.524752][ T5810] dvb-usb: error while querying for an remote control event. [ 746.524810][ T5810] m920x_read = error: -19 [ 746.524829][ T5810] dvb-usb: error while querying for an remote control event. [ 746.701044][T12179] lo speed is unknown, defaulting to 1000 [ 746.740799][ T5810] m920x_read = error: -19 [ 746.740816][ T5810] dvb-usb: error while querying for an remote control event. [ 746.740855][ T5810] m920x_read = error: -19 [ 746.740865][ T5810] dvb-usb: error while querying for an remote control event. [ 746.854232][ T5810] m920x_read = error: -19 [ 746.854261][ T5810] dvb-usb: error while querying for an remote control event. [ 746.854333][ T5810] m920x_read = error: -19 [ 746.854355][ T5810] dvb-usb: error while querying for an remote control event. [ 746.947137][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.963851][ T10] m920x_read = error: -19 [ 746.963877][ T10] dvb-usb: error while querying for an remote control event. [ 746.963933][ T10] m920x_read = error: -19 [ 746.963944][ T10] dvb-usb: error while querying for an remote control event. [ 747.026948][T12069] veth0_vlan: entered promiscuous mode [ 747.057771][T12069] veth1_vlan: entered promiscuous mode [ 747.078463][ T7501] m920x_read = error: -19 [ 747.078480][ T7501] dvb-usb: error while querying for an remote control event. [ 747.078541][ T7501] m920x_read = error: -19 [ 747.078561][ T7501] dvb-usb: error while querying for an remote control event. [ 747.127059][T12069] veth0_macvtap: entered promiscuous mode [ 747.131063][T12069] veth1_macvtap: entered promiscuous mode [ 747.148169][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.148214][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.175598][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.187521][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.189761][ T10] m920x_read = error: -19 [ 747.189786][ T10] dvb-usb: error while querying for an remote control event. [ 747.189845][ T10] m920x_read = error: -19 [ 747.189856][ T10] dvb-usb: error while querying for an remote control event. [ 747.213026][T11636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.213210][T11636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.213360][T11636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.213472][T11636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.293546][ T10] m920x_read = error: -19 [ 747.293574][ T10] dvb-usb: error while querying for an remote control event. [ 747.293632][ T10] m920x_read = error: -19 [ 747.293643][ T10] dvb-usb: error while querying for an remote control event. [ 747.389349][T10962] Bluetooth: hci12: command tx timeout [ 747.430896][ T5705] m920x_read = error: -19 [ 747.430914][ T5705] dvb-usb: error while querying for an remote control event. [ 747.430973][ T5705] m920x_read = error: -19 [ 747.430992][ T5705] dvb-usb: error while querying for an remote control event. [ 747.537083][ T10] m920x_read = error: -19 [ 747.537111][ T10] dvb-usb: error while querying for an remote control event. [ 747.537169][ T10] m920x_read = error: -19 [ 747.537179][ T10] dvb-usb: error while querying for an remote control event. [ 747.571165][T12176] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 747.571195][T12176] Bluetooth: hci0: MSFT extension not registered [ 747.589340][T10814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.589366][T10814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.648759][ T7504] m920x_read = error: -19 [ 747.648786][ T7504] dvb-usb: error while querying for an remote control event. [ 747.648851][ T7504] m920x_read = error: -19 [ 747.648870][ T7504] dvb-usb: error while querying for an remote control event. [ 747.665507][T10962] Bluetooth: hci13: command tx timeout [ 747.728776][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.728801][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.753765][ T10] m920x_read = error: -19 [ 747.753782][ T10] dvb-usb: error while querying for an remote control event. [ 747.753840][ T10] m920x_read = error: -19 [ 747.753850][ T10] dvb-usb: error while querying for an remote control event. [ 747.866961][ T10] m920x_read = error: -19 [ 747.867000][ T10] dvb-usb: error while querying for an remote control event. [ 747.867067][ T10] m920x_read = error: -19 [ 747.867088][ T10] dvb-usb: error while querying for an remote control event. [ 747.975093][ T10] m920x_read = error: -19 [ 747.975120][ T10] dvb-usb: error while querying for an remote control event. [ 747.975169][ T10] m920x_read = error: -19 [ 747.975188][ T10] dvb-usb: error while querying for an remote control event. [ 748.050570][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.050672][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.050826][T12179] bridge_slave_0: entered allmulticast mode [ 748.054957][T12179] bridge_slave_0: entered promiscuous mode [ 748.079168][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.079276][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.079557][T12179] bridge_slave_1: entered allmulticast mode [ 748.083400][ T7504] m920x_read = error: -19 [ 748.083425][ T7504] dvb-usb: error while querying for an remote control event. [ 748.083474][ T7504] m920x_read = error: -19 [ 748.083493][ T7504] dvb-usb: error while querying for an remote control event. [ 748.089045][T12179] bridge_slave_1: entered promiscuous mode [ 748.099219][T12111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.193951][ T5810] m920x_read = error: -19 [ 748.193970][ T5810] dvb-usb: error while querying for an remote control event. [ 748.194027][ T5810] m920x_read = error: -19 [ 748.194038][ T5810] dvb-usb: error while querying for an remote control event. [ 748.210710][T12179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.217587][T12179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.294367][T12179] team0: Port device team_slave_0 added [ 748.310194][ T10] m920x_read = error: -19 [ 748.310220][ T10] dvb-usb: error while querying for an remote control event. [ 748.310272][ T10] m920x_read = error: -19 [ 748.310291][ T10] dvb-usb: error while querying for an remote control event. [ 748.349723][T12179] team0: Port device team_slave_1 added [ 748.409316][T12111] veth0_vlan: entered promiscuous mode [ 748.415047][ T7504] m920x_read = error: -19 [ 748.415063][ T7504] dvb-usb: error while querying for an remote control event. [ 748.415121][ T7504] m920x_read = error: -19 [ 748.415140][ T7504] dvb-usb: error while querying for an remote control event. [ 748.451331][T12179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.451352][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.451367][T12179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.461166][T12179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.461188][T12179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.461203][T12179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.495457][T12111] veth1_vlan: entered promiscuous mode [ 748.523577][ T7477] m920x_read = error: -19 [ 748.523595][ T7477] dvb-usb: error while querying for an remote control event. [ 748.523679][ T7477] m920x_read = error: -19 [ 748.523689][ T7477] dvb-usb: error while querying for an remote control event. [ 748.633664][ T10] m920x_read = error: -19 [ 748.633691][ T10] dvb-usb: error while querying for an remote control event. [ 748.633752][ T10] m920x_read = error: -19 [ 748.633762][ T10] dvb-usb: error while querying for an remote control event. [ 748.661796][T12179] hsr_slave_0: entered promiscuous mode [ 748.665076][T12179] hsr_slave_1: entered promiscuous mode [ 748.665596][T12179] debugfs: 'hsr0' already exists in 'hsr' [ 748.665611][T12179] Cannot create hsr debugfs directory [ 748.710172][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.710657][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.720419][T12111] veth0_macvtap: entered promiscuous mode [ 748.743901][ T10] m920x_read = error: -19 [ 748.743927][ T10] dvb-usb: error while querying for an remote control event. [ 748.743985][ T10] m920x_read = error: -19 [ 748.743995][ T10] dvb-usb: error while querying for an remote control event. [ 748.770536][T12231] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1463'. [ 748.846853][T12111] veth1_macvtap: entered promiscuous mode [ 748.862347][ T10] m920x_read = error: -19 [ 748.862373][ T10] dvb-usb: error while querying for an remote control event. [ 748.862422][ T10] m920x_read = error: -19 [ 748.862441][ T10] dvb-usb: error while querying for an remote control event. [ 748.928897][T12111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.934977][T12111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.971248][ T7477] m920x_read = error: -19 [ 748.971279][ T7477] dvb-usb: error while querying for an remote control event. [ 748.971337][ T7477] m920x_read = error: -19 [ 748.971347][ T7477] dvb-usb: error while querying for an remote control event. [ 748.997585][T12233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12233 comm=syz.6.1462 [ 749.073770][ T5810] m920x_read = error: -19 [ 749.073798][ T5810] dvb-usb: error while querying for an remote control event. [ 749.073846][ T5810] m920x_read = error: -19 [ 749.073866][ T5810] dvb-usb: error while querying for an remote control event. [ 749.087678][ T5980] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.091249][ T5980] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.093207][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.093375][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.110192][T12233] netlink: 'syz.6.1462': attribute type 1 has an invalid length. [ 749.172371][T12233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.172705][T12233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.234456][ T7504] m920x_read = error: -19 [ 749.234474][ T7504] dvb-usb: error while querying for an remote control event. [ 749.234513][ T7504] m920x_read = error: -19 [ 749.234523][ T7504] dvb-usb: error while querying for an remote control event. [ 749.266063][T12179] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.286207][T11636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.286222][T11636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.334528][ T5810] m920x_read = error: -19 [ 749.334545][ T5810] dvb-usb: error while querying for an remote control event. [ 749.334584][ T5810] m920x_read = error: -19 [ 749.334594][ T5810] dvb-usb: error while querying for an remote control event. [ 749.341562][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.341578][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.478969][ T5810] m920x_read = error: -19 [ 749.478997][ T5810] dvb-usb: error while querying for an remote control event. [ 749.479056][ T5810] m920x_read = error: -19 [ 749.479067][ T5810] dvb-usb: error while querying for an remote control event. [ 749.585568][ T7477] m920x_read = error: -19 [ 749.585596][ T7477] dvb-usb: error while querying for an remote control event. [ 749.585656][ T7477] m920x_read = error: -19 [ 749.585666][ T7477] dvb-usb: error while querying for an remote control event. [ 749.648710][T12179] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.678173][T12236] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1464'. [ 749.678201][T12236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 749.693082][ T5810] m920x_read = error: -19 [ 749.693107][ T5810] dvb-usb: error while querying for an remote control event. [ 749.693169][ T5810] m920x_read = error: -19 [ 749.693179][ T5810] dvb-usb: error while querying for an remote control event. [ 749.745770][T10962] Bluetooth: hci13: command tx timeout [ 749.816574][ T7477] m920x_read = error: -19 [ 749.816592][ T7477] dvb-usb: error while querying for an remote control event. [ 749.816653][ T7477] m920x_read = error: -19 [ 749.816672][ T7477] dvb-usb: error while querying for an remote control event. [ 749.923876][ T7477] m920x_read = error: -19 [ 749.923904][ T7477] dvb-usb: error while querying for an remote control event. [ 749.923962][ T7477] m920x_read = error: -19 [ 749.923972][ T7477] dvb-usb: error while querying for an remote control event. [ 749.979543][T12179] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.258631][ T7480] m920x_read = error: -19 [ 750.258659][ T7480] dvb-usb: error while querying for an remote control event. [ 750.258710][ T7480] m920x_read = error: -19 [ 750.258729][ T7480] dvb-usb: error while querying for an remote control event. [ 750.363990][ T7480] m920x_read = error: -19 [ 750.364017][ T7480] dvb-usb: error while querying for an remote control event. [ 750.364066][ T7480] m920x_read = error: -19 [ 750.364090][ T7480] dvb-usb: error while querying for an remote control event. [ 750.408289][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 750.408301][ T29] audit: type=1800 audit(1787618828.691:5742): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 750.431474][T12179] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.475239][ T7477] m920x_read = error: -19 [ 750.475266][ T7477] dvb-usb: error while querying for an remote control event. [ 750.475316][ T7477] m920x_read = error: -19 [ 750.475336][ T7477] dvb-usb: error while querying for an remote control event. [ 750.585451][ T7480] m920x_read = error: -19 [ 750.585479][ T7480] dvb-usb: error while querying for an remote control event. [ 750.585537][ T7480] m920x_read = error: -19 [ 750.585547][ T7480] dvb-usb: error while querying for an remote control event. [ 750.641261][ T29] audit: type=1800 audit(1787618828.921:5743): pid=12179 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24510 res=0 errno=0 [ 750.652659][ T29] audit: type=1800 audit(1787618828.931:5744): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=249829 res=0 errno=0 [ 750.718586][ T7480] m920x_read = error: -19 [ 750.718612][ T7480] dvb-usb: error while querying for an remote control event. [ 750.718673][ T7480] m920x_read = error: -19 [ 750.718683][ T7480] dvb-usb: error while querying for an remote control event. [ 750.936822][ T5810] m920x_read = error: -19 [ 750.936850][ T5810] dvb-usb: error while querying for an remote control event. [ 750.936899][ T5810] m920x_read = error: -19 [ 750.936919][ T5810] dvb-usb: error while querying for an remote control event. [ 751.930812][T10962] Bluetooth: hci13: command tx timeout [ 751.931158][ T5810] m920x_read = error: -19 [ 751.931172][ T5810] dvb-usb: error while querying for an remote control event. [ 751.931234][ T5810] m920x_read = error: -19 [ 751.931254][ T5810] dvb-usb: error while querying for an remote control event. [ 752.296136][ T7504] m920x_read = error: -19 [ 752.296155][ T7504] dvb-usb: error while querying for an remote control event. [ 752.296213][ T7504] m920x_read = error: -19 [ 752.296224][ T7504] dvb-usb: error while querying for an remote control event. [ 752.398783][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=12249 comm=syz.3.1467 [ 752.637414][ T7477] m920x_read = error: -19 [ 752.637462][ T7477] dvb-usb: error while querying for an remote control event. [ 752.637528][ T7477] m920x_read = error: -19 [ 752.637538][ T7477] dvb-usb: error while querying for an remote control event. [ 752.642288][T12179] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 752.657528][T12179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 752.658214][T12179] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 752.678015][ T29] audit: type=1800 audit(1787618830.961:5745): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 752.715059][T12179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 752.719055][T12179] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 752.732357][T12179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 752.733548][T12179] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 752.736796][T12179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 752.745470][ T2211] m920x_read = error: -19 [ 752.745486][ T2211] dvb-usb: error while querying for an remote control event. [ 752.745544][ T2211] m920x_read = error: -19 [ 752.745563][ T2211] dvb-usb: error while querying for an remote control event. [ 752.855143][ T7480] m920x_read = error: -19 [ 752.855161][ T7480] dvb-usb: error while querying for an remote control event. [ 752.855223][ T7480] m920x_read = error: -19 [ 752.855243][ T7480] dvb-usb: error while querying for an remote control event. [ 752.859316][ T29] audit: type=1800 audit(1787618831.141:5746): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 752.954176][T12179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.963282][ T7480] m920x_read = error: -19 [ 752.963298][ T7480] dvb-usb: error while querying for an remote control event. [ 752.963357][ T7480] m920x_read = error: -19 [ 752.963367][ T7480] dvb-usb: error while querying for an remote control event. [ 752.991003][T12179] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.009130][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.009201][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.046685][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.046755][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.074476][ T5705] m920x_read = error: -19 [ 753.074503][ T5705] dvb-usb: error while querying for an remote control event. [ 753.074553][ T5705] m920x_read = error: -19 [ 753.074572][ T5705] dvb-usb: error while querying for an remote control event. [ 753.190587][ T7480] m920x_read = error: -19 [ 753.190616][ T7480] dvb-usb: error while querying for an remote control event. [ 753.190674][ T7480] m920x_read = error: -19 [ 753.190684][ T7480] dvb-usb: error while querying for an remote control event. [ 753.294662][ T7480] m920x_read = error: -19 [ 753.294689][ T7480] dvb-usb: error while querying for an remote control event. [ 753.294748][ T7480] m920x_read = error: -19 [ 753.294758][ T7480] dvb-usb: error while querying for an remote control event. [ 753.407350][ T7480] m920x_read = error: -19 [ 753.407378][ T7480] dvb-usb: error while querying for an remote control event. [ 753.407436][ T7480] m920x_read = error: -19 [ 753.407447][ T7480] dvb-usb: error while querying for an remote control event. [ 753.507302][ T29] audit: type=1800 audit(1787618831.791:5747): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 753.514309][ T7480] m920x_read = error: -19 [ 753.514344][ T7480] dvb-usb: error while querying for an remote control event. [ 753.514407][ T7480] m920x_read = error: -19 [ 753.514427][ T7480] dvb-usb: error while querying for an remote control event. [ 753.623684][ T7480] m920x_read = error: -19 [ 753.623712][ T7480] dvb-usb: error while querying for an remote control event. [ 753.623776][ T7480] m920x_read = error: -19 [ 753.623786][ T7480] dvb-usb: error while querying for an remote control event. [ 753.958606][ T5705] m920x_read = error: -19 [ 753.958624][ T5705] dvb-usb: error while querying for an remote control event. [ 753.958693][ T5705] m920x_read = error: -19 [ 753.958713][ T5705] dvb-usb: error while querying for an remote control event. [ 753.977625][T12245] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 753.977654][T12245] Bluetooth: hci0: MSFT extension not registered [ 753.984628][ T9435] Bluetooth: hci13: command tx timeout [ 754.015334][ T29] audit: type=1400 audit(1787618832.301:5748): avc: denied { read append } for pid=12265 comm="syz.1.1470" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 754.015377][ T29] audit: type=1400 audit(1787618832.301:5749): avc: denied { open } for pid=12265 comm="syz.1.1470" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 754.066058][ T5705] m920x_read = error: -19 [ 754.066091][ T5705] dvb-usb: error while querying for an remote control event. [ 754.066140][ T5705] m920x_read = error: -19 [ 754.066160][ T5705] dvb-usb: error while querying for an remote control event. [ 754.173132][ T7480] m920x_read = error: -19 [ 754.173160][ T7480] dvb-usb: error while querying for an remote control event. [ 754.173217][ T7480] m920x_read = error: -19 [ 754.173227][ T7480] dvb-usb: error while querying for an remote control event. [ 754.216079][ T29] audit: type=1107 audit(1787618832.401:5750): pid=12265 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 754.324771][T12179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.353155][ T7477] m920x_read = error: -19 [ 754.353182][ T7477] dvb-usb: error while querying for an remote control event. [ 754.353232][ T7477] m920x_read = error: -19 [ 754.353251][ T7477] dvb-usb: error while querying for an remote control event. [ 754.370533][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1471'. [ 754.437493][T12269] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 754.437595][T12269] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 754.439163][T12269] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 754.439209][T12269] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 754.440344][T12269] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 754.441269][T12269] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 754.441311][T12269] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 754.442250][T12269] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 754.448373][T12269] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 754.448421][T12269] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 754.451715][T12269] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 754.454151][T12269] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 754.454207][T12269] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 754.455423][T12269] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 754.456287][T12269] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 754.456339][T12269] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 754.457251][T12269] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 754.458102][T12269] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 754.458144][T12269] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 754.461125][T12269] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 754.462090][T12269] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 754.462143][T12269] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 754.464401][T12269] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 754.472560][ T7477] m920x_read = error: -19 [ 754.472576][ T7477] dvb-usb: error while querying for an remote control event. [ 754.472635][ T7477] m920x_read = error: -19 [ 754.472655][ T7477] dvb-usb: error while querying for an remote control event. [ 754.473872][T12269] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 754.473917][T12269] Bluetooth: hci12: Opcode 0x0406 failed: -4 [ 754.474856][T12269] Bluetooth: hci12: Opcode 0x0406 failed: -4 [ 754.475716][T12269] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 754.475768][T12269] Bluetooth: hci13: Opcode 0x0406 failed: -4 [ 754.476665][T12269] Bluetooth: hci13: Opcode 0x0406 failed: -4 [ 754.526706][ T29] audit: type=1800 audit(1787618832.811:5751): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 754.573723][ T7477] m920x_read = error: -19 [ 754.573751][ T7477] dvb-usb: error while querying for an remote control event. [ 754.573810][ T7477] m920x_read = error: -19 [ 754.573820][ T7477] dvb-usb: error while querying for an remote control event. [ 754.692683][ T5705] m920x_read = error: -19 [ 754.693007][ T5705] dvb-usb: error while querying for an remote control event. [ 754.693069][ T5705] m920x_read = error: -19 [ 754.693089][ T5705] dvb-usb: error while querying for an remote control event. [ 754.804409][ T7504] m920x_read = error: -19 [ 754.804426][ T7504] dvb-usb: error while querying for an remote control event. [ 754.804486][ T7504] m920x_read = error: -19 [ 754.804505][ T7504] dvb-usb: error while querying for an remote control event. [ 754.923008][ T5705] m920x_read = error: -19 [ 754.923035][ T5705] dvb-usb: error while querying for an remote control event. [ 754.923098][ T5705] m920x_read = error: -19 [ 754.923108][ T5705] dvb-usb: error while querying for an remote control event. [ 754.932929][ T7477] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 755.046314][ T5705] m920x_read = error: -19 [ 755.046340][ T5705] dvb-usb: error while querying for an remote control event. [ 755.046391][ T5705] m920x_read = error: -19 [ 755.046410][ T5705] dvb-usb: error while querying for an remote control event. [ 755.071776][T12292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=12292 comm=syz.3.1473 [ 755.115001][T12179] veth0_vlan: entered promiscuous mode [ 755.116602][ T7477] usb 2-1: Using ep0 maxpacket: 32 [ 755.120801][ T7477] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 755.127031][ T7477] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 755.127060][ T7477] usb 2-1: config 0 has no interface number 0 [ 755.127094][ T7477] usb 2-1: config 0 interface 184 has no altsetting 0 [ 755.139741][ T7477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.139769][ T7477] usb 2-1: Product: syz [ 755.139780][ T7477] usb 2-1: Manufacturer: syz [ 755.139799][ T7477] usb 2-1: SerialNumber: syz [ 755.141880][ T7477] usb 2-1: config 0 descriptor?? [ 755.158839][ T7504] m920x_read = error: -19 [ 755.158856][ T7504] dvb-usb: error while querying for an remote control event. [ 755.158913][ T7504] m920x_read = error: -19 [ 755.158933][ T7504] dvb-usb: error while querying for an remote control event. [ 755.199031][T12179] veth1_vlan: entered promiscuous mode [ 755.263793][ T5810] m920x_read = error: -19 [ 755.263812][ T5810] dvb-usb: error while querying for an remote control event. [ 755.263879][ T5810] m920x_read = error: -19 [ 755.263898][ T5810] dvb-usb: error while querying for an remote control event. [ 755.288963][T12179] veth0_macvtap: entered promiscuous mode [ 755.294680][T12179] veth1_macvtap: entered promiscuous mode [ 755.326587][T12179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.341053][T12179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.374411][ T5810] m920x_read = error: -19 [ 755.374437][ T5810] dvb-usb: error while querying for an remote control event. [ 755.374506][ T5810] m920x_read = error: -19 [ 755.374525][ T5810] dvb-usb: error while querying for an remote control event. [ 755.378472][ T6102] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.378627][ T6102] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.378685][ T6102] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.394621][T11636] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.415552][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 755.415563][ T29] audit: type=1326 audit(1787618833.701:5853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.428986][ T29] audit: type=1326 audit(1787618833.711:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.433849][ T29] audit: type=1326 audit(1787618833.721:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.451566][ T29] audit: type=1326 audit(1787618833.731:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.457210][ T29] audit: type=1326 audit(1787618833.741:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.482316][ T29] audit: type=1326 audit(1787618833.761:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.484246][T11400] m920x_read = error: -19 [ 755.484270][T11400] dvb-usb: error while querying for an remote control event. [ 755.484348][T11400] m920x_read = error: -19 [ 755.484368][T11400] dvb-usb: error while querying for an remote control event. [ 755.485224][ T29] audit: type=1326 audit(1787618833.771:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.505870][ T29] audit: type=1326 audit(1787618833.791:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.507973][ T29] audit: type=1326 audit(1787618833.791:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.3.1473" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3b0f55e90e code=0x7ffc0000 [ 755.511987][ T29] audit: type=1800 audit(1787618833.791:5862): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=250297 res=0 errno=0 [ 755.529000][T12288] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 755.529030][T12288] Bluetooth: hci0: MSFT extension not registered [ 755.598172][ T7480] m920x_read = error: -19 [ 755.598190][ T7480] dvb-usb: error while querying for an remote control event. [ 755.598270][ T7480] m920x_read = error: -19 [ 755.598280][ T7480] dvb-usb: error while querying for an remote control event. [ 755.706951][ T10] m920x_read = error: -19 [ 755.706979][ T10] dvb-usb: error while querying for an remote control event. [ 755.707037][ T10] m920x_read = error: -19 [ 755.707047][ T10] dvb-usb: error while querying for an remote control event. [ 755.741059][T10814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.741085][T10814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.780648][ T7477] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 755.780681][ T7477] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 755.818485][ T5705] m920x_read = error: -19 [ 755.818511][ T5705] dvb-usb: error while querying for an remote control event. [ 755.818577][ T5705] m920x_read = error: -19 [ 755.818587][ T5705] dvb-usb: error while querying for an remote control event. [ 755.887847][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.887863][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.923610][T12294] m920x_read = error: -19 [ 755.923646][T12294] dvb-usb: error while querying for an remote control event. [ 755.923710][T12294] m920x_read = error: -19 [ 755.923730][T12294] dvb-usb: error while querying for an remote control event. [ 755.994874][ T7477] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 755.994906][ T7477] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 755.994920][ T7477] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 755.995105][ T7477] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 756.033476][T12294] m920x_read = error: -19 [ 756.033492][T12294] dvb-usb: error while querying for an remote control event. [ 756.033549][T12294] m920x_read = error: -19 [ 756.033559][T12294] dvb-usb: error while querying for an remote control event. [ 756.064057][ T9435] Bluetooth: hci3: command 0x0406 tx timeout [ 756.144409][T12294] m920x_read = error: -19 [ 756.144435][T12294] dvb-usb: error while querying for an remote control event. [ 756.144493][T12294] m920x_read = error: -19 [ 756.144504][T12294] dvb-usb: error while querying for an remote control event. [ 756.253779][ T2211] m920x_read = error: -19 [ 756.253796][ T2211] dvb-usb: error while querying for an remote control event. [ 756.253853][ T2211] m920x_read = error: -19 [ 756.253863][ T2211] dvb-usb: error while querying for an remote control event. [ 756.363433][ T7477] m920x_read = error: -19 [ 756.363461][ T7477] dvb-usb: error while querying for an remote control event. [ 756.363509][ T7477] m920x_read = error: -19 [ 756.363528][ T7477] dvb-usb: error while querying for an remote control event. [ 756.465552][ T9435] Bluetooth: hci10: command 0x0c1a tx timeout [ 756.465636][ T9435] Bluetooth: hci9: command 0x0c1a tx timeout [ 756.465670][ T9435] Bluetooth: hci8: command 0x0c1a tx timeout [ 756.465701][ T9435] Bluetooth: hci2: command 0x0c1a tx timeout [ 756.465733][ T9435] Bluetooth: hci7: command 0x0c1a tx timeout [ 756.465764][ T9435] Bluetooth: hci6: command 0x0c1a tx timeout [ 756.465967][T10962] Bluetooth: hci11: command 0x0c1a tx timeout [ 756.473081][T12294] m920x_read = error: -19 [ 756.473107][T12294] dvb-usb: error while querying for an remote control event. [ 756.473155][T12294] m920x_read = error: -19 [ 756.473175][T12294] dvb-usb: error while querying for an remote control event. [ 756.533183][ T2211] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 756.543753][ T9483] Bluetooth: hci12: command 0x0c1a tx timeout [ 756.543962][T10962] Bluetooth: hci13: command 0x0c1a tx timeout [ 756.583117][T12294] m920x_read = error: -19 [ 756.583146][T12294] dvb-usb: error while querying for an remote control event. [ 756.583194][T12294] m920x_read = error: -19 [ 756.583213][T12294] dvb-usb: error while querying for an remote control event. [ 756.722973][ T7477] m920x_read = error: -19 [ 756.723000][ T7477] dvb-usb: error while querying for an remote control event. [ 756.723051][ T7477] m920x_read = error: -19 [ 756.723071][ T7477] dvb-usb: error while querying for an remote control event. [ 756.727699][ T2211] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 756.735817][ T2211] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.735845][ T2211] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 756.735884][ T2211] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 756.742002][ T2211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.742021][ T2211] usb 4-1: Product: syz [ 756.742041][ T2211] usb 4-1: Manufacturer: syz [ 756.742051][ T2211] usb 4-1: SerialNumber: syz [ 756.840019][T12294] m920x_read = error: -19 [ 756.840037][T12294] dvb-usb: error while querying for an remote control event. [ 756.840126][T12294] m920x_read = error: -19 [ 756.840146][T12294] dvb-usb: error while querying for an remote control event. [ 756.944590][T12294] m920x_read = error: -19 [ 756.944616][T12294] dvb-usb: error while querying for an remote control event. [ 756.944665][T12294] m920x_read = error: -19 [ 756.944696][T12294] dvb-usb: error while querying for an remote control event. [ 756.988218][T12301] binder: 12300:12301 ioctl c0306201 200000000040 returned -22 [ 757.002141][ T2211] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 757.059052][ T5705] m920x_read = error: -19 [ 757.059080][ T5705] dvb-usb: error while querying for an remote control event. [ 757.059129][ T5705] m920x_read = error: -19 [ 757.059149][ T5705] dvb-usb: error while querying for an remote control event. [ 757.165878][T11400] m920x_read = error: -19 [ 757.165906][T11400] dvb-usb: error while querying for an remote control event. [ 757.165968][T11400] m920x_read = error: -19 [ 757.165979][T11400] dvb-usb: error while querying for an remote control event. [ 757.205960][ T2211] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 757.208771][ T2211] usb 4-1: USB disconnect, device number 40 [ 757.275620][ T10] m920x_read = error: -19 [ 757.275647][ T10] dvb-usb: error while querying for an remote control event. [ 757.275696][ T10] m920x_read = error: -19 [ 757.275715][ T10] dvb-usb: error while querying for an remote control event. [ 757.324950][T10624] udevd[10624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.396093][ T10] m920x_read = error: -19 [ 757.396123][ T10] dvb-usb: error while querying for an remote control event. [ 757.396188][ T10] m920x_read = error: -19 [ 757.396208][ T10] dvb-usb: error while querying for an remote control event. [ 757.519170][ T10] m920x_read = error: -19 [ 757.519196][ T10] dvb-usb: error while querying for an remote control event. [ 757.520806][ T10] m920x_read = error: -19 [ 757.520830][ T10] dvb-usb: error while querying for an remote control event. [ 757.647976][ T10] m920x_read = error: -19 [ 757.648017][ T10] dvb-usb: error while querying for an remote control event. [ 757.648078][ T10] m920x_read = error: -19 [ 757.648101][ T10] dvb-usb: error while querying for an remote control event. [ 757.765061][ T10] m920x_read = error: -19 [ 757.765093][ T10] dvb-usb: error while querying for an remote control event. [ 757.765152][ T10] m920x_read = error: -19 [ 757.765162][ T10] dvb-usb: error while querying for an remote control event. [ 757.876574][ T7477] m920x_read = error: -19 [ 757.876601][ T7477] dvb-usb: error while querying for an remote control event. [ 757.876651][ T7477] m920x_read = error: -19 [ 757.876671][ T7477] dvb-usb: error while querying for an remote control event. [ 757.876967][ T7477] usb 2-1: USB disconnect, device number 44 [ 757.916490][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 757.992420][T12294] m920x_read = error: -19 [ 757.992447][T12294] dvb-usb: error while querying for an remote control event. [ 757.992506][T12294] m920x_read = error: -19 [ 757.992516][T12294] dvb-usb: error while querying for an remote control event. [ 758.064174][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 758.066664][ T10] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 758.068401][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 758.068430][ T10] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 758.068446][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 758.070043][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.070074][ T10] usb 9-1: Product: syz [ 758.070084][ T10] usb 9-1: Manufacturer: syz [ 758.070104][ T10] usb 9-1: SerialNumber: syz [ 758.072277][ T10] usb 9-1: config 0 descriptor?? [ 758.095469][ T7477] m920x_read = error: -19 [ 758.095497][ T7477] dvb-usb: error while querying for an remote control event. [ 758.095565][ T7477] m920x_read = error: -19 [ 758.095576][ T7477] dvb-usb: error while querying for an remote control event. [ 758.156489][T10962] Bluetooth: hci3: command 0x0406 tx timeout [ 758.210753][T12294] m920x_read = error: -19 [ 758.210782][T12294] dvb-usb: error while querying for an remote control event. [ 758.210853][T12294] m920x_read = error: -19 [ 758.210873][T12294] dvb-usb: error while querying for an remote control event. [ 758.313726][T12294] m920x_read = error: -19 [ 758.313752][T12294] dvb-usb: error while querying for an remote control event. [ 758.313820][T12294] m920x_read = error: -19 [ 758.313840][T12294] dvb-usb: error while querying for an remote control event. [ 758.429252][T12294] m920x_read = error: -19 [ 758.429279][T12294] dvb-usb: error while querying for an remote control event. [ 758.429332][T12294] m920x_read = error: -19 [ 758.429352][T12294] dvb-usb: error while querying for an remote control event. [ 758.491257][ T10] gs_usb 9-1:0.0: Configuring for 117 interfaces [ 758.534081][T12294] m920x_read = error: -19 [ 758.534118][T12294] dvb-usb: error while querying for an remote control event. [ 758.534177][T12294] m920x_read = error: -19 [ 758.534187][T12294] dvb-usb: error while querying for an remote control event. [ 758.543747][T10962] Bluetooth: hci11: command 0x0c1a tx timeout [ 758.543793][T10962] Bluetooth: hci6: command 0x0c1a tx timeout [ 758.543822][T10962] Bluetooth: hci7: command 0x0c1a tx timeout [ 758.543849][T10962] Bluetooth: hci2: command 0x0c1a tx timeout [ 758.543875][T10962] Bluetooth: hci8: command 0x0c1a tx timeout [ 758.543892][T10962] Bluetooth: hci9: command 0x0c1a tx timeout [ 758.543926][T10962] Bluetooth: hci10: command 0x0c1a tx timeout [ 758.628661][ T9483] Bluetooth: hci13: command 0x0c1a tx timeout [ 758.628698][ T9483] Bluetooth: hci12: command 0x0c1a tx timeout [ 758.644121][ T7477] m920x_read = error: -19 [ 758.644148][ T7477] dvb-usb: error while querying for an remote control event. [ 758.644215][ T7477] m920x_read = error: -19 [ 758.644225][ T7477] dvb-usb: error while querying for an remote control event. [ 758.763766][ T7477] m920x_read = error: -19 [ 758.763805][ T7477] dvb-usb: error while querying for an remote control event. [ 758.763863][ T7477] m920x_read = error: -19 [ 758.763882][ T7477] dvb-usb: error while querying for an remote control event. [ 759.034735][ T7477] m920x_read = error: -19 [ 759.034764][ T7477] dvb-usb: error while querying for an remote control event. [ 759.034835][ T7477] m920x_read = error: -19 [ 759.034855][ T7477] dvb-usb: error while querying for an remote control event. [ 759.144122][ T5705] m920x_read = error: -19 [ 759.144169][ T5705] dvb-usb: error while querying for an remote control event. [ 759.144218][ T5705] m920x_read = error: -19 [ 759.144238][ T5705] dvb-usb: error while querying for an remote control event. [ 759.259023][ T5705] m920x_read = error: -19 [ 759.259042][ T5705] dvb-usb: error while querying for an remote control event. [ 759.259127][ T5705] m920x_read = error: -19 [ 759.259138][ T5705] dvb-usb: error while querying for an remote control event. [ 759.313343][T12310] kexec: Could not allocate control_code_buffer [ 759.381022][ T7477] m920x_read = error: -19 [ 759.381041][ T7477] dvb-usb: error while querying for an remote control event. [ 759.381125][ T7477] m920x_read = error: -19 [ 759.381135][ T7477] dvb-usb: error while querying for an remote control event. [ 759.411040][ T9483] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 759.422299][ T9483] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 759.459770][ T9483] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 759.484245][ T5705] m920x_read = error: -19 [ 759.484263][ T5705] dvb-usb: error while querying for an remote control event. [ 759.484319][ T5705] m920x_read = error: -19 [ 759.484349][ T5705] dvb-usb: error while querying for an remote control event. [ 759.513277][ T10] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 759.513326][ T10] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 759.515425][ T9483] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 759.530807][ T9483] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 759.598686][ T10] m920x_read = error: -19 [ 759.598715][ T10] dvb-usb: error while querying for an remote control event. [ 759.598778][ T10] m920x_read = error: -19 [ 759.598789][ T10] dvb-usb: error while querying for an remote control event. [ 759.792978][ T10] m920x_read = error: -19 [ 759.793012][ T10] dvb-usb: error while querying for an remote control event. [ 759.793073][ T10] m920x_read = error: -19 [ 759.793093][ T10] dvb-usb: error while querying for an remote control event. [ 759.802121][T12328] jffs2: notice: (12328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 759.846498][T12328] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 759.920926][ T10] m920x_read = error: -19 [ 759.920954][ T10] dvb-usb: error while querying for an remote control event. [ 759.921021][ T10] m920x_read = error: -19 [ 759.921031][ T10] dvb-usb: error while querying for an remote control event. [ 759.987517][T12328] afs: Unknown parameter ' ' [ 760.001179][ T10] usb 9-1: USB disconnect, device number 2 [ 760.031323][T12294] m920x_read = error: -19 [ 760.031342][T12294] dvb-usb: error while querying for an remote control event. [ 760.031404][T12294] m920x_read = error: -19 [ 760.031423][T12294] dvb-usb: error while querying for an remote control event. [ 760.135202][ T5705] m920x_read = error: -19 [ 760.135220][ T5705] dvb-usb: error while querying for an remote control event. [ 760.135279][ T5705] m920x_read = error: -19 [ 760.135298][ T5705] dvb-usb: error while querying for an remote control event. [ 760.258085][ T10] m920x_read = error: -19 [ 760.258124][ T10] dvb-usb: error while querying for an remote control event. [ 760.258195][ T10] m920x_read = error: -19 [ 760.258215][ T10] dvb-usb: error while querying for an remote control event. [ 760.438257][T12294] m920x_read = error: -19 [ 760.438284][T12294] dvb-usb: error while querying for an remote control event. [ 760.438328][T12294] m920x_read = error: -19 [ 760.438338][T12294] dvb-usb: error while querying for an remote control event. [ 760.469515][T12320] lo speed is unknown, defaulting to 1000 [ 760.550455][ T10] m920x_read = error: -19 [ 760.550499][ T10] dvb-usb: error while querying for an remote control event. [ 760.550620][ T10] m920x_read = error: -19 [ 760.550653][ T10] dvb-usb: error while querying for an remote control event. [ 760.631881][ T9483] Bluetooth: hci10: command 0x0c1a tx timeout [ 760.631922][ T9483] Bluetooth: hci9: command 0x0c1a tx timeout [ 760.631951][ T9483] Bluetooth: hci8: command 0x0c1a tx timeout [ 760.631978][ T9483] Bluetooth: hci2: command 0x0c1a tx timeout [ 760.631996][ T9483] Bluetooth: hci7: command 0x0c1a tx timeout [ 760.632022][ T9483] Bluetooth: hci6: command 0x0c1a tx timeout [ 760.632048][ T9483] Bluetooth: hci11: command 0x0c1a tx timeout [ 760.656006][T12294] m920x_read = error: -19 [ 760.656033][T12294] dvb-usb: error while querying for an remote control event. [ 760.656081][T12294] m920x_read = error: -19 [ 760.656101][T12294] dvb-usb: error while querying for an remote control event. [ 760.704047][T10962] Bluetooth: hci12: command 0x0c1a tx timeout [ 760.704084][T10962] Bluetooth: hci13: command 0x0c1a tx timeout [ 760.770439][T12294] m920x_read = error: -19 [ 760.770464][T12294] dvb-usb: error while querying for an remote control event. [ 760.770611][T12294] m920x_read = error: -19 [ 760.770631][T12294] dvb-usb: error while querying for an remote control event. [ 760.873570][ T10] m920x_read = error: -19 [ 760.873596][ T10] dvb-usb: error while querying for an remote control event. [ 760.873669][ T10] m920x_read = error: -19 [ 760.873696][ T10] dvb-usb: error while querying for an remote control event. [ 760.983279][ T5705] m920x_read = error: -19 [ 760.983308][ T5705] dvb-usb: error while querying for an remote control event. [ 760.983377][ T5705] m920x_read = error: -19 [ 760.983397][ T5705] dvb-usb: error while querying for an remote control event. [ 761.004926][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 761.004937][ T29] audit: type=1800 audit(1787618839.291:5907): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15857 res=0 errno=0 [ 761.013116][T12294] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 761.094653][ T5705] m920x_read = error: -19 [ 761.094682][ T5705] dvb-usb: error while querying for an remote control event. [ 761.094740][ T5705] m920x_read = error: -19 [ 761.094750][ T5705] dvb-usb: error while querying for an remote control event. [ 761.180301][T12294] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 761.181613][T12294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 761.181650][T12294] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 761.182476][T12294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 761.182501][T12294] usb 4-1: SerialNumber: syz [ 761.212629][ T7477] m920x_read = error: -19 [ 761.212661][ T7477] dvb-usb: error while querying for an remote control event. [ 761.212915][ T7477] m920x_read = error: -19 [ 761.212927][ T7477] dvb-usb: error while querying for an remote control event. [ 761.224921][ T29] audit: type=1800 audit(1787618839.511:5908): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=252546 res=0 errno=0 [ 761.241234][ T29] audit: type=1800 audit(1787618839.521:5909): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=252576 res=0 errno=0 [ 761.252212][ T29] audit: type=1800 audit(1787618839.531:5910): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=252553 res=0 errno=0 [ 761.252267][ T29] audit: type=1800 audit(1787618839.531:5911): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=252554 res=0 errno=0 [ 761.454164][T12346] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 761.459105][T12346] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1486'. [ 761.554110][ T5705] m920x_read = error: -19 [ 761.554136][ T5705] dvb-usb: error while querying for an remote control event. [ 761.554243][ T5705] m920x_read = error: -19 [ 761.554281][ T5705] dvb-usb: error while querying for an remote control event. [ 761.565926][ T29] audit: type=1800 audit(1787618839.851:5912): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=252555 res=0 errno=0 [ 761.622200][ T29] audit: type=1800 audit(1787618839.901:5913): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15857 res=0 errno=0 [ 761.663751][ T10] m920x_read = error: -19 [ 761.663779][ T10] dvb-usb: error while querying for an remote control event. [ 761.663881][ T10] m920x_read = error: -19 [ 761.663891][ T10] dvb-usb: error while querying for an remote control event. [ 761.666466][ T9483] Bluetooth: hci14: command tx timeout [ 761.727494][ T29] audit: type=1800 audit(1787618840.011:5914): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 761.774683][ T5705] m920x_read = error: -19 [ 761.774715][ T5705] dvb-usb: error while querying for an remote control event. [ 761.774807][ T5705] m920x_read = error: -19 [ 761.774819][ T5705] dvb-usb: error while querying for an remote control event. [ 761.884918][ T5705] m920x_read = error: -19 [ 761.884946][ T5705] dvb-usb: error while querying for an remote control event. [ 761.885049][ T5705] m920x_read = error: -19 [ 761.885069][ T5705] dvb-usb: error while querying for an remote control event. [ 761.946014][T12349] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1487'. [ 761.965872][T12352] syzkaller1: entered promiscuous mode [ 761.965889][T12352] syzkaller1: entered allmulticast mode [ 761.997167][ T2211] m920x_read = error: -19 [ 761.997184][ T2211] dvb-usb: error while querying for an remote control event. [ 761.997302][ T2211] m920x_read = error: -19 [ 761.997312][ T2211] dvb-usb: error while querying for an remote control event. [ 762.077437][ T29] audit: type=1800 audit(1787618840.361:5915): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15857 res=0 errno=0 [ 762.105175][ T10] m920x_read = error: -19 [ 762.105193][ T10] dvb-usb: error while querying for an remote control event. [ 762.105308][ T10] m920x_read = error: -19 [ 762.105318][ T10] dvb-usb: error while querying for an remote control event. [ 762.193860][T12320] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.193948][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.194239][T12320] bridge_slave_0: entered allmulticast mode [ 762.195667][T12320] bridge_slave_0: entered promiscuous mode [ 762.215225][ T2211] m920x_read = error: -19 [ 762.215251][ T2211] dvb-usb: error while querying for an remote control event. [ 762.215352][ T2211] m920x_read = error: -19 [ 762.215362][ T2211] dvb-usb: error while querying for an remote control event. [ 762.231373][T12320] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.231450][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.231602][T12320] bridge_slave_1: entered allmulticast mode [ 762.239184][T12320] bridge_slave_1: entered promiscuous mode [ 762.319785][ T29] audit: type=1800 audit(1787618840.601:5916): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 762.324975][ T5705] m920x_read = error: -19 [ 762.325019][ T5705] dvb-usb: error while querying for an remote control event. [ 762.325106][ T5705] m920x_read = error: -19 [ 762.325126][ T5705] dvb-usb: error while querying for an remote control event. [ 762.382905][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.384626][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.515260][T12320] team0: Port device team_slave_0 added [ 762.517644][T12320] team0: Port device team_slave_1 added [ 762.538332][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.538354][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.538377][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.539962][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.539972][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.539997][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.543360][ T5705] m920x_read = error: -19 [ 762.543374][ T5705] dvb-usb: error while querying for an remote control event. [ 762.543490][ T5705] m920x_read = error: -19 [ 762.543500][ T5705] dvb-usb: error while querying for an remote control event. [ 762.560386][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 762.622582][T12320] hsr_slave_0: entered promiscuous mode [ 762.637606][T12320] hsr_slave_1: entered promiscuous mode [ 762.642496][T12320] debugfs: 'hsr0' already exists in 'hsr' [ 762.642522][T12320] Cannot create hsr debugfs directory [ 762.658096][ T7477] m920x_read = error: -19 [ 762.658122][ T7477] dvb-usb: error while querying for an remote control event. [ 762.658230][ T7477] m920x_read = error: -19 [ 762.658249][ T7477] dvb-usb: error while querying for an remote control event. [ 762.743629][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 762.744185][ T10] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 762.745228][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.745257][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.745271][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 762.745316][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.747686][ T10] usb 9-1: config 0 descriptor?? [ 762.752210][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input20 [ 762.759543][ T4951] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 762.765576][ T7477] m920x_read = error: -19 [ 762.765603][ T7477] dvb-usb: error while querying for an remote control event. [ 762.765707][ T7477] m920x_read = error: -19 [ 762.765717][ T7477] dvb-usb: error while querying for an remote control event. [ 762.793949][ T4951] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 762.840748][ T4951] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 762.878276][ T10] m920x_read = error: -19 [ 762.878303][ T10] dvb-usb: error while querying for an remote control event. [ 762.878411][ T10] m920x_read = error: -19 [ 762.878870][ T10] dvb-usb: error while querying for an remote control event. [ 762.892068][ T4951] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 763.044603][T12294] cdc_ether 4-1:1.0: skipping garbage [ 763.044633][T12294] cdc_ether 4-1:1.0: GUID doesn't match [ 763.052703][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.053435][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.057054][ T10] m920x_read = error: -19 [ 763.057078][ T10] dvb-usb: error while querying for an remote control event. [ 763.057164][ T10] m920x_read = error: -19 [ 763.057183][ T10] dvb-usb: error while querying for an remote control event. [ 763.066360][T12294] usb 4-1: USB disconnect, device number 41 [ 763.142662][T12367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.143122][T12367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.147981][ T7477] usb 9-1: USB disconnect, device number 3 [ 763.172002][ T10] m920x_read = error: -19 [ 763.172021][ T10] dvb-usb: error while querying for an remote control event. [ 763.172119][ T10] m920x_read = error: -19 [ 763.172139][ T10] dvb-usb: error while querying for an remote control event. [ 763.274205][ T5705] m920x_read = error: -19 [ 763.274223][ T5705] dvb-usb: error while querying for an remote control event. [ 763.274316][ T5705] m920x_read = error: -19 [ 763.274326][ T5705] dvb-usb: error while querying for an remote control event. [ 763.386030][T12294] m920x_read = error: -19 [ 763.386058][T12294] dvb-usb: error while querying for an remote control event. [ 763.386150][T12294] m920x_read = error: -19 [ 763.386160][T12294] dvb-usb: error while querying for an remote control event. [ 763.624584][ T7477] m920x_read = error: -19 [ 763.624611][ T7477] dvb-usb: error while querying for an remote control event. [ 763.624708][ T7477] m920x_read = error: -19 [ 763.624719][ T7477] dvb-usb: error while querying for an remote control event. [ 763.909209][ T9483] Bluetooth: hci14: command tx timeout [ 763.924950][ T5705] m920x_read = error: -19 [ 763.924977][ T5705] dvb-usb: error while querying for an remote control event. [ 763.925075][ T5705] m920x_read = error: -19 [ 763.925085][ T5705] dvb-usb: error while querying for an remote control event. [ 764.072967][ T7477] m920x_read = error: -19 [ 764.072994][ T7477] dvb-usb: error while querying for an remote control event. [ 764.073091][ T7477] m920x_read = error: -19 [ 764.073101][ T7477] dvb-usb: error while querying for an remote control event. [ 764.183547][ T7477] m920x_read = error: -19 [ 764.183565][ T7477] dvb-usb: error while querying for an remote control event. [ 764.183659][ T7477] m920x_read = error: -19 [ 764.183679][ T7477] dvb-usb: error while querying for an remote control event. [ 765.216849][ T7477] m920x_read = error: -19 [ 765.216868][ T7477] dvb-usb: error while querying for an remote control event. [ 765.216965][ T7477] m920x_read = error: -19 [ 765.216988][ T7477] dvb-usb: error while querying for an remote control event. [ 765.714258][T12294] m920x_read = error: -19 [ 765.714286][T12294] dvb-usb: error while querying for an remote control event. [ 765.714386][T12294] m920x_read = error: -19 [ 765.714397][T12294] dvb-usb: error while querying for an remote control event. [ 765.867221][ T5705] m920x_read = error: -19 [ 765.867249][ T5705] dvb-usb: error while querying for an remote control event. [ 765.867347][ T5705] m920x_read = error: -19 [ 765.867357][ T5705] dvb-usb: error while querying for an remote control event. [ 765.973104][ T5705] m920x_read = error: -19 [ 765.973132][ T5705] dvb-usb: error while querying for an remote control event. [ 765.973226][ T5705] m920x_read = error: -19 [ 765.973236][ T5705] dvb-usb: error while querying for an remote control event. [ 765.989784][T10962] Bluetooth: hci14: command tx timeout [ 766.057098][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 766.057119][ T29] audit: type=1800 audit(1787618844.341:5941): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256959 res=0 errno=0 [ 766.059945][ T29] audit: type=1800 audit(1787618844.341:5942): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256970 res=0 errno=0 [ 766.080005][ T9483] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 766.085904][T12294] m920x_read = error: -19 [ 766.085930][T12294] dvb-usb: error while querying for an remote control event. [ 766.086030][T12294] m920x_read = error: -19 [ 766.086050][T12294] dvb-usb: error while querying for an remote control event. [ 766.092126][ T9483] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 766.100531][ T9483] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 766.102150][ T9483] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 766.103845][ T9483] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 766.194714][ T5705] m920x_read = error: -19 [ 766.194741][ T5705] dvb-usb: error while querying for an remote control event. [ 766.194839][ T5705] m920x_read = error: -19 [ 766.194849][ T5705] dvb-usb: error while querying for an remote control event. [ 766.319441][ T5705] m920x_read = error: -19 [ 766.319466][ T5705] dvb-usb: error while querying for an remote control event. [ 766.319568][ T5705] m920x_read = error: -19 [ 766.319579][ T5705] dvb-usb: error while querying for an remote control event. [ 766.367828][ T29] audit: type=1800 audit(1787618844.651:5943): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 766.377662][ T29] audit: type=1800 audit(1787618844.661:5944): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256997 res=0 errno=0 [ 766.412317][ T29] audit: type=1800 audit(1787618844.691:5945): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257008 res=0 errno=0 [ 766.413189][T12294] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 766.423027][ T5705] m920x_read = error: -19 [ 766.423053][ T5705] dvb-usb: error while querying for an remote control event. [ 766.423163][ T5705] m920x_read = error: -19 [ 766.423183][ T5705] dvb-usb: error while querying for an remote control event. [ 766.533496][ T5705] m920x_read = error: -19 [ 766.533524][ T5705] dvb-usb: error while querying for an remote control event. [ 766.533613][ T5705] m920x_read = error: -19 [ 766.533623][ T5705] dvb-usb: error while querying for an remote control event. [ 766.611510][T12294] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 766.643552][ T5705] m920x_read = error: -19 [ 766.643580][ T5705] dvb-usb: error while querying for an remote control event. [ 766.643681][ T5705] m920x_read = error: -19 [ 766.643692][ T5705] dvb-usb: error while querying for an remote control event. [ 766.742889][T12294] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.742918][T12294] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 766.742954][T12294] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 766.756357][ T5705] m920x_read = error: -19 [ 766.756386][ T5705] dvb-usb: error while querying for an remote control event. [ 766.756503][ T5705] m920x_read = error: -19 [ 766.756514][ T5705] dvb-usb: error while querying for an remote control event. [ 766.874717][ T5705] m920x_read = error: -19 [ 766.874745][ T5705] dvb-usb: error while querying for an remote control event. [ 766.874865][ T5705] m920x_read = error: -19 [ 766.874875][ T5705] dvb-usb: error while querying for an remote control event. [ 766.931459][T12294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.931486][T12294] usb 4-1: Product: syz [ 766.931497][T12294] usb 4-1: Manufacturer: syz [ 766.931507][T12294] usb 4-1: SerialNumber: syz [ 767.387439][ T5705] m920x_read = error: -19 [ 767.387476][ T5705] dvb-usb: error while querying for an remote control event. [ 767.387579][ T5705] m920x_read = error: -19 [ 767.387608][ T5705] dvb-usb: error while querying for an remote control event. [ 767.426796][ T29] audit: type=1800 audit(1787618845.711:5946): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=257019 res=0 errno=0 [ 767.971680][ T29] audit: type=1800 audit(1787618846.251:5947): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=257051 res=0 errno=0 [ 768.030806][T12393] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 768.040966][T12294] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 768.060525][ T7477] m920x_read = error: -19 [ 768.060563][ T7477] dvb-usb: error while querying for an remote control event. [ 768.060663][ T7477] m920x_read = error: -19 [ 768.060682][ T7477] dvb-usb: error while querying for an remote control event. [ 768.064823][T12389] Bluetooth: hci14: command tx timeout [ 768.066036][ T29] audit: type=1800 audit(1787618846.351:5948): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=257026 res=0 errno=0 [ 768.120058][ T29] audit: type=1800 audit(1787618846.401:5949): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=257027 res=0 errno=0 [ 768.164599][ T5705] m920x_read = error: -19 [ 768.164626][ T5705] dvb-usb: error while querying for an remote control event. [ 768.164733][ T5705] m920x_read = error: -19 [ 768.164752][ T5705] dvb-usb: error while querying for an remote control event. [ 768.324738][T11400] m920x_read = error: -19 [ 768.324757][T11400] dvb-usb: error while querying for an remote control event. [ 768.324832][T11400] m920x_read = error: -19 [ 768.324842][T11400] dvb-usb: error while querying for an remote control event. [ 768.714135][ T5705] m920x_read = error: -19 [ 768.714162][ T5705] dvb-usb: error while querying for an remote control event. [ 768.714282][ T5705] m920x_read = error: -19 [ 768.714293][ T5705] dvb-usb: error while querying for an remote control event. [ 768.741530][T12389] Bluetooth: hci15: command tx timeout [ 768.798775][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1497'. [ 768.829271][T11400] m920x_read = error: -19 [ 768.829289][T11400] dvb-usb: error while querying for an remote control event. [ 768.829411][T11400] m920x_read = error: -19 [ 768.829421][T11400] dvb-usb: error while querying for an remote control event. [ 768.849630][ T29] audit: type=1400 audit(1787618847.131:5950): avc: denied { write } for pid=12382 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 768.933417][ T5705] m920x_read = error: -19 [ 768.933444][ T5705] dvb-usb: error while querying for an remote control event. [ 768.933547][ T5705] m920x_read = error: -19 [ 768.933558][ T5705] dvb-usb: error while querying for an remote control event. [ 769.043731][ T5705] m920x_read = error: -19 [ 769.043775][ T5705] dvb-usb: error while querying for an remote control event. [ 769.043913][ T5705] m920x_read = error: -19 [ 769.043924][ T5705] dvb-usb: error while querying for an remote control event. [ 769.155141][ T10] m920x_read = error: -19 [ 769.155174][ T10] dvb-usb: error while querying for an remote control event. [ 769.155287][ T10] m920x_read = error: -19 [ 769.155307][ T10] dvb-usb: error while querying for an remote control event. [ 769.248720][T12402] i2c i2c-0: delete_device: Can't find device in list [ 769.265308][ T10] m920x_read = error: -19 [ 769.265336][ T10] dvb-usb: error while querying for an remote control event. [ 769.265462][ T10] m920x_read = error: -19 [ 769.265472][ T10] dvb-usb: error while querying for an remote control event. [ 769.320969][T12294] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 769.321055][T12294] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 769.332681][T12294] usb 4-1: USB disconnect, device number 42 [ 769.485016][ T10] m920x_read = error: -19 [ 769.485043][ T10] dvb-usb: error while querying for an remote control event. [ 769.485140][ T10] m920x_read = error: -19 [ 769.485150][ T10] dvb-usb: error while querying for an remote control event. [ 769.593786][ T10] m920x_read = error: -19 [ 769.593821][ T10] dvb-usb: error while querying for an remote control event. [ 769.593936][ T10] m920x_read = error: -19 [ 769.593946][ T10] dvb-usb: error while querying for an remote control event. [ 769.704376][ T10] m920x_read = error: -19 [ 769.704404][ T10] dvb-usb: error while querying for an remote control event. [ 769.704502][ T10] m920x_read = error: -19 [ 769.704512][ T10] dvb-usb: error while querying for an remote control event. [ 769.720959][T12383] lo speed is unknown, defaulting to 1000 [ 769.752408][T12411] syzkaller1: entered promiscuous mode [ 769.752425][T12411] syzkaller1: entered allmulticast mode [ 769.814081][ T10] m920x_read = error: -19 [ 769.814110][ T10] dvb-usb: error while querying for an remote control event. [ 769.814208][ T10] m920x_read = error: -19 [ 769.814218][ T10] dvb-usb: error while querying for an remote control event. [ 769.923773][T12294] m920x_read = error: -19 [ 769.923801][T12294] dvb-usb: error while querying for an remote control event. [ 769.923895][T12294] m920x_read = error: -19 [ 769.923905][T12294] dvb-usb: error while querying for an remote control event. [ 770.035175][T12294] m920x_read = error: -19 [ 770.035202][T12294] dvb-usb: error while querying for an remote control event. [ 770.035316][T12294] m920x_read = error: -19 [ 770.035336][T12294] dvb-usb: error while querying for an remote control event. [ 770.148043][ T10] m920x_read = error: -19 [ 770.148071][ T10] dvb-usb: error while querying for an remote control event. [ 770.148167][ T10] m920x_read = error: -19 [ 770.148177][ T10] dvb-usb: error while querying for an remote control event. [ 770.253493][T12294] m920x_read = error: -19 [ 770.253527][T12294] dvb-usb: error while querying for an remote control event. [ 770.253620][T12294] m920x_read = error: -19 [ 770.253640][T12294] dvb-usb: error while querying for an remote control event. [ 770.363402][T12294] m920x_read = error: -19 [ 770.363430][T12294] dvb-usb: error while querying for an remote control event. [ 770.363527][T12294] m920x_read = error: -19 [ 770.363546][T12294] dvb-usb: error while querying for an remote control event. [ 770.473664][T12294] m920x_read = error: -19 [ 770.473690][T12294] dvb-usb: error while querying for an remote control event. [ 770.473781][T12294] m920x_read = error: -19 [ 770.473792][T12294] dvb-usb: error while querying for an remote control event. [ 770.473851][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 770.586332][ T5705] m920x_read = error: -19 [ 770.586358][ T5705] dvb-usb: error while querying for an remote control event. [ 770.586450][ T5705] m920x_read = error: -19 [ 770.586461][ T5705] dvb-usb: error while querying for an remote control event. [ 770.701220][ T5705] m920x_read = error: -19 [ 770.701266][ T5705] dvb-usb: error while querying for an remote control event. [ 770.701370][ T5705] m920x_read = error: -19 [ 770.701399][ T5705] dvb-usb: error while querying for an remote control event. [ 770.785494][T12389] Bluetooth: hci15: command tx timeout [ 770.803096][ T5705] m920x_read = error: -19 [ 770.803125][ T5705] dvb-usb: error while querying for an remote control event. [ 770.803221][ T5705] m920x_read = error: -19 [ 770.803240][ T5705] dvb-usb: error while querying for an remote control event. [ 770.914537][ T5705] m920x_read = error: -19 [ 770.914565][ T5705] dvb-usb: error while querying for an remote control event. [ 770.914658][ T5705] m920x_read = error: -19 [ 770.914687][ T5705] dvb-usb: error while querying for an remote control event. [ 770.938486][T12320] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 770.981556][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.982327][T12320] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 770.998937][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 770.998977][ T10] usb 4-1: New USB device found, idVendor=187f, idProduct=0800, bcdDevice=36.0b [ 770.999738][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 770.999768][ T10] usb 4-1: can't read configurations, error -71 [ 771.010001][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.011147][T12320] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 771.023723][T12294] m920x_read = error: -19 [ 771.023749][T12294] dvb-usb: error while querying for an remote control event. [ 771.023831][T12294] m920x_read = error: -19 [ 771.023851][T12294] dvb-usb: error while querying for an remote control event. [ 771.040688][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.041720][T12320] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 771.060553][T12320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.136832][T12294] m920x_read = error: -19 [ 771.136850][T12294] dvb-usb: error while querying for an remote control event. [ 771.136961][T12294] m920x_read = error: -19 [ 771.136971][T12294] dvb-usb: error while querying for an remote control event. [ 771.150736][T12420] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 771.241048][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 771.241072][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 771.244096][ T5705] m920x_read = error: -19 [ 771.244126][ T5705] dvb-usb: error while querying for an remote control event. [ 771.244230][ T5705] m920x_read = error: -19 [ 771.244249][ T5705] dvb-usb: error while querying for an remote control event. [ 771.353447][T11400] m920x_read = error: -19 [ 771.353515][T11400] dvb-usb: error while querying for an remote control event. [ 771.353708][T11400] m920x_read = error: -19 [ 771.353738][T11400] dvb-usb: error while querying for an remote control event. [ 771.375462][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 771.375500][ T29] audit: type=1800 audit(1787618849.661:5961): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259230 res=0 errno=0 [ 771.379074][ T29] audit: type=1800 audit(1787618849.661:5962): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259242 res=0 errno=0 [ 771.384313][ T29] audit: type=1800 audit(1787618849.661:5963): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=259254 res=0 errno=0 [ 771.391865][ T29] audit: type=1800 audit(1787618849.671:5964): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=1339 res=0 errno=0 [ 771.402816][ T29] audit: type=1800 audit(1787618849.671:5965): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15857 res=0 errno=0 [ 771.504474][T11400] m920x_read = error: -19 [ 771.982812][ T29] audit: type=1400 audit(1787618850.181:5966): avc: denied { write } for pid=12436 comm="syz.3.1503" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 771.990825][ T5705] m920x_read = error: -19 [ 772.088998][T12320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.097991][ T5705] dvb-usb: error while querying for an remote control event. [ 772.215635][T12383] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.301179][ T2211] m920x_read = error: -19 [ 772.308221][T12383] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.336797][ T2211] dvb-usb: error while querying for an remote control event. [ 772.349159][T12383] bridge_slave_0: entered allmulticast mode [ 772.534859][ T2211] m920x_read = error: -19 [ 772.809121][T12383] bridge_slave_0: entered promiscuous mode [ 772.831929][T11400] dvb-usb: error while querying for an remote control event. [ 772.844729][T12383] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.845323][T12383] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.845457][T12383] bridge_slave_1: entered allmulticast mode [ 772.847078][T12383] bridge_slave_1: entered promiscuous mode [ 772.890621][T12383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.924013][ T2211] dvb-usb: error while querying for an remote control event. [ 772.963004][T12389] Bluetooth: hci15: command tx timeout [ 773.015006][ T29] audit: type=1800 audit(1787618851.251:5967): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14996 res=0 errno=0 [ 773.097076][T11400] m920x_read = error: -19 [ 773.204252][ T29] audit: type=1800 audit(1787618851.471:5968): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15857 res=0 errno=0 [ 773.234118][T11400] dvb-usb: error while querying for an remote control event. [ 773.266840][T12320] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.407936][T11400] m920x_read = error: -19 [ 773.522571][T12383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.580747][ T29] audit: type=1326 audit(1787618851.851:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 773.580974][ T29] audit: type=1326 audit(1787618851.851:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 773.586932][ T2211] m920x_read = error: -19 [ 775.212911][T12389] Bluetooth: hci15: command tx timeout [ 775.227796][T11400] dvb-usb: error while querying for an remote control event. [ 775.542799][T12444] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 794.249464][ T10] m920x_read = error: -19 [ 794.273213][T12444] Bluetooth: hci0: MSFT extension not registered [ 794.276207][ T10] dvb-usb: error while querying for an remote control event. [ 794.687400][T11400] m920x_read = error: -19 [ 794.844847][ T29] audit: type=1326 audit(1787618852.681:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 794.855468][T11400] dvb-usb: error while querying for an remote control event. [ 795.212822][ T29] audit: type=1326 audit(1787618852.681:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 795.217605][ T2211] dvb-usb: error while querying for an remote control event. [ 795.262003][ T29] audit: type=1326 audit(1787618852.731:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 795.373093][ T2211] m920x_read = error: -19 [ 795.502452][ T29] audit: type=1326 audit(1787618852.731:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 795.509075][ T10] m920x_read = error: -19 [ 795.515274][ T29] audit: type=1326 audit(1787618852.731:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 795.519194][ T10] dvb-usb: error while querying for an remote control event. [ 795.619121][ T5705] m920x_read = error: -19 [ 795.873660][ T30] INFO: task syz.1.1314:11015 blocked for more than 146 seconds. [ 795.881112][ T2211] dvb-usb: error while querying for an remote control event. [ 795.934592][ T30] Tainted: G L syzkaller #0 [ 795.934613][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 795.934624][ T30] task:syz.1.1314 state:D stack:28728 pid:11015 tgid:11013 ppid:5601 task_flags:0x400040 flags:0x00080002 [ 795.934691][ T30] Call Trace: [ 795.934709][ T30] [ 795.934725][ T30] __schedule+0x1259/0x6920 [ 795.934757][ T30] ? __lock_acquire+0x4c5/0x1ec0 [ 795.934809][ T30] ? __pfx___schedule+0x10/0x10 [ 795.934831][ T30] ? find_held_lock+0x2b/0x80 [ 795.934858][ T30] ? schedule+0x225/0x2c0 [ 795.934886][ T30] schedule+0xdd/0x2c0 [ 795.934908][ T30] schedule_preempt_disabled+0x13/0x30 [ 795.934930][ T30] __mutex_lock+0xcbf/0x1bc0 [ 795.934957][ T30] ? tty_open+0x425/0xe20 [ 795.934993][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 795.935025][ T30] ? kasan_save_track+0x14/0x30 [ 795.935069][ T30] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 795.935101][ T30] ? tty_open+0x134/0xe20 [ 795.935134][ T30] ? tty_open+0x425/0xe20 [ 795.935159][ T30] tty_open+0x425/0xe20 [ 795.935192][ T30] ? __pfx_tty_open+0x10/0x10 [ 795.935218][ T30] ? chrdev_open+0x10b/0x6a0 [ 795.935264][ T30] ? chrdev_open+0x10b/0x6a0 [ 795.935303][ T30] ? __pfx_tty_open+0x10/0x10 [ 795.935331][ T30] chrdev_open+0x234/0x6a0 [ 795.935365][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 795.935399][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 795.935433][ T30] do_dentry_open+0x6ab/0x14d0 [ 795.935464][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 795.935506][ T30] vfs_open+0x82/0x3f0 [ 795.935534][ T30] path_openat+0x19fa/0x2440 [ 795.935561][ T30] ? __pfx_path_openat+0x10/0x10 [ 795.935592][ T30] do_file_open+0x20e/0x430 [ 795.935618][ T30] ? __pfx_do_file_open+0x10/0x10 [ 795.935663][ T30] ? _raw_spin_unlock+0x28/0x50 [ 795.935685][ T30] ? alloc_fd+0x471/0x7a0 [ 795.935717][ T30] do_sys_openat2+0x10f/0x1e0 [ 795.935739][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 795.935776][ T30] __x64_sys_openat+0x12d/0x210 [ 795.935803][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 795.935842][ T30] do_syscall_64+0x123/0x790 [ 795.935873][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.935898][ T30] RIP: 0033:0x7eff08b5e90e [ 795.935919][ T30] RSP: 002b:00007eff09a11b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 795.935942][ T30] RAX: ffffffffffffffda RBX: 00007eff09a126c0 RCX: 00007eff08b5e90e [ 795.935959][ T30] RDX: 0000000000000002 RSI: 00007eff09a11c00 RDI: ffffffffffffff9c [ 795.935975][ T30] RBP: 00007eff08c35024 R08: 0000000000000000 R09: 0000000000000000 [ 795.935991][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.936031][ T30] R13: 00007eff08e26038 R14: 00007eff08e25fa0 R15: 00007ffe04b5eb78 [ 795.936071][ T30] [ 795.936171][ T30] [ 795.936171][ T30] Showing all locks held in the system: [ 795.936184][ T30] locks held by khungtaskd/30: 1, last CPU#1: [ 795.936202][ T30] #0: ffffffff8ede9de0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 795.936274][ T30] locks held by kworker/1:1/90: 3, on CPU#1: [ 795.936291][ T30] #0: ffff88801c057140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 795.936354][ T30] #1: ffffc900024f7d08 (netdev_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 795.936411][ T30] #2: ffffffff90cc40c0 ( [ 796.082194][ T2211] m920x_read = error: -19 [ 796.128395][ T29] audit: type=1326 audit(1787618852.731:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 796.243895][ T2211] dvb-usb: error while querying for an remote control event. [ 796.255924][ T9435] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 796.267840][ T29] audit: type=1326 audit(1787618852.731:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 796.297719][ T5705] dvb-usb: error while querying for an remote control event. [ 796.323984][ T30] rtnl_mutex [ 796.403876][ T29] audit: type=1326 audit(1787618852.731:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcede99e0d9 code=0x7ffc0000 [ 796.409677][ T30] ){+.+.}-{4:4} [ 796.412771][ T29] audit: type=1326 audit(1787618852.731:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcede99de42 code=0x7ffc0000 [ 796.439814][ T30] , at: netdev_work_proc+0x71/0x880 [ 796.450790][ T29] audit: type=1326 audit(1787618852.731:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12442 comm="syz.1.1504" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcede99ded7 code=0x7ffc0000 [ 796.452109][ T9483] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 796.457906][ T30] locks held by kworker/u8:5/188: 3, on CPU#1: [ 796.502873][ T5705] m920x_read = error: -19 [ 796.507473][ T30] #0: [ 796.511779][ T5705] dvb-usb: error while querying for an remote control event. [ 796.519140][ T30] ffff88801c08c140 [ 796.526675][ T5705] m920x_read = error: -19 [ 796.532786][ T30] ( [ 796.538306][ T5705] dvb-usb: error while querying for an remote control event. [ 796.561290][ T30] (wq_completion)events_unbound [ 796.578223][ T9483] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 796.579118][ T30] ){+.+.}-{0:0} [ 796.591466][ T9483] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 796.605836][ T30] , at: process_one_work+0x1466/0x1b10 [ 796.605879][ T30] #1: ffffc90003087d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.605945][ T30] #2: ffffffff90cc40c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 796.606016][ T30] locks held by kworker/u8:9/1112: 2, last CPU#0: [ 796.606034][ T30] #0: ffff88801c08c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.606099][ T30] #1: ffffc90004fdfd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.606180][ T30] locks held by getty/5354: 2, on CPU#1: [ 796.606197][ T30] #0: ffff888037d350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 796.606253][ T30] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 796.606319][ T30] locks held by kworker/u9:2/5607: 2, on CPU#0: [ 796.606335][ T30] #0: ffff888023f32940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.606389][ T30] #1: ffffc9000375fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.606452][ T30] locks held by kworker/u9:8/5619: 2, on CPU#0: [ 796.606467][ T30] #0: ffff888023f32940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.606530][ T30] #1: ffffc90002697d08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.606595][ T30] locks held by kworker/0:5/5705: 2, last CPU#0: [ 796.606611][ T30] #0: ffff88801c057140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.606673][ T30] #1: ffffc900038efd08 ((work_completion)(&(&d->rc_query_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.606740][ T30] locks held by kworker/u8:12/6101: 3, on CPU#1: [ 796.606757][ T30] #0: ffff888032cda940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.606820][ T30] #1: ffffc90006e2fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.606884][ T30] #2: ffffffff90cc40c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 796.607078][ T30] locks held by kworker/u9:0/9434: 2, on CPU#0: [ 796.607099][ T30] #0: ffff888023f32940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.607194][ T30] #1: ffffc9000454fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.607405][ T30] locks held by kworker/u9:1/9435: 3, on CPU#1: [ 796.607420][ T30] #0: ffff88802adc9940 ((wq_completion)hci16){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.607480][ T30] #1: ffffc90004507d08 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.607541][ T30] #2: ffff88809ac94ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 796.607632][ T30] locks held by kworker/u9:3/9483: 4, last CPU#0: [ 796.607650][ T30] #0: ffff88804de66140 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.607715][ T30] #1: ffffc90004427d08 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.607845][ T30] #2: ffffffff8ede9de0 (rcu_read_lock){....}-{1:3}, at: ieee80211_iterate_active_interfaces_atomic+0x33/0x1b0 [ 796.607908][ T30] #3: ffffffff9bc27398 (&obj_hash[i].lock){-.-.}-{2:2}, at: __ieee80211_beacon_get+0x43/0x1ee0 [ 796.607971][ T30] locks held by syz.6.1268/10844: 1, on CPU#0: [ 796.607988][ T30] #0: ffffffff90cc40c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 796.608054][ T30] locks held by syz.2.1289/10911: 1, on CPU#1: [ 796.608071][ T30] #0: ffffffff90cc40c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 796.608137][ T30] locks held by syz.3.1294/10929: 2, on CPU#1: [ 796.608154][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x425/0xe20 [ 796.608214][ T30] #1: ffff88803a70d1b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 796.608288][ T30] locks held by kworker/u9:4/10962: 3, on CPU#1: [ 796.608305][ T30] #0: ffff88805c921140 ((wq_completion)hci5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.608368][ T30] #1: ffffc90005c0fd08 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.608431][ T30] #2: ffff88805618cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 796.608499][ T30] locks held by syz.1.1314/11015: 1, on CPU#0: [ 796.608528][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x425/0xe20 [ 796.608591][ T30] locks held by syz.8.1311/11173: 1, on CPU#0: [ 796.608609][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x425/0xe20 [ 796.608667][ T30] locks held by syz.5.1345/11235: 1, on CPU#0: [ 796.608684][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 796.608787][ T30] locks held by kworker/u8:2/11416: 2, on CPU#0: [ 796.608806][ T30] #0: ffff88801fb3e940 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.608895][ T30] #1: ffffc900034ffd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.608964][ T30] locks held by syz.9.1400/11665: 1, on CPU#0: [ 796.608980][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x425/0xe20 [ 796.609034][ T30] locks held by syz.0.1431/11879: 1, on CPU#0: [ 796.609052][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x425/0xe20 [ 796.609112][ T30] locks held by syz.4.1435/11904: 1, on CPU#0: [ 796.609128][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x425/0xe20 [ 796.609190][ T30] locks held by syz.2.1458/12158: 1, on CPU#0: [ 796.609207][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x425/0xe20 [ 796.609284][ T30] locks held by syz.6.1462/12232: 1, on CPU#0: [ 796.609302][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x425/0xe20 [ 796.609357][ T30] locks held by kworker/0:2/12294: 3, last CPU#0: [ 796.609373][ T30] #0: ffff88801c057140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.609436][ T30] #1: ffffc9000d27fd08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.609501][ T30] #2: ffff8880247ce250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 796.609568][ T30] locks held by syz-executor/12320: 1, on CPU#1: [ 796.609583][ T30] #0: ffffffff90cc40c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 796.609641][ T30] locks held by syz-executor/12383: 2, on CPU#1: [ 796.609658][ T30] #0: ffffffff90044a68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 796.609733][ T30] #1: ffffffff90cc40c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 796.609790][ T30] locks held by kworker/u9:5/12389: 3, on CPU#1: [ 796.609818][ T30] #0: ffff888089366140 ((wq_completion)hci4){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 796.609885][ T30] #1: ffffc90005bffd08 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 796.609956][ T30] #2: ffff88809ac80ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0xb0 [ 796.610025][ T30] locks held by syz.8.1505/12447: 1, on CPU#0: [ 796.610040][ T30] #0: ffffffff8fba59c0 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 796.610104][ T30] locks held by syz.1.1504/12445: 1, on CPU#1: [ 796.632277][ T9483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 796.633664][T12464] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 796.657423][ T5705] m920x_read = error: -19 [ 796.680942][ T30] #0: ffffffff90cc40c0 [ 796.694136][ T9483] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 796.701143][T12464] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 796.748895][ T9483] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 796.755760][T12463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 796.762690][ T9483] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.785254][ T5705] dvb-usb: error while querying for an remote control event. [ 796.800535][T12463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 796.806805][ T2211] m920x_read = error: -19 [ 796.811945][T12463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 796.915632][ T2211] dvb-usb: error while querying for an remote control event. [ 796.919074][ T30] ( [ 796.924779][T10962] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 796.930333][ T30] rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xa86/0x8990 [ 796.930387][ T30] locks held by syz.1.1504/12449: 1, on CPU#1: [ 796.930405][ T30] #0: ffffffff90cc40c0 (rtnl_mutex){+.+.}-{4:4}, at: bpf_map_offload_map_alloc+0x128/0x7d0 [ 796.930506][ T30] locks held by syz-executor/12455: 1, on CPU#0: [ 796.930523][ T30] #0: ffffffff90cc40c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 796.930580][ T30] locks held by syz-executor/12458: 1, last CPU#0: [ 796.930597][ T30] #0: ffff88805618cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_status+0x32/0x70 [ 796.930688][ T30] [ 796.930695][ T30] ============================================= [ 796.930695][ T30] [ 796.930725][ T30] NMI backtrace for cpu 1 [ 796.930743][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 796.930773][ T30] Tainted: [L]=SOFTLOCKUP [ 796.930782][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 796.930795][ T30] Call Trace: [ 796.930803][ T30] [ 796.930812][ T30] dump_stack_lvl+0x100/0x190 [ 796.930846][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 796.930881][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 796.930924][ T30] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 796.930961][ T30] sys_info+0x141/0x190 [ 796.930990][ T30] watchdog+0xcb1/0x1030 [ 796.931019][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 796.931042][ T30] ? __pfx_watchdog+0x10/0x10 [ 796.931065][ T30] ? __kthread_parkme+0x18f/0x230 [ 796.931093][ T30] ? kthread+0x13a/0x450 [ 796.931117][ T30] ? __pfx_watchdog+0x10/0x10 [ 796.931137][ T30] kthread+0x373/0x450 [ 796.931166][ T30] ? __pfx_kthread+0x10/0x10 [ 796.931195][ T30] ret_from_fork+0x730/0xd60 [ 796.931218][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 796.931243][ T30] ? __switch_to+0x800/0x10f0 [ 796.931271][ T30] ? __pfx_kthread+0x10/0x10 [ 796.931300][ T30] ret_from_fork_asm+0x1a/0x30 [ 796.931340][ T30] [ 796.931359][ T30] Sending NMI from CPU 1 to CPUs 0: [ 796.931391][ C0] NMI backtrace for cpu 0 [ 796.931405][ C0] CPU: 0 UID: 0 PID: 10962 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.931438][ C0] Tainted: [L]=SOFTLOCKUP [ 796.931445][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 796.931459][ C0] Workqueue: hci16 hci_rx_work [ 796.931487][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 796.931519][ C0] Code: c6 f9 60 00 48 89 df 5b e9 1d af 66 00 be 03 00 00 00 5b e9 32 2e 1c 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 05 2c 2a 7f 12 48 8b 34 24 65 48 8b 15 10 2a [ 796.931537][ C0] RSP: 0018:ffffc90000007e28 EFLAGS: 00000097 [ 796.931552][ C0] RAX: 0000000001000002 RBX: 0000000000000000 RCX: ffffffff81f666bf [ 796.931565][ C0] RDX: 0000000001000002 RSI: 0000000000000007 RDI: ffff888032d34b00 [ 796.931578][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 [ 796.931589][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807e9dc300 [ 796.931601][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8428710 [ 796.931722][ C0] FS: 0000000000000000(0000) GS:ffff888123b7b000(0000) knlGS:0000000000000000 [ 796.931741][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 796.931754][ C0] CR2: 00007feb8eb2d300 CR3: 000000009c54d000 CR4: 00000000003526f0 [ 796.931767][ C0] DR0: ffffffffffffffff DR1: 08000000000001f8 DR2: 0000000000000000 [ 796.931780][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 796.931794][ C0] Call Trace: [ 796.931800][ C0] [ 796.931807][ C0] trace_hrtimer_start+0x3d/0x220 [ 796.931832][ C0] enqueue_hrtimer+0x84/0x2f0 [ 796.931855][ C0] __hrtimer_run_queues+0x6ed/0x9c0 [ 796.931881][ C0] ? rcu_is_watching+0x13/0xc0 [ 796.931905][ C0] hrtimer_interrupt+0x441/0xaa0 [ 796.931938][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 796.931962][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 796.931984][ C0] [ 796.931991][ C0] [ 796.931998][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 796.932020][ C0] RIP: 0010:vprintk_emit+0x556/0x6b0 [ 796.932044][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 95 03 22 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 23 fe 21 00 48 85 ed 0f 85 27 01 00 00 75 03 22 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 796.932063][ C0] RSP: 0018:ffffc90005c0f7d8 EFLAGS: 00000283 [ 796.932078][ C0] RAX: 000000000002dc08 RBX: 0000000000000036 RCX: ffffc9001b0a0000 [ 796.932091][ C0] RDX: 0000000000100000 RSI: ffffffff81e92397 RDI: ffff888032d34b00 [ 796.932104][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 796.932116][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000b81efd [ 796.932129][ C0] R13: 0000000000000200 R14: ffff88801faaa580 R15: ffffc90005c0f8a0 [ 796.932148][ C0] ? vprintk_emit+0x677/0x6b0 [ 796.932173][ C0] ? vprintk_emit+0x677/0x6b0 [ 796.932196][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 796.932218][ C0] ? worker_thread+0x5ef/0xe50 [ 796.932244][ C0] ? ret_from_fork+0x730/0xd60 [ 796.932261][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 796.932285][ C0] _printk+0xcf/0x110 [ 796.932304][ C0] ? __pfx__printk+0x10/0x10 [ 796.932331][ C0] bt_warn+0xec/0x130 [ 796.932355][ C0] ? __pfx_bt_warn+0x10/0x10 [ 796.932382][ C0] ? rcu_is_watching+0x13/0xc0 [ 796.932404][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 796.932428][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 796.932461][ C0] hci_cmd_complete_evt+0x2d9/0xa20 [ 796.932489][ C0] hci_event_packet+0x51c/0xcd0 [ 796.932519][ C0] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 796.932542][ C0] ? __pfx_hci_event_packet+0x10/0x10 [ 796.932575][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 796.932600][ C0] hci_rx_work+0x451/0xfc0 [ 796.932631][ C0] process_one_work+0xac7/0x1b10 [ 796.932663][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 796.932683][ C0] ? __pfx_process_one_work+0x10/0x10 [ 796.932713][ C0] ? __pfx_hci_rx_work+0x10/0x10 [ 796.932741][ C0] worker_thread+0x5ef/0xe50 [ 796.932773][ C0] ? kthread+0x13a/0x450 [ 796.932794][ C0] ? __pfx_worker_thread+0x10/0x10 [ 796.932819][ C0] kthread+0x373/0x450 [ 796.932841][ C0] ? __pfx_kthread+0x10/0x10 [ 796.932865][ C0] ret_from_fork+0x730/0xd60 [ 796.932884][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 796.932904][ C0] ? __switch_to+0x800/0x10f0 [ 796.932927][ C0] ? __pfx_kthread+0x10/0x10 [ 796.932951][ C0] ret_from_fork_asm+0x1a/0x30 [ 796.932980][ C0] [ 796.933392][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 796.933410][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 796.933439][ T30] Tainted: [L]=SOFTLOCKUP [ 796.933448][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 796.933461][ T30] Call Trace: [ 796.933470][ T30] [ 796.933479][ T30] dump_stack_lvl+0x100/0x190 [ 796.933512][ T30] vpanic+0x553/0x970 [ 796.933534][ T30] ? __pfx_vpanic+0x10/0x10 [ 796.933558][ T30] ? rcu_is_watching+0x13/0xc0 [ 796.933590][ T30] panic+0xd1/0xe0 [ 796.933611][ T30] ? __pfx_panic+0x10/0x10 [ 796.933638][ T30] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 796.933673][ T30] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 796.933706][ T30] ? watchdog.cold+0x1ec/0x234 [ 796.933735][ T30] watchdog.cold+0x1fd/0x234 [ 796.933766][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 796.933790][ T30] ? __pfx_watchdog+0x10/0x10 [ 796.933813][ T30] ? __kthread_parkme+0x18f/0x230 [ 796.933841][ T30] ? kthread+0x13a/0x450 [ 796.933866][ T30] ? __pfx_watchdog+0x10/0x10 [ 796.933886][ T30] kthread+0x373/0x450 [ 796.933917][ T30] ? __pfx_kthread+0x10/0x10 [ 796.933946][ T30] ret_from_fork+0x730/0xd60 [ 796.933970][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 796.933994][ T30] ? __switch_to+0x800/0x10f0 [ 796.934022][ T30] ? __pfx_kthread+0x10/0x10 [ 796.934052][ T30] ret_from_fork_asm+0x1a/0x30 [ 796.934091][ T30] [ 796.939907][ T30] Kernel Offset: disabled