last executing test programs: 7m58.152786906s ago: executing program 2 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffdf00000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40186f40, 0x0) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x800) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80002, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file1\x00'}) 7m57.305568532s ago: executing program 2 (id=20): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@multiplanar_fd={0x5e76b39c, 0xd, 0x4, 0x80, 0x81, {}, {0x1, 0xc, 0x6, 0x4, 0x6, 0x5}, 0x1, 0x4, {0x0}, 0xfffffffe}) (async) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000380)=@multiplanar_fd={0x5e76b39c, 0xd, 0x4, 0x80, 0x81, {}, {0x1, 0xc, 0x6, 0x4, 0x6, 0x5}, 0x1, 0x4, {0x0}, 0xfffffffe}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x80000000, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000003c00), &(0x7f0000003c40)="595efd0290258c53a51182a31723b8cc2d1490142da5f6c9e168934b7f76de8d1bb53dbb702ba211c5b6b033e896f9d1719864ba589b716e58b9999224bed8d0f813cac085159d7cdfd1c9a71d01c386ef0c08987a4e7cd3e98e60254c726d") setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000040)=0x6, 0x4) (async) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000040)=0x6, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000140)) (async) r3 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x4}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0) write$UHID_CREATE2(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0xcac3, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) 7m53.662996337s ago: executing program 2 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket(0x40000000015, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002bbd7000ffdbdf25010000001400020077673100000000000000000000000000240003b20fa152600cb00845174f08076f8d784308000700feffffff1400020077673100"/82], 0x68}}, 0x1b14d845fb9a5979) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x18, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xc0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd25, 0xffffff81, {0x0, 0x0, 0x0, r8, {0xe, 0x3}, {0x2}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r9, @ANYBLOB="6b0700bd7000ab900dcb67aaa5f707fbf5", @ANYBLOB="0600cd00100000008500330080200900ffffffffffff0802110000005050505050505f00010000000000000000040038001b2e507c4296d3b7136c76b178497e8262b932edbf4afaec3b2e26a103012c04067001070004002d1a"], 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m51.103189706s ago: executing program 2 (id=42): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x10000) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'nat\x00'}}]}]}, 0xff58}}, 0x48084) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x202002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x5, 0xfc8caba274c7ed42}, 0xe) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) io_submit(r6, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r5, &(0x7f0000000000)="98", 0x3e80000784, 0x1000000}]) 7m50.303434606s ago: executing program 2 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x3e14, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0xb, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3de4, 0x2, [@TCA_CGROUP_ACT={0x3de0, 0x1, [@m_bpf={0x8c, 0x1d, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x200, 0x8c, 0xfe, 0x7}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x80000000, 0x8, 0x7, 0x7}}]}, {0x28, 0x6, "e3e6470335548d3ccbb14933ec488d853e485a9ec9a8bade7f0d914898ffef8ef4a1944d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x120, 0x1d, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xa75af}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7d825}, @TCA_MPLS_BOS={0x5}]}, {0xda, 0x6, "a1eca0206edcca343bf7d9fe4b6f1f53f1aa9573c90e60f0e3ac0bb7ba63c3f41e2d98b52266543be8a9233a9b913d9f36891a42f7d4004cbb3b5d5a0458ef55fcdc985da5547e7218a4e4571c1ab5837bda05da17deee0b870dff136be1d8546f1d4715befe097d3e94e279b5d6c8c2bbe6acfa3048e88cfce323920e18964a55b7f376a83d6cb9564fe1adf95beed693957c694656c7c0aadb223b34258b7169892ced9bfd5e7df0fd07c6e720bef6cb4447d27775843265bff686d24632dca5eb9b9c3f7b9024d2ea0c620f7c7b1575d94ab06842"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x2a84, 0xa, 0x0, 0x0, {{0xb}, {0x29c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x80000001, 0x0, 0x200, {0x1, 0x0, 0xfff, 0xd, 0x6, 0x8}, {0xe6, 0x2, 0x2, 0xe80, 0xc8d}, 0x9, 0x200, 0x1}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2a29, 0x6, 0x7, 0x1572, 0x5, 0x85, 0xfffffff8, 0x1, 0x101, 0x4, 0x8, 0x101, 0x6, 0x480, 0x200, 0x8, 0x9da, 0x2, 0x8, 0x2, 0x3, 0x0, 0x0, 0x8, 0x7ff, 0x80, 0x2, 0x0, 0x6, 0x1, 0x7fffffff, 0x395a9f9f, 0x5, 0x7, 0x5, 0x8, 0x1ff, 0x4, 0x15, 0x7, 0x7, 0x2, 0x3, 0x46, 0x2, 0x101, 0x10, 0x10, 0x9, 0x6, 0x1, 0x3, 0x7b50227, 0x9, 0x100, 0xe1e, 0x7, 0x80, 0xffff, 0x1, 0xfffffff7, 0x5, 0x5, 0x4, 0x9000000, 0x99, 0x7f, 0x6, 0xa3, 0x6, 0x2, 0x100, 0x7, 0x9, 0x1, 0x4, 0x200, 0xf, 0x9, 0x7ff, 0xfffffffb, 0xa, 0x80, 0x5, 0x6, 0x0, 0x7, 0x7f, 0x5, 0x401, 0xd, 0x5, 0x1ff, 0x4, 0x9, 0x4, 0x800000, 0x600, 0x0, 0x7ff, 0xfff, 0x8, 0x3, 0x3, 0x9, 0x8, 0x80000000, 0xb, 0xf, 0x0, 0x48, 0x4, 0x100, 0xa8f6, 0x5f52, 0x9, 0x170aeffa, 0x4, 0x1, 0x5, 0x1, 0x9, 0x3, 0x9, 0x3, 0xab6, 0x8000, 0x1, 0x5, 0x1000, 0x6, 0x9, 0x2, 0xffffffff, 0x80, 0x2, 0x2, 0x3, 0xffffffff, 0x2, 0x6, 0x339a, 0x5, 0x7, 0x3, 0x5, 0x5, 0x40, 0x7fff, 0x5, 0x1, 0x2, 0xfffffffc, 0x5, 0xd465, 0x401, 0x2, 0xfff, 0x5, 0x1ff, 0x3dc2, 0x5, 0xfe, 0x10001, 0x23843d44, 0x1, 0x6, 0x80000001, 0x8, 0xff, 0x10, 0x6, 0x2, 0x3, 0x208f, 0x7, 0x4, 0x3, 0x7fffffff, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0xd8, 0x6, 0x1, 0x6, 0xffffffff, 0x300, 0xfffffab5, 0xffff, 0x3d, 0x8, 0x0, 0xfffffffa, 0x3, 0x3, 0x800, 0x1, 0x1ff, 0x9, 0x0, 0x8, 0x6, 0x4, 0xfffffc01, 0x3, 0x8, 0x9, 0x1, 0xff, 0x1, 0xfffffffd, 0x3, 0x0, 0x1c, 0xffff, 0x6, 0x7, 0x0, 0x1, 0x8, 0xfffffff6, 0x6, 0x6, 0x7fffffff, 0x7, 0x2, 0x80000001, 0x8, 0x4, 0x2, 0x5, 0x5f, 0x47d4, 0x9, 0x0, 0x1, 0x6ce5, 0x9, 0x6, 0x8, 0x6, 0x1, 0x9, 0x3, 0x6, 0x7, 0x80000000, 0x0, 0x0, 0x8, 0x81, 0x3, 0x401]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x80, 0x4, 0x3, 0x2, 0x5, 0x5, 0xe, 0x0, 0xd, 0x6, 0x8, 0x3280, 0x8001, 0x6, 0x3, 0x10001, 0x7, 0x1, 0x7, 0x9, 0x80000000, 0xd5f0, 0x24, 0x2, 0x80000001, 0x9, 0x78a9, 0xff, 0x7, 0xcfa, 0x4, 0x8000, 0x2, 0x9, 0x80, 0x6, 0x0, 0xf137, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x6, 0x747, 0x8, 0xff54, 0x4, 0x1, 0x0, 0x3ff, 0x4, 0x0, 0x4, 0x318, 0xffffff7f, 0x4, 0x0, 0x543, 0xa, 0x0, 0x67b4, 0x4, 0x3, 0x4, 0x9, 0x8, 0xd, 0x7, 0x8, 0xfffffffd, 0x10000, 0xe7, 0x3, 0x3, 0x228b, 0x0, 0x7ff, 0x10001, 0x10001, 0x4, 0xffffffff, 0x5, 0x3, 0x200, 0x8, 0x43a, 0x0, 0xa, 0x75e1, 0x0, 0x200, 0x8, 0x8000, 0x0, 0x8, 0x7, 0x8, 0x5, 0x9, 0x2, 0x200, 0xfffffff7, 0x1, 0x7f, 0x9, 0x8, 0x5, 0x6, 0x3e2f, 0xba7, 0x80, 0x4, 0x80000000, 0x0, 0x4, 0x1, 0x1, 0x200, 0x6, 0x7, 0x2, 0x4, 0x4, 0xff, 0x18, 0x2c74, 0xffffffff, 0x3, 0x58c958e8, 0x7, 0x7, 0x40000000, 0x1000, 0x5, 0x5, 0x400, 0x80, 0x61f5e775, 0x6, 0x7, 0x5, 0x401, 0xff, 0xbba, 0x81, 0x3, 0x22d, 0x6, 0x1, 0x10000, 0x5, 0x2, 0xffffffff, 0x2f79, 0xb, 0x7, 0xfffffffe, 0xffff98fc, 0x7b, 0x9, 0x0, 0x5, 0xd, 0x1, 0x1, 0x4, 0xfffffffa, 0x80, 0x1, 0x9, 0x1, 0x4, 0x1, 0x9, 0x1, 0x1, 0x7, 0x9, 0xc6, 0xf3, 0x7f, 0x8, 0xffffff61, 0x5e4dcafd, 0x10, 0x6, 0x9, 0x48, 0xc, 0x7e1e, 0x5, 0x0, 0x101, 0x5, 0x0, 0x4, 0x9, 0xfffffeff, 0x7fff, 0x1, 0x9, 0x9, 0x1, 0x0, 0x400, 0x6, 0x795, 0x3, 0x3824, 0x6, 0xfffff801, 0x0, 0x9, 0x0, 0x29f4299b, 0x2, 0x7, 0xffffffff, 0x80000001, 0x0, 0x3, 0x0, 0x6, 0x6b9, 0x240a9fed, 0x5, 0x9, 0x3, 0xf, 0x1, 0xfffffffa, 0xffff8000, 0x70000, 0x0, 0x3ff, 0xa, 0x5, 0x8fe5, 0xb19b, 0xfffffff9, 0x2, 0x80000001, 0xb72, 0x7, 0x5, 0x7, 0x2, 0x7ff, 0x8, 0x943, 0x48, 0x3, 0x5, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0xfffffffd, 0x6df5650f, 0x0, {0xf, 0x0, 0xffff, 0x2, 0x9, 0x9}, {0xe, 0x2, 0x9, 0xa1, 0x19, 0x7}, 0x0, 0x1000, 0x48e}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xdf, 0xfffffffb, 0x0, 0x5, 0xe0, 0x0, 0x0, 0x8, 0x6, 0x3, 0x5, 0x800, 0x4, 0x7, 0x1, 0xb2c, 0x10, 0x8, 0x5, 0x1, 0x10, 0x80, 0x6, 0x83, 0x1000, 0xf, 0xf, 0x7, 0x0, 0x3c, 0x400, 0x7, 0xa, 0x8001, 0x7, 0x8, 0x1, 0x6, 0x9, 0xe, 0x5, 0x3, 0x6, 0x4, 0x6d85, 0x4, 0x2, 0x101, 0x80000001, 0x153, 0x8, 0x6, 0x10000, 0x9, 0x8, 0x0, 0x10001, 0x2, 0x1, 0xf97b, 0x7, 0x5, 0x9, 0xffff9eef, 0x0, 0x30af5a59, 0x7, 0x9, 0x6, 0x9, 0x5, 0x8c1, 0x2, 0x5, 0x3, 0x5, 0x6, 0x8, 0x3, 0x4, 0x5, 0x3, 0x800, 0xf, 0xe, 0xd75, 0x5, 0x0, 0xfffffff7, 0x9, 0x0, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x20000000, 0xdc, 0x2, 0x6, 0xdb, 0x4, 0x0, 0xd, 0x9, 0x3, 0x3, 0x8d2e, 0x0, 0x74f, 0x6ea0, 0x9, 0x1, 0x7, 0x7, 0x8000, 0x2, 0xf, 0x0, 0x200, 0x2, 0xfffff000, 0x53, 0x8, 0x1ff, 0x6, 0x8, 0x0, 0xfffffffd, 0xd415, 0x8fa8, 0x1ff, 0x9, 0xfff, 0x0, 0x6, 0x2, 0x1, 0x9, 0x7, 0x0, 0x6, 0x81, 0x5, 0x1, 0xfff, 0x8a, 0x5f, 0x2, 0x8, 0x9, 0xea, 0x8, 0x6, 0x4, 0xfffffffd, 0x8, 0x6, 0x5ec, 0x7, 0x9, 0x40, 0x5, 0x2, 0x4, 0x782, 0x1, 0x4, 0x1, 0x6, 0x6, 0x9, 0x3, 0xf, 0x10000, 0x1, 0x7fff, 0x4, 0x1, 0xe0, 0x80000001, 0x6, 0x5, 0x7fffffff, 0x1, 0x7, 0x19c6, 0x6, 0x7ff, 0x3, 0x0, 0x1, 0x157, 0x10, 0x1, 0xffff8000, 0x8, 0x803b, 0x4, 0xbd, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfff, 0x3, 0x4, 0xe00000, 0x7fff, 0x3915, 0x38, 0x5, 0xd9dd, 0x4, 0xd, 0x2, 0x2, 0x5, 0x101, 0x4, 0x400, 0x5, 0x7, 0x6, 0x6, 0x8, 0x2a0a, 0xb, 0xb, 0x630, 0x0, 0xfffffffe, 0xffffffff, 0x100, 0xffffffff, 0x9, 0x8001, 0x5, 0x10000, 0x2, 0x100, 0x1, 0x21, 0xa, 0x0, 0x9, 0xff, 0x7, 0x3a, 0x8, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xd, 0x1, 0x1, 0x6, 0xe52, 0x1, 0x7, 0x6, 0xfff, 0x9, 0x9, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8c5, 0x7, 0x9983, 0x4, 0x6, 0x2, 0x3, 0x0, 0xd, 0x3, 0x80000000, 0x4, 0x5bbf, 0x9, 0x5, 0x2, 0x3, 0x9, 0x0, 0x5, 0x6, 0xfffffffe, 0x200, 0x2bb, 0x2, 0x4, 0x2, 0x7, 0x8, 0x3, 0x8fe, 0xe1, 0x4, 0x3b, 0x3, 0x376, 0x4, 0xd01de89, 0x7, 0x8000, 0x80000001, 0x9, 0x0, 0x8137, 0x5, 0xff, 0x9, 0x8, 0x54bd, 0xe, 0xff, 0xc0000000, 0x8, 0x8, 0xffff, 0x7, 0x401, 0xc2e, 0x5, 0xfffff20e, 0xff, 0x4, 0x10000000, 0x9, 0xb, 0x9, 0x4, 0x7, 0x9, 0x0, 0x7, 0x101, 0x7, 0x8, 0xa, 0x401, 0x8, 0x8, 0x0, 0x428, 0x8, 0xffff, 0x3, 0x8, 0x80000001, 0xfffffff7, 0x4, 0xa, 0x4, 0x0, 0x6, 0x1000, 0x3, 0x0, 0x1, 0x2, 0x6a24377b, 0x10001, 0x7fff, 0x3, 0x5, 0x6, 0x2, 0x9, 0x7, 0x80000001, 0x0, 0x9, 0x80, 0x0, 0xe4a4, 0x8000, 0xa5d9, 0x2, 0x7, 0x2, 0x81, 0x2, 0x3346, 0x0, 0x0, 0x9, 0xe4d8, 0x3, 0x2, 0x2, 0x5f3, 0xd, 0x2, 0x1, 0x4, 0x5, 0x630e, 0x7b1a, 0x2, 0x9, 0x1, 0x5, 0x10, 0x3, 0x4, 0x3, 0x8, 0x7, 0x7, 0x6, 0x8001, 0x1, 0x8, 0x3, 0x4, 0xffff, 0x3, 0x112e, 0x7, 0x8, 0x10001, 0xb, 0xe, 0x2, 0x8, 0x1, 0x41d, 0x11, 0x9, 0x9, 0x8, 0x8d, 0x4, 0x400, 0xb52, 0x0, 0xd38, 0x101, 0xaa3, 0x7fffffff, 0x6, 0x97c4, 0x8, 0x46, 0x7fff, 0x9, 0x2, 0x108e6b3c, 0x9, 0x8, 0x1, 0xd, 0x6, 0x5, 0x8, 0x8, 0xde96, 0xc00000, 0xfea, 0x2, 0x9, 0x8, 0xfffffffe, 0x3, 0x1, 0x5, 0x9, 0x3, 0x59e, 0xb061, 0x8, 0x7b4caffd, 0x7, 0x7, 0x4, 0x200, 0x1000, 0x2, 0x754, 0x5, 0x5, 0x3, 0x1, 0xff, 0xfff, 0x1, 0x9, 0x5, 0xbf78, 0x81, 0x0, 0x8, 0x2, 0xb6e, 0x496, 0x5, 0xb1, 0x8f, 0x7, 0x3, 0xffffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x3, 0x9fe, 0x2, 0x1, {0x1, 0x1, 0x0, 0x8000, 0xc, 0xa67}, {0x2, 0x1, 0x5, 0x367c, 0x8000}, 0x80, 0x6, 0xc00000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1281}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb9, 0x8, 0xd, 0x6, 0x800, {0x86, 0x2, 0x3, 0x7, 0x1, 0x80}, {0xf8, 0x1, 0x1, 0x96, 0x1000}, 0x2000000, 0x8001, 0x8dc5}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x1, 0x1, 0x0, 0x2, 0xd11, 0x601, 0x4, 0xf1, 0x141, 0x1000, 0x4, 0x9, 0x1, 0x27ce9c9a, 0x9, 0x4, 0x5, 0x4, 0x7, 0x0, 0xa9000000, 0x70, 0xfffffff8, 0x40, 0x3, 0x9, 0xffffffff, 0x7, 0x5, 0x7ff, 0xff, 0xffffffff, 0x4, 0x5, 0x9, 0xb7, 0x7, 0x32f, 0x7fff, 0x8, 0x6, 0x2, 0xd, 0x4, 0x7, 0x6, 0xbd, 0xb77, 0x9, 0x8, 0x5, 0x3, 0x2, 0x4, 0x5fbe2f7e, 0x8, 0x3, 0x4, 0xf, 0x542, 0x23b, 0x0, 0x9, 0x9, 0x4, 0x8, 0x2, 0x82f, 0x7f, 0x5, 0x8, 0xac, 0xd89, 0x200, 0x4, 0x0, 0x13, 0x0, 0xa45, 0x401, 0x8001, 0x9, 0x7fff, 0xb1f7, 0xe, 0x9, 0x9, 0x7fff, 0x8, 0x9, 0x0, 0x80000001, 0x7, 0x7fff, 0x4, 0xa, 0xc, 0xf, 0x0, 0xd8, 0x4, 0x6, 0x2, 0x8, 0x7, 0x2, 0x10, 0x2, 0xa559, 0x9, 0x1, 0x93df, 0x7, 0x8, 0x6c, 0x4, 0x2, 0x6, 0xa0, 0x4, 0x2c, 0x4, 0x7fffffff, 0x0, 0xebb6, 0x383, 0x40, 0x0, 0xf, 0x0, 0x81, 0x9, 0x0, 0x7, 0x9, 0x1, 0x0, 0x3ff, 0x9, 0x1, 0x821d, 0x6, 0x9, 0x4a, 0x7fff, 0x2312, 0x26b7, 0x0, 0x8, 0x3, 0x7, 0x7, 0x100, 0x1, 0xb, 0x889a, 0x8000, 0x0, 0x8, 0x4, 0x7, 0x40, 0x2, 0x101, 0x3, 0x8, 0x7, 0x3, 0x9, 0x7, 0x2011e813, 0x5, 0x6, 0x3, 0x2, 0x1, 0x3, 0x1200000, 0x0, 0x9, 0x3, 0x6, 0x5, 0xfffffff7, 0xd, 0x5, 0x0, 0x6, 0x58, 0x2, 0x476, 0x82, 0x3ff, 0xb, 0x10001, 0x1, 0xc, 0x5, 0xffff0001, 0x7, 0xf, 0x2, 0x36, 0xa, 0x8001, 0x7, 0x1c, 0x8, 0xfffffffb, 0x74c, 0x3, 0xffffffff, 0x5, 0x7, 0x4f7, 0x3, 0x8, 0x9, 0x7, 0x5, 0x0, 0x1, 0xffff, 0x4, 0x6, 0x6, 0xc69, 0x80000000, 0x9e2, 0x6, 0x5, 0x8, 0xc0000000, 0x8, 0x4, 0x8a, 0x6, 0xdd0c, 0x1b, 0xff, 0x7, 0x30, 0x3, 0xfffffff8, 0x2000000, 0x3, 0x100, 0x7, 0x4, 0xff, 0x8, 0x3, 0x8, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffa40, 0x100, 0xfffffffe, 0x3, 0x4, 0x6973, 0x5, 0x4, 0x8, 0x7, 0x1, 0x0, 0x4, 0x2, 0xc, 0x21f, 0xbf, 0x8, 0x9, 0x1, 0x10, 0x5, 0x3ed80, 0xfffffbff, 0x6, 0x1, 0x4, 0x9, 0x9, 0x8, 0x1, 0x9, 0x4, 0x3, 0x2, 0x3, 0x9fce, 0x6, 0x9, 0xc2e, 0xfedd, 0x5, 0x3, 0x0, 0x7, 0x0, 0x9, 0x3db, 0x6, 0x3, 0x3ff, 0x17c, 0x1a, 0xfffffff7, 0x34, 0x1, 0x3, 0x63b, 0x1, 0xffffd8f1, 0x1000, 0x2, 0x7ff, 0x7, 0x5, 0x4b, 0x2, 0x2, 0x7, 0x5, 0x5, 0x7, 0x7, 0x0, 0x9, 0xfffffffd, 0x2, 0xfffffff9, 0x7, 0x3ff, 0x3, 0x3, 0x2, 0x5, 0x2, 0x4, 0x1000, 0x7159, 0x6, 0x0, 0x9, 0x0, 0xe, 0x8f36, 0x1, 0x8, 0x2, 0x10001, 0xcd0c, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x18c6, 0x4, 0x0, 0x4, 0x3f, 0xffff8fe8, 0xf84, 0x3, 0x6, 0x9, 0x8, 0x1ff, 0x7, 0xffff, 0x85, 0xffffffff, 0xcaeb, 0x0, 0x5, 0xd, 0x3, 0x3, 0xfffffffd, 0x85, 0x5, 0x5, 0x798, 0x0, 0x3, 0x4, 0x8000, 0x9, 0x1, 0x6, 0x4, 0xffffff7f, 0x40a05bce, 0x2a3fdcd2, 0x9, 0x44, 0x10, 0x0, 0xfffffffd, 0x1, 0x5, 0x748f, 0xa, 0x5, 0x2, 0x3, 0xfff, 0xffffffff, 0x9160, 0x7, 0xfffffff4, 0x4ed, 0x2, 0x6, 0xffffffff, 0x10, 0x7, 0x40, 0x79b4291, 0x800, 0x7fff, 0x7f48000, 0x253c7a0, 0xfffffffc, 0x3, 0xff, 0x2, 0x400, 0xf4e, 0x8001, 0x1, 0xff, 0x0, 0x891, 0x50, 0x10001, 0x80000001, 0xffffffff, 0x7, 0x8, 0x6, 0x0, 0x80000000, 0x6, 0x6, 0x5, 0xd, 0x5, 0x5, 0x8043, 0x8, 0x10, 0x3, 0x40, 0x9, 0x1000, 0x100, 0x3, 0x7, 0x3, 0x7, 0x77, 0x80000001, 0xfffffff9, 0x9f6, 0x7, 0xc0, 0x6432, 0x5, 0x7b7e, 0xfa20, 0x91, 0x2, 0x9f05, 0x2, 0x7, 0xda9, 0xa, 0xfff, 0x8, 0x5, 0x3, 0x2f96, 0x7, 0x0, 0xc4, 0xfff, 0x4, 0x4, 0x352, 0x229a, 0x3, 0x0, 0x9, 0x4000000, 0x4, 0x3, 0x80000000, 0x8, 0x81, 0xfff, 0x8000000, 0x3, 0x6d8b, 0x1, 0x6, 0x8c8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000006, 0x53, 0x6, 0x6, {0x84, 0x2, 0x4, 0x101, 0x6, 0x1ff}, {0x3, 0x1, 0x0, 0x3, 0x4, 0xf}, 0x2, 0xa, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x6, 0x9, 0xfffffffe, 0x292, 0x29, 0x5, 0x1, 0x81d1, 0xff, 0x7f, 0x10, 0x844, 0x6, 0x9, 0x1, 0x9, 0x44bd, 0xffff0000, 0xffffffff, 0x9, 0x4cc76de7, 0x5, 0xff, 0x1, 0x1efe0c7f, 0x6f6, 0x95, 0xffffff0d, 0xb91, 0x4, 0x8000, 0x0, 0x65739479, 0x6, 0x2, 0x101, 0x2, 0x0, 0x8, 0x5, 0x4, 0x6, 0xc6, 0x3, 0x3, 0x3, 0x0, 0x9, 0x1, 0x2, 0x2, 0x1, 0x9bc5, 0xfffffff0, 0x7add, 0x400, 0x6, 0x188, 0x7, 0x4, 0x200, 0x3, 0x0, 0xbe, 0x1ff, 0x0, 0x0, 0x1, 0x4, 0x0, 0x9, 0x7, 0x6, 0x3, 0x7fff, 0x6, 0x10, 0x0, 0xe, 0x7, 0xd, 0x1, 0x0, 0x8000, 0xfb5, 0x1, 0x3, 0x0, 0x6, 0x9, 0x0, 0x2, 0xeb3, 0x6, 0xa57f, 0x6, 0x0, 0x7, 0x4, 0xe, 0x81, 0x7fff, 0x2, 0x8, 0x2, 0x8, 0x1ff, 0xd, 0x2, 0x1, 0x9e89, 0x6d, 0x3ff, 0x0, 0x3, 0x2, 0x818, 0x10001, 0x100, 0x8, 0x7, 0x6, 0xfffffffc, 0x5, 0x0, 0x1, 0xffff7fff, 0x8, 0xfffffffc, 0x9, 0x6, 0x10001, 0x9, 0x4, 0x4, 0x400, 0x5, 0xa, 0x8, 0x6, 0x4, 0x1, 0x7, 0x7f, 0x6, 0x401, 0x6, 0x7, 0xd, 0x7ff, 0x8, 0x8, 0x7, 0x4fc975ce, 0x7f, 0x5, 0x8, 0x51b, 0x4, 0x80000000, 0x7, 0x6246, 0x1, 0xb, 0x800, 0x8, 0x3, 0x2, 0x1, 0x7, 0x10, 0x9, 0x8, 0xffffffff, 0x4, 0xfffffff9, 0x800, 0xe, 0x7, 0x3, 0x3, 0x1000, 0x1c, 0xbdf, 0xffffffff, 0x6, 0x80000000, 0x10000, 0x5, 0x8, 0x2c7, 0x401, 0x9, 0xffffffff, 0x4, 0x8, 0x6, 0x80000000, 0xb1e2, 0x2, 0xffffffff, 0x9, 0x101, 0x3, 0x5, 0xfffffffa, 0x437, 0x0, 0x0, 0x4, 0x3, 0x4, 0x40, 0x7, 0xd, 0x8, 0x8, 0x0, 0x5, 0x443d0, 0x1d1, 0x1, 0x5, 0x3ff, 0x1, 0x7, 0x7, 0x100, 0x5, 0x1b1, 0x7ff, 0x2, 0x7360f813, 0x0, 0x7, 0x5, 0xfffffff9, 0x2, 0x6, 0x7fffffff, 0x1, 0x4f5, 0x6, 0x9, 0x8, 0x10, 0x400, 0x80000001, 0x1, 0x8, 0x5, 0x10, 0x6, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x3ff, 0x3, 0x4, 0x259, 0x4, 0x5, 0x3a4f, 0x901, 0x7, 0x40, 0x812a, 0x5d, 0x9, 0x9, 0x100, 0x380e0000, 0x3, 0x0, 0xffffffff, 0x3, 0xb, 0x7, 0x8, 0xf1c, 0x3, 0x200, 0x200, 0x7fff, 0x0, 0xff, 0x6, 0x80, 0x8, 0xda1, 0x14c6f311, 0x10, 0xe5c9, 0xf1, 0xb98, 0xb3b, 0x5, 0x80, 0x9, 0x2, 0x0, 0xffff, 0x1ff, 0x46, 0xfffffffe, 0x1, 0xbe, 0x8, 0xfffffffc, 0x1, 0x7, 0x6, 0x800, 0x8001, 0x101, 0xe, 0x8, 0x8000, 0x6, 0xb8e, 0x6, 0x1, 0x7, 0x3, 0x5, 0x2, 0x3, 0x1000, 0x4, 0x9, 0x1, 0x200, 0x3c4000, 0x0, 0x3, 0x10000, 0x800, 0x0, 0x0, 0x5, 0x9, 0x7a0, 0x0, 0x2, 0x79ee, 0xcb, 0x2, 0xfd9, 0xfffffffb, 0x1, 0x401, 0x7, 0x1, 0x3, 0x1, 0x7b172ffd, 0x3ff, 0xb, 0x3, 0x81, 0x55, 0x6, 0x5, 0x8, 0x6, 0xc, 0x4, 0x5, 0x3, 0x0, 0x7, 0x6, 0x1, 0xffffff11, 0x7f, 0x3ff, 0x80000001, 0x8, 0xf, 0x80, 0x5ba4, 0x6, 0x8001, 0x7, 0x4, 0x8000, 0x80000001, 0xfffffffb, 0x6c0, 0xed1, 0xeb, 0xe0, 0x4f948, 0x1, 0x3, 0xffffbe62, 0xd6, 0xcc5, 0x1, 0xfffffffa, 0x8, 0x7, 0x2, 0x0, 0xa210, 0x101, 0xf, 0x10001, 0x89, 0x6, 0x1, 0xfff, 0x4, 0x81, 0x8, 0x4, 0x5, 0x8, 0x100, 0xff, 0x2, 0x7771, 0x9, 0xd98, 0xb9d, 0x5, 0x6, 0x4, 0x6, 0x8, 0x6, 0x5, 0x4, 0x2, 0x9, 0xffff, 0x6, 0x5, 0xa, 0x1000, 0x7fffffff, 0x8, 0x5, 0x3, 0x9133, 0xbc, 0x2, 0x8, 0x80000001, 0x1, 0x2, 0x9, 0x80000000, 0x4, 0x3, 0xd, 0x0, 0x9, 0xf000, 0x8, 0x8000, 0x2, 0x4, 0x4, 0x336b, 0x2, 0x5, 0x4, 0x0, 0x3, 0xbd2f, 0x80000000, 0x9, 0x4, 0xa, 0x9, 0xfffffff9, 0x5, 0x78c, 0x3, 0x7, 0x8, 0x401, 0xdf, 0x6, 0x3b56, 0x4, 0x2, 0x10000, 0x7, 0x7, 0xa, 0xa8, 0x7, 0xfffff73f, 0x7, 0xfffffffb, 0x14eb28e5, 0x800, 0x6, 0x5, 0x7, 0x10, 0x5e, 0x1, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xf52, 0x613, 0x7, 0x100, 0x0, 0x5b1, 0x5c3aa66, 0x2, 0x4, 0x8, 0xaf2, 0x0, 0x5, 0x814e, 0x10, 0x5, 0x4, 0x9, 0x3ff, 0x6, 0x0, 0x6, 0xd, 0x2e95, 0x0, 0x2, 0x3, 0x9, 0x6, 0x6c, 0xffffffff, 0x9, 0x89, 0x2, 0x100, 0x1, 0x4, 0x8, 0xb, 0x6, 0x8, 0x3, 0x6b7, 0x9, 0x200, 0x7, 0x4, 0xffffff15, 0x3000, 0x9, 0x80000000, 0x2, 0xfffffff7, 0xffff, 0x9, 0x720, 0x0, 0x80000001, 0x518e, 0x2, 0x7ff, 0x3, 0x8, 0x5, 0x0, 0x9, 0x3, 0x3, 0x1, 0x9df, 0x7fff, 0x7, 0x7, 0x2, 0xa, 0x9, 0x43, 0x8, 0x7ff, 0x0, 0xd0b7, 0x3c8, 0x10001, 0x7, 0xb7, 0x6, 0x6, 0x0, 0x8, 0x784d, 0x401, 0x0, 0x1, 0x81, 0x8001, 0x89f3, 0x2, 0x10, 0x9, 0x3, 0xf181, 0x7, 0xffffffff, 0x8, 0x3, 0x34, 0x2, 0x3e6, 0x2, 0x0, 0x3, 0x7, 0x9, 0x8, 0x8, 0x5, 0x5, 0x3, 0x4, 0x1, 0x9, 0x1000, 0x5, 0xf0d6, 0x1720, 0xffff, 0x6, 0xd, 0x4, 0xfff, 0x8, 0x8001, 0x60000000, 0x7fff, 0x9, 0x5, 0x4, 0x3, 0x1ff, 0x80000001, 0x8, 0x9, 0x2, 0x7, 0xb334, 0x400, 0x3, 0x0, 0x5, 0xf8, 0x6, 0x9, 0x3fd, 0xfffffffa, 0x9, 0x40, 0xe289, 0x7, 0x4, 0x80000001, 0x6, 0x620000, 0x3, 0x7b, 0x2, 0x5, 0x7, 0x1, 0xbb8d, 0x7, 0x0, 0x56, 0x9, 0x6, 0x3a, 0x0, 0x8, 0x3, 0x9, 0x7, 0x514, 0x43, 0x2, 0x4, 0x7, 0xc66e, 0x7fffffff, 0x2, 0x0, 0x8, 0x5, 0x5, 0x9, 0x7, 0x2, 0x1, 0x80, 0x9, 0xea5, 0x0, 0x4, 0x3, 0x5, 0x2, 0x7, 0x3, 0x8, 0x9, 0x0, 0x7fff, 0x0, 0x3, 0x5, 0x3, 0x2, 0xfffffff9, 0x8000, 0x9, 0x3b7d, 0x69c80, 0x4dff68b4, 0x8, 0x8, 0x5, 0x1c9, 0x1, 0x9, 0x0, 0x3, 0x5, 0x6, 0xa0, 0x5e0, 0x4, 0x4, 0x7, 0x3, 0x1ba, 0x8, 0x7, 0x96, 0x7fff, 0x3, 0x4, 0x799, 0x0, 0x2d, 0x4, 0x80, 0x4, 0xfffffff7, 0xfffffff8, 0x200, 0x2, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x7, 0x7, 0x8, 0x9, 0x2, 0xffffb1f5, 0x9, 0x6, 0x7, 0x42, 0x9, 0x9, 0x64, 0x100, 0x5, 0x0, 0xe099, 0x2, 0xffffffff, 0x4, 0x9, 0x9, 0x5, 0xf, 0x3, 0x3, 0x4624, 0xc56f, 0x1ff, 0x1, 0x6, 0xf6, 0x4, 0x9f, 0x7fff, 0xc, 0x8, 0x6, 0xc, 0xa, 0xf83f, 0x1, 0x9, 0xffffffff, 0x401, 0x2ce, 0x4, 0xd7d, 0x1, 0xfffff801, 0x4, 0xd3c, 0xc4, 0x200, 0x1, 0x9, 0x7, 0x5, 0x5, 0xea, 0x0, 0x17, 0x6, 0x1, 0xb, 0x2, 0x800, 0x10001, 0x3, 0x7, 0xd87, 0x5, 0x2, 0x7f, 0x1, 0x6, 0x7, 0x17, 0x1, 0x3, 0x40, 0x4, 0x5, 0x10, 0xfffffffd, 0x3, 0x3, 0x2, 0x1, 0x8, 0xf, 0x7, 0x2, 0x2, 0x8, 0x7, 0xbaf3, 0x3, 0x9, 0x1, 0x8, 0x9, 0x4, 0x1000, 0x2, 0x6, 0x2, 0x0, 0x5, 0x3, 0x0, 0x1, 0x7fffffff, 0xfffc0000, 0x0, 0x3, 0x73, 0x1, 0x3, 0x0, 0xa3c, 0xfffffff1, 0xf, 0x8, 0x88, 0x8, 0x7f, 0x1, 0xc9be, 0x7ff, 0x4, 0x4c, 0x8, 0x1, 0x3284, 0x40, 0x80, 0x2, 0x200, 0x2, 0x6, 0x6, 0x5, 0x1ff, 0x9e6, 0x32b, 0x80000001, 0x85, 0x3, 0x8000, 0x6, 0x6, 0x0, 0x3, 0x7ff, 0x6, 0x8, 0x9, 0x7, 0x2eec400, 0x7fffffff, 0x8, 0x3, 0x2cc, 0x1, 0x3, 0x7, 0x5, 0x8, 0x80000001, 0xae0, 0xb, 0x800000, 0x4, 0x7d8c4ed2, 0x40, 0x200, 0x3, 0x9, 0x0, 0xb9, 0x2b67, 0x7, 0x7fffffff, 0x2, 0x8, 0xd, 0x0, 0xe7c9, 0x8, 0x5, 0x7ff, 0x98bd, 0x81, 0x6, 0x101, 0x7, 0xf7, 0xfffffc00, 0x1, 0x70, 0x20000000, 0x6, 0x5, 0xff0f, 0xe, 0xe, 0x7, 0xea, 0x7, 0x4, 0x8, 0x2, 0xfffffff3, 0x8000, 0xffffffff, 0x9, 0x2, 0x3, 0x2, 0x70, 0x0, 0xfffffffb, 0x1, 0x8db, 0x5, 0xffff, 0x81, 0x9, 0x8c9, 0x6, 0x1, 0x0, 0x3f, 0x80000000, 0x7, 0xa, 0x3, 0x9, 0xe, 0x10, 0x5, 0x4, 0x7619a627, 0x9, 0x3, 0x8000, 0x0, 0x9, 0x400, 0x5, 0x4, 0x3, 0x8]}]]}, {0x91, 0x6, "8e5a2adcdf44ae96f9104f5a7c48ac307c188acb1e9f5c2b47c0da1c5738dd898f29ee5cb94c82a6e8fe0d89c129d05f5133cf654c7a6257f63cebab02c8d95831ab0e617bcd39f392b6be561dfd9d74f81a3e69bebe7533b12b282d96f6d3d31564da98c63fc440d1b563142596f81e40bd03ac8b776000f533781504a5d6bbb5a6585fce4664599491d93dac"}, {0xc}, {0xc, 0x8, {0xac31e2f052e967d, 0x3}}}}, @m_tunnel_key={0xd0, 0xd, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8c60}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xd, 0x0, 0x8, 0x1}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x35, 0x6, "b8bec9a84ce1d58234c82261cc10353efcc98c9487c23151eac566ffecb67fb7f534e74801fa8b670c7fbdc7be707ce4c2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x190, 0x13, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x10, 0x0, 0x92, 0x4f4f470}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2, 0x8, 0x2, 0x18}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x400, 0x5, 0x0, 0x2, 0x80000000}, 0x3, r4}}]}, {0x102, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_pedit={0xf4c, 0x18, 0x0, 0x0, {{0xa}, {0xee4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xee0, 0x4, {{{0x8, 0x7, 0x0, 0x5, 0x8}, 0xa, 0x2, [{0x7fff, 0x0, 0xed, 0x7, 0x6, 0x6}, {0x7, 0x6, 0x9, 0x9, 0x71c, 0x50f}, {0xfc4c, 0x8, 0x101, 0x8000, 0x7, 0x4}, {0x7ff, 0x1, 0x5, 0x9, 0x5, 0xfffffffe}, {0x88, 0xfffffff7, 0x0, 0xbe2, 0x81, 0x2}, {0x7fff, 0x2, 0x8000, 0x8, 0x8, 0x2d0c}, {0x1, 0x6, 0x0, 0x7, 0x2, 0x8}, {0x73, 0x1, 0x8001, 0x7, 0x2, 0x2}]}, [{0xff, 0x193, 0x1, 0x20c, 0x8, 0x6}, {0x7, 0x2, 0x5, 0x7, 0x9, 0xe9}, {0x7, 0x1a000, 0x9, 0xa, 0x92, 0xd}, {0x0, 0xffffffff, 0x1, 0x479c, 0xe63, 0x6}, {0x9, 0x9, 0x3ff, 0x5, 0x6, 0x1}, {0x42b, 0x9, 0x3, 0x89, 0x9, 0x4}, {0x6, 0x3, 0xffffffff, 0x200, 0xff, 0x401}, {0x10, 0x40, 0x80000000, 0x8, 0x7b, 0x3}, {0xfffffffa, 0x2, 0x7, 0x80000001, 0x7, 0xc}, {0x3, 0x400, 0x6, 0x8, 0xfffffffb, 0x6}, {0x5ee9, 0x400, 0xffb2, 0x1, 0x8, 0x81}, {0x1, 0x7, 0x522, 0x10000, 0xf7b, 0x7}, {0x5, 0x4, 0x6, 0x7, 0x4, 0x7}, {0x4, 0xd9d, 0x6, 0x80000001, 0x4, 0xcdcc}, {0x4, 0x1, 0x7, 0x8, 0x5, 0x1}, {0x34f6, 0x8, 0xd, 0x5, 0x1, 0x6}, {0x3311, 0x9, 0x3, 0x1, 0x7ff, 0xe}, {0x29e, 0x5, 0x0, 0x3, 0x1, 0x3}, {0x400, 0x8, 0x8, 0xfffffffe, 0xc8, 0x8001}, {0x7, 0xfffffff9, 0x1, 0x6, 0x6, 0x9}, {0x1, 0x2, 0x9, 0xc, 0x92}, {0x1, 0x8, 0x1, 0x10000, 0x9, 0x7}, {0x9, 0x2f26, 0x7ff, 0x8, 0x70e0, 0xffffffff}, {0x1, 0xa92, 0x0, 0x0, 0x100, 0x3}, {0x81, 0x7, 0x1000, 0x2, 0x7, 0x25}, {0x8, 0xdcb9, 0x800, 0xfffffd80, 0x18a, 0x91b8}, {0x4, 0x7, 0x4, 0x7, 0x1ff, 0x1}, {0x7, 0x3, 0x9, 0xff, 0xc, 0xde}, {0x0, 0x6dc9, 0x10, 0x5d2, 0x7, 0xb9}, {0x101, 0x7fff, 0x7fff, 0xd5d, 0xdb, 0x7}, {0x9, 0xfffffffe, 0x145e, 0xd, 0xfff, 0x1}, {0xfffffffd, 0x9, 0xd3, 0xffffffae, 0x0, 0x3}, {0xb, 0x8, 0xccf, 0x1, 0x400, 0x9}, {0xffffffbe, 0x8000, 0xfffffffa, 0x1, 0x5, 0x8}, {0x3, 0xcf04, 0x7, 0x1, 0x1ff, 0x6}, {0x6, 0x8, 0x7, 0x2, 0x9, 0xd4f1}, {0x401, 0xb796, 0x100, 0x6, 0x1, 0xfffffff7}, {0x3, 0x0, 0x3, 0x8, 0x6, 0xaf}, {0xfffffffc, 0x17, 0xc7, 0xffffffff, 0x7, 0xada}, {0x2, 0x3, 0x7, 0xfff, 0x9, 0x4}, {0xc, 0x8, 0xf, 0xc, 0x5, 0x9}, {0x5, 0x7, 0x6, 0xd, 0x5, 0xfffffffa}, {0x1, 0x14, 0x3, 0x6, 0x952, 0x8}, {0x27, 0x4db, 0x84b, 0x8001, 0x7, 0xba5}, {0x7, 0x3, 0xfffffffc, 0x4, 0x1, 0x2}, {0x100, 0x7d5a, 0x1000, 0x5, 0x2, 0x7}, {0x5, 0x3, 0x1, 0x2846, 0x1000, 0x40}, {0x8, 0x4, 0x5, 0x6f, 0x1, 0x60000}, {0x5, 0xc, 0x9, 0x100, 0x4, 0xd2}, {0xfffeffff, 0xc09, 0x4, 0x9, 0x9, 0x8000}, {0x68ae, 0x9, 0xc3, 0x0, 0x1, 0x1}, {0xf, 0x5, 0x80000001, 0x8000, 0x3, 0x4000000}, {0x80000001, 0x79, 0x0, 0x4, 0x7, 0x7}, {0x6, 0x9445, 0x7, 0x9, 0xfffff231, 0x2}, {0x1, 0x9, 0x3, 0x0, 0xecd0, 0x6}, {0x9, 0x3, 0x9, 0x6, 0x89, 0x401}, {0x1, 0x92, 0x100, 0xa6, 0x8, 0x9}, {0xfffffff2, 0xb68, 0x6, 0x7, 0x7ff, 0x4}, {0x5, 0x0, 0x81, 0x4, 0x3, 0x3}, {0xfffffffc, 0x8, 0x7f, 0x1, 0xb8aa, 0x9}, {0x0, 0xffff, 0x6, 0x9, 0x8000, 0xfffffffb}, {0x3, 0x6, 0x1000, 0x6, 0xa, 0x10000}, {0x7fffffff, 0x3, 0x10001, 0x70, 0x76f, 0x7}, {0xffff, 0x1000, 0xfffffffa, 0x8, 0x0, 0x6}, {0x4, 0x2, 0x3, 0x6b1e, 0x6c, 0x8}, {0x8, 0x8, 0x2, 0x81, 0x7, 0xe900000}, {0x0, 0x8, 0x7, 0x6, 0x9, 0x400}, {0x8, 0xf643, 0x900, 0x10, 0xffff7fff, 0x81}, {0x3, 0x7, 0xfff, 0x8, 0x8, 0x6}, {0x5, 0x9, 0x8, 0x5, 0x98}, {0x7ff, 0x5, 0x7, 0x7, 0x5, 0x2}, {0x0, 0x5, 0x1, 0x3521, 0x1, 0xfff}, {0x400, 0x7, 0x5, 0x0, 0x200, 0x2}, {0x8, 0x5c53, 0x5, 0x52, 0x3, 0xfffffffc}, {0x9, 0x8000, 0xea, 0x9, 0x0, 0x9}, {0x6, 0xe2f4, 0x6, 0x1, 0x1, 0x7}, {0x9, 0xfffff001, 0x96d1, 0x5, 0x4, 0x2}, {0x5, 0x9, 0x5, 0x5, 0x9, 0xc96c}, {0xca, 0x40, 0x9, 0x7, 0x1c7a, 0x4}, {0x7, 0xff, 0x4, 0x7fffffff, 0xd3, 0x70}, {0x8, 0xd, 0x80, 0xa, 0xfffffff7, 0xbdd}, {0x4, 0x0, 0x7, 0x5, 0xa}, {0xbd, 0x7fffffff, 0x2, 0x2, 0x14, 0x80}, {0x7ff, 0x1, 0x8, 0x6, 0x3, 0x3f66}, {0xfffffff6, 0x3, 0x2, 0x3, 0x3, 0x6}, {0x5, 0x5, 0x8, 0x5, 0x1, 0xe17}, {0x409, 0x48, 0x7, 0xfffffffb, 0x4, 0x31}, {0xfffffff2, 0x6, 0x1, 0x4, 0x8a, 0x7}, {0x51e19db5, 0x81, 0xe, 0xfffffffb, 0x2, 0xb17}, {0x4, 0x9, 0x6, 0x1, 0x10000, 0x7fffffff}, {0x7f, 0x4, 0x1, 0x6, 0x1000, 0x100}, {0x2, 0x7fff, 0x5, 0x5, 0x7, 0xfffffff5}, {0x5, 0x5, 0x0, 0x7, 0x7fffffff, 0x1}, {0x8, 0x1, 0x7, 0xffffffbe, 0x21, 0xb9}, {0x236, 0x0, 0xfffffff9, 0x3, 0x4000000, 0xffffffff}, {0x4, 0x2a45, 0x0, 0x80000001, 0x8, 0x100}, {0x8, 0x5, 0x80000000, 0x3e0e, 0x0, 0x3}, {0x4, 0x9, 0xe7, 0x6, 0xc, 0xff}, {0x400, 0xffffffff, 0x30000000, 0xffffffff, 0x9}, {0x4, 0x800, 0xd, 0x4, 0x7, 0x3}, {0x4, 0x7, 0xffff, 0xfffeffff, 0x5, 0x1000000}, {0x6000, 0x69be, 0x5, 0xffff, 0x9, 0x95a}, {0x1, 0x1, 0x1ff, 0x100, 0x2, 0x1000}, {0x80, 0x0, 0x0, 0x2, 0x5, 0x1}, {0x7, 0xa, 0x20000000, 0x3, 0x5, 0x8001}, {0x1, 0x2, 0x2, 0x2, 0x5, 0x2}, {0x9, 0x706, 0xfffffff8, 0x3, 0x4, 0x6}, {0x2, 0x5, 0x3, 0xa86, 0x2, 0x100}, {0xe7b5, 0x1, 0x3, 0x5, 0x0, 0x6}, {0x8, 0xd6f, 0x0, 0x7, 0x4, 0x6}, {0x3ff000, 0x332, 0x2, 0x7, 0x5, 0xfffffffa}, {0x7, 0xe, 0x100, 0x0, 0x9, 0x6}, {0x4d5, 0x7, 0x4d00000, 0x401, 0x3, 0x1}, {0x2255, 0x3, 0x3, 0xdf16, 0x25, 0x5}, {0x0, 0x0, 0x9, 0x80000000, 0x8, 0x9}, {0x0, 0xc4c, 0x2, 0x593, 0x10001, 0xb}, {0x8, 0x7fff, 0x21, 0x7, 0x707, 0x1}, {0x954, 0x0, 0x7, 0x2c6c, 0x1, 0x9}, {0x10, 0x3, 0x3, 0x9, 0x3, 0x2}, {0x8001, 0x4, 0x2, 0x200, 0x3, 0x7}, {0x9f1, 0x0, 0x3, 0xb, 0x1, 0x87e}, {0x7, 0x7, 0x0, 0x6, 0x9, 0x7}, {0x31ea81c5, 0xf3b, 0x8755, 0x5, 0x0, 0x8001}, {0x2d69, 0xfffffffc, 0x40, 0x3ff, 0x7, 0xd}, {0x4, 0x101, 0x6, 0x93, 0x23d, 0x2}, {0x3174d128, 0xffff1265, 0x30, 0x8, 0x0, 0x6}, {0x5, 0x163a, 0x65e, 0x7, 0x6}, {0x3, 0xb, 0x8, 0x0, 0x401f9bb9, 0x2cdb}], [{0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {}, {}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2}], 0x1}}]}, {0x3d, 0x6, "cd2e280f5fb1917b152c9651388f1f4ebc37821cde97a21e8daa45ceef59d5e11d27a7698cbdff0089bfca5deac9413e3bdf3744401ab2653b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x3e14}}, 0x2) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x32}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000000200000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 7m49.386247453s ago: executing program 2 (id=51): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {0xffff, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 7m48.970089941s ago: executing program 32 (id=51): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {0xffff, 0xfff1}, {0x0, 0x9}}}, 0x24}}, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 7m13.377945551s ago: executing program 1 (id=144): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_fd={0x3, 0x1, 0x4, 0x20, 0x0, {}, {0x1, 0x2, 0xb0, 0x2, 0xfd, 0xff, "30cd33a0"}, 0x2, 0x4, {&(0x7f00000003c0)=[{0xff, 0x400, {}, 0x7}, {0x80000000, 0x9, {}, 0x4}]}, 0x9}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x1d, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_to_hsr\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x48e881, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'veth0_to_bridge\x00'}}, 0x1e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x11, 0x487, 0x0, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000000) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 7m12.535994127s ago: executing program 1 (id=148): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90", 0x16) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40010) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x5a, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r7, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5191a892cbb7593e49e18dae196362ec4e32510d39aa13a090d4b68e009647f81a85d7d53436a4152938a35efd37fa749587d74c6882056174a6d958e54d05ab", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012", @ANYRES16=r4, @ANYRES32, @ANYRESOCT=r3, @ANYRES8=r2], 0x4c}}, 0x0) sendto$packet(r4, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 7m12.256746649s ago: executing program 1 (id=150): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x80, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) fcntl$getown(r3, 0x9) 7m11.758336598s ago: executing program 1 (id=151): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) migrate_pages(0x0, 0x3, &(0x7f0000000200)=0x7f, &(0x7f0000000300)=0xa) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 7m11.454082152s ago: executing program 1 (id=152): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x2514, &(0x7f0000000240)={0x0, 0x79af, 0x1, 0x8000, 0x40024e}, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000e00)='dctcp', 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040002) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x128, r10, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x992}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffadd}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d2", 0x6d}], 0x1}}], 0x2, 0x2090) 7m10.884332399s ago: executing program 1 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 7m10.58650541s ago: executing program 33 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 2m35.261738608s ago: executing program 0 (id=1058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x33) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84002, 0xa4) fanotify_init(0xf00, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b398adda1"], 0x1000f) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2m30.905940493s ago: executing program 0 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x3f}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) (async) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d5216344841", 0x7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035", 0x47}], 0x2}], 0x1, 0x40800) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x4, 0x4) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2m30.162442555s ago: executing program 0 (id=1067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xffff}, {0xe, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x40000) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001adb1348f7b971f78d0104a299c7f836b4fa7d3609467ff52"], 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000020301020000000000000000000000000900020000000047020000000800034000000000"], 0x30}}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x2400c4e4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000010280)=@ethtool_per_queue_op={0x4b, 0xf, [0xf, 0x38e, 0x1, 0x8, 0x6, 0xe, 0x8000, 0x9, 0xe, 0xd2, 0x0, 0x720, 0xfffffc00, 0x7, 0xffffff81, 0x8, 0x6, 0x5, 0xef02, 0x2, 0x44d, 0x6, 0xc2b, 0xfffffff8, 0x7, 0x4, 0x2, 0x1631e2fc, 0x1, 0x6, 0x0, 0xfffffff8, 0x4, 0xfffffff8, 0x5, 0x0, 0x5, 0x1, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xcfa, 0x1ef, 0x2, 0x7, 0x236, 0x3, 0x1000, 0x8, 0x3, 0x8, 0x7707, 0x5, 0x101, 0x6, 0x9, 0x1, 0x401, 0x0, 0xf, 0x1000, 0xc120, 0x5, 0xdf, 0x87ae, 0x0, 0x1, 0x7, 0x1, 0x9, 0x3, 0x3, 0x9, 0x9, 0x3, 0x1, 0x8, 0x5847, 0x5, 0x2, 0x100, 0x8, 0xfffffffc, 0x8, 0xb, 0x10000, 0x101, 0xffffffff, 0xf3, 0xfffffff8, 0x2, 0x9, 0x80, 0xe, 0x7, 0x9, 0xffffff24, 0x44d, 0x8000, 0x2, 0x4, 0x3, 0x2, 0xb5, 0x3af, 0x2, 0x800, 0xffc, 0x67, 0x3, 0x9, 0x0, 0x0, 0x0, 0x7fc, 0xba58, 0xe, 0x8, 0x10001, 0x3, 0xc, 0x4, 0x8, 0x9, 0x2], "254cd9ffe8c44b69c9dbcf7145a16dd490871278a30085417b574b698395a0148fa2fb1f45aa55c9f8b30e0929ec129eb4a50b58679e3979cefded17b06be655a636c89b9d621c3dae77"}}) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) unshare(0x20000080) r11 = signalfd(r7, &(0x7f0000010500), 0xfffffdf6) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000010540)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x433, &(0x7f00000100c0)=ANY=[@ANYBLOB="66643de4d58c8a7f72cbc3a31d97f88cbd3d59da7ebefc9bab7d41c0d9fa35eca2f4c9cc6e8e90201a7b922ef976fd372fb6154ed13ebd8c65cb77ea3e6813aac527267281c57e1634b69e145801e367c00a7507fedb500e5d1c9206f26a5e62927d3a4330bc43b15d8d5736327e1e05777066c17a11f77abda6f324e1a09b4909b9eecd9f65eb1f1f292d0edaabbc0e1de3f267a78d6ffe9c30808202e666d4ca9e07688679e4de1c600054462b5ba31bc56fcf4d3d6ce1112c5b7b8a90cfdaf3723fefbd65062fd22d7ae0b277dfdb2e7ccc464c29988763aa2deeaa65eaa25dbe8be1ec9866c820b3658dad36c37cc5159760a3efbf59160910a32adcf0af00379058fdd3d47b77bba316d439367c1926baa0e2e0a336587e0dbbbc177b90c4", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES16=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2m28.682413131s ago: executing program 0 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x90880, 0x0) preadv(r1, &(0x7f0000000b00), 0x0, 0x1001000, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) dup(r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xe000}) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = syz_io_uring_setup(0x494, &(0x7f0000000380)={0x0, 0x7079, 0x0, 0x1000007, 0x428b}, 0x0, &(0x7f0000000280)) io_uring_enter(r4, 0x3516, 0x0, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x1]}, 0x8, 0x80000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000080)) fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) 2m27.839710378s ago: executing program 0 (id=1075): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, r3, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c0a480bcb7d1a8b990259c8860c4267c5893993cba5aeffff736a9cf047014cd0b93d84294444c925403d821f3bc0f5aad6b515fa275a2bbfba553c1744647e0062dfe3effbe9e7022fc9a8c0a6c3fbffd9971cf2c581fd7de23f149b214abe0081d494f6d7e49b448d2b926419219bdd92d32f41f7ecea3ec65fce665d2bcf55b438f674e8b0254931e79b54d8bf1daa4b65a083f64b11e5f6a3c3cdef5118a25d50e3ce7c351050000001bf2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() r10 = syz_clone(0x5000a00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 2m27.020271447s ago: executing program 0 (id=1079): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40020) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x0, 0x7, 0x9}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000200)="5b46b13089", 0x5, 0x0, 0x7, 0xaca}, 0x1}, 0x1) 2m11.79329392s ago: executing program 34 (id=1079): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40020) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x0, 0x7, 0x9}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000200)="5b46b13089", 0x5, 0x0, 0x7, 0xaca}, 0x1}, 0x1) 1m46.378108811s ago: executing program 4 (id=1210): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x183102) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000000)=""/119) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffffffffffe7e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) getsockopt$ax25_int(r6, 0x101, 0x3, &(0x7f0000000080), &(0x7f0000000040)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGWINSZ(r7, 0x5413, &(0x7f0000000040)) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$watch_queue(&(0x7f0000000100), 0x80) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x0, 0x0, 0x5) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0xfffffffffffffffd, 0xf, 0x80000006}, 0x0, 0x0) 1m45.411208323s ago: executing program 4 (id=1212): socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x222, 0x0) syz_clone(0x942a80, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x1005, 0x3, 0x4, 0x7ff, 0x85}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="60159700000fe696"], 0x24}}, 0x0) 1m44.382530246s ago: executing program 4 (id=1216): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f0000000000)={0x58, 0x1}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e00000000000000000000000741a3d57962a638b2e176c876f2df56d9d", 0xd) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x81, 0x80, 0x20203843, 0x3, [0x2], [0x810000, 0x2, 0x0, 0x10], [0x2, 0x20, 0x80, 0x46], [0x8ac2]}) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15908091}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2400c085}, 0x20004000) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000020000/0x3000)=nil, 0x800000}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000380)='!', 0x1}], 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_clone(0x4000000, &(0x7f0000000080)="9a62008cce1e6abd7dd53ee959be51a7b978e2c0bf8cb0f8fa7e6335268894db3f89471651575b9d8560d495baa25c45d2280474b67a1450c7910d9a685990077945f0d160ca0eeb75168a8f48e84e359dc1849d4e87a449a5249ef93079f3f76c84354931f7e54aab667436b9c9cc79670c18faed2714587b3dc72215f8d1e703af4ba1abd83dc9e980e3887953bd3fc00f5200805eb412d73b3d837ba9169af253ab2078e355eef9e81bc9cba421115ec46333fd09637d6b338b69408a906f", 0xc0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000600)="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") 1m40.558864927s ago: executing program 4 (id=1232): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) creat(0x0, 0x0) 1m37.717740958s ago: executing program 4 (id=1239): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10b) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 1m37.282543131s ago: executing program 4 (id=1240): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r3, 0xb5d6) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000002200)={0x14}, 0x14) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000001140)) 1m22.280806607s ago: executing program 35 (id=1240): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r3, 0xb5d6) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000002200)={0x14}, 0x14) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000001140)) 14.79631356s ago: executing program 8 (id=1458): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, r3, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r4, r2}}, 0x18) r5 = openat$cgroup_ro(r1, &(0x7f00000002c0)='pids.current\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460300ef0000001c0012800b000100697036746e6c"], 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x20, 0x2, 0x9, {{0x20, 0x4, 0x2, 0x19, 0x80, 0x68, 0x0, 0xc0, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x5f, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x5}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xaa00}, {@multicast2}, {@multicast2, 0x8970}, {@broadcast, 0xb4b}, {@multicast2, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0x2b, 0x3, 0x1, [{@multicast2, 0x2}, {@broadcast, 0x2}, {@rand_addr=0x64010102, 0x10001}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x87}]}, @end]}}}}}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r6, 0x80, &(0x7f0000000200)=@can={0x1d, r7}, 0x0, 0x0, 0x1, {0x0, r8}}) r9 = syz_open_dev$swradio(&(0x7f00000013c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000001400)={0x1, 0x5, 0x2, 0x80, 0x402d3c8, 0x9, 0xa}) socket(0x2d, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x400) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001600050200000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="79565b8cb12fffab"], 0x20}}, 0x0) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000200)={0x1, 0x1, 0x8, &(0x7f0000000380)={0x13, "a64facf230551fbebb4485ff0fd4fd7e7bc335a769fcb24b811659084a2c208acc"}}) readv(r5, &(0x7f0000000040), 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r13 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r14 = dup(r13) read(r14, &(0x7f0000000040), 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000840)=ANY=[@ANYBLOB="120100035121fd08e80430ffbfcc0102030109021b0001400080150904e30917ed"], 0x0) close_range(r12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000efdf000006000000f9ffffff40800100", @ANYRES32=r13, @ANYBLOB="f8f1ff0001000058ac30d76f19def40c00000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x50) 11.808083745s ago: executing program 8 (id=1466): ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000000)={0x58, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) userfaultfd(0x801) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15908091}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c085}, 0x20004000) ioctl$LOOP_CLR_FD(r0, 0x4c01) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000380)}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone(0x4000000, &(0x7f0000000080)="9a62008cce1e6abd7dd53ee959be51a7b978e2c0bf8cb0f8fa7e6335268894db3f89471651575b9d8560d495baa25c45d2280474b67a1450c7910d9a685990077945f0d160ca0eeb75168a8f48e84e359dc1849d4e87a449a5249ef93079f3f76c84354931f7e54aab667436b9c9cc79670c18faed2714587b3dc72215f8d1e703af4ba1abd83dc9e980e3887953bd3fc00f5200805eb412d73b3d837ba9169af253ab2078e355eef9e81bc9cba421115ec46333fd09637d6b338b69408a906f", 0xc0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000600)="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") 8.603427077s ago: executing program 5 (id=1472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000500)) 8.602678442s ago: executing program 3 (id=1473): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a36", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000580)={0x40, 0x7, 0xa, "49d84b18c050bde5ed9c"}, &(0x7f00000009c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000380)={0x21, 0x0, 0x3, "c02e94"}}) 8.290678636s ago: executing program 5 (id=1476): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) (fail_nth: 1) 8.290271106s ago: executing program 7 (id=1477): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r2, 0x7fffffffffffffff, 0x0) writev(r2, &(0x7f0000000480), 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @short={0x2, 0x3}}, 0x14) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xf) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000120001000090455070103490200090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x43, &(0x7f00000000c0)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$COMEDI_CHANINFO(r2, 0x80306403, &(0x7f0000000140)={0x5, &(0x7f0000000500), &(0x7f00000000c0), &(0x7f00000002c0)}) recvmmsg(r5, 0x0, 0x2c, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x2, 0x0, 'queue0\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0981) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x9, {0x3, 0x103}, 0x0, 0x9}) syz_emit_ethernet(0xce, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) 7.852179844s ago: executing program 8 (id=1478): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0x1000000}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7.796633184s ago: executing program 5 (id=1480): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write(r0, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r0, 0x8b24f000) socket$caif_stream(0x25, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, &(0x7f0000000440)={0x0, 0x2078, 0x20, 0x0, 0x3a3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}}], {0x14}}, 0x7c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) 5.975743096s ago: executing program 3 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x408, 0x4a4) 5.958249008s ago: executing program 8 (id=1484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) modify_ldt$write2(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) chdir(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x33) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84002, 0xa4) fanotify_init(0xf00, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b398adda1"], 0x1000f) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 4.808973237s ago: executing program 3 (id=1486): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, r3, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c0a480bcb7d1a8b990259c8860c4267c5893993cba5aeffff736a9cf047014cd0b93d84294444c925403d821f3bc0f5aad6b515fa275a2bbfba553c1744647e0062dfe3effbe9e7022fc9a8c0a6c3fbffd9971cf2c581fd7de23f149b214abe0081d494f6d7e49b448d2b926419219bdd92d32f41f7ecea3ec65fce665d2bcf55b438f674e8b0254931e79b54d8bf1daa4b65a083f64b11e5f6a3c3cdef5118a25d50e3ce7c351050000001bf2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() r8 = syz_clone(0x5000a00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffffe, 0x0) 4.566545217s ago: executing program 5 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000540000001f0001006e657464657673696d0000000f0002006e657464657673696d3000006e1bd8"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) (async) close(0x3) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf2507000000080001006000000008000300", @ANYRES32=r5, @ANYBLOB="0c00990002000000000000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async, rerun: 64) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, 0x0, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) r8 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\xff\x10\x04\x00\x00\x1dz\xd05\xe2e,\xb1\x00\x00\x00\x00\x00\x00\x00\x01\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1!\xaf\xf2\xb7\xe0\x95\xfc\xa6T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT2\x1b\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00', 0x3) (async) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r9, &(0x7f0000000840)=[{&(0x7f0000002500)="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", 0x8bb}], 0x1) r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000001880)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000880)={{0x0, 0x6, 0x9, 0x7, 0x0, 0x84c, 0x1, 0x4, 0x3, 0x4, 0x1, 0x4, 0x1400, 0x0, 0x200}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000002dc0)={r11, r12, "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", "97e274d6a3495bb7968f5797d1ba763d9045b10c4c641a10ce530ee01dabccd6419a5f73588610a8897b11a1005c926416f941049363842bf424746f30d53dd3a623e0dc9ce2ec4e6bed012ac4ac7455fda1e13fe9a10afbf4455447df3d584d20794306d0bbbc9fc5380c18e04a71318751579f71c257563a9a40d557207a7f1b6dafb760a4c4c859e6a8fa4878a23eaa1066083e4f121b50a21520ad6f82e7134257cc637b680488348cbfb631c3391285a337192ae6c6e86ece21f916208ec2134642d7aace389cba6e390dbd18598df2a71431276a90548d07d89b3a8b1ab6835335d0ee84c22bd6f672c87ca4d74f20a636e7ced4b357c8dd48d7b34510a0691cbc54dfb3da781a5337fd4c4b85e592eb43e3af06b35eb71c2bd9fb3dc0830c42ee1109779380802d3ecc0ce5cf5fbf8559ec023c4c29cfddfe6e85f9d79f1035ca3d3d9d62267450c4fa38c58401103cfa79f870fc085528b6532d11c7af241fae8e642d8800a9d31f944151d00693120e555a47dff0aa5ff629b1e9860c149b961fe5f1034feadee5018e730e266ab83c6c19d29066dc32edcde3bbdefb63a0bba8107efe5a3b186e7dd04d906eef8e0747a6377679f85b436559d3ac910fdca16ee544ab598b640b8df9a563da3e207beb584da9f9ef52485977c78c00765f31c4ac1ea31fc2565e93b1192791f945e42f945b74b0b171814b1ebb93b2ec4f0dfec3aa7a26978bf25180e6269bf5e99b97876c5fe4474e52e33316ce0fbbe4fa8dd7023d8f49703fe03a6856b5cedf9a5317d28395f01187007f62043def817d492a948baa9958b717b1c72a62e136ade4a1a91dc65fa8799e51815c6776e6e043d4b0078c60ecf970c96aa10c60306b13a875fcdb0e8af1cb6118936b65076a946503d05b014c5f53bb15ff7f4d182ffaa410e527c45a0fbb3f6219310646551e58673e7e6707f6994139b87fdca38a5cb20b7244af83f7acd61e6d09b1f55fc30445fdae85113c8dd78b5bfee8af4d64c53b7e459961bc2b0878c1d089f58120b020a790a1e99bc0fbb5719c677e9e80d6c86f4634e203cd15992d6ae9c5a9609798e4a83d7028b30e57ce1855236838e58992e9f5b88508720fa839e137c14566bf091a52815b0ffb8da4c0b7d01522f76757cb96210c796c541fda0804af88d7dafd598c63d904a557b224e425694b1dddeb5388e22f6b5dc267937f9d8b8d987c22381996a5c5e9d667ef53b9c98f4a880ebfa98bc6f5ae8aeeae4f4f42758b3cf67d094d57feb0307752f0bff46cd0b12da039ffbae54c93b50fb418556d9806375a7889544881c363296e00c04d8f557094a61e5a24ab09e8dd9e8b31ef8a3a0b1c17ce1738fda625011bc04ab90ae436a70e7c3bed775d986f9a7fce3355c98a69247f624a9f179e2b89c5619af3418684c28eb77e7bd9b1d53d2226affed523ab5ea25fd41aa5071cf9f00d4f970d12dc0480d58286bbe9ddf5f7914e7c90e31e4e00467eaed5e9e75a5d231a9310b8f86c9adad3d7888e1a20e894c2419b861921f4b5bd9394e61920ed3343e44c8bafcb0eaef7c038099e73f2232df6970483df7a34b051835d5c7d1a3512f9f86069866b79d8dcb7e622d34e47a19288185830e86c005d0540bc8de9a25a480ed2e78e914dd760b56e66d46d081e015c5bc6f9f1176cac76f5964662fdf617b6cc9602f227a5cadd2bd9104f4495fd97e2d081a08e248e4c16490d0a9fda6486161aa7099a785091118b088655afbddb3f37f36dcff60376dde687ca7a72443bf14fc3343aa2adb949a472dee4ba0232bfee8bb828f9b734588e78c77fd8ba7119d22e554f35f288afb91158b4119595bc98ee410ead0de2b9d28c435b5789fbd67c800a2c4ef670a572dcdb7dd33a3ba05ae2075bd5894924f598bf696b8ab1e1bbfc24c2ca56c0fecfdfc94dcadcc8f4c81ff3c2bd4f8e505fc2dc2b09b78980f93b6582a6bffabd3f933e609cd10312b2eae27b756680789df2e9703f09e953ae793c62d8557ddf49c13c727a3545685e4a6795f22e12d9538b3db925fcecb0e3a8285c742e14097434d1ef957239eee52ca7b8107c31cd7f93dade8f1e0c568b5c47953dae7cfb669950802a175b031f67ff074ba9c8e3024afcf22661ea7b7937ad531b89b88692fedd3812787b9569d8187cbb6511e2b8a5332b731072c6660ce6ddd303a011f719aab70a13c68e31a1458e4ddc1889cb795c12bff5cb3ccb14292f850aa55154515a76b1201464fafbe355cc65959b2f383e757114c1bf62e89a86d7ae3a1e6218bf6e6840ad5c405d5bf8dc705edcf7c0ec19e5d8eea5f948f5754878386b4656532aa89a9aa7cefa81e4317ba8e1189db758f4ac89fb7e4dc5b652fdf49b998687abb2db900374a32ff9f56c3c960036f48056c6c0f5336df85f552a38b14d45af6bb0bc00708f5edcd9aef88c70868f69e4e98dd3a27551a68094c86253a1cddb7b701736648673c848f342ee3988503cabc839e94292b0b5d66800172eb870521bf382bdb0746a4e1900917f4fcdf4fbd44fc94511985b00be479991eaf307eac8290af24347069b0a6b201aea1f02b9851b9029e1363a3bbededeeea39151cf0ccf9a35032f39e32032fbe78bd91fccccbaec1163282f36850285af3a0e0d1cf978a3d4b04a1b11933d0b07c8972a989729d959808a95ad91eb642017ee4f75fdae7a9586943a56a2822a320af789b2abb4a3701728d927d0dba1211bbef31b8a932f4ce3de86a89a3f9c22ea3458eff23663bd4b009965fa50b56b0b76ca83bf5c1fbb8814272fb5afe47b98732a71b822393dfaabf4e18299a8b5cc04c5f005b5ec9f858d58cd1ce6154000468a3d1a845a6be4dec2d5a19e712237fbc5c2b6e00ea1488cfa45a8057ad96bbaf62a7718e032a1599dc7c348149bf4839ee3914788b72a3e3f14103b7867107ecde67ae735617e9f8f9cd9b8e81b80836f82e39c7694484935428768a7c2f0ed8e43f56db916af3bdd8cfeaaeb82798ab657df4535827b3c41abf2eb136867e042399009ea6a3abd30f8e597de1cfee241e1a2abef688a21d023fa6d03edeb914a6134f37ab7609abd69dbad287c865c52ff63cbc8086b120b2ef336703d5054fd698c9f55eeaecc780c804979ba8402f3c65732e3c0fda95b92426aae9263cc62e369984ac5b4d10a9c782ee84fc1efc7551952bde10cf42dd912fe418ace69bb1de4b13fe71dd3520e2019dbb0d987ce36f0f5145ee0880dbccb0eda07226eef45197da103d5b585599bd23e2c27b06961da341850c2ff367775bbd5852183ec83cc1e1a2b2d7ce5c0a8d99ecc08dd594957911d99e7f268d78f1ba722a4d0bf1b4a1d85b826f8fe0caa877fd57a603faa37782b6a8b1989f78c90293a4f6e868ba7a88a471ad73dfff28c7cfe5b6eca0b629afc2eb141593b6305b1c83b019bc6fd33d4d19ec55d8f02d85ba77f3c605731cf297ee79a7ede9cd795b355a5291fba50dd2b309a49903078e5aa4c5e71f6e130740639c9de0c4a8b514251af9b8bef318c644a9256ed7da78ac681b3416092e42ed159ef27ad1fa360f3474ba17209bcc3d40ae51bfeb4b4205d49c18446b114fe23c6a37ced4dbc3cc5e43276c06c53b2605e79ee070c8179e57eedf2afa238382a18fce53b097f4ed79f51212283147113fcb7e1b9101e71a18ae773f238b8bda0b9854a01a7bd199e13921b74cdb1fc0277aac80a75013edf1d699376fb58bfcd45213ea6122560ea8f708bb7c217aaccc329e14d40a12b1dbeee5217d22f60b58659eb4d3a6bf38d7d285445f298fb7bce41de33f44c21314cab837f6374c81c1ad307e4f7a99b4c940e8055c4eae5d8b9c5267d8887590f3e0cfd0864f0d2596871463b7b44e04c8a8e970100cc9aafc46ac2c3a328a84f2493903d36df9917851bb6505a81947558cc1575540d9b8f6c1758035a4720e7509a4b053ed1c42ee715130f3424f170b2462b11e60703acf03fb0fc37c777c1c8d8f9cef35013af09ba0b3071bb14dcb2e0d15b47edfeedfb22985e69f2cf10c666a63b7540f67d072a90f4b752a83f0b460558a478a0db730c936a1b826ef325e1c80c69e210dc8a856693184f09614d0dafacf49d5b9483ca7bd9795051889bf9d165ebdb686dccf9a0560815274da1ab711e36ed5b8d326b1a9427d837fb6bd672abd60f32e36d36186e4f9b6fc5020bc6cd9ce82def1518e0b16b777e15add4b8b7cef05471f243bcb30db1c2a97dc497a4b0ef38ec30a57139c7f8423cba5599fa9bfcfa4cf11da526c954f1e450c05a8e710ab038dce3aab829b62914b2b82346447d8c8229eaf5f5dbeffb758d79b905551bfdf5c830a644871acf3dcf233d0c415a0d3c76ce4bfa888809c9706463e90080b45e425fa789d7fc82958ff340643f75be57dc23cfb802cae6165b68d9aff838150063232944a8d7aff200908cb66ca29b677ff0fae127584852259ca1355f1c436e56798c73149135874e3fbd51e52dc7739169058458c827f0d9bd1b557a5dee6524aeb2b07479b7b134149daad7f38d15137c6dc15240774a8e874b405dd311aa8d36408d6f8d7b8d2f9682c2265bb6721053bff2d6cc610e85388b7acf79bc179ad390fc5539cf8197cfdb6ad411a4be461bf3aba4bb86bf650f9a8b929778c98dcf509972eb863d8fd43fbd023927cb0be4c7a161c403bd22320ee8302a55454750677d7c35ff39818a821ef6277465670e6c2288686659cb66243dd9db0ad1a73892ef2231d82e5c01a199c99a973a79f8b0020b6c72da62a4699571db052a6e35262aff22b236b1a66d1780bd66fc1676325d69994861382ca173bd6f4f8ba62fed31a99e19112a1f6b958573cc4c2862a9fe2f286ee7671f9b053ee31ac3962ac76f7727d8ee577ff9909671daf68fb5a26a021db8c2f7396c422278cf0121a7e78944c0349d2b5793b5236db09b2ff4ca59dd78eec99ade43765f82f03a3d8b2c38432754fd07579e775638e689113b2998127c86702c09ee11572f9ed62960b01a84dcb6f196d7ba719ac47ae500a53d9f35e1b0894956a2dba52f283ce3eb963318e0d9b092daeadcd8849b47880404752f3fde7cfd192f320d2e14a50bd848341acaa421af6460c03ad428fbef4d5f5c44131529eeb68f12a479d2741d23b0dab93480249385eaad12fd5e2e14642a011afa973fb06aacc3337db22f2cbcbaba7838d717857538e2cecbacc65af12975bab3678a758e086c153ad10eacd0eb81fab2befedba884da7bfc3bf7e666e2c93a5d3e3456302ff1c8ab723e1ab9fa4a42b20fb95284f0d9e4bedf4ef21b890ee18c135a3acd8cf3d166db0614bb67deea13ff3d08582f29a327f681a3431085006a182ebb"}) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(r8, &(0x7f0000000540)='./file0\x00', 0x100) (async) r14 = dup(r13) (async, rerun: 32) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) (rerun: 32) close(r6) (async) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 4.56628776s ago: executing program 7 (id=1488): ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000000)={0x58, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b99010203010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) userfaultfd(0x801) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x15908091}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c085}, 0x20004000) ioctl$LOOP_CLR_FD(r0, 0x4c01) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000380)='!', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_clone(0x4000000, &(0x7f0000000080)="9a62008cce1e6abd7dd53ee959be51a7b978e2c0bf8cb0f8fa7e6335268894db3f89471651575b9d8560d495baa25c45d2280474b67a1450c7910d9a685990077945f0d160ca0eeb75168a8f48e84e359dc1849d4e87a449a5249ef93079f3f76c84354931f7e54aab667436b9c9cc79670c18faed2714587b3dc72215f8d1e703af4ba1abd83dc9e980e3887953bd3fc00f5200805eb412d73b3d837ba9169af253ab2078e355eef9e81bc9cba421115ec46333fd09637d6b338b69408a906f", 0xc0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000600)="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") 4.432993108s ago: executing program 3 (id=1490): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x547a41, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000100)={'amplc_pc236\x00', [0x10, 0x9, 0x9, 0x6, 0x3, 0xab72, 0x5d41, 0x49ed, 0x9, 0x3, 0x7, 0x40, 0xce3, 0x1, 0x6, 0xae, 0x0, 0x6, 0x5, 0x7, 0x69, 0x3f, 0x81, 0x12d, 0x9, 0x2, 0xe49, 0xb, 0x1, 0x6, 0x7ff, 0x3]}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000d80)={0x1, 0xb, 0x1, "2ac0749f7a666a9c7d0000000000000200000000ff0700db679e292c016dc100", 0x3131354f}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x8000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80003, 0x0) r7 = epoll_create1(0x0) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000780)={0x10000008}) write$dsp(r6, 0x0, 0xfffffe59) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) 4.314217849s ago: executing program 5 (id=1492): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 6) 4.078637456s ago: executing program 6 (id=1493): mkdir(&(0x7f0000000080)='./file1\x00', 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() r2 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x4bdf, 0x5, 0xffffffffffffffff}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x14}], 0x1, 0x0, 0x0, 0x8000000}, 0x20004804) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04d035705c3094a08013fda7d87657aa6fe7dbb577bca3002430565ec0dbf6cdd5485fe505581498491d9fc0e5146c1f6629d52b597ef64913f563b75b46b15fd02075090a348c1e4c1c486cfc306a9ec5f49086c970780aaddb60dc81200a33166578723796fcc06b4f97875ccad0ea772dfd43b424671f00f905c57ee12ad3bd4bd44e8ca32cc186817ee9cb00ff23afca7dd86ec1baa50ad4abf805cdf8280a9d01d29023fae649a15fb307f3600d6ff732da6371f7adcf5f3f3ea78738a5a19c409194baac72cd354d1e63d02959fc8750ebbea1722adf7af5164d", @ANYRES32=r5, @ANYRES64, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) 3.322968653s ago: executing program 5 (id=1494): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a36", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000580)={0x40, 0x7, 0x6, "49d84b18c050"}, &(0x7f00000009c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000380)={0x21, 0x0, 0x3, "c02e94"}}) 2.86713023s ago: executing program 8 (id=1495): socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x222, 0x0) syz_clone(0x942a80, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffff9c, 0x0, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x1005, 0x3, 0x4, 0x7ff, 0x85}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000021401cae85f0cbd7000fddbdf250900020073797a3000f1ffff07000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="60159700000fe696"], 0x24}}, 0x0) 2.386686572s ago: executing program 6 (id=1496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4e21, @loopback}, 0x10) read$msr(r2, &(0x7f0000048040)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x63) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fe80000000000000000000000000003a000000003c000000000000007f0000010000000000000000000000000200000000df66a3aa000000000000000000000073316583468ac0f6a02cf6072374c59402b8e85ea1b5f9ec6fe711c03a659cb4bcd7c6211b97bcdbf8ee4e7227f476fc39d99ad25948d7d4abaa7c9463119f2976ea5a2bb463a7190af1dc98027ea96c2f3753a9cb0cb2afc7a3cf0d21fe8d979f1b1d7c68dbf9da29bf971777297161607965ba59ee20d5f153f0e31f1f4a77cf0de837d111f41a357c8ce4aad337ddaaf982c58ca77f89c8ff5de272bf40f376c94457fe4d240de5af"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r8}) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0020a02e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001e00000010000000000000000000000003c040000000000001e000a0017a5189dfaad985a5df9db59e6ed6f2be919d90369e552752f7c74a079d559078e949587"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x15, 0x200, &(0x7f0000000880)="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"}) 1.392468018s ago: executing program 8 (id=1497): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.206114391s ago: executing program 7 (id=1498): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @irqchip={0x1, 0x7}}]}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000001c0)={0x81, 0x0, 0x3}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x1c, r3, 0xf21, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x4000) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c0a480bcb7d1a8b990259c8860c4267c5893993cba5aeffff736a9cf047014cd0b93d84294444c925403d821f3bc0f5aad6b515fa275a2bbfba553c1744647e0062dfe3effbe9e7022fc9a8c0a6c3fbffd9971cf2c581fd7de23f149b214abe0081d494f6d7e49b448d2b926419219bdd92d32f41f7ecea3ec65fce665d2bcf55b438f674e8b0254931e79b54d8bf1daa4b65a083f64b11e5f6a3c3cdef5118a25d50e3ce7c351050000001bf2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getpid() r8 = syz_clone(0x5000a00, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffffe, 0x0) 1.202121237s ago: executing program 6 (id=1499): mkdir(&(0x7f0000000080)='./file1\x00', 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() r2 = socket$nl_audit(0x10, 0x3, 0x9) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x4bdf, 0x5, 0xffffffffffffffff}) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x14}], 0x1, 0x0, 0x0, 0x8000000}, 0x20004804) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04d035705c3094a08013fda7d87657aa6fe7dbb577bca3002430565ec0dbf6cdd5485fe505581498491d9fc0e5146c1f6629d52b597ef64913f563b75b46b15fd02075090a348c1e4c1c486cfc306a9ec5f49086c970780aaddb60dc81200a33166578723796fcc06b4f97875ccad0ea772dfd43b424671f00f905c57ee12ad3bd4bd44e8ca32cc186817ee9cb00ff23afca7dd86ec1baa50ad4abf805cdf8280a9d01d29023fae649a15fb307f3600d6ff732da6371f7adcf5f3f3ea78738a5a19c409194baac72cd354d1e63d02959fc8750ebbea1722adf7af5164d", @ANYRES32=r5, @ANYRES64=r4, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) 1.110298481s ago: executing program 6 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x8044) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) bind$tipc(r4, &(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x4, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f0000000180)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.012569274s ago: executing program 7 (id=1501): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r2, 0xb5d6) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000002200)={0x14}, 0x14) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000001140)) 922.889979ms ago: executing program 7 (id=1502): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x60e, 0x6, 0x4}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x1, 0x1, 0x5, 0xfffffff9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r2, 0x18}, 0x38) 922.591681ms ago: executing program 6 (id=1503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000004a00)="50271b49125c5b37127a1ba8004f9286dec63f21f1df7e58a55adc3f67598b8bb9ffc059281b2a177ef10e1ee51bb526c008fbe50aa48d15fa7f842cc1cd4c6a8ce2581429387ee6a9a431c15a14f1d3a492780a967a2881440ed24ba123c10bb9a33324660541612278", 0x6a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="f56195e3f573c880e60ac86db4b643700f3db94abbb5129bbe80", 0x1a}, {&(0x7f0000003700)="d422f2b80b1bcefe0bc1fb045f3a153e84f5d67bba9b3c7f2da2875ee4a468dd0b88bcf7ca0c3c9f0ea1f8514b5ed5c4ace069617d71e84dfb9e7c825ba2e6c8b2945eb474f77640c3a43b57fd97a28adeaf9239a07bc5ab0741ac0fdabea5a39f40db7fe0fcc2f42d045203011300b3a9068b906f91b497a4f3b17124ebe1fab6430023c4f8bfd0f84280499fa811e93b3746d334b4b0369b31b4504f0e08f5790289befeca88f02fa02f5f1de0b0ffabab594e696b6d592dfe04", 0xbb}, {&(0x7f0000000540)="9934e99df8658df0cff33c622286d1361d07df0a5dce44bc26843649c132c4a090447df1175794f35747ff", 0x2b}, {&(0x7f00000037c0)="ef464beea007362703e9973f8fd43990da1e0c560aedf8d30b70bc5026009be4897c3be2d40414558f15af38dd2c6512f19bac86ea24ebb78935da36b4feaceeaddab27c90ee12e102c854aa31c51e87207bb16da5614811cc197aa63b893679f7f4eb28797971d2aa6e", 0x6a}], 0x4}}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004c40)="0b3b9ba8e6a6dacf554c44518b3b099543ee23897e0d9aceae2620cb9be475b52ff36ae7f5d16a3745c4f17c34e7c46a3106b3b090573eba5b68c9e69dadd296bd39d4cabbca976a6c09290644a14212c24caf4832c3c96f08bbadf4085e79eb46a5cc2d2a49a9b4e124", 0x6a}, {&(0x7f0000004cc0)="0c558476210103249fc5f6476d0d35874353f3063c8f10e291ee178ff6983e6c208d676733fb75a21784f0c3ae81fd7b8ed6ecbf6c3cc0fe30099e276e39baf8adcb1afadd13fa5ffa7e0c646e753136791552155affceb974945f65a47c8f95c093a063d951325a50de01ac48bd05c5b3d727a38929584679de0a88ce791139dd6378f3281c0e29a3fae586d492db1bcafea55e5a556335053cf884c2fcd11968f960d101bfd0db8ee8286541120dac440d2a37b385e8fa1e051b341be100e9d2d72f01f55946a098afd44956a11d67837d59e70bf74877599bbb0a02f32c73e4049c12d5e43e4da6f87dbfba3130", 0xef}, {&(0x7f0000004dc0)="868ff7d4fba07e6c3056358c3f07e1fecfd75c0848780d60a2b5ddfe3f4bb4a51b42546a84f9963e76376fe162f9ff6f7f987782d6dd59fd03806994ece0fde896187dc14f46163c7fe5d6a4afe3a5eb9be370b6a40f33a2007bf041ac3037a1f4fe0fa788e30c2b837b31aab94833ac21cd417cade9ddfe9240d3b1c0db79f0410ec4b140f555c40e24f9763e3c9298d796d57b26a387ac7a968ca2ec5029d3b87b662a4091b15dc1aa4afa2eae95894f81535221710ea2d96e", 0xba}, {&(0x7f0000004e80)="c3d22ea6ac4fc8ff1bea184fda08f6aeab2d02c16c2796f66097979169ea92e6b11ab34a8eff2cfe2cc467ca238adc240e3c018230c1ba24b81be3d3785a483a84f24e10d7ae7dcbe527754dca030bbd6ba032fd75b28053083b4d1a56770128247c972dc24143fd19e344a566a7", 0x6e}, {&(0x7f0000004f80)="68e158740a3a5457794587bca6f6f1cc137e5744d2967957ad26d3e8cf", 0x1d}], 0x5}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000053c0)="a985cc1124623bb428ffa36895e23c9755b8e5a5a5bdda52ec31907cd01bdfdf180520ed8e67ebada0e1e1e147af2e0ed136d6d4dac15f073476", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f00000002c0)="efbad738019ad003000000926f7d93547ee9f6963784e54396afafe6f1ef560da6e0e1ee5bc5ed11492aca8400bbd4666816635f7a664683998945eefc1d21fa465206cc51b8c750fa01552712416293f9975a9751632e296be0", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000006640)="7d94f704f1845b4db489dd7fbc", 0xd}, {&(0x7f0000006680)="02e18d33392575787e760eb5e6c97548b167aa43cf904fd1f1cf1fdbac2df5722236a3a2ce01f8c12962606c01a9faee84f2a90e98b1ac6f447c560f79a87cab1cb74cf8ad2435b9ea40f33bfcb8df85b833468c4105f0ee7c9dd5b50997713da4fa01a6e9413af550971a246e9b9f04dd729685fbf6d442bed48c7e3f1e", 0x7e}, {&(0x7f00000067c0)="f93fb2d69cc85fa7b17d1778b8d3e184e5f45b7f2085b9db9a6a3887b5e8ff80e8ecea3e18af06fd2f9e700a2eb082b47b9f1d200c14d0e7f93e01a81ece23a4620af7e2c5dbdb724bbff914a5d9927506f57c74e35c6d09745449b27ff36b06b287e4fb674c3d679d6400b92539eba1309a54f345c39903481bae8aa3c9ada596886c9b725b6516f1cb8ed5fbb90d7485f4fa13e65d79c64d11247e5dfb9924c1e56958a2c9aa4ab707ce", 0xab}, {&(0x7f0000006880)="75269e4f88d09d1dea20894a2eb0911d44b2ca7d6fd455b9cb74f18e2dc4969d072a51057263cc6407daef3b75f04d2a842b86383c1c15de06baa2eeabb63f9f798af9cfd35f39498271053504d970aa10ade5f0732e8f651bf289fa7c618d9bf837a1122fa24359a29aba8218b6272bbb996716fb8b4271661b7ff57aaa75bcdd0c8259543e9a46d59f543642300f617dbbc0258dd0b7cb5ccdca92075c28cd7b5af72ec306835148061adde6a76ec8b779e349a450fbc012c3d13600c11023e8115f2d9610863059bbfc9569f13e8186a02b0d1a107f914e9be4d54fe8", 0xde}, {&(0x7f0000006980)="2c1ca53d5364e7a3167e9b0f5e654b8afe43a4d0a741", 0x16}, {&(0x7f0000006a00)="8c343f83a7371b6eca878c83c827bb7bfa3ea2acd5f1e25e328820d5c2a05caab7b5e3e42d3973a7ad14e1375f854d127e6ce875c1607def10b42e74192891bb506e16387a8319629b3b16d063c06ed3e3", 0x51}], 0x6}}], 0x6, 0x4000c8d1) 890.670443ms ago: executing program 7 (id=1504): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000080000082480000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000601921f280c5fa326a746800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200000000000100"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 826.454909ms ago: executing program 6 (id=1505): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x200002, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') socket(0x18, 0x800, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x7a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c88}, 0x94) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) keyctl$invalidate(0x15, r4) 442.602513ms ago: executing program 3 (id=1506): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000540)=[@ioring_restriction_register_op={0x0, 0x38fc2f1a6518ef8a}], 0x1) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x9, &(0x7f0000000140)=0x4) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x3, 0x0, 0x98, &(0x7f0000000940)={0x400, 0x1000000, 0x40007}}) 0s ago: executing program 3 (id=1507): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000640)) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) getsockopt(0xffffffffffffffff, 0x8, 0x8, &(0x7f000001b000)=""/96, &(0x7f000001b080)=0x60) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe56890a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000009300"/16], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x1) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f000001b0c0)={0x1, 0x0, [{0x2, 0x3, 0x0, 0x0, @irqchip={0x3, 0x8}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x65bf, 0x40, 0x0, 0x1, 0xcb00, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) shutdown(0xffffffffffffffff, 0x1) kernel console output (not intermixed with test programs): ][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.851056][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.738639][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.768534][T10089] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 378.309835][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 378.519650][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 378.527536][ T9] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 378.549230][ T9] usb 4-1: config 1 has no interface number 0 [ 378.557201][ T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 378.569370][ T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 378.580555][ T9] usb 4-1: config 1 interface 105 has no altsetting 0 [ 378.598243][ T9] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 378.770665][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.877611][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 378.974675][ T9] usb 4-1: Product: syz [ 378.978865][ T9] usb 4-1: Manufacturer: syz [ 378.983783][ T9] usb 4-1: SerialNumber: syz [ 379.003167][T10091] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 379.430761][T10091] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 379.620855][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.629066][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.655377][T10117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.680482][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.724077][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.789636][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.952467][ T9] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 379.983967][ T30] audit: type=1400 audit(1773225038.104:995): avc: denied { append } for pid=10129 comm="syz.4.1035" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.029686][ T9] usb 4-1: USB disconnect, device number 39 [ 381.047732][T10146] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 381.395401][ T77] Bluetooth: hci5: Frame reassembly failed (-84) [ 381.903396][ T24] net_ratelimit: 4 callbacks suppressed [ 381.903407][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.474250][T10154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.482912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.704213][T10157] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1041'. [ 382.931285][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.939398][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.187985][ T5809] Bluetooth: hci5: command 0x1003 tx timeout [ 383.197121][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 383.366782][T10175] fuse: Bad value for 'fd' [ 383.854939][ T29] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 383.971337][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.123923][ T29] usb 6-1: device descriptor read/64, error -71 [ 384.309322][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 384.530773][ T29] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 384.591915][ T9] usb 4-1: device descriptor read/64, error -71 [ 384.770563][ T29] usb 6-1: device descriptor read/64, error -71 [ 384.881222][ T29] usb usb6-port1: attempt power cycle [ 384.900408][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 385.066985][ T9] usb 4-1: device descriptor read/64, error -71 [ 385.220411][ T29] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 385.301221][ T9] usb usb4-port1: attempt power cycle [ 385.333863][ T29] usb 6-1: device descriptor read/8, error -71 [ 385.458605][ T30] audit: type=1326 audit(1773225043.464:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.1052" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb2259c799 code=0x0 [ 385.651270][ T29] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 385.682021][ T29] usb 6-1: device descriptor read/8, error -71 [ 385.727064][T10204] netlink: 'syz.0.1053': attribute type 9 has an invalid length. [ 385.735875][T10204] netlink: 'syz.0.1053': attribute type 7 has an invalid length. [ 385.743702][T10204] netlink: 'syz.0.1053': attribute type 8 has an invalid length. [ 385.797451][ T29] usb usb6-port1: unable to enumerate USB device [ 386.620436][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 386.651972][ T9] usb 4-1: device descriptor read/8, error -71 [ 387.957123][T10219] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 388.442415][ T30] audit: type=1400 audit(1773225046.564:997): avc: denied { bind } for pid=10206 comm="syz.5.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 388.643203][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 388.652789][T10225] lo speed is unknown, defaulting to 1000 [ 389.124727][ T30] audit: type=1400 audit(1773225047.254:998): avc: denied { lock } for pid=10227 comm="syz.5.1060" path="socket:[26734]" dev="sockfs" ino=26734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 389.386863][T10240] loop5: detected capacity change from 0 to 7 [ 389.595494][ T6799] Dev loop5: unable to read RDB block 7 [ 389.601112][ T6799] loop5: unable to read partition table [ 389.608431][ T6799] loop5: partition table beyond EOD, truncated [ 389.728245][T10240] Dev loop5: unable to read RDB block 7 [ 389.749405][ T5935] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 389.779732][T10240] loop5: unable to read partition table [ 389.796524][T10240] loop5: partition table beyond EOD, truncated [ 389.813928][T10240] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 389.941610][ T5935] usb 7-1: config 0 has no interfaces? [ 390.057106][ T5809] Bluetooth: hci5: command 0x1003 tx timeout [ 390.063517][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 391.046684][ T5935] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.658627][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.667175][ T5935] usb 7-1: Product: syz [ 391.674506][ T5935] usb 7-1: Manufacturer: syz [ 391.680391][ T5935] usb 7-1: SerialNumber: syz [ 392.106261][ T5935] usb 7-1: config 0 descriptor?? [ 392.136297][ T2830] block nbd0: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 300 seconds [ 392.147044][ T2830] block nbd0: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 300 seconds [ 392.158423][ T2830] block nbd0: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 300 seconds [ 392.168914][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.178386][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.186308][ T2830] block nbd0: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 300 seconds [ 392.218616][ T9] usb 7-1: USB disconnect, device number 52 [ 392.250099][T10267] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 392.256730][T10267] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.299017][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 392.361174][T10267] vhci_hcd vhci_hcd.0: Device attached [ 392.376897][T10265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10265 comm=syz.0.1067 [ 392.446601][T10265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10265 comm=syz.0.1067 [ 392.497156][ T792] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 392.640384][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 392.661726][ T792] usb 6-1: config 0 has no interfaces? [ 392.667216][ T792] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 392.677066][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.266729][ T792] usb 6-1: config 0 descriptor?? [ 393.489180][T10270] usbip_core: unknown command [ 393.496594][T10267] : renamed from vlan0 (while UP) [ 393.502200][T10270] vhci_hcd: unknown pdu 0 [ 393.518766][T10270] usbip_core: unknown command [ 393.551040][ T77] vhci_hcd vhci_hcd.5: stop threads [ 393.556670][ T77] vhci_hcd vhci_hcd.5: release socket [ 393.589535][ T77] vhci_hcd vhci_hcd.5: disconnect device [ 393.601055][T10269] netlink: 'syz.5.1068': attribute type 2 has an invalid length. [ 393.613897][ T5935] usb 6-1: USB disconnect, device number 50 [ 394.304335][ T5911] kernel read not supported for file /589/net/arp (pid: 5911 comm: kworker/0:8) [ 394.567546][T10299] SET target dimension over the limit! [ 394.860239][T10303] SET target dimension over the limit! [ 395.216994][T10310] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 395.937243][T10317] lo speed is unknown, defaulting to 1000 [ 396.530083][T10317] vxcan1 speed is unknown, defaulting to 1000 [ 397.019711][ T30] audit: type=1400 audit(1773225055.144:999): avc: denied { open } for pid=10331 comm="syz.6.1085" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 397.049098][T10335] mkiss: ax0: crc mode is auto. [ 397.127515][T10338] misc userio: Invalid payload size [ 397.133792][T10338] misc userio: No port type given on /dev/userio [ 397.142792][T10338] netlink: 'syz.5.1087': attribute type 1 has an invalid length. [ 397.173204][T10338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 397.192349][T10338] bond3: (slave geneve2): making interface the new active one [ 397.203458][T10338] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 397.221924][T10338] bond3: entered promiscuous mode [ 397.227387][T10338] geneve2: entered promiscuous mode [ 397.292255][T10340] misc userio: The device must be registered before sending interrupts [ 397.309393][T10340] misc userio: The device must be registered before sending interrupts [ 397.720424][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 398.555727][T10356] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 399.709598][ T30] audit: type=1400 audit(1773225057.834:1000): avc: denied { read } for pid=10372 comm="syz.5.1099" laddr=::7f00:1 lport=35374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 399.910430][ T5911] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 399.930858][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 400.080488][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 400.087140][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.098498][ T5911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.108261][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 400.158533][ T5911] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 400.191676][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.210757][ T5911] usb 5-1: Product: syz [ 400.241490][ T5911] usb 5-1: Manufacturer: syz [ 400.281708][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 400.415765][ T9] usb 7-1: config 0 has no interface number 0 [ 400.501446][ T5911] usb 5-1: SerialNumber: syz [ 400.552055][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.570181][ T5911] usb 5-1: config 0 descriptor?? [ 400.579705][ T9] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.601804][T10385] IPVS: length: 24 != 24159191448 [ 400.608255][ T9] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 400.620205][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.641293][ T9] usb 7-1: config 0 descriptor?? [ 400.757344][ T30] audit: type=1400 audit(1773225058.884:1001): avc: denied { sys_module } for pid=10387 comm="syz.5.1103" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 400.847726][T10392] Cannot find add_set index 0 as target [ 401.309940][ T51] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 402.275046][T10411] loop5: detected capacity change from 0 to 7 [ 402.423322][T10411] Dev loop5: unable to read RDB block 7 [ 402.429000][T10411] loop5: unable to read partition table [ 402.435547][T10411] loop5: partition table beyond EOD, truncated [ 402.442002][T10411] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 402.570398][ T792] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 402.683405][ T9] usbhid 7-1:0.1: can't add hid device: -71 [ 402.706152][ T9] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 402.726280][ T5935] usb 5-1: USB disconnect, device number 42 [ 402.742431][ T792] usb 6-1: config 0 has no interfaces? [ 402.748777][ T9] usb 7-1: USB disconnect, device number 53 [ 402.766305][ T792] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 402.784779][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.789495][ T51] Bluetooth: hci4: unexpected event for opcode 0x203d [ 402.793100][ T792] usb 6-1: Product: syz [ 402.805943][ T792] usb 6-1: Manufacturer: syz [ 402.815733][ T792] usb 6-1: SerialNumber: syz [ 402.830663][T10416] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 402.857622][ T792] usb 6-1: config 0 descriptor?? [ 403.297692][ T30] audit: type=1400 audit(1773225061.274:1002): avc: denied { listen } for pid=10418 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 403.391272][ T30] audit: type=1400 audit(1773225061.284:1003): avc: denied { name_bind } for pid=10418 comm="syz.3.1111" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 403.543450][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 403.553480][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 404.824942][T10438] SET target dimension over the limit! [ 405.223494][T10442] IPVS: length: 24 != 24159191448 [ 405.280501][ T29] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 405.460372][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 405.471712][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.490442][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.510296][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.530371][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.579108][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.588467][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.647044][ T30] audit: type=1400 audit(1773225063.774:1004): avc: denied { accept } for pid=10443 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.686708][ T30] audit: type=1400 audit(1773225063.774:1005): avc: denied { shutdown } for pid=10443 comm="syz.6.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.745913][ T30] audit: type=1800 audit(1773225063.864:1006): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1119" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 405.861298][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 405.868898][ T29] usbtmc 5-1:16.0: can't read capabilities [ 406.034301][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 406.856090][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 406.865536][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 406.877141][ T5809] Bluetooth: hci4: hardware error 0x00 [ 406.918409][T10461] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 407.766943][ T792] usb 5-1: USB disconnect, device number 43 [ 407.876615][T10477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1126'. [ 408.560395][ T792] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 408.800569][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 408.829171][ T792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.839400][ T792] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 409.022766][ T5809] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 409.215315][ T792] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 409.226626][ T792] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 409.235971][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.256975][ T792] hub 4-1:1.0: bad descriptor, ignoring hub [ 409.285270][ T792] hub 4-1:1.0: probe with driver hub failed with error -5 [ 409.299492][ T792] cdc_wdm 4-1:1.0: skipping garbage [ 409.306885][ T792] cdc_wdm 4-1:1.0: skipping garbage [ 409.315272][ T792] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 409.729580][ T30] audit: type=1400 audit(1773225067.854:1007): avc: denied { read } for pid=10505 comm="syz.6.1132" name="mouse0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 409.961161][ T30] audit: type=1400 audit(1773225067.854:1008): avc: denied { open } for pid=10505 comm="syz.6.1132" path="/dev/input/mouse0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 409.995514][ T30] audit: type=1400 audit(1773225067.854:1009): avc: denied { ioctl } for pid=10505 comm="syz.6.1132" path="/dev/input/mouse0" dev="devtmpfs" ino=944 ioctlcmd=0x5720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 410.024684][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 410.030763][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 410.290949][T10509] SET target dimension over the limit! [ 410.346084][ T29] libceph: connect (1)[c::]:6789 error -101 [ 410.381787][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 410.470180][T10507] ceph: No mds server is up or the cluster is laggy [ 410.481088][ T792] usb 4-1: USB disconnect, device number 44 [ 410.494037][T10525] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1135'. [ 410.512404][ T29] usb 1-1: USB disconnect, device number 24 [ 410.698210][ T1126] Bluetooth: hci5: Frame reassembly failed (-84) [ 410.729893][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 410.740542][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 410.748809][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 410.757038][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 410.765485][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 410.865002][T10532] lo speed is unknown, defaulting to 1000 [ 410.881671][T10532] vxcan1 speed is unknown, defaulting to 1000 [ 411.380454][ T29] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 411.660400][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 411.674923][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.783612][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.821204][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 411.900409][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.911205][ T29] usb 5-1: config 0 descriptor?? [ 411.918862][ T29] hub 5-1:0.0: USB hub found [ 412.378462][ T9] usb 6-1: USB disconnect, device number 51 [ 412.780445][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 412.781587][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 412.853023][ T5809] Bluetooth: hci6: command tx timeout [ 413.399968][ T29] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 413.409892][T10555] lo speed is unknown, defaulting to 1000 [ 413.572050][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 413.655621][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1143'. [ 413.664621][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1143'. [ 413.673598][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1143'. [ 413.795745][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 413.807192][T10555] vxcan1 speed is unknown, defaulting to 1000 [ 413.839529][T10532] chnl_net:caif_netlink_parms(): no params data found [ 413.847217][ T29] usb 5-1: USB disconnect, device number 44 [ 414.081464][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.109196][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.123548][T10532] bridge_slave_0: entered allmulticast mode [ 414.131159][T10532] bridge_slave_0: entered promiscuous mode [ 414.150185][T10532] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.159297][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.168471][T10532] bridge_slave_1: entered allmulticast mode [ 414.188139][T10532] bridge_slave_1: entered promiscuous mode [ 414.349023][T10532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.403844][T10532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.469306][ T30] audit: type=1400 audit(1773225072.574:1010): avc: denied { lock } for pid=10574 comm="syz.4.1146" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 414.573068][T10532] team0: Port device team_slave_0 added [ 414.660789][T10584] SET target dimension over the limit! [ 414.938509][ T5809] Bluetooth: hci6: command tx timeout [ 415.004491][T10532] team0: Port device team_slave_1 added [ 415.131859][T10532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.238041][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.280383][ T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 415.706616][T10532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.768864][T10532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.780538][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 415.793281][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.819833][T10532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.833502][ T9] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 415.842879][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.851525][ T9] usb 7-1: Product: syz [ 415.908490][ T9] usb 7-1: Manufacturer: syz [ 415.923536][ T9] usb 7-1: SerialNumber: syz [ 415.960463][ T9] usb 7-1: config 0 descriptor?? [ 416.185808][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 416.345113][ T30] audit: type=1400 audit(1773225074.464:1011): avc: denied { set_context_mgr } for pid=10594 comm="syz.4.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 416.371937][T10596] binder: 10594:10596 ioctl c0306201 2000000003c0 returned -14 [ 416.741355][ T9] gspca_se401: Wrong descriptor type [ 416.831319][T10532] hsr_slave_0: entered promiscuous mode [ 416.878639][T10532] hsr_slave_1: entered promiscuous mode [ 416.922637][T10532] debugfs: 'hsr0' already exists in 'hsr' [ 416.942495][T10532] Cannot create hsr debugfs directory [ 417.083248][ T5809] Bluetooth: hci6: command tx timeout [ 417.611588][T10601] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1153'. [ 417.637029][T10600] syzkaller0: entered promiscuous mode [ 417.642768][T10600] syzkaller0: entered allmulticast mode [ 418.063776][ T9] usb 7-1: USB disconnect, device number 54 [ 418.071574][ T30] audit: type=1400 audit(1773225076.194:1012): avc: denied { shutdown } for pid=10614 comm="syz.5.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.184597][ T5911] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 418.870402][ T5911] usb 4-1: device descriptor read/64, error -71 [ 419.170432][ T5809] Bluetooth: hci6: command tx timeout [ 420.382273][T10639] binder: 10638:10639 ioctl 4018620d 0 returned -22 [ 420.393600][T10639] binder: 10638:10639 ioctl c0306201 2000000003c0 returned -14 [ 420.466957][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1163'. [ 420.906902][ T5911] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 421.021566][T10650] SET target dimension over the limit! [ 421.896465][ T5935] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 422.625135][ T2830] block nbd0: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 330 seconds [ 422.636342][ T2830] block nbd0: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 330 seconds [ 422.647533][ T2830] block nbd0: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 330 seconds [ 422.658730][ T2830] block nbd0: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 330 seconds [ 422.823663][ T5935] usb 7-1: Using ep0 maxpacket: 8 [ 422.850160][ T5935] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 422.870383][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.887133][ T5935] usb 7-1: Product: syz [ 422.895713][ T5935] usb 7-1: Manufacturer: syz [ 422.904712][ T5935] usb 7-1: SerialNumber: syz [ 422.924567][ T5935] usb 7-1: config 0 descriptor?? [ 422.959558][ T5935] gspca_main: se401-2.14.0 probing 047d:5003 [ 423.854998][ T5935] gspca_se401: Wrong descriptor type [ 423.913874][T10532] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 423.971660][T10532] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 424.080392][T10532] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 424.140664][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 424.147356][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1174'. [ 424.150766][T10675] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1172'. [ 424.159361][T10532] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 424.254375][T10678] binder: 10674:10678 ioctl 4018620d 0 returned -22 [ 424.307537][T10678] binder: 10674:10678 ioctl c0306201 2000000003c0 returned -14 [ 424.966224][T10532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.984289][ T30] audit: type=1400 audit(1773225082.754:1013): avc: denied { read } for pid=10685 comm="syz.4.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 425.033734][T10532] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.057911][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.065067][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.079522][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.086626][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.114473][ T9] usb 7-1: USB disconnect, device number 55 [ 425.337486][T10532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.348272][ T5924] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 425.377050][T10532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.404288][T10700] loop5: detected capacity change from 0 to 7 [ 425.664152][ T5924] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 425.679041][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.729032][T10700] Dev loop5: unable to read RDB block 7 [ 425.735629][ T5924] usb 4-1: Product: syz [ 425.740084][T10700] loop5: unable to read partition table [ 425.746097][ T5924] usb 4-1: Manufacturer: syz [ 425.754159][ T5924] usb 4-1: SerialNumber: syz [ 425.792719][T10700] loop5: partition table beyond EOD, truncated [ 425.807078][T10700] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 425.821892][ T5924] usb 4-1: config 0 descriptor?? [ 426.120614][ T5924] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 426.136697][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 426.146998][ T5924] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 426.156797][ T5924] usb 4-1: media controller created [ 426.163011][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 426.221355][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.275333][ T5924] DVB: Unable to find symbol mt352_attach() [ 426.512622][T10718] SET target dimension over the limit! [ 426.572261][ T9] usb 5-1: config 0 has no interfaces? [ 426.659030][T10532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.754657][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 426.758049][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.758917][ T9] usb 5-1: Product: syz [ 426.759049][ T9] usb 5-1: Manufacturer: syz [ 426.759138][ T9] usb 5-1: SerialNumber: syz [ 426.774591][ T9] usb 5-1: config 0 descriptor?? [ 426.801851][ T5924] DVB: Unable to find symbol nxt6000_attach() [ 426.801865][ T5924] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 426.958547][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 427.461917][ T5924] dvb-usb: schedule remote query interval to 1000 msecs. [ 427.473954][ T5924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 427.487629][ T5924] dvb-usb: bulk message failed: -22 (7/0) [ 427.497797][ T5924] dvb-usb: bulk message failed: -22 (7/0) [ 427.538281][T10703] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 427.548062][T10703] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 427.630592][ T5911] usb 5-1: USB disconnect, device number 45 [ 427.742812][ T5924] usb 4-1: USB disconnect, device number 47 [ 429.014016][T10738] binder: 10737:10738 ioctl 4018620d 0 returned -22 [ 429.154201][T10741] bridge0: port 3(syz_tun) entered blocking state [ 429.161413][T10741] bridge0: port 3(syz_tun) entered disabled state [ 429.168519][T10741] syz_tun: entered allmulticast mode [ 429.189416][T10741] syz_tun: entered promiscuous mode [ 429.197820][T10741] bridge0: port 3(syz_tun) entered blocking state [ 429.204360][T10741] bridge0: port 3(syz_tun) entered forwarding state [ 429.204400][ T30] audit: type=1400 audit(1773225087.264:1014): avc: denied { getopt } for pid=10739 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 429.379264][T10738] binder: 10737:10738 ioctl c0306201 2000000003c0 returned -14 [ 429.427403][ T5924] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 429.448834][T10532] veth0_vlan: entered promiscuous mode [ 429.497124][T10532] veth1_vlan: entered promiscuous mode [ 429.557210][T10743] loop5: detected capacity change from 0 to 7 [ 429.607798][T10532] veth0_macvtap: entered promiscuous mode [ 429.637184][T10532] veth1_macvtap: entered promiscuous mode [ 429.726675][T10532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.737340][T10532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.804690][ T77] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.892351][ T5884] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 430.229668][ T77] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.256590][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.272879][ T77] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.294341][ T5884] usb 5-1: config 0 has no interfaces? [ 430.311491][ T5884] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 430.322861][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.341285][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.349345][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.368239][ T5884] usb 5-1: Product: syz [ 430.387977][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.400077][ T5884] usb 5-1: Manufacturer: syz [ 430.406874][ T5179] Dev loop5: unable to read RDB block 7 [ 430.415757][ T5884] usb 5-1: SerialNumber: syz [ 430.421432][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.430737][ T5179] loop5: unable to read partition table [ 430.437521][ T5884] usb 5-1: config 0 descriptor?? [ 430.438248][ T5179] loop5: partition table beyond EOD, truncated [ 430.458343][ T30] audit: type=1400 audit(1773225088.584:1015): avc: denied { mounton } for pid=10532 comm="syz-executor" path="/root/syzkaller.X4hEOg/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 430.764292][ T30] audit: type=1400 audit(1773225088.624:1016): avc: denied { mounton } for pid=10532 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 430.822546][ T5178] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.832783][ T5178] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.843211][T10743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.860153][T10743] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.868984][T10743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.878630][T10743] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.889096][T10743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.898781][T10743] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.907058][T10743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.920118][T10743] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.928848][T10743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.940015][T10743] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.948088][T10743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.957691][T10743] Buffer I/O error on dev loop5, logical block 0, async page read [ 430.965631][T10743] ldm_validate_partition_table(): Disk read failed. [ 430.972509][T10754] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.982403][T10743] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.993560][T10743] Buffer I/O error on dev loop5, logical block 0, async page read [ 431.001730][T10743] Buffer I/O error on dev loop5, logical block 0, async page read [ 431.009960][T10743] Dev loop5: unable to read RDB block 0 [ 431.019874][T10743] loop5: unable to read partition table [ 431.026937][T10743] loop5: partition table beyond EOD, truncated [ 431.033293][T10743] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 431.823098][ T5935] usb 5-1: USB disconnect, device number 46 [ 432.345071][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1196'. [ 432.354036][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1196'. [ 432.587812][ T30] audit: type=1400 audit(1773225090.714:1017): avc: denied { connect } for pid=10783 comm="syz.5.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.759191][ T30] audit: type=1400 audit(1773225090.884:1018): avc: denied { ioctl } for pid=10783 comm="syz.5.1198" path="socket:[30727]" dev="sockfs" ino=30727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.856924][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1190'. [ 433.000536][ T5935] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 433.323615][T10791] binder: BINDER_SET_CONTEXT_MGR already set [ 433.351413][T10791] binder: 10790:10791 ioctl 4018620d 200000000040 returned -16 [ 433.451097][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 433.463709][ T5935] usb 6-1: config 0 has no interfaces? [ 433.469274][ T5935] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 433.564059][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.596553][ T5935] usb 6-1: config 0 descriptor?? [ 433.850495][ T30] audit: type=1326 audit(1773225091.804:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b79c799 code=0x7ffc0000 [ 433.893230][ T30] audit: type=1326 audit(1773225091.804:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b79c799 code=0x7ffc0000 [ 433.918915][ T30] audit: type=1326 audit(1773225091.804:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8c8b79c799 code=0x7ffc0000 [ 434.195918][ T30] audit: type=1326 audit(1773225091.804:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b79c799 code=0x7ffc0000 [ 434.219919][ T30] audit: type=1326 audit(1773225091.804:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c8b79c799 code=0x7ffc0000 [ 434.264022][ T5935] usb 6-1: USB disconnect, device number 52 [ 434.346845][ T30] audit: type=1326 audit(1773225091.804:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10797 comm="syz.6.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8c8b79c799 code=0x7ffc0000 [ 434.373558][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.379815][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.500437][T10809] Cannot find add_set index 0 as target [ 434.960410][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 435.200446][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 435.343315][ T24] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 435.356220][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.366043][ T24] usb 4-1: Product: syz [ 435.370875][ T24] usb 4-1: Manufacturer: syz [ 435.375999][ T24] usb 4-1: SerialNumber: syz [ 435.469796][ T24] usb 4-1: config 0 descriptor?? [ 435.547487][T10822] vivid-007: ================= START STATUS ================= [ 435.555343][T10822] vivid-007: Enable Output Cropping: true [ 435.561320][T10822] vivid-007: Enable Output Composing: true [ 435.567247][T10822] vivid-007: Enable Output Scaler: true [ 435.573459][T10822] vivid-007: Tx RGB Quantization Range: Automatic [ 435.579985][T10822] vivid-007: Transmit Mode: HDMI [ 435.585134][T10822] vivid-007: Hotplug Present: 0x00000000 [ 435.590914][T10822] vivid-007: RxSense Present: 0x00000000 [ 435.597725][T10822] vivid-007: EDID Present: 0x00000000 [ 435.603231][T10822] vivid-007: ================== END STATUS ================== [ 435.800537][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 435.953100][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 435.953367][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 436.906587][T10829] binder: BINDER_SET_CONTEXT_MGR already set [ 436.939321][T10829] binder: 10828:10829 ioctl 4018620d 200000000040 returned -16 [ 436.980353][ T24] gspca_se401: Wrong descriptor type [ 437.011309][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 437.876388][T10845] loop5: detected capacity change from 0 to 7 [ 437.997360][T10845] Dev loop5: unable to read RDB block 7 [ 438.012684][T10845] loop5: unable to read partition table [ 438.024666][T10845] loop5: partition table beyond EOD, truncated [ 438.040395][T10845] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 438.170138][T10849] Cannot find add_set index 0 as target [ 438.387315][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 438.419089][ T5911] usb 4-1: USB disconnect, device number 48 [ 439.056071][ T9] usb 5-1: config 0 has no interfaces? [ 439.063882][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 439.073053][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.081577][ T9] usb 5-1: Product: syz [ 439.085753][ T9] usb 5-1: Manufacturer: syz [ 439.091079][ T9] usb 5-1: SerialNumber: syz [ 439.099044][ T9] usb 5-1: config 0 descriptor?? [ 439.732524][ C1] blk_print_req_error: 7 callbacks suppressed [ 439.732541][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 439.748647][ C1] buffer_io_error: 6 callbacks suppressed [ 439.748660][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 439.766901][ T9] usb 5-1: USB disconnect, device number 47 [ 440.020048][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 440.020063][ T30] audit: type=1400 audit(1773225098.144:1062): avc: denied { write } for pid=10869 comm="syz.7.1223" path="socket:[30297]" dev="sockfs" ino=30297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 440.125530][T10871] SET target dimension over the limit! [ 440.966445][T10875] binder: BINDER_SET_CONTEXT_MGR already set [ 440.972493][T10875] binder: 10874:10875 ioctl 4018620d 200000000040 returned -16 [ 442.330413][T10893] netlink: 'syz.6.1229': attribute type 4 has an invalid length. [ 443.264249][ T30] audit: type=1804 audit(1773225101.064:1063): pid=10894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.1230" name="bus" dev="ramfs" ino=31014 res=1 errno=0 [ 443.450245][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1233'. [ 444.479603][T10914] binder: 10912:10914 ioctl c0306201 0 returned -14 [ 444.661454][T10914] binder: BINDER_SET_CONTEXT_MGR already set [ 444.668416][T10914] binder: 10912:10914 ioctl 4018620d 200000000040 returned -16 [ 444.678513][T10914] binder: 10912:10914 ioctl c0306201 2000000003c0 returned -14 [ 444.851594][ T30] audit: type=1400 audit(1773225102.984:1064): avc: denied { mounton } for pid=10921 comm="syz.4.1239" path="/238/file1/file0" dev="autofs" ino=30401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 444.952921][ T30] audit: type=1400 audit(1773225103.014:1065): avc: denied { getopt } for pid=10911 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 445.535187][T10931] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 446.616018][T10945] SET target dimension over the limit! [ 447.084752][T10952] binder: BINDER_SET_CONTEXT_MGR already set [ 447.091082][T10952] binder: 10944:10952 ioctl 4018620d 200000004a80 returned -16 [ 447.171010][T10913] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 447.177295][T10913] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 447.189482][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 447.460437][T10913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.466358][T10913] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 447.623087][T10913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.628980][T10913] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 448.174833][T10913] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 448.180999][T10913] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 448.751541][T10973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.893160][T10978] Mount JFS Failure: -22 [ 448.918681][T10978] jfs_mount failed w/return code = -22 [ 449.220416][ T792] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 449.430142][ T792] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.511199][T10998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1256'. [ 449.555827][ T792] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 449.626565][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.661826][ T792] usb 7-1: Product: syz [ 449.681891][ T792] usb 7-1: Manufacturer: syz [ 449.750352][ T792] usb 7-1: SerialNumber: syz [ 449.786572][ T792] usb 7-1: config 0 descriptor?? [ 449.843243][ T792] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected [ 449.880242][ T792] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 449.910899][ T792] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 450.086610][ T5911] usb 7-1: USB disconnect, device number 56 [ 450.102274][ T5911] garmin_gps 7-1:0.0: device disconnected [ 451.229127][T11017] bond1: entered promiscuous mode [ 451.239057][T11017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.271135][T11017] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 452.690605][ T30] audit: type=1326 audit(1773225110.774:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11047 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93db39c799 code=0x7ffc0000 [ 452.764442][T11055] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 452.972903][ T2830] block nbd0: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 360 seconds [ 452.983799][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 452.990147][ T2830] block nbd0: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 360 seconds [ 453.001197][ T2830] block nbd0: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 360 seconds [ 453.012342][ T2830] block nbd0: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 360 seconds [ 453.392531][ T30] audit: type=1326 audit(1773225110.774:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11047 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93db39c799 code=0x7ffc0000 [ 453.419158][ T30] audit: type=1326 audit(1773225110.774:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11047 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f93db39c799 code=0x7ffc0000 [ 453.450237][ T30] audit: type=1326 audit(1773225110.774:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11047 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93db39c799 code=0x7ffc0000 [ 453.483753][ T30] audit: type=1326 audit(1773225110.774:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11047 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93db39c799 code=0x7ffc0000 [ 453.539424][ T30] audit: type=1326 audit(1773225110.774:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11047 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f93db39c799 code=0x7ffc0000 [ 453.606787][ T30] audit: type=1326 audit(1773225111.704:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11047 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93db39c799 code=0x7ffc0000 [ 453.654864][ T30] audit: type=1326 audit(1773225111.704:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11047 comm="syz.5.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93db39c799 code=0x7ffc0000 [ 453.765725][T11066] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1267'. [ 454.110776][T11068] lo speed is unknown, defaulting to 1000 [ 454.117787][T11068] vxcan1 speed is unknown, defaulting to 1000 [ 454.442710][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1270'. [ 454.852426][ T5809] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 457.996236][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1278'. [ 458.724208][T11145] xt_TCPMSS: Only works on TCP SYN packets [ 458.855239][T11150] usb usb8: usbfs: process 11150 (syz.7.1281) did not claim interface 0 before use [ 459.545110][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1283'. [ 460.371661][T11168] netlink: 'syz.5.1285': attribute type 21 has an invalid length. [ 460.555348][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.644058][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.652611][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.660486][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.667935][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.689713][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.698917][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.706399][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.716143][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.736656][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.078420][T11173] lo speed is unknown, defaulting to 1000 [ 461.099714][T11173] vxcan1 speed is unknown, defaulting to 1000 [ 461.518489][T11187] vcan0: tx address claim with dlc 0 [ 461.850647][ T5924] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 462.190938][ T5924] usb 6-1: config 1 has an invalid interface number: 142 but max is 0 [ 462.199133][ T5924] usb 6-1: config 1 has no interface number 0 [ 462.220711][ T5924] usb 6-1: config 1 interface 142 has no altsetting 0 [ 462.231613][ T5924] usb 6-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=dc.cc [ 462.240796][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.270650][ T5924] usb 6-1: Product: syz [ 462.274813][ T5924] usb 6-1: Manufacturer: syz [ 462.279384][ T5924] usb 6-1: SerialNumber: syz [ 462.295824][T11173] chnl_net:caif_netlink_parms(): no params data found [ 462.647392][ T5924] gspca_main: finepix-2.14.0 probing 04cb:013d [ 462.670728][ T5924] usb 6-1: USB disconnect, device number 53 [ 462.805801][T11173] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.813143][T11173] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.820440][T11173] bridge_slave_0: entered allmulticast mode [ 462.827885][T11173] bridge_slave_0: entered promiscuous mode [ 462.837649][T11173] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.844879][T11173] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.852269][T11173] bridge_slave_1: entered allmulticast mode [ 462.859474][T11173] bridge_slave_1: entered promiscuous mode [ 462.887894][T11173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.899739][T11173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.934862][T11173] team0: Port device team_slave_0 added [ 462.943067][T11173] team0: Port device team_slave_1 added [ 462.969710][T11173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.990401][ T5935] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 463.000819][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.040542][T11173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.052787][T11173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.059720][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.091715][ T5809] Bluetooth: hci5: command tx timeout [ 463.225828][ T5935] usb 4-1: config 0 has no interfaces? [ 463.276313][ T5935] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 463.344061][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.395159][ T5935] usb 4-1: Product: syz [ 463.418244][ T5935] usb 4-1: Manufacturer: syz [ 463.431115][T11173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.435051][ T5935] usb 4-1: SerialNumber: syz [ 463.594927][ T5935] usb 4-1: config 0 descriptor?? [ 464.189883][ T5935] usb 4-1: USB disconnect, device number 49 [ 464.264603][T11217] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 464.279748][T11217] team0: Port device batadv1 added [ 464.316305][T11173] hsr_slave_0: entered promiscuous mode [ 464.328785][T11173] hsr_slave_1: entered promiscuous mode [ 464.346328][T11173] debugfs: 'hsr0' already exists in 'hsr' [ 464.360469][T11173] Cannot create hsr debugfs directory [ 464.366573][T11217] hub 9-0:1.0: USB hub found [ 464.373573][T11217] hub 9-0:1.0: 1 port detected [ 464.582152][ T5924] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 464.674310][T11173] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 464.740388][ T5924] usb 7-1: Using ep0 maxpacket: 8 [ 464.747063][T11173] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 464.958471][T11173] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 465.174325][ T5809] Bluetooth: hci5: command tx timeout [ 466.516949][ T5924] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 466.526103][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.534262][ T5924] usb 7-1: Product: syz [ 466.538616][ T5924] usb 7-1: Manufacturer: syz [ 466.543257][ T5924] usb 7-1: SerialNumber: syz [ 466.703124][T11173] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 466.821611][ T5924] usb 7-1: config 0 descriptor?? [ 467.031231][ T5924] gspca_main: se401-2.14.0 probing 047d:5003 [ 467.202633][T11235] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 467.211281][T11235] team0: Port device batadv1 added [ 467.260677][ T5809] Bluetooth: hci5: command tx timeout [ 467.382906][ T30] audit: type=1400 audit(1773225125.494:1074): avc: denied { append } for pid=11241 comm="syz.5.1302" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 467.831677][ T5924] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input17 [ 468.483059][T11173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.544530][ T5924] usb 7-1: USB disconnect, device number 57 [ 468.739808][T11173] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.877901][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.885012][ T7140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.975211][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.982285][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.096744][T11173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.332604][ T5809] Bluetooth: hci5: command tx timeout [ 469.533460][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1306'. [ 469.857451][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.147089][T11271] SET target dimension over the limit! [ 470.620353][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 470.804986][T11173] veth0_vlan: entered promiscuous mode [ 470.903699][T11173] veth1_vlan: entered promiscuous mode [ 470.910795][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 470.918736][ T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 470.929637][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.949059][T11173] veth0_macvtap: entered promiscuous mode [ 470.958084][ T9] usb 4-1: Product: syz [ 470.965146][ T9] usb 4-1: Manufacturer: syz [ 470.987064][T11173] veth1_macvtap: entered promiscuous mode [ 470.993082][ T9] usb 4-1: SerialNumber: syz [ 471.039139][ T9] usb 4-1: config 0 descriptor?? [ 471.393200][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 471.414845][T11173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.437535][T11173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.459471][ T1148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.482030][ T1148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.500035][ T1148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.510051][ T1148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.562353][ T6323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.570855][ T6323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.602763][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.611169][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.699711][ T792] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 471.892085][T11297] fuse: Unknown parameter 'group_i00000000000000000000' [ 471.900612][ T792] usb 6-1: Using ep0 maxpacket: 8 [ 472.282553][ T9] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 472.296148][ T792] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 472.308500][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.319188][ T9] usb 4-1: USB disconnect, device number 50 [ 472.327305][ T792] usb 6-1: Product: syz [ 472.342949][ T792] usb 6-1: Manufacturer: syz [ 472.347978][ T792] usb 6-1: SerialNumber: syz [ 472.365012][ T792] usb 6-1: config 0 descriptor?? [ 472.740087][ T792] gspca_main: se401-2.14.0 probing 047d:5003 [ 473.318702][ T792] gspca_se401: Wrong descriptor type [ 473.327217][T11310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1317'. [ 473.409162][T11314] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 473.457524][T11314] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 473.523839][ T5935] usb 6-1: USB disconnect, device number 54 [ 475.564241][T11337] fuse: Unknown parameter 'group_id00000000000000000000' [ 475.740380][ T5935] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 475.817004][T11347] qnx6: unable to read the first superblock [ 476.049695][ T5935] usb 6-1: config 0 has no interfaces? [ 476.122070][ T5935] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.131430][ T5924] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 476.140374][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.150403][ T5935] usb 6-1: Product: syz [ 476.156642][ T5935] usb 6-1: Manufacturer: syz [ 476.490430][ T5935] usb 6-1: SerialNumber: syz [ 476.506586][ T5935] usb 6-1: config 0 descriptor?? [ 476.562020][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 476.573417][ T5924] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 476.590519][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.604350][ T5924] usb 4-1: Product: syz [ 476.608516][ T5924] usb 4-1: Manufacturer: syz [ 476.617577][ T5924] usb 4-1: SerialNumber: syz [ 476.667757][ T5924] usb 4-1: config 0 descriptor?? [ 476.699178][ T5924] gspca_main: se401-2.14.0 probing 047d:5003 [ 476.962842][ T792] usb 6-1: USB disconnect, device number 55 [ 477.604996][ T5924] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 477.653331][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 477.714186][ T5924] usb 4-1: USB disconnect, device number 51 [ 477.820044][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 477.826883][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 477.841743][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 477.861631][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 477.890947][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.094077][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.124801][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.149842][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.667848][ T5924] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 478.910711][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 479.195618][ T9] usb 9-1: usb_control_msg returned -32 [ 479.205945][ T9] usbtmc 9-1:16.0: can't read capabilities [ 479.219618][ T5924] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 479.228654][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.281012][T11375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.291323][ T5924] usb 6-1: Product: syz [ 479.302683][ T5924] usb 6-1: Manufacturer: syz [ 479.349202][ T5924] usb 6-1: SerialNumber: syz [ 479.678644][ T5924] usb 6-1: config 0 descriptor?? [ 479.710971][ T5924] gspca_main: se401-2.14.0 probing 047d:5003 [ 479.763233][ T30] audit: type=1400 audit(1773225393.886:1075): avc: denied { map } for pid=11352 comm="syz.8.1331" path="socket:[33030]" dev="sockfs" ino=33030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 479.865104][ T30] audit: type=1400 audit(1773225393.886:1076): avc: denied { read accept } for pid=11352 comm="syz.8.1331" path="socket:[33030]" dev="sockfs" ino=33030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 480.179630][ T5924] gspca_se401: Wrong descriptor type [ 480.567871][ T792] usb 6-1: USB disconnect, device number 56 [ 480.744309][T11388] netlink: 'syz.6.1338': attribute type 1 has an invalid length. [ 480.803313][T11388] bond1: entered promiscuous mode [ 480.817424][T11388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.917570][ T792] usb 9-1: USB disconnect, device number 2 [ 481.119800][T11397] binder: 11396:11397 ioctl 4018620d 0 returned -22 [ 481.128769][T11397] binder: 11396:11397 ioctl c0306201 2000000003c0 returned -14 [ 481.337331][T11393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.487988][ T30] audit: type=1400 audit(1773225395.607:1077): avc: denied { listen } for pid=11399 comm="syz.5.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 481.778108][T11393] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 481.834297][T11393] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 481.868846][T11393] bond1: (slave wireguard0): making interface the new active one [ 481.898302][T11393] wireguard0: entered promiscuous mode [ 481.913863][T11393] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 482.135673][ T5924] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 482.341966][ T5924] usb 4-1: config 0 has no interfaces? [ 482.353696][ T5924] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.377777][T11417] input: syz0 as /devices/virtual/input/input20 [ 482.731110][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.744962][ T5924] usb 4-1: Product: syz [ 482.749669][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1344'. [ 482.761891][ T5924] usb 4-1: Manufacturer: syz [ 482.766523][ T5924] usb 4-1: SerialNumber: syz [ 482.774953][ T5924] usb 4-1: config 0 descriptor?? [ 482.942161][T11420] FAULT_INJECTION: forcing a failure. [ 482.942161][T11420] name failslab, interval 1, probability 0, space 0, times 0 [ 482.967086][T11420] CPU: 1 UID: 0 PID: 11420 Comm: syz.6.1347 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.967113][T11420] Tainted: [L]=SOFTLOCKUP [ 482.967119][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 482.967130][T11420] Call Trace: [ 482.967135][T11420] [ 482.967142][T11420] dump_stack_lvl+0x100/0x190 [ 482.967175][T11420] should_fail_ex.cold+0x5/0xa [ 482.967201][T11420] should_failslab+0xc2/0x120 [ 482.967218][T11420] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 482.967242][T11420] ? skb_clone+0x190/0x400 [ 482.967266][T11420] skb_clone+0x190/0x400 [ 482.967286][T11420] netlink_deliver_tap+0xaed/0xcc0 [ 482.967312][T11420] netlink_unicast+0x650/0x870 [ 482.967337][T11420] ? __pfx_netlink_unicast+0x10/0x10 [ 482.967367][T11420] netlink_sendmsg+0x8b0/0xda0 [ 482.967394][T11420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.967414][T11420] ? __might_fault+0xc0/0x140 [ 482.967446][T11420] ____sys_sendmsg+0x9e1/0xb70 [ 482.967468][T11420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.967491][T11420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.967526][T11420] ___sys_sendmsg+0x190/0x1e0 [ 482.967552][T11420] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.967613][T11420] __sys_sendmsg+0x170/0x220 [ 482.967632][T11420] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.967667][T11420] do_syscall_64+0x106/0xf80 [ 482.967686][T11420] ? clear_bhb_loop+0x40/0x90 [ 482.967708][T11420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.967726][T11420] RIP: 0033:0x7f8c8b79c799 [ 482.967741][T11420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.967756][T11420] RSP: 002b:00007f8c8c6b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.967772][T11420] RAX: ffffffffffffffda RBX: 00007f8c8ba15fa0 RCX: 00007f8c8b79c799 [ 482.967783][T11420] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 482.967794][T11420] RBP: 00007f8c8c6b8090 R08: 0000000000000000 R09: 0000000000000000 [ 482.967804][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.967813][T11420] R13: 00007f8c8ba16038 R14: 00007f8c8ba15fa0 R15: 00007fffa4ea4138 [ 482.967838][T11420] [ 483.307144][ T2830] block nbd0: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 390 seconds [ 483.318345][ T2830] block nbd0: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 390 seconds [ 483.332051][ T2830] block nbd0: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 390 seconds [ 483.343102][ T2830] block nbd0: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 390 seconds [ 485.082073][T11436] Bluetooth: MGMT ver 1.23 [ 485.114030][ T792] usb 4-1: USB disconnect, device number 52 [ 485.458185][ T30] audit: type=1400 audit(1773225399.279:1078): avc: denied { bind } for pid=11441 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 487.989583][T11480] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 488.277207][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 488.504519][ T9] usb 4-1: config 0 has no interfaces? [ 488.521411][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 488.546927][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.569221][ T9] usb 4-1: Product: syz [ 488.585000][ T9] usb 4-1: Manufacturer: syz [ 488.594561][ T9] usb 4-1: SerialNumber: syz [ 488.610030][ T9] usb 4-1: config 0 descriptor?? [ 489.459355][T11258] usb 4-1: USB disconnect, device number 53 [ 492.429594][T11507] binder: 11506:11507 ioctl c0306201 0 returned -14 [ 492.672694][ T978] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 492.890514][ T978] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 492.904561][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4 [ 492.923939][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023 [ 492.938421][ T978] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 492.996900][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.023067][ T978] usb 7-1: Product: syz [ 493.042968][ T978] usb 7-1: Manufacturer: syz [ 493.048702][ T978] usb 7-1: SerialNumber: syz [ 493.204528][ T978] usb 7-1: config 0 descriptor?? [ 493.275365][ T978] streamzap 7-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 493.663640][T11258] usb 7-1: USB disconnect, device number 58 [ 493.968952][T11514] SET target dimension over the limit! [ 494.195396][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 495.724707][T11550] pim6reg99999999: entered allmulticast mode [ 495.794767][ T978] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 495.804597][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.811039][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.004578][ T978] usb 9-1: config 0 has no interfaces? [ 496.378076][ T978] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 496.928016][ T978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.024426][ T978] usb 9-1: Product: syz [ 497.059437][ T978] usb 9-1: Manufacturer: syz [ 497.084381][ T978] usb 9-1: SerialNumber: syz [ 497.253132][ T978] usb 9-1: config 0 descriptor?? [ 497.694248][ T9] usb 9-1: USB disconnect, device number 3 [ 498.010460][T11581] SET target dimension over the limit! [ 498.367410][T11586] x_tables: duplicate underflow at hook 3 [ 498.859783][ T30] audit: type=1400 audit(1773225412.996:1079): avc: denied { module_load } for pid=11587 comm="syz.3.1385" path="/sys/kernel/oops_count" dev="sysfs" ino=57509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 499.185885][ T30] audit: type=1400 audit(1773225413.296:1080): avc: denied { read write } for pid=11591 comm="syz.7.1386" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 499.467463][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1387'. [ 499.817499][ T30] audit: type=1400 audit(1773225413.296:1081): avc: denied { open } for pid=11591 comm="syz.7.1386" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 499.874502][ T30] audit: type=1400 audit(1773225413.296:1082): avc: denied { ioctl } for pid=11591 comm="syz.7.1386" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 499.912902][ T30] audit: type=1400 audit(1773225413.406:1083): avc: denied { execmem } for pid=11595 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 499.961280][ T30] audit: type=1400 audit(1773225413.496:1084): avc: denied { create } for pid=11587 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 500.011326][ T30] audit: type=1400 audit(1773225413.596:1085): avc: denied { create } for pid=11595 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.376648][ T30] audit: type=1400 audit(1773225413.596:1086): avc: denied { ioctl } for pid=11595 comm="syz.6.1387" path="socket:[33527]" dev="sockfs" ino=33527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.488891][ T792] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 500.599319][ T30] audit: type=1400 audit(1773225413.606:1087): avc: denied { write } for pid=11595 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.621731][ T30] audit: type=1400 audit(1773225413.606:1088): avc: denied { read } for pid=11595 comm="syz.6.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.906697][T11612] loop5: detected capacity change from 0 to 7 [ 500.957603][ T792] usb 6-1: config 112 has an invalid interface number: 140 but max is 2 [ 500.976183][ T792] usb 6-1: config 112 has an invalid interface number: 55 but max is 2 [ 500.994701][ T792] usb 6-1: config 112 has an invalid descriptor of length 1, skipping remainder of the config [ 501.025938][ T792] usb 6-1: config 112 has no interface number 0 [ 501.095856][ T792] usb 6-1: config 112 has no interface number 1 [ 501.269439][ T29] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 501.358531][ T792] usb 6-1: config 112 interface 2 altsetting 1 endpoint 0x4 has an invalid bInterval 195, changing to 7 [ 501.408298][ T792] usb 6-1: config 112 interface 2 altsetting 1 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 501.460629][ T792] usb 6-1: config 112 interface 2 altsetting 1 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 501.472501][ T792] usb 6-1: config 112 interface 2 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 501.483634][ T792] usb 6-1: config 112 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 501.494503][ T792] usb 6-1: config 112 interface 2 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 501.505371][T11612] Dev loop5: unable to read RDB block 7 [ 501.509353][ T29] usb 7-1: config 0 has no interfaces? [ 501.511185][T11612] loop5: unable to read partition table [ 501.522262][T11612] loop5: partition table beyond EOD, truncated [ 501.528548][ T792] usb 6-1: config 112 interface 2 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 501.538606][ T29] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 501.539333][T11612] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 501.560959][ T792] usb 6-1: config 112 interface 2 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 501.574958][ T792] usb 6-1: config 112 interface 140 altsetting 139 endpoint 0x2 has an invalid bInterval 130, changing to 7 [ 501.584640][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.586575][ T792] usb 6-1: config 112 interface 140 altsetting 139 has a duplicate endpoint with address 0x8, skipping [ 501.608823][ T792] usb 6-1: config 112 interface 140 altsetting 139 has a duplicate endpoint with address 0x8, skipping [ 501.620349][ T792] usb 6-1: config 112 interface 55 altsetting 15 endpoint 0xF has invalid maxpacket 959, setting to 64 [ 501.631567][ T792] usb 6-1: config 112 interface 55 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 501.642653][ T29] usb 7-1: Product: syz [ 501.642670][ T29] usb 7-1: Manufacturer: syz [ 501.642684][ T29] usb 7-1: SerialNumber: syz [ 501.651838][ T29] usb 7-1: config 0 descriptor?? [ 501.704037][ T792] usb 6-1: config 112 interface 55 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 501.715268][ T792] usb 6-1: config 112 interface 55 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 501.731464][ T792] usb 6-1: config 112 interface 2 has no altsetting 0 [ 501.740546][ T792] usb 6-1: config 112 interface 140 has no altsetting 0 [ 501.748098][ T792] usb 6-1: config 112 interface 55 has no altsetting 0 [ 501.756759][ T792] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1057, bcdDevice=b5.ac [ 501.766272][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.777232][ T792] usb 6-1: Product: syz [ 501.783640][ T792] usb 6-1: Manufacturer: syz [ 501.788470][ T792] usb 6-1: SerialNumber: syz [ 502.155558][ T9] usb 7-1: USB disconnect, device number 59 [ 502.214567][T11603] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 502.717439][T11619] (syz.7.1393,11619,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 503.155649][T11627] Cannot find add_set index 0 as target [ 503.298816][ T792] option 6-1:112.140: GSM modem (1-port) converter detected [ 503.354184][ T792] usb 6-1: USB disconnect, device number 57 [ 503.407787][ T792] option 6-1:112.140: device disconnected [ 503.415564][T11633] fuse: Bad value for 'user_id' [ 503.457367][T11633] fuse: Bad value for 'user_id' [ 504.484616][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 504.484631][ T30] audit: type=1400 audit(1773225418.098:1138): avc: denied { module_request } for pid=11629 comm="syz.7.1399" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 504.604709][ T30] audit: type=1400 audit(1773225418.679:1139): avc: denied { create } for pid=11630 comm="syz.3.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 504.656047][T11643] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1398'. [ 504.665156][ T5809] Bluetooth: hci5: Unknown advertising packet type: 0x30 [ 504.665207][ T5809] Bluetooth: hci5: Malformed LE Event: 0x0d [ 504.696764][ T30] audit: type=1400 audit(1773225418.799:1140): avc: denied { write } for pid=11644 comm="syz.8.1400" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 504.850811][ T30] audit: type=1400 audit(1773225418.799:1141): avc: denied { write } for pid=11644 comm="syz.8.1400" name="protocols" dev="proc" ino=4026534168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 504.875210][ T30] audit: type=1400 audit(1773225418.829:1142): avc: denied { sys_module } for pid=11629 comm="syz.7.1399" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 504.965723][T11642] SET target dimension over the limit! [ 505.266790][ T30] audit: type=1400 audit(1773225419.409:1143): avc: denied { create } for pid=11649 comm="syz.6.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.347282][ T30] audit: type=1400 audit(1773225419.459:1144): avc: denied { write } for pid=11649 comm="syz.6.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.400497][ T30] audit: type=1400 audit(1773225419.459:1145): avc: denied { read } for pid=11649 comm="syz.6.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.469151][ T30] audit: type=1400 audit(1773225419.479:1146): avc: denied { read } for pid=11649 comm="syz.6.1402" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 505.681475][ T30] audit: type=1400 audit(1773225419.479:1147): avc: denied { open } for pid=11649 comm="syz.6.1402" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 506.132948][T11665] loop5: detected capacity change from 0 to 7 [ 506.476418][ T792] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 506.630960][T11665] Dev loop5: unable to read RDB block 7 [ 506.645562][T11665] loop5: unable to read partition table [ 506.651345][T11665] loop5: partition table beyond EOD, truncated [ 506.675847][ T5935] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 506.725566][T11665] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 506.738651][ T792] usb 9-1: config 0 has no interfaces? [ 506.745994][ T792] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 506.815478][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.872402][ T792] usb 9-1: Product: syz [ 506.910272][ T792] usb 9-1: Manufacturer: syz [ 506.911797][ T5935] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 506.914874][ T792] usb 9-1: SerialNumber: syz [ 506.973648][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.986650][ T792] usb 9-1: config 0 descriptor?? [ 507.012192][ T5935] usb 4-1: Product: syz [ 507.036892][ T5935] usb 4-1: Manufacturer: syz [ 507.052659][ T5935] usb 4-1: SerialNumber: syz [ 507.307146][ T792] usb 9-1: USB disconnect, device number 4 [ 507.620052][T11679] Cannot find add_set index 0 as target [ 507.842126][ T5935] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 507.871063][ T5935] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 507.905434][T11682] FAULT_INJECTION: forcing a failure. [ 507.905434][T11682] name failslab, interval 1, probability 0, space 0, times 0 [ 507.975178][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.7.1413 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.975213][T11682] Tainted: [L]=SOFTLOCKUP [ 507.975219][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 507.975230][T11682] Call Trace: [ 507.975236][T11682] [ 507.975243][T11682] dump_stack_lvl+0x100/0x190 [ 507.975279][T11682] should_fail_ex.cold+0x5/0xa [ 507.975301][T11682] ? __keyctl_dh_compute+0x410/0x10d0 [ 507.975325][T11682] should_failslab+0xc2/0x120 [ 507.975343][T11682] __kmalloc_noprof+0xe0/0x850 [ 507.975372][T11682] __keyctl_dh_compute+0x410/0x10d0 [ 507.975396][T11682] ? find_held_lock+0x2b/0x80 [ 507.975417][T11682] ? get_pid_task+0xfc/0x250 [ 507.975442][T11682] ? get_pid_task+0xfc/0x250 [ 507.975469][T11682] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 507.975497][T11682] ? proc_fail_nth_write+0x9f/0x220 [ 507.975546][T11682] keyctl_dh_compute+0xd9/0x140 [ 507.975570][T11682] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 507.975598][T11682] ? ksys_write+0x1ac/0x250 [ 507.975625][T11682] ? __pfx_ksys_write+0x10/0x10 [ 507.975654][T11682] __do_sys_keyctl+0x464/0x5a0 [ 507.975674][T11682] do_syscall_64+0x106/0xf80 [ 507.975693][T11682] ? clear_bhb_loop+0x40/0x90 [ 507.975714][T11682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.975732][T11682] RIP: 0033:0x7f1e66f9c799 [ 507.975746][T11682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.975763][T11682] RSP: 002b:00007f1e67dc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 507.975780][T11682] RAX: ffffffffffffffda RBX: 00007f1e67215fa0 RCX: 00007f1e66f9c799 [ 507.975791][T11682] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 507.975802][T11682] RBP: 00007f1e67dc2090 R08: 0000200000000180 R09: 0000000000000000 [ 507.975812][T11682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.975822][T11682] R13: 00007f1e67216038 R14: 00007f1e67215fa0 R15: 00007ffdeb7d1fc8 [ 507.975846][T11682] [ 508.531982][T11695] netlink: 'syz.6.1416': attribute type 12 has an invalid length. [ 509.586910][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 509.586940][ T30] audit: type=1400 audit(1773225423.701:1170): avc: denied { create } for pid=11703 comm="syz.5.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 510.823486][ T30] audit: type=1400 audit(1773225423.711:1171): avc: denied { ioctl } for pid=11703 comm="syz.5.1418" path="socket:[33749]" dev="sockfs" ino=33749 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 510.825943][ T5935] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 511.424597][ T30] audit: type=1400 audit(1773225423.721:1172): avc: denied { setopt } for pid=11703 comm="syz.5.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 511.444937][ T30] audit: type=1400 audit(1773225423.731:1173): avc: denied { getopt } for pid=11703 comm="syz.5.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 511.535363][ T30] audit: type=1400 audit(1773225425.232:1174): avc: denied { shutdown } for pid=11694 comm="syz.6.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 511.536087][T11714] overlayfs: failed to resolve './file0': -2 [ 511.566750][ T5935] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 511.586430][ T5935] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 511.645749][ T30] audit: type=1400 audit(1773225425.732:1175): avc: denied { create } for pid=11712 comm="syz.3.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 511.690546][ T5935] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 512.044034][ T30] audit: type=1400 audit(1773225425.782:1176): avc: denied { connect } for pid=11712 comm="syz.3.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 512.094395][ T5935] usb 4-1: USB disconnect, device number 54 [ 512.243091][ T30] audit: type=1400 audit(1773225426.132:1177): avc: denied { append } for pid=11712 comm="syz.3.1420" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 512.323505][ T30] audit: type=1400 audit(1773225426.232:1178): avc: denied { read write } for pid=11721 comm="syz.8.1423" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 512.363083][ T29] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 512.423557][ T30] audit: type=1400 audit(1773225426.232:1179): avc: denied { open } for pid=11721 comm="syz.8.1423" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 512.652792][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 512.731602][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.741098][T11726] netlink: 'syz.5.1425': attribute type 33 has an invalid length. [ 512.773011][ T29] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 3.6a [ 512.782514][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.801094][T11726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1425'. [ 512.830419][ T29] usb 9-1: Product: syz [ 512.944100][ T29] usb 9-1: Manufacturer: syz [ 512.948726][ T29] usb 9-1: SerialNumber: syz [ 513.457005][ T29] usb 9-1: config 0 descriptor?? [ 513.684967][T11731] loop5: detected capacity change from 0 to 7 [ 513.713172][ T2830] block nbd0: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 420 seconds [ 513.724178][ T2830] block nbd0: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 420 seconds [ 513.735246][ T2830] block nbd0: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 420 seconds [ 513.746313][ T2830] block nbd0: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 420 seconds [ 513.863247][T11735] input: syz1 as /devices/virtual/input/input22 [ 514.037081][T11731] Dev loop5: unable to read RDB block 7 [ 514.042782][T11731] loop5: unable to read partition table [ 514.048952][T11731] loop5: partition table beyond EOD, truncated [ 514.049419][ T29] rtl8150 9-1:0.0: couldn't find required endpoints [ 514.058610][T11731] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 514.103485][ T29] rtl8150 9-1:0.0: probe with driver rtl8150 failed with error -5 [ 514.111836][ T792] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 514.133732][ T29] usb 9-1: USB disconnect, device number 5 [ 514.361702][ T792] usb 6-1: config 0 has no interfaces? [ 514.528313][ T792] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 514.540428][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.553896][ T792] usb 6-1: Product: syz [ 514.559526][ T792] usb 6-1: Manufacturer: syz [ 514.568742][ T792] usb 6-1: SerialNumber: syz [ 514.585412][ T792] usb 6-1: config 0 descriptor?? [ 514.808033][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 514.808068][ T30] audit: type=1400 audit(1773225428.954:1196): avc: denied { append } for pid=11749 comm="syz.6.1430" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 514.867997][ T5809] Bluetooth: hci5: Unknown advertising packet type: 0x30 [ 514.868130][ T5809] Bluetooth: hci5: adv larger than maximum supported [ 514.878165][ T5809] Bluetooth: hci5: Malformed LE Event: 0x0d [ 515.192010][ T5911] usb 6-1: USB disconnect, device number 58 [ 515.678797][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 516.230865][ T29] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 516.490893][ T30] audit: type=1400 audit(1773225430.645:1197): avc: denied { read write } for pid=11765 comm="syz.3.1434" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 516.516506][ T30] audit: type=1400 audit(1773225430.645:1198): avc: denied { open } for pid=11765 comm="syz.3.1434" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 516.545306][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 516.552959][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.563964][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.573935][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 516.587097][ T29] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 516.596268][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.609521][ T29] usb 7-1: config 0 descriptor?? [ 516.840582][ T792] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 516.950433][ T5935] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 517.043219][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 517.061629][ T29] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 517.063043][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 517.084219][ T30] audit: type=1400 audit(1773225431.235:1199): avc: denied { read } for pid=11769 comm="syz.7.1436" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 517.117018][ T29] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 517.148020][ T29] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 517.162702][ T5935] usb 6-1: config 0 interface 0 has no altsetting 0 [ 517.185142][ T29] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 517.194543][ T5935] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 517.222313][ T29] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 517.229862][ T30] audit: type=1400 audit(1773225431.235:1200): avc: denied { open } for pid=11769 comm="syz.7.1436" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 517.268900][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.282916][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.381842][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.394813][ T29] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 517.407321][ T5935] usb 6-1: config 0 descriptor?? [ 517.484476][ T30] audit: type=1400 audit(1773225431.265:1201): avc: denied { ioctl } for pid=11769 comm="syz.7.1436" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 517.857984][T11768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1435'. [ 517.904078][T11768] ubi: mtd0 is already attached to ubi0 [ 517.910976][T11768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.919505][T11768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.016297][ T792] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 518.025806][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.027930][ T5935] (null): keene_cmd_main failed (-71) [ 518.094568][ T30] audit: type=1400 audit(1773225431.265:1202): avc: denied { block_suspend } for pid=11769 comm="syz.7.1436" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 518.097191][ T792] usb 4-1: config 0 descriptor?? [ 518.268410][ T29] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 518.301731][ T5935] video4linux radio48: keene_cmd_main failed (-71) [ 518.342154][ T5935] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 518.349605][ T29] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 518.412956][ T5935] usb 6-1: USB disconnect, device number 59 [ 518.494216][ T5924] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 518.512745][ T29] usb 7-1: USB disconnect, device number 60 [ 518.522539][ T5924] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 518.676023][ T5924] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 518.687488][ T5924] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 518.709722][ T792] ath6kl: Failed to submit usb control message: -71 [ 518.716346][ T792] ath6kl: unable to send the bmi data to the device: -71 [ 518.733687][ T30] audit: type=1400 audit(1773225432.886:1203): avc: denied { wake_alarm } for pid=11779 comm="syz.8.1438" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 518.801335][T11785] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 518.811218][ T792] ath6kl: Unable to send get target info: -71 [ 518.822179][ T30] audit: type=1400 audit(1773225432.946:1204): avc: denied { ioctl } for pid=11784 comm="syz.5.1439" path="socket:[35890]" dev="sockfs" ino=35890 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 518.833080][ T792] ath6kl: Failed to init ath6kl core: -71 [ 518.861004][T11785] batman_adv: batadv0: Adding interface: ip6gretap1 [ 518.867721][T11785] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.893601][T11785] batman_adv: batadv0: Interface activated: ip6gretap1 [ 518.901630][ T792] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 518.923138][ T792] usb 4-1: USB disconnect, device number 55 [ 518.977030][ T30] audit: type=1400 audit(1773225433.116:1205): avc: denied { create } for pid=11779 comm="syz.8.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 520.470818][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 520.470840][ T30] audit: type=1400 audit(1773225434.627:1211): avc: denied { ioctl } for pid=11791 comm="syz.5.1441" path="socket:[35015]" dev="sockfs" ino=35015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 520.502482][ T30] audit: type=1400 audit(1773225434.627:1212): avc: denied { bind } for pid=11791 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 520.530591][ T30] audit: type=1400 audit(1773225434.687:1213): avc: denied { write } for pid=11791 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 520.572240][ T30] audit: type=1400 audit(1773225434.727:1214): avc: denied { append } for pid=11791 comm="syz.5.1441" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 520.599424][T11792] loop5: detected capacity change from 0 to 7 [ 520.607147][T11792] Dev loop5: unable to read RDB block 7 [ 520.612794][T11792] loop5: AHDI p1 [ 520.616419][T11792] loop5: partition table partially beyond EOD, truncated [ 520.657664][ T30] audit: type=1400 audit(1773225434.807:1215): avc: denied { unlink } for pid=11793 comm="syz.6.1443" name="#11" dev="tmpfs" ino=1368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 521.247641][ T30] audit: type=1400 audit(1773225434.837:1216): avc: denied { mount } for pid=11793 comm="syz.6.1443" name="/" dev="overlay" ino=1363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 521.271807][ T30] audit: type=1400 audit(1773225435.037:1217): avc: denied { execute_no_trans } for pid=11794 comm="syz.3.1442" path="/298/file1" dev="tmpfs" ino=1601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 521.305034][ T30] audit: type=1400 audit(1773225435.457:1218): avc: denied { unmount } for pid=6668 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 521.309391][ T5809] block nbd5: Receive control failed (result -32) [ 521.309612][ T5811] block nbd5: Receive control failed (result -32) [ 521.346159][T11792] block nbd5: shutting down sockets [ 521.492466][T11800] loop5: detected capacity change from 0 to 7 [ 521.919508][ T30] audit: type=1400 audit(1773225435.907:1219): avc: denied { lock } for pid=11803 comm="syz.3.1447" path="socket:[35099]" dev="sockfs" ino=35099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 522.148067][ T29] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 522.168586][ T30] audit: type=1400 audit(1773225435.917:1220): avc: denied { create } for pid=11801 comm="syz.7.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 522.375735][ T29] usb 6-1: config 0 has no interfaces? [ 522.717344][ T29] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 522.759618][T11800] Dev loop5: unable to read RDB block 7 [ 522.770918][T11800] loop5: unable to read partition table [ 522.776673][T11800] loop5: partition table beyond EOD, truncated [ 522.811287][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.843265][ T29] usb 6-1: Product: syz [ 522.873084][T11800] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 522.886306][ T29] usb 6-1: Manufacturer: syz [ 522.907478][ T29] usb 6-1: SerialNumber: syz [ 522.935568][ T29] usb 6-1: config 0 descriptor?? [ 523.377679][ T5911] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 524.117115][ T5884] usb 6-1: USB disconnect, device number 60 [ 524.131899][ T5911] usb 9-1: config 0 interface 0 has no altsetting 0 [ 524.138889][ T5911] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 524.148330][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.237823][ T5911] usb 9-1: config 0 descriptor?? [ 525.360410][T11817] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1449'. [ 525.409431][ T5911] (null): keene_cmd_main failed (-110) [ 525.423193][T11828] ubi: mtd0 is already attached to ubi0 [ 525.429747][T11828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.439459][T11828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.498472][ T5911] video4linux radio48: keene_cmd_main failed (-71) [ 525.518934][ T5911] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 525.579488][ T5911] usb 9-1: USB disconnect, device number 6 [ 526.574178][T11844] netlink: 'syz.8.1455': attribute type 3 has an invalid length. [ 526.582060][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 526.582070][ T30] audit: type=1400 audit(1773225440.730:1227): avc: denied { setopt } for pid=11838 comm="syz.8.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 526.687161][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1455'. [ 527.043172][ T30] audit: type=1400 audit(1773225441.200:1228): avc: denied { ioctl } for pid=11838 comm="syz.8.1455" path="socket:[35997]" dev="sockfs" ino=35997 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 527.405613][ T5911] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 527.504080][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 527.921586][ T30] audit: type=1400 audit(1773225442.080:1229): avc: denied { read write } for pid=11852 comm="syz.8.1458" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 527.954409][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1458'. [ 527.966334][T11856] syzkaller0: entered promiscuous mode [ 527.974026][T11856] syzkaller0: entered allmulticast mode [ 527.979487][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 527.989256][ T30] audit: type=1400 audit(1773225442.110:1230): avc: denied { open } for pid=11852 comm="syz.8.1458" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 528.014708][ T30] audit: type=1400 audit(1773225442.130:1231): avc: denied { create } for pid=11852 comm="syz.8.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 528.035678][ T5911] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 528.044760][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.052786][ T5911] usb 6-1: Product: syz [ 528.057336][ T5911] usb 6-1: Manufacturer: syz [ 528.061933][ T5911] usb 6-1: SerialNumber: syz [ 528.065092][T11857] 0: reclassify loop, rule prio 0, protocol 800 [ 528.087046][ T5911] usb 6-1: config 0 descriptor?? [ 528.099924][ T5911] gspca_main: se401-2.14.0 probing 047d:5003 [ 528.224845][ T792] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 528.278176][ T30] audit: type=1400 audit(1773225442.440:1232): avc: denied { create } for pid=11860 comm="syz.7.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 528.306911][ T30] audit: type=1400 audit(1773225442.460:1233): avc: denied { write } for pid=11860 comm="syz.7.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 528.351862][ T30] audit: type=1400 audit(1773225442.460:1234): avc: denied { read } for pid=11860 comm="syz.7.1461" path="socket:[36019]" dev="sockfs" ino=36019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 528.454730][ T792] usb 9-1: Using ep0 maxpacket: 32 [ 528.463905][ T792] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 528.473178][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.488759][ T792] usb 9-1: Product: syz [ 528.515105][ T792] usb 9-1: Manufacturer: syz [ 528.533958][ T792] usb 9-1: SerialNumber: syz [ 528.557471][ T5884] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 528.570456][ T792] usb 9-1: config 0 descriptor?? [ 528.642166][ T792] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 528.664736][ T792] dvb-usb: bulk message failed: -22 (4/0) [ 528.670568][ T792] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 528.684743][ T792] dvb-usb: bulk message failed: -22 (5/0) [ 528.691207][ T792] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 528.726038][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.737074][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.748270][ T5911] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 528.759618][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 528.771994][ T792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.792393][ T792] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 528.811458][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.824488][ T792] usb 9-1: media controller created [ 528.853686][ T5884] usb 4-1: config 0 descriptor?? [ 528.863178][T11853] dvb-usb: bulk message failed: -22 (8/0) [ 528.872430][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.914141][T11853] ttusb2: there might have been an error during control message transfer. (rlen = 22, was 0) [ 528.951108][ T9] usb 6-1: USB disconnect, device number 61 [ 529.002533][T11853] ttusb2: i2c transfer failed. [ 529.050057][T11865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.051763][ T792] usb 9-1: selecting invalid altsetting 3 [ 529.091068][T11865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.093615][ T792] ttusb2: set interface to alts=3 failed [ 529.244213][ T792] DVB: Unable to find symbol tda10086_attach() [ 529.250515][ T792] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 529.266228][ T792] dvb-usb: bulk message failed: -22 (4/0) [ 529.278176][ T792] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 529.291036][ T792] dvb-usb: bulk message failed: -22 (5/0) [ 529.296924][ T792] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 529.307454][ T792] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 529.317715][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.326533][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.340223][ T792] usb 9-1: USB disconnect, device number 7 [ 529.352611][ T5884] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x7 [ 529.366562][ T5884] logitech-djreceiver 0003:046D:C71F.000D: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 529.435350][ T792] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 529.659774][ T30] audit: type=1400 audit(1773225443.741:1235): avc: denied { ioctl } for pid=11871 comm="syz.6.1463" path="socket:[35258]" dev="sockfs" ino=35258 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 529.689755][ T5884] usb 4-1: USB disconnect, device number 56 [ 530.247308][ T30] audit: type=1400 audit(1773225444.401:1236): avc: denied { write } for pid=11875 comm="syz.6.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 530.550870][T11883] loop5: detected capacity change from 0 to 7 [ 531.126385][ T5884] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 531.249531][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1468'. [ 531.637085][T11883] Dev loop5: unable to read RDB block 7 [ 531.653126][T11883] loop5: unable to read partition table [ 531.660948][T11883] loop5: partition table beyond EOD, truncated [ 531.692675][T11883] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 531.877161][ T5884] usb 9-1: config 0 has no interfaces? [ 532.279702][ T5884] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 532.303398][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.311401][ T5884] usb 9-1: Product: syz [ 532.354369][ T5884] usb 9-1: Manufacturer: syz [ 532.390545][ T5884] usb 9-1: SerialNumber: syz [ 532.403735][ T30] audit: type=1400 audit(1773225446.552:1237): avc: denied { setopt } for pid=11897 comm="syz.7.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 532.688629][ T5884] usb 9-1: config 0 descriptor?? [ 532.747238][ T30] audit: type=1400 audit(1773225446.663:1238): avc: denied { ioctl } for pid=11897 comm="syz.7.1470" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36088 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 533.192766][ T792] usb 9-1: USB disconnect, device number 8 [ 533.457445][T11904] fuse: Bad value for 'user_id' [ 533.465116][ T30] audit: type=1400 audit(1773225447.613:1239): avc: denied { mounton } for pid=11902 comm="syz.3.1471" path="/308/file0" dev="tmpfs" ino=1654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 533.498427][T11904] fuse: Bad value for 'user_id' [ 533.944627][T11914] FAULT_INJECTION: forcing a failure. [ 533.944627][T11914] name failslab, interval 1, probability 0, space 0, times 0 [ 533.981934][T11914] CPU: 1 UID: 0 PID: 11914 Comm: syz.5.1476 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.981961][T11914] Tainted: [L]=SOFTLOCKUP [ 533.981966][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 533.981975][T11914] Call Trace: [ 533.981981][T11914] [ 533.981987][T11914] dump_stack_lvl+0x100/0x190 [ 533.982017][T11914] should_fail_ex.cold+0x5/0xa [ 533.982037][T11914] ? tomoyo_realpath_from_path+0xb6/0x690 [ 533.982057][T11914] should_failslab+0xc2/0x120 [ 533.982073][T11914] __kmalloc_noprof+0xe0/0x850 [ 533.982100][T11914] tomoyo_realpath_from_path+0xb6/0x690 [ 533.982126][T11914] tomoyo_path_number_perm+0x23c/0x580 [ 533.982143][T11914] ? tomoyo_path_number_perm+0x22e/0x580 [ 533.982163][T11914] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 533.982204][T11914] ? find_held_lock+0x2b/0x80 [ 533.982223][T11914] ? __fget_files+0x215/0x3d0 [ 533.982239][T11914] ? hook_file_ioctl_common+0x146/0x410 [ 533.982268][T11914] ? __fget_files+0x21f/0x3d0 [ 533.982288][T11914] security_file_ioctl+0xd3/0x230 [ 533.982308][T11914] __x64_sys_ioctl+0xb7/0x210 [ 533.982334][T11914] do_syscall_64+0x106/0xf80 [ 533.982351][T11914] ? clear_bhb_loop+0x40/0x90 [ 533.982373][T11914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.982390][T11914] RIP: 0033:0x7f93db39c799 [ 533.982404][T11914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.982420][T11914] RSP: 002b:00007f93dc1e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.982437][T11914] RAX: ffffffffffffffda RBX: 00007f93db615fa0 RCX: 00007f93db39c799 [ 533.982448][T11914] RDX: 0000200000000080 RSI: 000000004048aecb RDI: 0000000000000006 [ 533.982458][T11914] RBP: 00007f93dc1e3090 R08: 0000000000000000 R09: 0000000000000000 [ 533.982468][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.982482][T11914] R13: 00007f93db616038 R14: 00007f93db615fa0 R15: 00007ffeadc4c068 [ 533.982506][T11914] [ 533.982513][T11914] ERROR: Out of memory at tomoyo_realpath_from_path. [ 534.207589][ T30] audit: type=1400 audit(1773225448.173:1240): avc: denied { read } for pid=5474 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 534.216614][T11916] sp0: Synchronizing with TNC [ 534.240000][ T5884] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 534.427517][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 534.454391][ T5884] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 534.463603][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.551400][ T5884] usb 4-1: Product: syz [ 534.563200][ T5884] usb 4-1: Manufacturer: syz [ 534.590858][ T5884] usb 4-1: SerialNumber: syz [ 534.637100][ T5884] usb 4-1: config 0 descriptor?? [ 534.701617][ T792] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 534.763609][ T5884] gspca_main: se401-2.14.0 probing 047d:5003 [ 534.894048][ T792] usb 6-1: device descriptor read/64, error -71 [ 535.224418][ T792] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 535.375123][ T792] usb 6-1: device descriptor read/64, error -71 [ 535.438192][ T5884] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 535.504171][ T792] usb usb6-port1: attempt power cycle [ 535.672085][ T5884] usb 4-1: USB disconnect, device number 57 [ 535.841003][ T30] audit: type=1400 audit(1773225449.934:1241): avc: denied { remount } for pid=11932 comm="syz.6.1482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 535.931028][ T792] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 536.131271][ T792] usb 6-1: device descriptor read/8, error -71 [ 536.475674][ T792] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 536.504998][ T792] usb 6-1: device descriptor read/8, error -71 [ 536.972288][ T30] audit: type=1326 audit(1773225451.095:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.8.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc020d9c799 code=0x7ffc0000 [ 537.020726][T11945] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 537.109462][ T792] usb usb6-port1: unable to enumerate USB device [ 537.444537][ T30] audit: type=1326 audit(1773225451.095:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.8.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc020d9c799 code=0x7ffc0000 [ 537.482477][ T30] audit: type=1326 audit(1773225451.095:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.8.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fc020d9c799 code=0x7ffc0000 [ 537.654253][ T30] audit: type=1326 audit(1773225451.095:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.8.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc020d9c799 code=0x7ffc0000 [ 537.770084][ T30] audit: type=1326 audit(1773225451.095:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.8.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc020d9c799 code=0x7ffc0000 [ 537.979304][T11964] lo speed is unknown, defaulting to 1000 [ 538.002991][T11964] vxcan1 speed is unknown, defaulting to 1000 [ 538.086908][T11962] loop5: detected capacity change from 0 to 7 [ 538.095659][T11969] FAULT_INJECTION: forcing a failure. [ 538.095659][T11969] name failslab, interval 1, probability 0, space 0, times 0 [ 538.117406][ T30] audit: type=1326 audit(1773225451.095:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11939 comm="syz.8.1484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc020d9c799 code=0x7ffc0000 [ 538.234604][T11969] CPU: 1 UID: 0 PID: 11969 Comm: syz.5.1492 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.234634][T11969] Tainted: [L]=SOFTLOCKUP [ 538.234640][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 538.234651][T11969] Call Trace: [ 538.234657][T11969] [ 538.234664][T11969] dump_stack_lvl+0x100/0x190 [ 538.234697][T11969] should_fail_ex.cold+0x5/0xa [ 538.234720][T11969] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 538.234748][T11969] should_failslab+0xc2/0x120 [ 538.234766][T11969] __kmalloc_noprof+0xe0/0x850 [ 538.234797][T11969] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 538.234824][T11969] ? cred_has_capability.isra.0+0x186/0x300 [ 538.234850][T11969] genl_family_rcv_msg_doit+0xc7/0x300 [ 538.234877][T11969] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 538.234912][T11969] ? bpf_lsm_capable+0x9/0x10 [ 538.234929][T11969] ? security_capable+0x80/0x260 [ 538.234958][T11969] ? ns_capable+0xd2/0xf0 [ 538.234982][T11969] genl_rcv_msg+0x560/0x800 [ 538.235009][T11969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.235032][T11969] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 538.235065][T11969] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 538.235090][T11969] ? __pfx_nl80211_post_doit+0x10/0x10 [ 538.235127][T11969] netlink_rcv_skb+0x159/0x420 [ 538.235149][T11969] ? __pfx_genl_rcv_msg+0x10/0x10 [ 538.235175][T11969] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 538.235207][T11969] ? netlink_deliver_tap+0x1ae/0xcc0 [ 538.235232][T11969] genl_rcv+0x28/0x40 [ 538.235254][T11969] netlink_unicast+0x5aa/0x870 [ 538.235280][T11969] ? __pfx_netlink_unicast+0x10/0x10 [ 538.235311][T11969] netlink_sendmsg+0x8b0/0xda0 [ 538.235338][T11969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.235359][T11969] ? __might_fault+0xc0/0x140 [ 538.235392][T11969] ____sys_sendmsg+0x9e1/0xb70 [ 538.235415][T11969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.235440][T11969] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.235475][T11969] ___sys_sendmsg+0x190/0x1e0 [ 538.235502][T11969] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.235558][T11969] __sys_sendmsg+0x170/0x220 [ 538.235577][T11969] ? __pfx___sys_sendmsg+0x10/0x10 [ 538.235613][T11969] do_syscall_64+0x106/0xf80 [ 538.235634][T11969] ? clear_bhb_loop+0x40/0x90 [ 538.235656][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.235674][T11969] RIP: 0033:0x7f93db39c799 [ 538.235689][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.235706][T11969] RSP: 002b:00007f93dc1e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.235723][T11969] RAX: ffffffffffffffda RBX: 00007f93db615fa0 RCX: 00007f93db39c799 [ 538.235734][T11969] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 538.235744][T11969] RBP: 00007f93dc1e3090 R08: 0000000000000000 R09: 0000000000000000 [ 538.235754][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.235765][T11969] R13: 00007f93db616038 R14: 00007f93db615fa0 R15: 00007ffeadc4c068 [ 538.235789][T11969] [ 538.706326][ T30] audit: type=1400 audit(1773225451.195:1248): avc: denied { setopt } for pid=11939 comm="syz.8.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 538.726284][ T30] audit: type=1400 audit(1773225451.195:1249): avc: denied { bind } for pid=11939 comm="syz.8.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 538.746226][ T30] audit: type=1400 audit(1773225451.195:1250): avc: denied { name_bind } for pid=11939 comm="syz.8.1484" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 538.768383][ T30] audit: type=1400 audit(1773225451.195:1251): avc: denied { node_bind } for pid=11939 comm="syz.8.1484" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 538.790137][ T30] audit: type=1400 audit(1773225451.195:1252): avc: denied { write } for pid=11939 comm="syz.8.1484" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 538.811724][ T5935] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 538.979515][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 539.219482][ T5809] Bluetooth: hci1: command 0x1003 tx timeout [ 539.252613][ T5811] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 539.313940][ T5935] usb 4-1: config 0 has no interfaces? [ 539.368513][ T5935] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 539.377576][ T5935] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 539.385822][ T5935] usb 4-1: Manufacturer: syz [ 539.788301][ T5935] usb 4-1: config 0 descriptor?? [ 540.059957][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1495'. [ 540.405396][T11962] Dev loop5: unable to read RDB block 7 [ 540.425997][T11962] loop5: unable to read partition table [ 540.435184][T11962] loop5: partition table beyond EOD, truncated [ 540.444583][T11962] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 540.522628][T11982] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1496'. [ 541.120474][ T5935] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 541.126009][T11994] vti0: entered promiscuous mode [ 541.138594][ T29] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 541.146496][T11994] vti0: entered allmulticast mode [ 541.268897][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 541.279391][ T5935] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 541.306525][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.314765][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 541.321546][ T5935] usb 6-1: Product: syz [ 541.327423][ T5935] usb 6-1: Manufacturer: syz [ 541.333489][ T5935] usb 6-1: SerialNumber: syz [ 541.341745][ T29] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 541.353858][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.362110][ T5935] usb 6-1: config 0 descriptor?? [ 541.367257][ T29] usb 9-1: Product: syz [ 541.371878][ T29] usb 9-1: Manufacturer: syz [ 541.380027][ T5935] gspca_main: se401-2.14.0 probing 047d:5003 [ 541.386086][ T29] usb 9-1: SerialNumber: syz [ 541.396135][ T29] usb 9-1: config 0 descriptor?? [ 541.405975][ T29] gspca_main: se401-2.14.0 probing 047d:5003 [ 541.682977][ T978] usb 4-1: USB disconnect, device number 58 [ 541.899516][ T29] gspca_se401: Bayer format not supported! [ 542.160001][ T792] usb 9-1: USB disconnect, device number 9 [ 542.169202][ T5935] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 542.270661][ T9] usb 6-1: USB disconnect, device number 66 [ 542.513002][ T31] INFO: task syz.0.1079:10309 blocked for more than 143 seconds. [ 542.637597][ T31] Tainted: G L syzkaller #0 [ 542.654286][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.671184][ T31] task:syz.0.1079 state:D stack:28792 pid:10309 tgid:10307 ppid:5808 task_flags:0x400040 flags:0x00080002 [ 542.687579][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 542.687591][ T30] audit: type=1400 audit(1773225456.788:1264): avc: denied { write } for pid=5789 comm="syz-executor" path="pipe:[4428]" dev="pipefs" ino=4428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 542.854765][ T31] Call Trace: [ 542.879129][ T31] [ 542.882061][ T31] __schedule+0xfee/0x6120 [ 542.886463][ T31] ? __lock_acquire+0x4a5/0x2630 [ 542.936036][ T31] ? __pfx___schedule+0x10/0x10 [ 542.947465][ T31] ? find_held_lock+0x2b/0x80 [ 542.952164][ T31] ? schedule+0x2bf/0x390 [ 542.956504][ T31] schedule+0xdd/0x390 [ 542.967368][ T31] schedule_preempt_disabled+0x13/0x30 [ 543.003487][ T31] __mutex_lock+0xc9a/0x1b90 [ 543.010147][ T31] ? bdev_open+0x41a/0xe40 [ 543.014565][ T31] ? find_held_lock+0x2b/0x80 [ 543.047333][ T31] ? find_inode_fast+0x5e3/0x910 [ 543.052286][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 543.067308][ T31] ? find_inode_fast+0x1fa/0x910 [ 543.072272][ T31] ? bdev_open+0x41a/0xe40 [ 543.076680][ T31] bdev_open+0x41a/0xe40 [ 543.095503][ T31] ? iput+0x3a/0x40 [ 543.099373][ T31] blkdev_open+0x34e/0x4f0 [ 543.103784][ T31] do_dentry_open+0x6d8/0x1660 [ 543.108576][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 543.113507][ T31] vfs_open+0x82/0x3f0 [ 543.117680][ T31] path_openat+0x208c/0x31a0 [ 543.122267][ T31] ? __pfx_path_openat+0x10/0x10 [ 543.127182][ T31] do_file_open+0x20e/0x430 [ 543.131720][ T31] ? __pfx_do_file_open+0x10/0x10 [ 543.136744][ T31] ? alloc_fd+0x476/0x790 [ 543.141089][ T31] ? do_getname+0x191/0x390 [ 543.145588][ T31] do_sys_openat2+0x10d/0x1e0 [ 543.150296][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 543.155505][ T31] __x64_sys_openat+0x12d/0x210 [ 543.160385][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 543.165856][ T31] ? do_user_addr_fault+0x8d6/0x12f0 [ 543.171186][ T31] do_syscall_64+0x106/0xf80 [ 543.175770][ T31] ? clear_bhb_loop+0x40/0x90 [ 543.180468][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.186356][ T31] RIP: 0033:0x7f9f6d95cfce [ 543.190780][ T31] RSP: 002b:00007f9f6e7e0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 543.199195][ T31] RAX: ffffffffffffffda RBX: 00007f9f6e7e16c0 RCX: 00007f9f6d95cfce [ 543.207140][ T31] RDX: 0000000000040020 RSI: 00007f9f6e7e0c00 RDI: ffffffffffffff9c [ 543.215118][ T31] RBP: 00007f9f6e7e0c00 R08: 0000000000000000 R09: 0000000000000000 [ 543.223138][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 543.231198][ T31] R13: 00007f9f6dc16038 R14: 00007f9f6dc15fa0 R15: 00007ffd3b2f1688 [ 543.239193][ T31] [ 543.242220][ T31] [ 543.242220][ T31] Showing all locks held in the system: [ 543.307201][ T31] 3 locks held by kworker/0:0/9: [ 543.312164][ T31] #0: ffff888020ec4d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 543.377486][ T31] #1: ffffc900000e7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 543.457487][ T31] #2: ffff8880b8429188 (lock#6){..-.}-{3:3}, at: kcov_remote_stop+0x77/0x540 [ 543.497197][ T31] 1 lock held by khungtaskd/31: [ 543.502056][ T31] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 543.544021][ T31] 3 locks held by kworker/0:2/792: [ 543.567215][ T31] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 543.633941][ T31] #1: ffffc90003b67d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 543.657005][ T31] #2: ffffffff8e7f3238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 543.690338][ T31] 3 locks held by kworker/u8:9/1148: [ 543.695632][ T31] #0: ffff88801cac9148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 543.718613][ T31] #1: ffffc9000492fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 543.737011][ T31] #2: ffffffff8e7f3100 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 543.752725][ T31] 2 locks held by getty/5570: [ 543.763282][ T31] #0: ffff8880398600a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 543.773281][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 543.785243][ T31] 1 lock held by udevd/5797: [ 543.790087][ T31] #0: ffff888027cfb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 543.799469][ T2830] block nbd0: Possible stuck request ffff888027d88000: control (read@0,1024B). Runtime 450 seconds [ 543.799476][ T31] 3 locks held by kworker/1:4/5924: [ 543.799500][ T2830] block nbd0: Possible stuck request ffff888027d88200: control (read@1024,1024B). Runtime 450 seconds [ 543.810193][ T31] #0: ffff88813fe67148 [ 543.815379][ T2830] block nbd0: Possible stuck request ffff888027d88400: control (read@2048,1024B). Runtime 450 seconds [ 543.826323][ T31] ( [ 543.830488][ T2830] block nbd0: Possible stuck request ffff888027d88600: control (read@3072,1024B). Runtime 450 seconds [ 543.842522][ T31] (wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 543.864954][ T31] #1: ffffc9000493fd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 543.877578][ T31] #2: ffffffff8e7f3100 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 543.887560][ T31] 2 locks held by kworker/1:5/5935: [ 543.892741][ T31] #0: ffff88813fe67148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 543.903279][ T31] #1: ffffc900049bfd08 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 543.912794][ T31] 1 lock held by syz.5.1060/10237: [ 543.917922][ T31] #0: ffffffff90610928 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 543.926973][ T31] 1 lock held by syz.0.1079/10309: [ 543.932081][ T31] #0: ffff888027cfb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 543.941668][ T31] 4 locks held by syz-executor/11173: [ 543.947245][ T31] #0: ffff88803fd8cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 543.956871][ T31] #1: ffff88803fd8c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 543.966582][ T31] #2: ffffffff908a8b88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 543.976588][ T31] #3: ffff8880560df2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 543.986064][ T31] 1 lock held by syz.6.1474/11912: [ 543.991389][ T31] #0: ffffffff90610928 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 544.000712][ T31] 1 lock held by syz.7.1504/12010: [ 544.005801][ T31] #0: ffffffff90610928 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 544.014825][ T31] 1 lock held by syz.3.1507/12017: [ 544.021720][ T31] #0: ffffffff90610928 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 544.032689][ T31] [ 544.035017][ T31] ============================================= [ 544.035017][ T31] [ 544.065521][ T31] NMI backtrace for cpu 0 [ 544.065536][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 544.065559][ T31] Tainted: [L]=SOFTLOCKUP [ 544.065564][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 544.065574][ T31] Call Trace: [ 544.065579][ T31] [ 544.065586][ T31] dump_stack_lvl+0x100/0x190 [ 544.065613][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 544.065629][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 544.065652][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 544.065675][ T31] sys_info+0x141/0x190 [ 544.065692][ T31] watchdog+0xd25/0x1050 [ 544.065716][ T31] ? __pfx_watchdog+0x10/0x10 [ 544.065736][ T31] ? __kthread_parkme+0x18c/0x230 [ 544.065758][ T31] ? kthread+0x13a/0x450 [ 544.065772][ T31] ? __pfx_watchdog+0x10/0x10 [ 544.065791][ T31] kthread+0x370/0x450 [ 544.065804][ T31] ? __pfx_kthread+0x10/0x10 [ 544.065817][ T31] ret_from_fork+0x754/0xd80 [ 544.065833][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 544.065851][ T31] ? __switch_to+0x7b4/0x1120 [ 544.065871][ T31] ? __pfx_kthread+0x10/0x10 [ 544.065887][ T31] ret_from_fork_asm+0x1a/0x30 [ 544.065917][ T31] [ 544.065925][ T31] Sending NMI from CPU 0 to CPUs 1: [ 544.191877][ C1] NMI backtrace for cpu 1 [ 544.191891][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.191911][ C1] Tainted: [L]=SOFTLOCKUP [ 544.191916][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 544.191924][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 544.191942][ C1] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 544.191955][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 544.191967][ C1] RAX: 0000000002f34c67 RBX: ffff88801e6a24c0 RCX: ffffffff8b8f9c75 [ 544.191976][ C1] RDX: 0000000000000000 RSI: ffffffff8de7512b RDI: ffffffff8c1afca0 [ 544.191984][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 544.191992][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd4498 [ 544.192001][ C1] R13: 0000000000000001 R14: ffffffff90d98410 R15: 0000000000000000 [ 544.192010][ C1] FS: 0000000000000000(0000) GS:ffff888124445000(0000) knlGS:0000000000000000 [ 544.192024][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.192032][ C1] CR2: 00005643c920be48 CR3: 000000002a216000 CR4: 00000000003526f0 [ 544.192041][ C1] Call Trace: [ 544.192045][ C1] [ 544.192049][ C1] default_idle+0x9/0x10 [ 544.192065][ C1] default_idle_call+0x6c/0xb0 [ 544.192081][ C1] do_idle+0x35b/0x4b0 [ 544.192098][ C1] ? __pfx_do_idle+0x10/0x10 [ 544.192116][ C1] cpu_startup_entry+0x4f/0x60 [ 544.192133][ C1] start_secondary+0x21d/0x2d0 [ 544.192152][ C1] ? __pfx_start_secondary+0x10/0x10 [ 544.192173][ C1] common_startup_64+0x13e/0x148 [ 544.192193][ C1] [ 544.365233][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 544.372069][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 544.382712][ T31] Tainted: [L]=SOFTLOCKUP [ 544.387004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 544.397031][ T31] Call Trace: [ 544.400290][ T31] [ 544.403202][ T31] dump_stack_lvl+0x100/0x190 [ 544.407863][ T31] vpanic+0x552/0x970 [ 544.411815][ T31] ? __pfx_vpanic+0x10/0x10 [ 544.416288][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 544.422419][ T31] panic+0xd1/0xe0 [ 544.426115][ T31] ? __pfx_panic+0x10/0x10 [ 544.430503][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 544.436640][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 544.442770][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 544.448902][ T31] ? watchdog.cold+0x198/0x1ca [ 544.453637][ T31] ? watchdog+0xd35/0x1050 [ 544.458026][ T31] watchdog.cold+0x1a9/0x1ca [ 544.462591][ T31] ? __pfx_watchdog+0x10/0x10 [ 544.467244][ T31] ? __kthread_parkme+0x18c/0x230 [ 544.472249][ T31] ? kthread+0x13a/0x450 [ 544.476462][ T31] ? __pfx_watchdog+0x10/0x10 [ 544.481111][ T31] kthread+0x370/0x450 [ 544.485150][ T31] ? __pfx_kthread+0x10/0x10 [ 544.489709][ T31] ret_from_fork+0x754/0xd80 [ 544.494271][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 544.499362][ T31] ? __switch_to+0x7b4/0x1120 [ 544.504012][ T31] ? __pfx_kthread+0x10/0x10 [ 544.508571][ T31] ret_from_fork_asm+0x1a/0x30 [ 544.513312][ T31] [ 544.516502][ T31] Kernel Offset: disabled [ 544.520798][ T31] Rebooting in 86400 seconds..