last executing test programs: 58.353543904s ago: executing program 1 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="140002"], 0x48}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000001b7600010000000000950000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001a80)=0x14) (async, rerun: 64) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7c, 0x0, 0x3, 0x6}]}, {0x0, [0x5f, 0x0, 0x5f, 0x2e]}}, &(0x7f0000001b40)=""/154, 0x46, 0x9a, 0x0, 0x8, 0x10000}, 0x28) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) (async) r11 = dup3(r0, r5, 0x0) (async) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') read(r12, &(0x7f0000000640)=""/4096, 0x4f) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0x6, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@map_fd={0x18, 0x7, 0x1, 0x0, r6}, @alu={0x4, 0x0, 0x0, 0x2, 0x7, 0xfffffffffffffff4, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x40, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000001c40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x0, 0xe, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001d00)=[r9, r10, r11, r12], &(0x7f0000001d40)=[{0x4, 0x3, 0xf, 0x5}, {0x1, 0x3, 0xb, 0xb}, {0x5, 0x4, 0xa}, {0x0, 0x1, 0xb, 0x5}, {0x5, 0x5, 0xf, 0x5}, {0x5, 0x5, 0x9, 0x4}, {0x3, 0x3, 0xe, 0x6}], 0x10, 0x4}, 0x94) 58.255905865s ago: executing program 1 (id=30): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f00000023c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write(r2, &(0x7f0000001340)="89d87df03855", 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) sendto$l2tp6(r2, &(0x7f0000000240)="84ab39825ad269711859561465aaf8b7f1ca4aba8a3fb93c62fc005cac20d5802ec1c33883e6b2eb9f5df8eab5255210edc379bc0d1168f5b4b2195633a09807b06dc7f51af54a2333f2be9f2ee356534762eadf1799f63803ccb09d37df3aeb17392cc2649b", 0x66, 0x94, &(0x7f0000000300)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1}, 0x20) 58.241202349s ago: executing program 1 (id=31): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) recvmsg$can_bcm(r0, &(0x7f0000000980)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/29, 0x1d}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000000580)=""/155, 0x9b}, {&(0x7f0000000640)=""/25, 0x19}, {&(0x7f0000000680)=""/171, 0xab}, {&(0x7f0000000740)=""/164, 0xa4}], 0x7, &(0x7f0000000880)=""/201, 0xc9}, 0x2) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff3}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x5, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200410d1}, 0x0) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0xc0000) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f0000000600), 0x10, &(0x7f0000000700)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={&(0x7f0000000a00), 0xc, &(0x7f0000000b00)={&(0x7f0000000c00)=@newtfilter={0x54, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x3}}}]}]}]}}]}, 0x54}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @empty}, @echo={0x8, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00'}}}}}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000080)={0x6, 0xde}, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) (async) mkdir(&(0x7f00000000c0)='./my_configfs\x00', 0x1ff) (async) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='environ\x00') exit(0x7) r5 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f0000000000)={0x30a32c1, 0x1, @qam={0x1, 0x0, 0xe}}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x800, 0x0) 58.165888804s ago: executing program 1 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/urbnum\x00', 0x0, 0x0) r2 = getgid() r3 = getuid() open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1000) mount$bpf(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080), 0x10080, &(0x7f0000000300)={[{@gid={'gid', 0x3d, r2}}, {@uid={'uid', 0x3d, r3}}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@subj_role={'subj_role', 0x3d, '/[\x1b-{@}$]'}}, {@euid_eq={'euid', 0x3d, r3}}]}) read(r1, &(0x7f0000000380), 0x64) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_clock={{0x7f}, {0x2, 0xc9, 0x0, 0x3}}}}, 0xf) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) (async) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb1/urbnum\x00', 0x0, 0x0) (async) getgid() (async) getuid() (async) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1000) (async) mount$bpf(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080), 0x10080, &(0x7f0000000300)={[{@gid={'gid', 0x3d, r2}}, {@uid={'uid', 0x3d, r3}}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'bpf\x00'}}, {@subj_role={'subj_role', 0x3d, '/[\x1b-{@}$]'}}, {@euid_eq={'euid', 0x3d, r3}}]}) (async) read(r1, &(0x7f0000000380), 0x64) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_read_clock={{0x7f}, {0x2, 0xc9, 0x0, 0x3}}}}, 0xf) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) 58.096635829s ago: executing program 1 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x1) mknodat$null(r0, &(0x7f0000000140)='./proc/mtrr\x00', 0xa000, 0x103) setxattr$incfs_metadata(&(0x7f0000000280)='./proc\x00', &(0x7f00000002c0), &(0x7f0000000400)="b4627d00e07468c310a19b5f1a", 0xd, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@fallback=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r1, r2, 0x2f, 0x10, 0x4, @void, @value=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='add 1-1', 0x7) write(r3, &(0x7f0000000180)='add 2', 0x5) write(r3, &(0x7f00000001c0), 0x0) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000240)='add 5-', 0x6) write(r3, &(0x7f0000000280), 0x0) write(r3, &(0x7f00000002c0), 0x0) write(r3, &(0x7f0000000300), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d02, &(0x7f0000000900)) open(0x0, 0x10507e, 0xa6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) 58.013582044s ago: executing program 1 (id=38): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000e9ffffffffff6977a3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 54.963774124s ago: executing program 0 (id=91): mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xffff, 0x0, 0x12, 0xffffffffffffffff, 0x20000000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002180)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfffc}, 0x0, 0x0, '\x00', {0x1, 0x391, 0x0, &(0x7f0000001180)=@buf_512="2c1d004f6a539165b7454e4f3c18ea474bed47f750dc399c4901bed10fc3cea3e433d41b78308b48e808aa79f86c043d108aecdeb76e357bb04b5fa71ff4cc29345f6105a9bb0c60a65acb823e28e2839aa04af6dd8ca0d318107596b97a6c0bb47a2136c20aaaea54203ccbda534a20677fb47780230281eb93ab0de063213051ded47830d5150cf042b399bbfcc3247d9b6b724a72e5281abe58acf57c3b0b4e4d80c1179aefa25d4d4c3ffe748c77da6d8209e1835bf28d9472b115b60dcabef7b993e2f586e4802e98f77836846e14b064e7ccdb0490b09e89f4d344ddb2f953b463a96a1c81786d46abf6f943b91800633c20fcb0c93eb4545475ed177181e95b9adac8417a5787acdb513867b342667c2919f1e2befd76698799c3ecb7bbb5e9c83104c609a6fb477ad0a13dbad7ebe9bc720b05bd4209f86a29236b055a8f401924a7316250f97e3139e458b4e423707a113c0a8832c36bd4da1119a4ad530a911001080f8dafd426f24b64c10ae2fc21d8355e9eabe7ba42480789c3cca5bdba9703d11bad5cc8e0993a74569f7ed3a05bfcd977471877ceaa8ac41735f974d08a170e188b32ee02a0d99493bae4e4af7421e06b88b0dbcbd8f74da052c05934ebc475cb76ecf117c179a3610087e5b36b5ceb3c5639d87b367263dce0cb40105c19a1732298b5b535b40cb317ddc710b7876f56fc7c27cfaf34cf00"}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='\xe0^@&&}\'\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x200}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd23, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x20, 0x7e, 0x1}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) mlock(&(0x7f000040a000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', &(0x7f0000000280)=@default_ibss_ssid, 0x6, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r4 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_of_msg(r4, &(0x7f0000000100)={@r2t={{0x9, 0x19, 0x18, 0x81, 0x4b68f672}, 0x2ce0, 0x3, 0x6, 0x5}, @void}, 0x80, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) munlockall() r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7d6e, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r5, 0xe) r6 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) 54.843299565s ago: executing program 0 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000000)={0x6, 0xfffffe01, 0x7fffffff, 0x0, 0x3, 0x80000001, 0x2a}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x54, r2, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010100}}, {0xffffffffffffffe7, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in={0x2, 0x4e23, @empty}}, {0x0, 0x2, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}]}]}, 0x54}}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000002c0)={0x74, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x57, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_b, @random="2668e8a3b755", {0x8, 0x3}}, 0x1, @random=0x5, 0x7683, @void, @void, @val={0x3, 0x1, 0x40}, @val={0x4, 0x6, {0x2, 0x7, 0x1, 0x8337}}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x4, 0x0, {0xae, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x0, 0x5}}, @void, @void, @val={0x76, 0x6, {0x3, 0xa8, 0x2d, 0x6}}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040040}, 0x20008018) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10, 0x18}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'dac02\x00', [0xb, 0xd, 0x27, 0x1, 0x3, 0x8, 0x9, 0xa3, 0x80000001, 0x7fffffff, 0x7f, 0xffff, 0x1, 0x7, 0x0, 0xd, 0x1, 0x12, 0x5, 0x4, 0x0, 0x1, 0x1, 0x5, 0x0, 0x0, 0x3fe, 0x823a, 0xda, 0x5, 0x7fffffff, 0x5]}) 54.793927959s ago: executing program 0 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)="ff00"/32, 0x20) write(r1, &(0x7f0000000040)="0a0001", 0xfffffffffffffd06) 54.45320959s ago: executing program 0 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000040)=0x2406, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0}, 0x1400c0c0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) unshare(0x6020400) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000240)='ext4\x00', 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fsmount(r7, 0x0, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/113, 0x71) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6c}]}, 0x2c}}, 0x4000800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r10, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="010029bd7000fddbdf652700000008000300", @ANYRES32=r12, @ANYBLOB="0a00060000000000000000000600360003000000"], 0x30}}, 0x4) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="abe829667b91844361e592683f2806b89ad6918e5847c2134bce633262f9483822a416340eebfa7e610b5191359c1419f228047d3dda29b77854804708ba9199eaae20b9940e99b99e8a1453f050849ab467c12c77bcef8faf4fcb9962085590e56b5ae3a0c91ac3d222ec7cb94168719187", @ANYRES16=r4, @ANYBLOB="20002dbd7000ffdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 54.306311112s ago: executing program 0 (id=102): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @multicast2}, {0x1, @broadcast}, 0x4a, {0x2, 0x80fe, @multicast1}, 'wg0\x00'}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d00", 0x1e}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="15e37aa7"], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80980, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fba000010324d770b40102fd"], 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1', 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$ARCH_GET_GS(0x1e, r5, &(0x7f0000000140), 0x1004) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0x6, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x6, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 54.173655431s ago: executing program 0 (id=104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x873, 0x2}, 0xe) (async, rerun: 64) connect$packet(r7, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) (rerun: 64) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x40000001, 0x7fff, 0x1, 0x31237648, 0x10006, 0xfffffffe, 0x4}]}) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x4500, 0x10c) (rerun: 32) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000bb4000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r10, &(0x7f0000000480)={0x0, &(0x7f0000000600)=[@rdmsr={0x66, 0x18, {0x400000b1}}], 0x18}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 42.853656936s ago: executing program 32 (id=38): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000e9ffffffffff6977a3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 39.071279857s ago: executing program 33 (id=104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) r6 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x873, 0x2}, 0xe) (async, rerun: 64) connect$packet(r7, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) (rerun: 64) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x40000001, 0x7fff, 0x1, 0x31237648, 0x10006, 0xfffffffe, 0x4}]}) (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x4500, 0x10c) (rerun: 32) syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000bb4000/0x400000)=nil) (async) syz_kvm_add_vcpu$x86(r10, &(0x7f0000000480)={0x0, &(0x7f0000000600)=[@rdmsr={0x66, 0x18, {0x400000b1}}], 0x18}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 34.641680916s ago: executing program 4 (id=176): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61145000000000001d430000000000007a0a00fe00581c1f61148d0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) (async, rerun: 64) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d01080001ffffffffff7f"], 0x1d) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (rerun: 64) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 34.427694581s ago: executing program 4 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0xd, 0x5, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x84281, 0x0) readlinkat(r3, &(0x7f0000000140)='./proc\x00', &(0x7f0000000480)=""/162, 0xa2) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x400}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) 34.275699164s ago: executing program 4 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800002006) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000002540), 0x4, 0x40003) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@ipv4_newnexthop={0x58, 0x68, 0x2, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x80000001}}]}, 0x58}}, 0xc001) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file1\x00', 0x18942, 0x47) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r9) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r10, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) fallocate(r8, 0x0, 0x37e9, 0x2f92) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f00000025c0)={0x19, 0x0}) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000000280)={@mcast2}, 0x14) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000007, 0x810, r8, 0x8000) 25.180107254s ago: executing program 5 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000280)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00004033c6f9e574e6bf0b2e797ac5c0c49f6933e5034b9a57c5d14ea5bfde6d92877d355510e72b1bd06c8058f492a39b5e934ffd94749a7e280bc24d4593a53a945100ac614d3b59c340746dd00ffc1748bf29e2986cee5fee991dce5f8bb5e441cbcefe2b06b160b6abd195b0ed51ac8d551fb7fbdb0ec18ca32f2b822c5de44ab118c2b8da677ad845032a27e1135b1dd7255d72e736c8672003cdb086beeb48596614369e061302e9", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="26003300d004ec00080211000000080211000000505050505050a4000004250301b4583e010000000600cd00e9df0000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000000)={0x8, 0x4, 0x80000001, 0x1, 'syz0\x00', 0x1}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9e}}}, 0x0) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r10, 0x2) dup(r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r13, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x481042}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r13, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x7fff}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x20004801) sendmsg$nl_generic(r1, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x16c, 0x2d, 0x10, 0x70bd28, 0x25dfdbfd, {0xc}, [@nested={0x32, 0x83, 0x0, 0x1, [@generic="1c8eb82c49e06396c85a0fd82b29f26628586af5ae7619905cb44f461213bf0a9daebd755aa9c53240a143620acb"]}, @nested={0x38, 0xd, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0x14, 0x147, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xa, 0xc7, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x8, 0xff, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x131, 0x0, 0x0, @fd=r11}]}, @generic="f6f8929f438ff6ca5ca0349d2d26d020a743ec1a275619a62dd9b08fa4c33059c94fd213b82a76729f35d1f8ddc665971184418bb9be9ac544fbb5632fdcff7a17f8157cb8aa724a753aa0cd850e245bcd2e24d9fe92f4952e452f6990040fee7698c3ae39c1780dd8723972fbb3e879664ad337e05ebe1a6c567eabfa52896a46ebb6e14cf4ff7e80527ad44f277140f7b5f3d722d6412725bd66d22b3d275fcee38ffeeb7e4bc84a0c636d21fc17f81eb12edc7861cb9527b77db72287309c88ccfb2a7dca69216a4b4dd9c8cac05bce0484a424765c2bf9873d6101596b0792a6a37286b87d0725b1"]}, 0x16c}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 25.022488674s ago: executing program 5 (id=293): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x139) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x20080, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) openat$cuse(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f000000ae80)={0x50, 0x0, r2, {0x7, 0x2d, 0x3, 0x10020, 0x40, 0x3ff, 0x8, 0x9, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be36226a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c00", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0xa, {0x0, 0x1, 0x45, 0x101, 0x44e, 0xc, {0x2, 0xc, 0x20000000000b, 0x1, 0x4, 0x7, 0x9, 0x7fffffff, 0x0, 0xa000, 0x4, r3, 0x0, 0x0, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000002040)={0x6, 0x33, 0x0, 0x8, 0x3, [0x4, 0x38000000, 0x81, 0x1]}) (async) close(0x3) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async, rerun: 64) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSETS(r4, 0x800455cc, 0x0) (async) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='v7\x00', 0x0, 0x0) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) (rerun: 64) open(&(0x7f0000000200)='./sys\x00', 0x400, 0x60) (async) read(r5, &(0x7f0000000000)=""/256, 0x100) (async) socket$inet_tcp(0x2, 0x1, 0x0) 24.024617216s ago: executing program 5 (id=305): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x2, {0x1, @sliced={0x6, [0x2, 0x7, 0x3, 0xf, 0x6, 0x2, 0x4, 0x9, 0x0, 0x101, 0x595, 0x9, 0x9, 0x8d, 0x4, 0x4, 0x2, 0x2, 0xbe0, 0xe, 0xffff, 0x0, 0xb, 0x4, 0xbe5c, 0x3, 0x1, 0x2, 0x2, 0x3, 0x4, 0x1, 0x4, 0xf801, 0x4, 0x81, 0xfffb, 0x81, 0x3, 0x7, 0xeb4, 0xfff9, 0x0, 0x2, 0xd, 0x40, 0xf787, 0x2], 0x8e4f16d}}, 0xfffffe00}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c00130005"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x8000026, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 23.920839656s ago: executing program 5 (id=306): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000200)) (async) getresuid(&(0x7f0000000100)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file0/../file0\x00'}) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 23.816212869s ago: executing program 5 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r5, @ANYBLOB="03cc040003130000240012800b000100697036746e6c00001400028008000100", @ANYRES32=r5, @ANYBLOB="c8963074a6ef2a215fc95138041782beb918b9e604d89ebb2d5f48be406dc983"], 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8, 0x6a}}}, 0x7) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r8 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000800000/0x800000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f00009b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x4, 0x0) 23.436008038s ago: executing program 5 (id=311): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x3c, 0x2, 0x9, 0x303, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0xfffffffffffffe84, 0x3, 0x1, 0x0, 0x80000001}, @NFCTH_TUPLE={0x0, 0x2, [@CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @remote}, {0x0, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @multicast1}, {0x0, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x240000d1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0xec}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c001d5b56c4baeebc48beb902250000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c65723000000000000008000500040000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 23.208774215s ago: executing program 34 (id=311): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x3c, 0x2, 0x9, 0x303, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0xfffffffffffffe84, 0x3, 0x1, 0x0, 0x80000001}, @NFCTH_TUPLE={0x0, 0x2, [@CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @remote}, {0x0, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @multicast1}, {0x0, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x240000d1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0xec}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c001d5b56c4baeebc48beb902250000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c65723000000000000008000500040000000500530001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 19.261840666s ago: executing program 35 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800002006) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000002540), 0x4, 0x40003) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@ipv4_newnexthop={0x58, 0x68, 0x2, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x80000001}}]}, 0x58}}, 0xc001) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file1\x00', 0x18942, 0x47) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r9) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r9, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r10, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) fallocate(r8, 0x0, 0x37e9, 0x2f92) ioctl$FE_SET_PROPERTY(r8, 0x40106f52, &(0x7f00000025c0)={0x19, 0x0}) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r12, 0x29, 0x32, &(0x7f0000000280)={@mcast2}, 0x14) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000007, 0x810, r8, 0x8000) 2.134331191s ago: executing program 2 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) write(r0, &(0x7f00000000c0)='/dev/loop0,', 0xb) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/tipc/key_exchange_enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1\n', 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x6) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x8}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r7, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0011223344550800450000420000400040113cf97f0000017f00000111271127002e0000380000000000000000000000010000012000001800"/78], 0x0) 1.345966102s ago: executing program 2 (id=494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) futex(0x0, 0x207, 0x4, 0x0, 0x0, 0x1) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000) 851.296883ms ago: executing program 3 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f01f}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x0, 0x1000}, 0x0) sigaltstack(0x0, &(0x7f0000001a00)={0x0}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x4aad6135}, &(0x7f0000000180)) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2517000000240001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000007000020050012000100"/78], 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) 775.67427ms ago: executing program 3 (id=504): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket(0x10, 0x5, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000002380)) (async) preadv(r2, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xfffffffffffffff9) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) read$FUSE(r2, &(0x7f00000023c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004400)={0x50, 0x0, r4, {0x7, 0x2d, 0x2, 0x800040, 0x2, 0xfff9, 0xfffff3fc, 0x5179, 0x0, 0x0, 0x2, 0xfc}}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x200080d4}, 0x0) 695.894143ms ago: executing program 6 (id=506): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0xfffffffc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x4000, 0x800, 0x4b29a160, 0x7939fa5a6c93579b}, 0x20) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0xfffffffc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x4000, 0x800, 0x4b29a160, 0x7939fa5a6c93579b}, 0x20) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) (async) 694.152165ms ago: executing program 7 (id=507): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x2600) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x8000, 0x76, 0xd, 0x1, 0xb, "24e5620230967388271f84cf1e5092eb1f67aa", 0x0, 0x179}) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) write(r0, &(0x7f0000000100)="9504eb5555ab831e3f8ce707b0f95464cd839d670eaa44935e306decf7d69d8149e0620e16f9b86f15d8b4def308d56c1c1e8c455b17bbbc5d8ece24f87c28f1b12b161675691f5721efe375151faa5d334273d0a45f07b3a6b34692c9367baadf4f04d444134a4eb977b1cf86f6f46e44448ef38ad29bd35fc8c0f6e3a0ea290bcdb741e4f7bd1eb13546cf2c51e2b3d5c888b5676cdef2a3d096c9de95a469dd79d8f593c3f8d410b26f3f6c4ba4aa32db7b99fc80c7a0cf06ce", 0xbb) flistxattr(r1, &(0x7f00000001c0)=""/178, 0xb2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0x1, 0x8, 0x2f, 0x40000, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) fcntl$setflags(r2, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000300)=@arm64={0x0, 0x9, 0x1, '\x00', 0x2}) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000340)) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000380)={0x193628b4, 0x5}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000003c0)={0x401, 0x10001, 0x5, 0x8}) r3 = geteuid() quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r3, 0x0) r4 = dup(r1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000400)=0x5c0, 0x4) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000002480)) ioctl$MEMWRITEOOB(r4, 0xc0104d03, &(0x7f0000002540)={0xc3, 0x62, &(0x7f00000024c0)="5aa5ff3e45c7fb4bdb8fc7feda7d0616460fea0ea8859f1d466997ce8d108785b59c93042799800e6dcd912f8f49540f9cd159aeeaf472ea8104a9255c287e7ed4054eb9181f20e355b5975c1c55cbddf0dbcbfc13dd92936f135c1968e26b011406"}) write$binfmt_aout(r1, &(0x7f0000002580)={{0xcc, 0x7, 0x2, 0x38f, 0x2f7, 0x9, 0x2c2, 0x80000000}, "ecc5233d1437a9f24d92657d9cba5fd33145939aa2d945e7855926e064ab1f38a009b1d6007f9bc1b58944ded85ef831f8811014b5f51fa0b062db2666d0f70053ea667018fc46b673880c144cd8f1c8c75f36577883f85837d4507ff85d81d288dd40c155fe68c609dc7a966ab76431d92a1a9be3df30f0071992d0acf5979cb74c8cde165f8a3874e5ce1eff3b6b022b554b657299cb025d8846c325f2881e64c20c10c5f98f9fa4c6fc9da6a524c84d84a245fe436a7c675f08256aaf9cde4b8b1529397b5e2ef691a26e2f33ea662882e44ac0b07a64f7293003a8a3c1bd7f7dc3", ['\x00', '\x00', '\x00', '\x00']}, 0x503) r5 = openat$cgroup_ro(r1, &(0x7f0000002ac0)='memory.swap.events\x00', 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000002b40)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x81, &(0x7f0000002b00)=0x1}) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000002b80)='\x00', &(0x7f0000002bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000012c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000012bc0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r4, 0xc0106450, &(0x7f0000012c40)={0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000012c80)={0x0, 0xa, 0x2, 0x0, 0x0, [0x0], [0xf5f, 0x5, 0x4, 0x6], [0x9, 0x10, 0x5b3], [0x2, 0x2, 0x800100]}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000012d00)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000012d40)={r6, 0x0, 0x10, 0x9, 0x0, [0x0, r7, r8, r9], [0x446b, 0x45, 0x2f6ce8b5, 0x6], [0x8, 0x80000000, 0xf15, 0x8e7193d6], [0x8, 0xd, 0x98, 0x9c6e]}) 604.367323ms ago: executing program 3 (id=508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x85, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x1676ab37, 0x0, 0x0}) (async) setgroups(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) (async) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x88d4}, 0x26044041) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 601.909305ms ago: executing program 6 (id=509): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xe8100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x6, 0x0, 0x6}]}, 0x10) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) (async) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) bind(r1, &(0x7f0000000100)=@ethernet={0x6, @random="61471927e71f"}, 0x80) 601.006752ms ago: executing program 7 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x62, &(0x7f0000000040)={@local, @random="429e82211cf8", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x28, 0x29, 0x1, @remote, @mcast2, {[@dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, @fragment={0xb2, 0x0, 0x4, 0x0, 0x0, 0x11, 0x68}, @dstopts={0x73, 0x0, '\x00', [@padn]}]}}}}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000000c0)={'bond_slave_1\x00', @ifru_addrs=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}) 523.092584ms ago: executing program 7 (id=511): ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000080)=0x3) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x400) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3}) syz_open_dev$usbfs(&(0x7f0000000880), 0xfffffffffffffffd, 0x100) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000080)=0x1) 522.678485ms ago: executing program 2 (id=512): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x28d41, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x4) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) close(r1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0xd) 451.297066ms ago: executing program 3 (id=513): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x2, 0x7, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000c"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xb5d5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x23) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_TDX_INIT_MEM_REGION(r3, 0xc008aeba, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x7fff}}) socket$inet_udp(0x2, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="61706f6c3d696e7465726c656176653d7374617469632c00cdb4f765e1add7a29c87e3458f285ff29a2481164c6534fc437620c1feeb32995516dcbfcb361b237b75fd915c6c08320d8db390cf2b140a03d84c4c185b390d02232e01f4a65d06593677fe1412a97ce9b8223a54de675bbf4488bec3414515c46e8b4063"]) umount2(&(0x7f0000000000)='./cgroup\x00', 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) 396.239629ms ago: executing program 6 (id=514): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x80440) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000000c0)={0x4776, 0x1800000, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = io_uring_setup(0x2932, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1da}) (rerun: 32) io_uring_setup(0x7d7b, &(0x7f00000001c0)={0x0, 0x4828, 0x20000, 0x3, 0x29a, 0x0, r3}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000280)=r4) (async) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000300)=0x9, 0x4) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 64) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000400)={{[0x3, 0x4a2af3e6, 0x8001, 0x1]}, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000340)=[{{@align=0x7f, {0x7, 0xe932, 0x21e2, 0x4c74}}, 0xb, 0x0, '/dev/snd/seq\x00'}, {{@align=0x4, {0x9, 0x1, 0x4, 0x6}}, 0x6, 0x0, '&\x00'}, {{@align=0x8, {0x3, 0x8000, 0x101, 0x2}}, 0xb212, 0x0, '\x00'}, {{@_ha_fsid={[0x10, 0x2]}, {0xb0c, 0x6, 0x8, 0x2}}, 0x1, 0x0, '/dev/ppp\x00'}]}) (rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000440)={0x7, 'pimreg0\x00', {0x6}, 0x1ff}) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f0000000480)={0xc1, 0x0, 0x2}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x27) (async) sendmsg$can_raw(r5, &(0x7f0000000600)={&(0x7f0000000500), 0x10, &(0x7f00000005c0)={&(0x7f0000000540)=@canfd={{0x2, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "025c08763b94f65aea5b88ebf3127eecbc5574c71288dbafb26f413476984367ae7128f479631846e4dd80116fc07280fffda487dc361a0c3d71ec614032d955"}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r5, 0x4068aea3, &(0x7f0000000640)={0xcc, 0x0, 0x1}) (async, rerun: 32) ioctl$VT_ACTIVATE(r5, 0x5606, 0x8) (async, rerun: 32) ioctl$GIO_FONT(r5, 0x4b60, &(0x7f00000006c0)=""/177) (async) ioctl$KDMKTONE(r5, 0x4b30, 0x1ff) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r5, 0x24, &(0x7f0000000780)={0x5, 0x1}, 0x0) mq_notify(r5, &(0x7f0000000800)={0x0, 0x2a, 0x1, @tid=r4}) (async, rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) getsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000840)={@loopback, @dev, @multicast1}, &(0x7f0000000880)=0xc) (async, rerun: 32) ioctl$TIOCMSET(r5, 0x5418, &(0x7f00000008c0)=0xffffffff) (async, rerun: 32) write$sequencer(r5, &(0x7f0000000900)=[@n={0x1, 0x72, @SEQ_NOTEON=@special, 0xdc}], 0x4) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x20080, 0x0) ioctl$TIOCSISO7816(r7, 0xc0285443, &(0x7f0000000980)={0x0, 0xaf0, 0x7a9, 0x1, 0xfffffff8}) 392.974881ms ago: executing program 2 (id=515): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x2000000, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0', 0xc) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='i801_smbus', 0xa) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='0000:00:03.0', 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x40) write(r6, &(0x7f0000000540)='000', 0x3) (async) write(0xffffffffffffffff, &(0x7f00000005c0), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) (async, rerun: 64) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r9 = dup3(r8, r7, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fda={0x66646185, 0x5, 0x2, 0xe}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r9, &(0x7f0000002400)={0x18, 0xfffffffffffffffe, r10, {0x5}}, 0x18) (async) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) close_range(r1, r0, 0x0) 293.208215ms ago: executing program 7 (id=516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1a4, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}]}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_EXPRESSIONS={0xac, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x54, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa53a89ce9c819524}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xea}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x220}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xec, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x95}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x4580, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4048010) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000006c0)=0x58, 0x4) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r3, 0x206, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4004004) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000800)=[@in6={0xa, 0x4e20, 0xffff8001, @remote, 0x5}], 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000880)={'batadv0\x00', &(0x7f0000000840)=@ethtool_rxfh_indir={0x38, 0x3, [0x7f2b, 0xbc, 0x80000001]}}) (async) read$usbfs(r2, &(0x7f00000008c0)=""/188, 0xbc) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2040000}, 0x3) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000fc0)={0x0, 0x1, 0x0, &(0x7f0000000a80)=[{}], 0x8, 0x0, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000e80)=[{}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x3, 0x0, &(0x7f0000000f40)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000001100)={r4, &(0x7f0000001040), &(0x7f0000001080)}) (async) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r2, 0xc0106441, &(0x7f0000001140)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000001180)={0x0, 0x0, 0x3}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f00000011c0)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000001200)={0x0, 0x28dbfaf07c05fb6e}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f0000001280)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000012c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000001340)={0x200, 0x3, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000001380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000013c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000001400)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000001440)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000001480)={0x0, 0x0, r2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000001540)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r2, 0xc0186443, &(0x7f0000001980)={r5, 0x0, {0x30, 0x7, &(0x7f0000001800)=[{0xd8000005, r6, 0x100000000, 0xd, 0x4, {0x10, 0x3, &(0x7f0000001240)=[{0x80000000, 0x0, 0x4}, {0x1, r7, 0x7f}, {0x80000000, r8, 0x8}]}}, {0x20000000, r9, 0x31fd, 0xfff, 0x7, {0x10, 0x1, &(0x7f0000001300)=[{0x0, r10, 0x7}]}}, {0x1, r11, 0xffff, 0x9, 0xb341, {0x10, 0x7, &(0x7f00000014c0)=[{0x80000000, 0x0, 0xdf}, {0x80000000, r12, 0x9}, {0x80000000, r13, 0x10}, {0x80000000, r14, 0xffffffffffffffbf}, {0xff}, {0x80000000, r15, 0x5}, {0x0, r16, 0xfffffffffffffffd}]}}, {0xf0000000, 0x0, 0x4, 0x3, 0x7, {0x10, 0x1, &(0x7f0000001580)=[{0xff, r17, 0xf4e6}]}}, {0x10000000, 0x0, 0x10, 0x272b, 0x80000001, {0x10, 0x3, &(0x7f0000001640)=[{0x1, 0x0, 0x90c}, {0x1, 0x0, 0x8}, {0x1, 0x0, 0xc}]}}, {0x4, 0x0, 0x1000, 0x3ff, 0x5, {0x10, 0x2, &(0x7f0000001700)=[{0x1, 0x0, 0x7fffffff}, {0x1, 0x0, 0x8}]}}, {0x0, 0x0, 0xffffffff, 0x401, 0xb23, {0x10, 0x1, &(0x7f00000017c0)=[{0xff, 0x0, 0x8}]}}]}}) 233.215003ms ago: executing program 6 (id=517): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d120b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000280)) (async) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000280)) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000004c0)={0x0, {{0xa, 0x4e24, 0x45, @mcast2}}, 0x1, 0x7, [{{0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffe00}}, {{0xa, 0x0, 0xf, @empty, 0x3}}, {{0xa, 0x4e20, 0x212, @mcast1, 0x10}}, {{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}}, {{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, {{0xa, 0x4e21, 0x8000, @loopback, 0xf81}}, {{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}}]}, 0x410) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x17, &(0x7f00000000c0)=[{0x24, '\x00', @st={0x4, [{0x2, @uvalue=0x3}, {0x1, @uvalue=0x8}, {0x1, @svalue=0x10001}, {0x0, @svalue=0x4}]}, 0x9}]}) r3 = socket(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffffc}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) getsockopt$inet_int(r3, 0x0, 0x22, 0x0, &(0x7f0000000200)) (async) getsockopt$inet_int(r3, 0x0, 0x22, 0x0, &(0x7f0000000200)) 233.046059ms ago: executing program 3 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x3c, r2, 0xb01, 0x70bd29, 0x25dfdbf9, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x8140) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000000000000303030303030000"], 0x30}}, 0x0) 110.654237ms ago: executing program 7 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0], 0x0, 0x2, r3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x3118a55668bf7371, 0x20, 0x25dfdbfd, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x2, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) 110.194497ms ago: executing program 2 (id=520): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x800) (async) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000190001002abd7000000000000a0000000000c805000000000c000900feff0506", @ANYRES32=0x0, @ANYBLOB="bc011acc3b384d2031452b552f2415d651f00933a2a666c624cfe13a65aad3ad18d39bdb71aae4575677648863b614b38f8cec6705825c90a489f4c159c68186eaab69bf4af33f3ca1c83740ad00e0b9713122408baac2bb413ae25599941a3576759e18069e0000000000"], 0x28}}, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r4 = accept4(r2, 0x0, 0x0, 0x800) (rerun: 64) syz_genetlink_get_family_id$ethtool(0x0, r4) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @random="7e7d97792608"}) (async) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') (async) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r11 = socket(0x15, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r8, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x4040058) r12 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r12, 0xc1105518, &(0x7f0000000c40)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff6, 0x1, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x4, 0x7, 0x100, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x155, 0x32, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x10000000000000, 0x2, 0x0, 0x2, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x8001, 0x200000000004, 0x0, 0x800000000, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x4000000000000, 0x8000000000000000, 0x1, 0x0, 0x0, 0x400000000000, 0x40000000003, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000002000000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x2, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x925, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xde4, 0x401, 0x0, 0x100000000]}) (async) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @private=0xa010102, r9}, 0xc) 101.417988ms ago: executing program 6 (id=521): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000009c80)={0x0, 0x0, &(0x7f0000009c40)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x20040884) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1, 0x182, 0xffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 101.066081ms ago: executing program 3 (id=522): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000012c0)={0x0, r1, "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", "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"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1400000010003a1563ac0d010000000000000000000500000a64000000060a010400000000000000000a0000070900010073797a31000000003800048034000180090001007866726d00000000240002800800044000000004080001400000000e050003000100000008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20040040) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x80}}, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40408d0}, 0x80) 2.375543ms ago: executing program 7 (id=523): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f0000000000), 0x4) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r0, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x40, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x100, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x80000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x2a7, 0x0, r1}}], 0x1, 0x0, 0x0) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000300)={0x2, @pix_mp={0x800, 0x0, 0x20363159, 0x2, 0xa, [{0x2, 0x4}, {0x655, 0x1}, {0x100, 0x2d}, {}, {0x6, 0x82}, {0x2, 0xf19}, {0x8, 0x4}, {0x6, 0x6}], 0x7, 0x3, 0x4}}) (async) setns(r0, 0x8000000) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040801"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) 2.092603ms ago: executing program 2 (id=524): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='./backing_file', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire={0x40046302}], 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) fcntl$setlease(r5, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) 0s ago: executing program 6 (id=525): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x9, 0xfe, 0xfff00004}, {0x16, 0x0, 0x3, 0xfffffffe}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0) kernel console output (not intermixed with test programs): 5.416:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.2.110" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55f295e90e code=0x7ffc0000 [ 56.794462][ T42] audit: type=1326 audit(1786065995.416:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.2.110" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55f295e90e code=0x7ffc0000 [ 56.807736][ T42] audit: type=1326 audit(1786065995.416:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.2.110" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55f295e90e code=0x7ffc0000 [ 56.824745][ T42] audit: type=1400 audit(1786065995.436:655): avc: denied { set_context_mgr } for pid=6252 comm="syz.3.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 56.840381][ T42] audit: type=1326 audit(1786065995.466:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.2.110" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55f295e90e code=0x7ffc0000 [ 56.860319][ T42] audit: type=1326 audit(1786065995.466:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.2.110" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55f295e90e code=0x7ffc0000 [ 56.869077][ T42] audit: type=1326 audit(1786065995.466:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.2.110" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55f295e90e code=0x7ffc0000 [ 56.881942][ T42] audit: type=1326 audit(1786065995.466:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.2.110" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55f295e90e code=0x7ffc0000 [ 56.911521][ T42] audit: type=1326 audit(1786065995.466:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.2.110" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55f295e90e code=0x7ffc0000 [ 57.287193][ T6269] netlink: 72 bytes leftover after parsing attributes in process `syz.3.116'. [ 57.304103][ T6269] ======================================================= [ 57.304103][ T6269] WARNING: The mand mount option has been deprecated and [ 57.304103][ T6269] and is ignored by this kernel. Remove the mand [ 57.304103][ T6269] option from the mount to silence this warning. [ 57.304103][ T6269] ======================================================= [ 57.365661][ T6272] overlayfs: overlapping lowerdir path [ 57.436779][ T6269] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 57.447381][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 57.464643][ T6269] CacheFiles: Failed to register: -95 [ 57.469232][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 57.602379][ T6277] tmpfs: Bad value for 'mpol' [ 57.610317][ T6277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'. [ 57.635162][ T6276] bond1: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 58.032343][ T6290] CacheFiles: No cache directory specified [ 58.094927][ T6290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.123'. [ 58.281368][ T6302] tipc: Enabling of bearer rejected, failed to enable media [ 58.411366][ T6307] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 59.815883][ T6348] tmpfs: Bad value for 'mpol' [ 59.978834][ T6353] FAULT_INJECTION: forcing a failure. [ 59.978834][ T6353] name failslab, interval 1, probability 0, space 0, times 0 [ 60.018910][ T6353] CPU: 0 UID: 0 PID: 6353 Comm: syz.2.140 Not tainted syzkaller #0 PREEMPT(full) [ 60.018927][ T6353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.018934][ T6353] Call Trace: [ 60.018948][ T6353] [ 60.018953][ T6353] dump_stack_lvl+0x100/0x190 [ 60.018986][ T6353] should_fail_ex.cold+0x5/0xa [ 60.019002][ T6353] should_failslab+0xc2/0x120 [ 60.019016][ T6353] __kmalloc_noprof+0xfc/0x820 [ 60.019028][ T6353] ? kasan_save_track+0x14/0x30 [ 60.019041][ T6353] ? ethnl_default_start+0x15a/0x3f0 [ 60.019054][ T6353] ethnl_default_start+0x15a/0x3f0 [ 60.019078][ T6353] ? __pfx_ethnl_default_start+0x10/0x10 [ 60.019089][ T6353] genl_start+0x601/0x970 [ 60.019104][ T6353] __netlink_dump_start+0x60e/0x990 [ 60.019117][ T6353] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 60.019132][ T6353] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 60.019150][ T6353] ? __pfx_genl_get_cmd+0x10/0x10 [ 60.019161][ T6353] ? __pfx_genl_start+0x10/0x10 [ 60.019175][ T6353] ? __pfx_genl_dumpit+0x10/0x10 [ 60.019187][ T6353] ? __pfx_genl_done+0x10/0x10 [ 60.019200][ T6353] ? __dev_queue_xmit+0xa33/0x4970 [ 60.019211][ T6353] ? __radix_tree_lookup+0x217/0x2b0 [ 60.019227][ T6353] genl_rcv_msg+0x471/0x800 [ 60.019242][ T6353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 60.019255][ T6353] ? __pfx_ethnl_default_start+0x10/0x10 [ 60.019265][ T6353] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 60.019275][ T6353] ? __pfx_ethnl_default_done+0x10/0x10 [ 60.019296][ T6353] netlink_rcv_skb+0x159/0x420 [ 60.019308][ T6353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 60.019322][ T6353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 60.019339][ T6353] ? netlink_deliver_tap+0x1ae/0xcc0 [ 60.019351][ T6353] genl_rcv+0x28/0x40 [ 60.019363][ T6353] netlink_unicast+0x585/0x850 [ 60.019376][ T6353] ? __pfx_netlink_unicast+0x10/0x10 [ 60.019392][ T6353] netlink_sendmsg+0x8b0/0xda0 [ 60.019405][ T6353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.019418][ T6353] ? selinux_socket_sendmsg+0x198/0x2f0 [ 60.019437][ T6353] ____sys_sendmsg+0xa4d/0xbe0 [ 60.019447][ T6353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.019460][ T6353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.019476][ T6353] ___sys_sendmsg+0x190/0x1e0 [ 60.019488][ T6353] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.019498][ T6353] ? __lock_acquire+0x49f/0x1a40 [ 60.019511][ T6353] ? get_pid_task+0x106/0x250 [ 60.019536][ T6353] __sys_sendmsg+0x160/0x210 [ 60.019550][ T6353] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.019572][ T6353] do_syscall_64+0x115/0x870 [ 60.019585][ T6353] ? clear_bhb_loop+0x70/0xc0 [ 60.019597][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.019608][ T6353] RIP: 0033:0x7f55f299e0d9 [ 60.019619][ T6353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.019629][ T6353] RSP: 002b:00007f55f385c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.019648][ T6353] RAX: ffffffffffffffda RBX: 00007f55f2c25fa0 RCX: 00007f55f299e0d9 [ 60.019654][ T6353] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 60.019660][ T6353] RBP: 00007f55f385c090 R08: 0000000000000000 R09: 0000000000000000 [ 60.019670][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.019676][ T6353] R13: 00007f55f2c26038 R14: 00007f55f2c25fa0 R15: 00007fff038ad618 [ 60.019689][ T6353] [ 60.309313][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 60.395314][ T6356] team1: entered promiscuous mode [ 60.400414][ T6356] team1: entered allmulticast mode [ 60.408040][ T6356] 8021q: adding VLAN 0 to HW filter on device team1 [ 60.433985][ T6360] netlink: 'syz.2.142': attribute type 8 has an invalid length. [ 60.447708][ T6360] dlm: no local IP address has been set [ 60.452611][ T6360] dlm: cannot start dlm midcomms -107 [ 60.553266][ T6360] team0: Port device team_slave_0 removed [ 61.332303][ T6370] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 61.350628][ T6370] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 61.363557][ T6370] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 61.375181][ T6370] __nla_validate_parse: 3 callbacks suppressed [ 61.375192][ T6370] netlink: 1 bytes leftover after parsing attributes in process `syz.2.145'. [ 61.728217][ T6388] netlink: 80 bytes leftover after parsing attributes in process `syz.2.147'. [ 61.794611][ T42] kauditd_printk_skb: 144 callbacks suppressed [ 61.794656][ T42] audit: type=1400 audit(1786066000.456:805): avc: denied { write } for pid=6392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.883393][ T42] audit: type=1800 audit(1786066000.546:806): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 61.922703][ T42] audit: type=1400 audit(1786066000.576:807): avc: denied { write } for pid=6395 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.152243][ T42] audit: type=1400 audit(1786066000.816:808): avc: denied { write } for pid=6405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.274469][ T42] audit: type=1400 audit(1786066000.936:809): avc: denied { write } for pid=6408 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.478055][ T42] audit: type=1800 audit(1786066001.136:810): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 62.515114][ T42] audit: type=1400 audit(1786066001.176:811): avc: denied { write } for pid=6410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.578931][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 62.598970][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 62.695253][ T42] audit: type=1400 audit(1786066001.356:812): avc: denied { write } for pid=6415 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.708721][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 62.720896][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.724716][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.728652][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 62.739484][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.751954][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.786819][ T42] audit: type=1800 audit(1786066001.446:813): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 62.855425][ T6418] FAULT_INJECTION: forcing a failure. [ 62.855425][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 62.864483][ T42] audit: type=1800 audit(1786066001.526:814): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 62.892981][ T6418] CPU: 0 UID: 0 PID: 6418 Comm: syz.3.150 Not tainted syzkaller #0 PREEMPT(full) [ 62.893035][ T6418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.893062][ T6418] Call Trace: [ 62.893075][ T6418] [ 62.893090][ T6418] dump_stack_lvl+0x100/0x190 [ 62.893151][ T6418] should_fail_ex.cold+0x5/0xa [ 62.893208][ T6418] should_failslab+0xc2/0x120 [ 62.893274][ T6418] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 62.893336][ T6418] ? __alloc_skb+0x140/0x710 [ 62.893422][ T6418] __alloc_skb+0x140/0x710 [ 62.893508][ T6418] ? __alloc_skb+0x5b7/0x710 [ 62.893568][ T6418] ? __pfx___alloc_skb+0x10/0x10 [ 62.893637][ T6418] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 62.893697][ T6418] netlink_dump+0x194/0xd00 [ 62.893740][ T6418] ? __kasan_kmalloc+0xaa/0xb0 [ 62.893803][ T6418] ? __pfx_netlink_dump+0x10/0x10 [ 62.893865][ T6418] ? __pfx_ethnl_default_start+0x10/0x10 [ 62.893914][ T6418] ? genl_start+0x67a/0x970 [ 62.893979][ T6418] __netlink_dump_start+0x6d6/0x990 [ 62.894036][ T6418] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 62.894105][ T6418] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 62.894184][ T6418] ? __pfx_genl_get_cmd+0x10/0x10 [ 62.894238][ T6418] ? __pfx_genl_start+0x10/0x10 [ 62.894294][ T6418] ? __pfx_genl_dumpit+0x10/0x10 [ 62.894351][ T6418] ? __pfx_genl_done+0x10/0x10 [ 62.894416][ T6418] ? __dev_queue_xmit+0xa33/0x4970 [ 62.894467][ T6418] ? __radix_tree_lookup+0x217/0x2b0 [ 62.894534][ T6418] genl_rcv_msg+0x471/0x800 [ 62.894600][ T6418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 62.894668][ T6418] ? __pfx_ethnl_default_start+0x10/0x10 [ 62.894713][ T6418] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 62.894761][ T6418] ? __pfx_ethnl_default_done+0x10/0x10 [ 62.894861][ T6418] netlink_rcv_skb+0x159/0x420 [ 62.894914][ T6418] ? __pfx_genl_rcv_msg+0x10/0x10 [ 62.894978][ T6418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.895051][ T6418] ? netlink_deliver_tap+0x1ae/0xcc0 [ 62.895108][ T6418] genl_rcv+0x28/0x40 [ 62.895162][ T6418] netlink_unicast+0x585/0x850 [ 62.895221][ T6418] ? __pfx_netlink_unicast+0x10/0x10 [ 62.895288][ T6418] netlink_sendmsg+0x8b0/0xda0 [ 62.895349][ T6418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.895408][ T6418] ? selinux_socket_sendmsg+0x198/0x2f0 [ 62.895494][ T6418] ____sys_sendmsg+0xa4d/0xbe0 [ 62.895538][ T6418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.895596][ T6418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.895669][ T6418] ___sys_sendmsg+0x190/0x1e0 [ 62.895722][ T6418] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.895769][ T6418] ? __lock_acquire+0x49f/0x1a40 [ 62.895830][ T6418] ? get_pid_task+0x106/0x250 [ 62.895925][ T6418] __sys_sendmsg+0x160/0x210 [ 62.895992][ T6418] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.896090][ T6418] do_syscall_64+0x115/0x870 [ 62.896150][ T6418] ? clear_bhb_loop+0x70/0xc0 [ 62.896172][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.896187][ T6418] RIP: 0033:0x7ff2f519e0d9 [ 62.896201][ T6418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.896213][ T6418] RSP: 002b:00007ff2f6070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.896230][ T6418] RAX: ffffffffffffffda RBX: 00007ff2f5425fa0 RCX: 00007ff2f519e0d9 [ 62.896240][ T6418] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 62.896250][ T6418] RBP: 00007ff2f6070090 R08: 0000000000000000 R09: 0000000000000000 [ 62.896259][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.896267][ T6418] R13: 00007ff2f5426038 R14: 00007ff2f5425fa0 R15: 00007ffea2120ca8 [ 62.896281][ T6418] [ 63.283704][ T6425] vlan2: entered promiscuous mode [ 63.300238][ T6425] team0: entered promiscuous mode [ 63.302287][ T6425] team_slave_1: entered promiscuous mode [ 63.878838][ T6450] nvme_tcp: malformed address passed: 127.0.0.1:44.0 [ 64.038584][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 64.168709][ T6462] CacheFiles: Failed to register: -95 [ 64.222243][ T6464] jffs2: notice: (6464) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 64.278034][ T1045] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.302905][ T6467] netlink: 'syz.3.163': attribute type 8 has an invalid length. [ 64.432391][ T1045] usb 7-1: config 0 has no interfaces? [ 64.435917][ T1045] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 64.441419][ T1045] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 64.448574][ T1045] usb 7-1: Product: syz [ 64.454290][ T1045] usb 7-1: Manufacturer: syz [ 64.455778][ T1045] usb 7-1: SerialNumber: syz [ 64.472649][ T1045] usb 7-1: config 0 descriptor?? [ 64.533002][ T6471] netlink: 32 bytes leftover after parsing attributes in process `syz.3.164'. [ 64.685920][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.693553][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.706098][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.714024][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.738274][ T6452] i2c i2c-0: new_device: Missing parameters [ 65.015738][ T6482] xt_hashlimit: size too large, truncated to 1048576 [ 65.113113][ T6483] sctp: [Deprecated]: syz.3.167 (pid 6483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.113113][ T6483] Use struct sctp_sack_info instead [ 65.437717][ T6491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.169'. [ 65.547204][ T6493] netlink: 72 bytes leftover after parsing attributes in process `syz.3.170'. [ 65.567986][ T6493] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 65.585138][ T6493] CacheFiles: No cache directory specified [ 65.722312][ T6495] program syz.3.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.048316][ T6501] ip_tables: iptables: counters copy to user failed while replacing table [ 66.060471][ T6501] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 66.095154][ T6501] SELinux: policydb magic number 0x31300002 does not match expected magic number 0xf97cff8c [ 66.101893][ T6501] SELinux: failed to load policy [ 66.840220][ T5883] usb 7-1: USB disconnect, device number 2 [ 66.905712][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 66.905736][ T42] audit: type=1800 audit(1786066005.566:882): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 66.974837][ T42] audit: type=1400 audit(1786066005.636:883): avc: denied { execute } for pid=6506 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 66.991967][ T42] audit: type=1400 audit(1786066005.636:884): avc: denied { execute_no_trans } for pid=6506 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 67.034324][ T6509] --map-set only usable from mangle table [ 67.089892][ T42] audit: type=1800 audit(1786066005.746:885): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 67.134120][ T42] audit: type=1800 audit(1786066005.776:886): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 67.157465][ T6514] netlink: 72 bytes leftover after parsing attributes in process `syz.3.179'. [ 67.175959][ T6514] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 67.181286][ T6515] xt_l2tp: v2 doesn't support IP mode [ 67.187883][ T6514] CacheFiles: No cache directory specified [ 67.199585][ T42] audit: type=1800 audit(1786066005.856:887): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116983 res=0 errno=0 [ 67.214557][ T5733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.220280][ T5733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.223409][ T5733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.226333][ T5733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.228774][ T42] audit: type=1800 audit(1786066005.866:888): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=116994 res=0 errno=0 [ 67.240787][ T5733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.270869][ T42] audit: type=1400 audit(1786066005.936:889): avc: denied { read write } for pid=6518 comm="syz.2.181" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.290198][ T42] audit: type=1400 audit(1786066005.936:890): avc: denied { open } for pid=6518 comm="syz.2.181" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 67.303042][ T42] audit: type=1800 audit(1786066005.946:891): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 67.576153][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.668046][ T6538] netlink: 36 bytes leftover after parsing attributes in process `syz.3.183'. [ 67.715555][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.812499][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.968838][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.036435][ T6551] netlink: 72 bytes leftover after parsing attributes in process `syz.2.187'. [ 68.053969][ T6551] bond0: (slave veth1_vlan): Error: Device is in use and cannot be enslaved [ 68.065375][ T6551] CacheFiles: No cache directory specified [ 68.549528][ T12] bridge_slave_1: left allmulticast mode [ 68.554434][ T12] bridge_slave_1: left promiscuous mode [ 68.561199][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.569634][ T12] bridge_slave_0: left allmulticast mode [ 68.573798][ T12] bridge_slave_0: left promiscuous mode [ 68.576211][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.588876][ T6571] netlink: 112 bytes leftover after parsing attributes in process `syz.3.190'. [ 68.729179][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.734600][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.741634][ T12] bond0 (unregistering): Released all slaves [ 68.746709][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.750249][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.756838][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.760726][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.764043][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.767654][ T6516] bridge_slave_0: entered allmulticast mode [ 68.772411][ T6516] bridge_slave_0: entered promiscuous mode [ 68.778682][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.781849][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.784921][ T6516] bridge_slave_1: entered allmulticast mode [ 68.788987][ T6516] bridge_slave_1: entered promiscuous mode [ 68.865124][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.883008][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.021234][ T6516] team0: Port device team_slave_0 added [ 69.030690][ T6516] team0: Port device team_slave_1 added [ 69.089618][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.105387][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.131558][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.226780][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.232713][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.250124][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.289036][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 69.310284][ T5733] Bluetooth: hci4: command tx timeout [ 69.373483][ T12] hsr_slave_0: left promiscuous mode [ 69.382301][ T12] hsr_slave_1: left promiscuous mode [ 69.389861][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.399534][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.408284][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.425784][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.433402][ T6587] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 69.465963][ T12] veth1_macvtap: left promiscuous mode [ 69.473019][ T12] veth0_macvtap: left promiscuous mode [ 69.480889][ T12] veth1_vlan: left promiscuous mode [ 69.486880][ T12] veth0_vlan: left promiscuous mode [ 69.832942][ T12] team0 (unregistering): Port device team_slave_1 removed [ 69.842336][ T12] team0 (unregistering): Port device team_slave_0 removed [ 69.955755][ T6516] hsr_slave_0: entered promiscuous mode [ 69.958178][ T6516] hsr_slave_1: entered promiscuous mode [ 70.039686][ T6602] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 70.475211][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.655151][ T6621] bridge3: entered allmulticast mode [ 70.757336][ T6516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.774367][ T6516] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.798411][ T6516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.827303][ T6516] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.841740][ T6516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.874564][ T6516] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.896537][ T6516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.954815][ T6516] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.989387][ T6640] nfs: Unknown parameter './file0' [ 70.996711][ T6640] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 71.071269][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.075756][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.076871][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.079872][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.091463][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.094349][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.390270][ T5742] Bluetooth: hci4: command tx timeout [ 71.405915][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.432450][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.447628][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.449988][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.497272][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.499624][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.723333][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 71.726910][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 71.741984][ T5782] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.803523][ T6683] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 71.836824][ T5782] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.958523][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 71.958536][ T42] audit: type=1800 audit(1786066010.616:988): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 71.969960][ T5782] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.064440][ T42] audit: type=1800 audit(1786066010.726:989): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 72.097998][ T42] audit: type=1800 audit(1786066010.756:990): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126101 res=0 errno=0 [ 72.124635][ T42] audit: type=1800 audit(1786066010.776:991): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=126106 res=0 errno=0 [ 72.151450][ T42] audit: type=1800 audit(1786066010.776:992): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=126110 res=0 errno=0 [ 72.175784][ T42] audit: type=1800 audit(1786066010.776:993): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126187 res=0 errno=0 [ 72.193673][ T42] audit: type=1800 audit(1786066010.776:994): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=126192 res=0 errno=0 [ 72.202455][ T42] audit: type=1800 audit(1786066010.776:995): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=126196 res=0 errno=0 [ 72.203531][ T6705] tipc: Started in network mode [ 72.211494][ T42] audit: type=1800 audit(1786066010.776:996): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=126109 res=0 errno=0 [ 72.220926][ T42] audit: type=1800 audit(1786066010.776:997): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=126112 res=0 errno=0 [ 72.222834][ T6705] tipc: Node identity ac14140f, cluster identity 4711 [ 72.234377][ T6705] tipc: New replicast peer: 255.255.255.255 [ 72.237517][ T6705] tipc: Enabled bearer , priority 10 [ 72.244920][ T5782] bridge_slave_1: left allmulticast mode [ 72.250199][ T5782] bridge_slave_1: left promiscuous mode [ 72.254181][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.264557][ T5782] bridge_slave_0: left allmulticast mode [ 72.266926][ T5782] bridge_slave_0: left promiscuous mode [ 72.268955][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.366145][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.374331][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.384030][ T5782] bond0 (unregistering): Released all slaves [ 72.388743][ T5782] bond1 (unregistering): Released all slaves [ 72.414062][ T6705] netlink: 180 bytes leftover after parsing attributes in process `syz.2.212'. [ 72.468630][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.475161][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.477673][ T6644] bridge_slave_0: entered allmulticast mode [ 72.480996][ T6644] bridge_slave_0: entered promiscuous mode [ 72.569950][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.582578][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.586954][ T6644] bridge_slave_1: entered allmulticast mode [ 72.601181][ T6644] bridge_slave_1: entered promiscuous mode [ 72.743213][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.754490][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.781122][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.797249][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 72.883433][ T6644] team0: Port device team_slave_0 added [ 72.908176][ T5782] hsr_slave_0: left promiscuous mode [ 73.041860][ T5782] hsr_slave_1: left promiscuous mode [ 73.044149][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.046648][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.049566][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.053274][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.059992][ T5782] veth1_macvtap: left promiscuous mode [ 73.063544][ T5782] veth0_macvtap: left promiscuous mode [ 73.065559][ T5782] veth1_vlan: left promiscuous mode [ 73.067345][ T5782] veth0_vlan: left promiscuous mode [ 73.140198][ T5742] Bluetooth: hci1: command tx timeout [ 73.460452][ T5742] Bluetooth: hci4: command tx timeout [ 73.604408][ T6738] netlink: 'syz.2.216': attribute type 11 has an invalid length. [ 73.755781][ T6743] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.759564][ T6743] overlayfs: failed to set xattr on upper [ 73.762470][ T6743] overlayfs: ...falling back to redirect_dir=nofollow. [ 73.765281][ T6743] overlayfs: ...falling back to metacopy=off. [ 73.767763][ T6743] overlayfs: ...falling back to index=off. [ 73.771450][ T6743] overlayfs: ...falling back to uuid=null. [ 73.811479][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 73.826799][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 73.953020][ T6644] team0: Port device team_slave_1 added [ 73.985524][ T5825] tipc: Node number set to 2886997007 [ 73.993178][ T6752] netlink: 72 bytes leftover after parsing attributes in process `syz.2.220'. [ 74.015150][ T6752] CacheFiles: Failed to register: -30 [ 74.032595][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.038385][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.056854][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.074960][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.087158][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.098351][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.289766][ T6644] hsr_slave_0: entered promiscuous mode [ 74.293065][ T6644] hsr_slave_1: entered promiscuous mode [ 74.298919][ T6644] debugfs: 'hsr0' already exists in 'hsr' [ 74.307950][ T6644] Cannot create hsr debugfs directory [ 74.317036][ T6768] Option ''MO' to dns_resolver key: bad/missing value [ 74.329599][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 74.503997][ T6516] veth0_vlan: entered promiscuous mode [ 74.521303][ T6516] veth1_vlan: entered promiscuous mode [ 74.602908][ T6516] veth0_macvtap: entered promiscuous mode [ 74.608028][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 74.617779][ T6516] veth1_macvtap: entered promiscuous mode [ 74.642324][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.649194][ T6644] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.655318][ T6644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.658459][ T6644] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.663032][ T6644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.665707][ T6644] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.669890][ T6644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.675325][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.677825][ T6644] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.682735][ T6644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.780485][ T5782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.789478][ T5782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.839628][ T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.856077][ T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.877339][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.919255][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.925134][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 74.928999][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.937025][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.939427][ T740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.944149][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.964151][ T6803] netlink: 'syz.2.226': attribute type 12 has an invalid length. [ 74.970242][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.989211][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.992292][ T740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.080488][ T6583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.176037][ T6811] tmpfs: Unknown parameter 'grpquota/usb_gadget/g1/functions/acm.usb0' [ 75.220922][ T5742] Bluetooth: hci1: command tx timeout [ 75.431209][ T6829] netlink: 72 bytes leftover after parsing attributes in process `syz.2.231'. [ 75.437812][ T6829] CacheFiles: Failed to register: -95 [ 75.485309][ T6834] Set syz1 is full, maxelem 4 reached [ 75.541991][ T5742] Bluetooth: hci4: command tx timeout [ 75.627910][ T6843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6843 comm=syz.2.236 [ 75.777552][ T6850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.879839][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.243468][ T6644] veth0_vlan: entered promiscuous mode [ 76.256391][ T6644] veth1_vlan: entered promiscuous mode [ 76.279972][ T6644] veth0_macvtap: entered promiscuous mode [ 76.285645][ T6644] veth1_macvtap: entered promiscuous mode [ 76.296000][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.307800][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.332692][ T6583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.338929][ T6583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.381877][ T5782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.393702][ T5782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.442894][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.448025][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.486455][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.492846][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.595846][ T6862] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.605107][ T6862] block device autoloading is deprecated and will be removed. [ 76.785122][ T6869] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61465 sclass=netlink_xfrm_socket pid=6869 comm=syz.2.239 [ 77.050558][ T5825] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 77.180543][ T5825] usb 7-1: device descriptor read/64, error -71 [ 77.300264][ T5742] Bluetooth: hci1: command tx timeout [ 77.420594][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 77.420611][ T42] audit: type=1800 audit(1786066016.076:1078): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 77.430332][ T5825] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.497113][ T42] audit: type=1800 audit(1786066016.156:1079): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 77.536840][ T42] audit: type=1800 audit(1786066016.196:1080): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 77.556873][ T42] audit: type=1800 audit(1786066016.216:1081): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=131629 res=0 errno=0 [ 77.570459][ T5825] usb 7-1: device descriptor read/64, error -71 [ 77.609650][ T42] audit: type=1400 audit(1786066016.266:1082): avc: denied { ioctl } for pid=6880 comm="syz.5.242" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 77.659717][ T42] audit: type=1800 audit(1786066016.316:1083): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 77.681719][ T5825] usb usb7-port1: attempt power cycle [ 77.740691][ T42] audit: type=1800 audit(1786066016.396:1084): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 77.789690][ T42] audit: type=1800 audit(1786066016.446:1085): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.244" name="status" dev="sysfs" ino=2056 res=0 errno=0 [ 77.807326][ T42] audit: type=1400 audit(1786066016.466:1086): avc: denied { bind } for pid=6887 comm="syz.5.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.816573][ T6888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.244'. [ 77.822140][ T5742] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 77.826012][ T42] audit: type=1400 audit(1786066016.466:1087): avc: denied { write } for pid=6887 comm="syz.5.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.894049][ T6890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6890 comm=syz.5.244 [ 78.022018][ T5825] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 78.041430][ T5825] usb 7-1: device descriptor read/8, error -71 [ 78.281732][ T5825] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 78.300957][ T5825] usb 7-1: device descriptor read/8, error -71 [ 78.410404][ T5825] usb usb7-port1: unable to enumerate USB device [ 79.600918][ T6905] fuse: fd is not a fuse device [ 79.701601][ T6909] netlink: 830 bytes leftover after parsing attributes in process `syz.3.250'. [ 79.720954][ T6909] capability: warning: `syz.3.250' uses 32-bit capabilities (legacy support in use) [ 80.192385][ T6936] geneve1: entered allmulticast mode [ 80.910620][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 81.060539][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 81.066549][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 81.075758][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.085689][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.090458][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.104229][ T10] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 81.110392][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.113125][ T10] usb 7-1: Product: syz [ 81.114907][ T10] usb 7-1: Manufacturer: syz [ 81.116436][ T10] usb 7-1: SerialNumber: syz [ 81.123160][ T10] usb 7-1: config 0 descriptor?? [ 81.126397][ T6959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 81.134050][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 81.299294][ C0] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 81.394381][ T6959] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 81.402382][ T6959] bond1 (unregistering): Released all slaves [ 81.508329][ T5825] usb 7-1: USB disconnect, device number 7 [ 81.510345][ C0] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 81.559032][ T40] cfg80211: failed to load regulatory.db [ 81.872698][ T5742] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 81.876648][ T5742] Bluetooth: hci1: Injecting HCI hardware error event [ 81.880857][ T5733] Bluetooth: hci1: hardware error 0x00 [ 82.490002][ T42] kauditd_printk_skb: 93 callbacks suppressed [ 82.508894][ T42] audit: type=1400 audit(1786066021.146:1181): avc: denied { write } for pid=6978 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.576368][ T42] audit: type=1800 audit(1786066021.236:1182): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 82.678972][ T42] audit: type=1800 audit(1786066021.336:1183): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 82.720274][ T42] audit: type=1800 audit(1786066021.376:1184): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 82.760984][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.273'. [ 82.769496][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.273'. [ 82.849047][ T42] audit: type=1400 audit(1786066021.506:1185): avc: denied { create } for pid=6987 comm="syz.5.273" name="#c" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.870164][ T42] audit: type=1400 audit(1786066021.526:1186): avc: denied { link } for pid=6987 comm="syz.5.273" name="#c" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.888532][ T42] audit: type=1400 audit(1786066021.526:1187): avc: denied { rename } for pid=6987 comm="syz.5.273" name="#d" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 82.938941][ T42] audit: type=1800 audit(1786066021.596:1188): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 82.971911][ T42] audit: type=1400 audit(1786066021.636:1189): avc: denied { write } for pid=6989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.026152][ T42] audit: type=1800 audit(1786066021.686:1190): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 83.285620][ T7005] syzkaller1: entered promiscuous mode [ 83.287916][ T7005] syzkaller1: entered allmulticast mode [ 83.300426][ T5882] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 83.409008][ T7008] FAULT_INJECTION: forcing a failure. [ 83.409008][ T7008] name failslab, interval 1, probability 0, space 0, times 0 [ 83.425439][ T7008] CPU: 2 UID: 0 PID: 7008 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(full) [ 83.425465][ T7008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.425487][ T7008] Call Trace: [ 83.425504][ T7008] [ 83.425511][ T7008] dump_stack_lvl+0x100/0x190 [ 83.425547][ T7008] should_fail_ex.cold+0x5/0xa [ 83.425571][ T7008] should_failslab+0xc2/0x120 [ 83.425594][ T7008] kmem_cache_alloc_noprof+0x91/0x6a0 [ 83.425622][ T7008] ? __pfx_map_id_range_down+0x10/0x10 [ 83.425642][ T7008] ? rcu_is_watching+0x12/0xc0 [ 83.425667][ T7008] ? security_inode_alloc+0x3b/0x2c0 [ 83.425699][ T7008] security_inode_alloc+0x3b/0x2c0 [ 83.425723][ T7008] inode_init_always_gfp+0xc77/0xfb0 [ 83.425747][ T7008] alloc_inode+0x8e/0x250 [ 83.425774][ T7008] new_inode+0x22/0x1c0 [ 83.425799][ T7008] proc_pid_make_inode+0x22/0x160 [ 83.425826][ T7008] proc_pident_instantiate+0x85/0x310 [ 83.425849][ T7008] proc_pident_lookup+0x1e3/0x270 [ 83.425870][ T7008] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 83.425889][ T7008] path_openat+0x241f/0x4280 [ 83.425916][ T7008] ? __pfx_path_openat+0x10/0x10 [ 83.425940][ T7008] do_file_open+0x20e/0x430 [ 83.425961][ T7008] ? __pfx_do_file_open+0x10/0x10 [ 83.425989][ T7008] ? __pfx_kfree_link+0x10/0x10 [ 83.426022][ T7008] ? alloc_fd+0x471/0x7a0 [ 83.426063][ T7008] ? do_getname+0x191/0x390 [ 83.426084][ T7008] do_sys_openat2+0x10f/0x1e0 [ 83.426104][ T7008] ? __pfx_do_sys_openat2+0x10/0x10 [ 83.426125][ T7008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.426153][ T7008] ? __fget_files+0x21f/0x3d0 [ 83.426172][ T7008] __x64_sys_openat+0x12d/0x210 [ 83.426193][ T7008] ? __pfx___x64_sys_openat+0x10/0x10 [ 83.426213][ T7008] ? ksys_write+0x1ac/0x250 [ 83.426236][ T7008] do_syscall_64+0x115/0x870 [ 83.426257][ T7008] ? clear_bhb_loop+0x70/0xc0 [ 83.426279][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.426297][ T7008] RIP: 0033:0x7f55f295e90e [ 83.426313][ T7008] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.426328][ T7008] RSP: 002b:00007f55f385bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 83.426354][ T7008] RAX: ffffffffffffffda RBX: 00007f55f385c6c0 RCX: 00007f55f295e90e [ 83.426363][ T7008] RDX: 0000000000000002 RSI: 00007f55f385bf90 RDI: ffffffffffffff9c [ 83.426373][ T7008] RBP: 00007f55f385c090 R08: 0000000000000000 R09: 0000000000000000 [ 83.426383][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.426392][ T7008] R13: 00007f55f2c26038 R14: 00007f55f2c25fa0 R15: 00007fff038ad618 [ 83.426415][ T7008] [ 83.526212][ T5882] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 83.529477][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.533376][ T5882] usb 8-1: Product: syz [ 83.535079][ T5882] usb 8-1: Manufacturer: syz [ 83.536639][ T5882] usb 8-1: SerialNumber: syz [ 83.940182][ T5733] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 84.254361][ T5882] rtl8150 8-1:1.0: couldn't reset the device [ 84.256524][ T5882] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 84.281976][ T5882] usb 8-1: USB disconnect, device number 3 [ 84.471862][ T7053] netlink: 80 bytes leftover after parsing attributes in process `syz.2.289'. [ 84.544763][ T7058] FAULT_INJECTION: forcing a failure. [ 84.544763][ T7058] name failslab, interval 1, probability 0, space 0, times 0 [ 84.570320][ T7058] CPU: 2 UID: 0 PID: 7058 Comm: syz.2.290 Not tainted syzkaller #0 PREEMPT(full) [ 84.570337][ T7058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 84.570352][ T7058] Call Trace: [ 84.570364][ T7058] [ 84.570369][ T7058] dump_stack_lvl+0x100/0x190 [ 84.570395][ T7058] should_fail_ex.cold+0x5/0xa [ 84.570417][ T7058] should_failslab+0xc2/0x120 [ 84.570432][ T7058] __kmalloc_noprof+0xfc/0x820 [ 84.570444][ T7058] ? rcu_is_watching+0x12/0xc0 [ 84.570461][ T7058] ? tomoyo_realpath_from_path+0xb6/0x690 [ 84.570478][ T7058] tomoyo_realpath_from_path+0xb6/0x690 [ 84.570492][ T7058] tomoyo_check_open_permission+0x2af/0x3c0 [ 84.570523][ T7058] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 84.570544][ T7058] ? hook_file_open+0x24f/0x8f0 [ 84.570571][ T7058] ? lock_acquire+0x1b9/0x370 [ 84.570596][ T7058] tomoyo_file_open+0x6b/0x90 [ 84.570619][ T7058] security_file_open+0xb5/0x1e0 [ 84.570638][ T7058] do_dentry_open+0x588/0x14d0 [ 84.570654][ T7058] vfs_open+0x82/0x3f0 [ 84.570668][ T7058] path_openat+0x2873/0x4280 [ 84.570685][ T7058] ? __pfx_path_openat+0x10/0x10 [ 84.570705][ T7058] do_file_open+0x20e/0x430 [ 84.570718][ T7058] ? __pfx_do_file_open+0x10/0x10 [ 84.570734][ T7058] ? __pfx_kfree_link+0x10/0x10 [ 84.570754][ T7058] ? alloc_fd+0x471/0x7a0 [ 84.570767][ T7058] ? do_getname+0x191/0x390 [ 84.570782][ T7058] do_sys_openat2+0x10f/0x1e0 [ 84.570795][ T7058] ? __pfx_do_sys_openat2+0x10/0x10 [ 84.570809][ T7058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 84.570829][ T7058] ? __fget_files+0x21f/0x3d0 [ 84.570842][ T7058] __x64_sys_openat+0x12d/0x210 [ 84.570855][ T7058] ? __pfx___x64_sys_openat+0x10/0x10 [ 84.570868][ T7058] ? ksys_write+0x1ac/0x250 [ 84.570882][ T7058] do_syscall_64+0x115/0x870 [ 84.570896][ T7058] ? clear_bhb_loop+0x70/0xc0 [ 84.570910][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.570920][ T7058] RIP: 0033:0x7f55f295e90e [ 84.570931][ T7058] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.570942][ T7058] RSP: 002b:00007f55f385bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.570959][ T7058] RAX: ffffffffffffffda RBX: 00007f55f385c6c0 RCX: 00007f55f295e90e [ 84.570966][ T7058] RDX: 0000000000000002 RSI: 00007f55f385bf90 RDI: ffffffffffffff9c [ 84.570972][ T7058] RBP: 00007f55f385c090 R08: 0000000000000000 R09: 0000000000000000 [ 84.570978][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.570985][ T7058] R13: 00007f55f2c26038 R14: 00007f55f2c25fa0 R15: 00007fff038ad618 [ 84.570998][ T7058] [ 84.571402][ T7058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.964270][ T7083] Bluetooth: MGMT ver 1.23 [ 85.051111][ T7079] vivid-004: disconnect [ 85.134814][ T7094] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(221550758.590832046.1440006349), cmd(3) [ 85.146394][ T7094] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 85.286842][ T7095] vivid-004: reconnect [ 85.352449][ T7105] FAULT_INJECTION: forcing a failure. [ 85.352449][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 85.361548][ T7105] CPU: 2 UID: 0 PID: 7105 Comm: syz.2.300 Not tainted syzkaller #0 PREEMPT(full) [ 85.361565][ T7105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.361572][ T7105] Call Trace: [ 85.361576][ T7105] [ 85.361581][ T7105] dump_stack_lvl+0x100/0x190 [ 85.361599][ T7105] should_fail_ex.cold+0x5/0xa [ 85.361613][ T7105] should_failslab+0xc2/0x120 [ 85.361629][ T7105] __kmalloc_noprof+0xfc/0x820 [ 85.361647][ T7105] ? tomoyo_encode2+0xfb/0x3c0 [ 85.361660][ T7105] tomoyo_encode2+0xfb/0x3c0 [ 85.361673][ T7105] tomoyo_encode+0x29/0x50 [ 85.361683][ T7105] tomoyo_realpath_from_path+0x18c/0x690 [ 85.361697][ T7105] tomoyo_check_open_permission+0x2af/0x3c0 [ 85.361715][ T7105] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 85.361735][ T7105] ? hook_file_open+0x24f/0x8f0 [ 85.361755][ T7105] ? lock_acquire+0x1b9/0x370 [ 85.361772][ T7105] tomoyo_file_open+0x6b/0x90 [ 85.361785][ T7105] security_file_open+0xb5/0x1e0 [ 85.361797][ T7105] do_dentry_open+0x588/0x14d0 [ 85.361811][ T7105] vfs_open+0x82/0x3f0 [ 85.361825][ T7105] path_openat+0x2873/0x4280 [ 85.361842][ T7105] ? __pfx_path_openat+0x10/0x10 [ 85.361858][ T7105] do_file_open+0x20e/0x430 [ 85.361870][ T7105] ? __pfx_do_file_open+0x10/0x10 [ 85.361886][ T7105] ? __pfx_kfree_link+0x10/0x10 [ 85.361917][ T7105] ? alloc_fd+0x471/0x7a0 [ 85.361932][ T7105] ? do_getname+0x191/0x390 [ 85.361947][ T7105] do_sys_openat2+0x10f/0x1e0 [ 85.361961][ T7105] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.361974][ T7105] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.361990][ T7105] ? __fget_files+0x21f/0x3d0 [ 85.362003][ T7105] __x64_sys_openat+0x12d/0x210 [ 85.362017][ T7105] ? __pfx___x64_sys_openat+0x10/0x10 [ 85.362031][ T7105] ? ksys_write+0x1ac/0x250 [ 85.362044][ T7105] do_syscall_64+0x115/0x870 [ 85.362057][ T7105] ? clear_bhb_loop+0x70/0xc0 [ 85.362070][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.362081][ T7105] RIP: 0033:0x7f55f295e90e [ 85.362091][ T7105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.362101][ T7105] RSP: 002b:00007f55f385bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.362112][ T7105] RAX: ffffffffffffffda RBX: 00007f55f385c6c0 RCX: 00007f55f295e90e [ 85.362119][ T7105] RDX: 0000000000000002 RSI: 00007f55f385bf90 RDI: ffffffffffffff9c [ 85.362125][ T7105] RBP: 00007f55f385c090 R08: 0000000000000000 R09: 0000000000000000 [ 85.362131][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.362137][ T7105] R13: 00007f55f2c26038 R14: 00007f55f2c25fa0 R15: 00007fff038ad618 [ 85.362160][ T7105] [ 85.362194][ T7105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.420637][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.301'. [ 85.746409][ T7128] netlink: 23 bytes leftover after parsing attributes in process `syz.2.304'. [ 85.757255][ T7128] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 85.834970][ T7134] netlink: 'syz.5.305': attribute type 19 has an invalid length. [ 85.856742][ T7134] evm: overlay not supported [ 86.005669][ T10] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 86.162581][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 86.169003][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 86.182873][ T10] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 86.193172][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 86.201321][ T10] usb 7-1: Product: syz [ 86.210416][ T10] usb 7-1: Manufacturer: syz [ 86.245095][ T10] usb 7-1: USB2VGA dongle found at address 8 [ 86.266679][ T10] usb 7-1: Allocated 8 output buffers [ 86.269218][ T10] usb 7-1: Not attached to USB 2.0 hub, deferring init [ 86.332453][ T5782] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.441751][ T7128] usb 7-1: Device not attached to USB 2.0 hub [ 86.463365][ T5882] usb 7-1: USB disconnect, device number 8 [ 86.548349][ T5782] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.692805][ T5782] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.784456][ T5782] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.824660][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.829714][ T5742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.836771][ T5742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.846625][ T5742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.856200][ T5742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.053611][ T5782] bridge_slave_1: left allmulticast mode [ 87.057785][ T5782] bridge_slave_1: left promiscuous mode [ 87.066430][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.077869][ T7181] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 87.089902][ T5782] bridge_slave_0: left allmulticast mode [ 87.093680][ T5782] bridge_slave_0: left promiscuous mode [ 87.097195][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.253086][ T5782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.263075][ T5782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.287148][ T5782] bond0 (unregistering): Released all slaves [ 87.305251][ T7181] veth0: entered promiscuous mode [ 87.307716][ T7181] team0: Port device veth0 added [ 87.315354][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 87.645003][ T42] kauditd_printk_skb: 131 callbacks suppressed [ 87.645034][ T42] audit: type=1800 audit(1786066026.306:1322): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 87.679687][ T42] audit: type=1400 audit(1786066026.326:1323): avc: denied { write } for pid=7202 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.761500][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 87.793707][ T5782] hsr_slave_0: left promiscuous mode [ 87.796392][ T5782] hsr_slave_1: left promiscuous mode [ 87.799031][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.803929][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.809497][ T5782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.813109][ T5782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.819945][ T5782] veth1_macvtap: left promiscuous mode [ 87.822377][ T5782] veth0_macvtap: left promiscuous mode [ 87.824463][ T5782] veth1_vlan: left promiscuous mode [ 87.826224][ T5782] veth0_vlan: left promiscuous mode [ 87.884381][ T42] audit: type=1800 audit(1786066026.546:1324): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 88.036197][ T5782] team0 (unregistering): Port device team_slave_1 removed [ 88.051907][ T5782] team0 (unregistering): Port device team_slave_0 removed [ 88.194840][ T42] audit: type=1800 audit(1786066026.846:1325): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 88.218565][ T42] audit: type=1400 audit(1786066026.876:1326): avc: denied { write } for pid=7211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.255425][ T7215] Invalid argument reading file caps for ./file0 [ 88.339408][ T42] audit: type=1800 audit(1786066026.996:1327): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 88.379239][ T42] audit: type=1400 audit(1786066027.036:1328): avc: denied { write } for pid=7220 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.468997][ T7170] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.473436][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.475859][ T7170] bridge_slave_0: entered allmulticast mode [ 88.478890][ T7170] bridge_slave_0: entered promiscuous mode [ 88.493181][ T7170] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.495708][ T42] audit: type=1800 audit(1786066027.156:1329): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=136192 res=0 errno=0 [ 88.499840][ T7170] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.505049][ T42] audit: type=1800 audit(1786066027.156:1330): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=136196 res=0 errno=0 [ 88.514052][ T7170] bridge_slave_1: entered allmulticast mode [ 88.516764][ T7170] bridge_slave_1: entered promiscuous mode [ 88.528404][ T42] audit: type=1400 audit(1786066027.186:1331): avc: denied { ioctl } for pid=7221 comm="syz.2.319" path="socket:[18445]" dev="sockfs" ino=18445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 88.549051][ T7170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.578938][ T7170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.621005][ T7170] team0: Port device team_slave_0 added [ 88.632075][ T7170] team0: Port device team_slave_1 added [ 88.662289][ T7170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.664528][ T7170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.680493][ T7170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.697215][ T7170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.701502][ T7170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.720193][ T7170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.756194][ T7235] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 88.784515][ T7170] hsr_slave_0: entered promiscuous mode [ 88.790927][ T7170] hsr_slave_1: entered promiscuous mode [ 88.800560][ T7170] debugfs: 'hsr0' already exists in 'hsr' [ 88.802485][ T7170] Cannot create hsr debugfs directory [ 88.807768][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 88.900578][ T5742] Bluetooth: hci1: command tx timeout [ 89.219348][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 89.226927][ T7170] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.237428][ T7170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.243539][ T7170] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.254873][ T7170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.263330][ T7170] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.271033][ T7170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.274223][ T7170] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.284762][ T7170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.390651][ T7170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.420945][ T7170] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.432520][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.435050][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.445295][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.447705][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.507754][ T7170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.548915][ T7250] firewire_ohci 0000:00:03.0: invalid MMIO resource [ 89.755124][ T7250] firewire_ohci 0000:00:03.0: removed fw-ohci device [ 89.958533][ T7170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.262421][ T7275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.278616][ T7296] tipc: Started in network mode [ 90.282874][ T7296] tipc: Node identity ac141441, cluster identity 4711 [ 90.286705][ T7296] tipc: Enabled bearer , priority 10 [ 90.292439][ T7297] tipc: Enabling of bearer rejected, already enabled [ 90.393120][ T7170] veth0_vlan: entered promiscuous mode [ 90.403149][ T7170] veth1_vlan: entered promiscuous mode [ 90.431039][ T7170] veth0_macvtap: entered promiscuous mode [ 90.438695][ T7170] veth1_macvtap: entered promiscuous mode [ 90.455996][ T7170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.483870][ T7170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.590868][ T5782] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.601919][ T5782] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.613508][ T5782] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.651102][ T6583] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.658448][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.663441][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.710351][ T5825] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.748035][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.754619][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.825273][ T5733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.832182][ T5733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.838596][ T5733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.849378][ T5733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.855129][ T5733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.862471][ T5825] usb 8-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 90.866382][ T5825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.878358][ T5825] i2c-tiny-usb 8-1:1.0: version 1.00 found at bus 008 address 004 [ 90.983336][ T5733] Bluetooth: hci1: command tx timeout [ 91.256784][ T6583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.290264][ T5825] (null): failure reading functionality [ 91.397860][ T6583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.424250][ T1045] tipc: Node number set to 2886997057 [ 91.501390][ T5825] i2c i2c-2: failure reading functionality [ 91.517975][ T5825] i2c i2c-2: connected i2c-tiny-usb device [ 91.539166][ T6583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.674674][ T6583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.937126][ T7337] binder: 7334:7337 ioctl c0306201 0 returned -14 [ 91.959592][ T7337] binder_alloc: 7334: binder_alloc_buf, no vma [ 91.961961][ T7335] binder_alloc: 7334: binder_alloc_buf, no vma [ 91.982036][ T7335] netlink: 'syz.2.336': attribute type 5 has an invalid length. [ 91.985551][ T7337] netlink: 'syz.2.336': attribute type 5 has an invalid length. [ 91.989714][ T6583] bridge_slave_1: left allmulticast mode [ 91.994781][ T6583] bridge_slave_1: left promiscuous mode [ 92.006670][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.017798][ T6583] bridge_slave_0: left allmulticast mode [ 92.021963][ T6583] bridge_slave_0: left promiscuous mode [ 92.027572][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.254023][ T6583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.283365][ T6583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.306220][ T7330] vivid-002: disconnect [ 92.321283][ T6583] bond0 (unregistering): Released all slaves [ 92.374811][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 92.607976][ T7328] vivid-002: reconnect [ 92.615886][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.619252][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.622619][ T7310] bridge_slave_0: entered allmulticast mode [ 92.625568][ T7310] bridge_slave_0: entered promiscuous mode [ 92.696926][ T42] kauditd_printk_skb: 2093 callbacks suppressed [ 92.696957][ T42] audit: type=1800 audit(1786066031.356:3425): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 92.716133][ T7310] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.718793][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.721625][ T7310] bridge_slave_1: entered allmulticast mode [ 92.724477][ T7310] bridge_slave_1: entered promiscuous mode [ 92.743400][ T42] audit: type=1400 audit(1786066031.406:3426): avc: denied { create } for pid=7361 comm="syz.6.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.752194][ T42] audit: type=1400 audit(1786066031.416:3427): avc: denied { read } for pid=7361 comm="syz.6.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.769429][ T42] audit: type=1400 audit(1786066031.426:3428): avc: denied { write } for pid=7363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.784807][ T42] audit: type=1800 audit(1786066031.426:3429): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 92.801697][ T6583] hsr_slave_0: left promiscuous mode [ 92.806420][ T42] audit: type=1400 audit(1786066031.466:3430): avc: denied { setopt } for pid=7366 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.820803][ T6583] hsr_slave_1: left promiscuous mode [ 92.823733][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.829102][ T6583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.832077][ T42] audit: type=1400 audit(1786066031.486:3431): avc: denied { getopt } for pid=7361 comm="syz.6.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 92.842857][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.849230][ T6583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.862431][ T42] audit: type=1400 audit(1786066031.526:3432): avc: denied { write } for pid=7370 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.872382][ T6583] veth1_macvtap: left promiscuous mode [ 92.874204][ T6583] veth0_macvtap: left promiscuous mode [ 92.875022][ T7365] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 92.875872][ T6583] veth1_vlan: left promiscuous mode [ 92.885158][ T6583] veth0_vlan: left promiscuous mode [ 92.900242][ T5733] Bluetooth: hci2: command tx timeout [ 93.049098][ T6583] team0 (unregistering): Port device team_slave_1 removed [ 93.060121][ T5733] Bluetooth: hci1: command tx timeout [ 93.064135][ T6583] team0 (unregistering): Port device team_slave_0 removed [ 93.207512][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 93.217582][ T7310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.224886][ T7310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.269641][ T42] audit: type=1800 audit(1786066031.926:3433): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 93.306573][ T7310] team0: Port device team_slave_0 added [ 93.311309][ T7310] team0: Port device team_slave_1 added [ 93.325554][ T7376] netlink: 32 bytes leftover after parsing attributes in process `syz.6.340'. [ 93.335775][ T7376] netlink: 32 bytes leftover after parsing attributes in process `syz.6.340'. [ 93.358551][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.371642][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.391021][ T7310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.398563][ T7310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.408170][ T7310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.434129][ T7310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.440683][ T42] audit: type=1800 audit(1786066032.096:3434): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 93.492865][ T7379] comedi comedi0: Minor 2 could not be opened [ 93.517833][ T7310] hsr_slave_0: entered promiscuous mode [ 93.534305][ T7310] hsr_slave_1: entered promiscuous mode [ 93.863748][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 93.971628][ T7398] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000 [ 93.974865][ T7398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=7398 comm=syz.6.346 [ 94.009871][ T7310] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 94.028379][ T7310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.039116][ T7310] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 94.050392][ T7310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.059892][ T7310] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 94.087821][ T7310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.096351][ T7310] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 94.121607][ T7310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.257657][ T7310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.305043][ T7310] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.312381][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17 [ 94.321522][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.324557][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.347027][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.349239][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.434797][ T7310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.479400][ T5825] usb 8-1: USB disconnect, device number 4 [ 94.921211][ T7452] /dev/sg0: Can't lookup blockdev [ 94.983940][ T5733] Bluetooth: hci2: command tx timeout [ 95.031274][ T7310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.112247][ T7458] tipc: Enabled bearer , priority 10 [ 95.114899][ T7458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.355'. [ 95.144675][ T5733] Bluetooth: hci1: command tx timeout [ 95.266506][ T7475] CacheFiles: Failed to register: -95 [ 95.340775][ T7310] veth0_vlan: entered promiscuous mode [ 95.353816][ T7310] veth1_vlan: entered promiscuous mode [ 95.406511][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.359'. [ 95.411560][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.359'. [ 95.421138][ T7310] veth0_macvtap: entered promiscuous mode [ 95.425772][ T7310] veth1_macvtap: entered promiscuous mode [ 95.435529][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.446670][ T7310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.573598][ T5782] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.591807][ T5782] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.625627][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.627415][ T7482] netlink: 'syz.3.359': attribute type 49 has an invalid length. [ 95.630936][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.633484][ T5782] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.655633][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.658527][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.666463][ T7482] bond0: (slave bond_slave_0): Releasing backup interface [ 95.771337][ T7482] bond_slave_0: entered promiscuous mode [ 95.777326][ T7482] bond_slave_0: entered allmulticast mode [ 95.831916][ T6583] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.848003][ T7498] syz_tun: entered promiscuous mode [ 95.859185][ T7498] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 95.893905][ T7501] warning: `syz.2.364' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.169179][ T7527] [U] zͻi[27| [ 96.174662][ T7527] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 96.179295][ T7527] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 96.232347][ T7527] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 96.273589][ T7531] overlay: filesystem on ./bus not supported [ 96.310458][ T7527] [U] 8)X)YvxRĻbmbN@ox;JD, [ 96.333574][ T7527] [U] *Cn3v7KEXgt_3 [ 96.334761][ T7532] tcpci 0-0050: Can't find connector node. [ 96.344172][ T7527] [U] D/QazҬEHgE1$_ks=R@ [ 96.364698][ T7527] [U] ϼcEv @ [ 96.366334][ T7527] [U] a% [ 96.373656][ T7532] tcpci 0-0050: probe with driver tcpci failed with error -22 [ 96.388878][ T7527] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 96.392227][ T7532] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 96.409527][ T7527] [U] f1p3 [ 96.419238][ T7527] [U] N0[L;a_l&kMC [ 96.437756][ T7527] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 96.476155][ T7527] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 [ 102.175387][ T7831] dump_stack_lvl+0x100/0x190 [ 102.175413][ T7831] should_fail_ex.cold+0x5/0xa [ 102.175428][ T7831] _copy_from_user+0x2e/0xd0 [ 102.175448][ T7831] copy_msghdr_from_user+0x9f/0x4c0 [ 102.175464][ T7831] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.175481][ T7831] ___sys_sendmsg+0x106/0x1e0 [ 102.175494][ T7831] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.175504][ T7831] ? __lock_acquire+0x49f/0x1a40 [ 102.175517][ T7831] ? get_pid_task+0x106/0x250 [ 102.175541][ T7831] __sys_sendmsg+0x160/0x210 [ 102.175556][ T7831] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.175577][ T7831] do_syscall_64+0x115/0x870 [ 102.175591][ T7831] ? clear_bhb_loop+0x70/0xc0 [ 102.175604][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.175617][ T7831] RIP: 0033:0x7ff2f519e0d9 [ 102.175627][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.175637][ T7831] RSP: 002b:00007ff2f6070028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.175656][ T7831] RAX: ffffffffffffffda RBX: 00007ff2f5425fa0 RCX: 00007ff2f519e0d9 [ 102.175663][ T7831] RDX: 000000002000c010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 102.175670][ T7831] RBP: 00007ff2f6070090 R08: 0000000000000000 R09: 0000000000000000 [ 102.175675][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.175681][ T7831] R13: 00007ff2f5426038 R14: 00007ff2f5425fa0 R15: 00007ffea2120ca8 [ 102.175695][ T7831] [ 102.341970][ T7833] erspan0: entered promiscuous mode [ 102.347736][ T7833] erspan0: entered allmulticast mode [ 102.539664][ T7850] x_tables: duplicate underflow at hook 2 [ 102.672990][ T7866] netlink: 'syz.3.438': attribute type 2 has an invalid length. [ 102.837040][ T7874] FAULT_INJECTION: forcing a failure. [ 102.837040][ T7874] name failslab, interval 1, probability 0, space 0, times 0 [ 102.841384][ T42] kauditd_printk_skb: 119 callbacks suppressed [ 102.841398][ T42] audit: type=1800 audit(1786066041.496:3664): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 102.851522][ T7874] CPU: 2 UID: 0 PID: 7874 Comm: syz.7.445 Not tainted syzkaller #0 PREEMPT(full) [ 102.851538][ T7874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.851546][ T7874] Call Trace: [ 102.851550][ T7874] [ 102.851555][ T7874] dump_stack_lvl+0x100/0x190 [ 102.851573][ T7874] should_fail_ex.cold+0x5/0xa [ 102.851588][ T7874] should_failslab+0xc2/0x120 [ 102.851602][ T7874] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 102.851616][ T7874] ? __alloc_skb+0x5b7/0x710 [ 102.851629][ T7874] ? __alloc_skb+0x140/0x710 [ 102.851644][ T7874] __alloc_skb+0x140/0x710 [ 102.851656][ T7874] ? __alloc_skb+0x5b7/0x710 [ 102.851669][ T7874] ? __pfx___alloc_skb+0x10/0x10 [ 102.851686][ T7874] netlink_alloc_large_skb+0x69/0x150 [ 102.851700][ T7874] netlink_sendmsg+0x680/0xda0 [ 102.851714][ T7874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.851727][ T7874] ? selinux_socket_sendmsg+0x198/0x2f0 [ 102.851746][ T7874] ____sys_sendmsg+0xa4d/0xbe0 [ 102.851756][ T7874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.851768][ T7874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.851784][ T7874] ___sys_sendmsg+0x190/0x1e0 [ 102.851796][ T7874] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.851806][ T7874] ? __lock_acquire+0x49f/0x1a40 [ 102.851819][ T7874] ? get_pid_task+0x106/0x250 [ 102.851842][ T7874] __sys_sendmsg+0x160/0x210 [ 102.851857][ T7874] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.851878][ T7874] do_syscall_64+0x115/0x870 [ 102.851892][ T7874] ? clear_bhb_loop+0x70/0xc0 [ 102.851905][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.851916][ T7874] RIP: 0033:0x7fdff459e0d9 [ 102.851925][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.851935][ T7874] RSP: 002b:00007fdff27f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.851947][ T7874] RAX: ffffffffffffffda RBX: 00007fdff4825fa0 RCX: 00007fdff459e0d9 [ 102.851954][ T7874] RDX: 000000002000c010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 102.851960][ T7874] RBP: 00007fdff27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.851967][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.851973][ T7874] R13: 00007fdff4826038 R14: 00007fdff4825fa0 R15: 00007ffc95c813f8 [ 102.851987][ T7874] [ 102.948419][ T42] audit: type=1800 audit(1786066041.556:3665): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 102.974982][ T42] audit: type=1800 audit(1786066041.636:3666): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 102.998416][ T42] audit: type=1800 audit(1786066041.656:3667): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35593 res=0 errno=0 [ 103.006994][ T42] audit: type=1800 audit(1786066041.656:3668): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35616 res=0 errno=0 [ 103.126325][ T42] audit: type=1800 audit(1786066041.786:3669): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148833 res=0 errno=0 [ 103.137088][ T42] audit: type=1800 audit(1786066041.796:3670): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148845 res=0 errno=0 [ 103.146419][ T42] audit: type=1800 audit(1786066041.806:3671): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148857 res=0 errno=0 [ 103.155319][ T42] audit: type=1800 audit(1786066041.816:3672): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148869 res=0 errno=0 [ 103.164345][ T42] audit: type=1800 audit(1786066041.816:3673): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=148881 res=0 errno=0 [ 103.230155][ T5523] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 103.394482][ T5523] usb 12-1: Using ep0 maxpacket: 32 [ 103.407969][ T5523] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 103.430214][ T5523] usb 12-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 103.438942][ T5523] usb 12-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 103.445591][ T5523] usb 12-1: Product: syz [ 103.449186][ T5523] usb 12-1: Manufacturer: syz [ 103.452957][ T7885] Mount JFS Failure: -5 [ 103.453641][ T5523] usb 12-1: SerialNumber: syz [ 103.458088][ T7885] jfs_mount failed w/return code = -5 [ 103.459803][ T5523] usb 12-1: config 0 descriptor?? [ 103.466130][ T7878] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 103.473744][ T5523] hub 12-1:0.0: bad descriptor, ignoring hub [ 103.484275][ T5523] hub 12-1:0.0: probe with driver hub failed with error -5 [ 103.507339][ T7885] /dev/sr0: Can't open blockdev [ 103.597800][ T7888] jffs2: notice: (7888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 103.625589][ T7888] program syz.6.449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.646778][ T7888] __nla_validate_parse: 1 callbacks suppressed [ 103.646793][ T7888] netlink: 56 bytes leftover after parsing attributes in process `syz.6.449'. [ 103.668032][ T7898] bridge1: entered promiscuous mode [ 103.680857][ T7898] 9p: Bad value for 'rfdno' [ 103.837464][ T7909] overlay: Unknown parameter '/' [ 103.843593][ T7909] CacheFiles: Failed to register: -95 [ 103.876752][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.883126][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.289415][ T7940] overlay: Unknown parameter '/' [ 104.294103][ T7940] CacheFiles: Failed to register: -95 [ 104.437121][ T7945] comedi: valid board names for 8255 driver are: [ 104.440014][ T7945] 8255 [ 104.441560][ T7945] comedi: valid board names for vmk80xx driver are: [ 104.444076][ T7945] vmk80xx [ 104.445104][ T7945] comedi: valid board names for usbduxsigma driver are: [ 104.447706][ T7945] usbduxsigma [ 104.449108][ T7945] comedi: valid board names for usbduxfast driver are: [ 104.452516][ T7945] usbduxfast [ 104.454021][ T7945] comedi: valid board names for usbdux driver are: [ 104.458248][ T7945] usbdux [ 104.459580][ T7945] comedi: valid board names for ni6501 driver are: [ 104.462409][ T7945] ni6501 [ 104.463812][ T7945] comedi: valid board names for dt9812 driver are: [ 104.466581][ T7945] dt9812 [ 104.467854][ T7945] comedi: valid board names for ni_labpc_cs driver are: [ 104.470248][ T7945] ni_labpc_cs [ 104.471569][ T7945] comedi: valid board names for ni_daq_700 driver are: [ 104.473943][ T7945] ni_daq_700 [ 104.475040][ T7945] comedi: valid board names for labpc_pci driver are: [ 104.477224][ T7945] labpc_pci [ 104.478336][ T7945] comedi: valid board names for adl_pci9118 driver are: [ 104.480604][ T7945] pci9118dg [ 104.481698][ T7945] pci9118hg [ 104.482927][ T7945] pci9118hr [ 104.484179][ T7945] comedi: valid board names for 8255_pci driver are: [ 104.486429][ T7945] 8255_pci [ 104.487825][ T7945] comedi: valid board names for s526 driver are: [ 104.492028][ T7945] s526 [ 104.495210][ T7945] comedi: valid board names for multiq3 driver are: [ 104.498446][ T7945] multiq3 [ 104.500638][ T7945] comedi: valid board names for pcmuio driver are: [ 104.506005][ T7945] pcmuio48 [ 104.507386][ T7945] pcmuio96 [ 104.512735][ T7945] comedi: valid board names for pcmmio driver are: [ 104.518583][ T7945] pcmmio [ 104.519876][ T7945] comedi: valid board names for pcmda12 driver are: [ 104.523547][ T7945] pcmda12 [ 104.525037][ T7945] comedi: valid board names for pcmad driver are: [ 104.527727][ T7945] pcmad12 [ 104.528982][ T7945] pcmad16 [ 104.533331][ T7945] comedi: valid board names for ni_labpc driver are: [ 104.535651][ T7945] lab-pc-1200 [ 104.536990][ T7945] lab-pc-1200ai [ 104.538311][ T7945] lab-pc+ [ 104.539315][ T7945] comedi: valid board names for atmio16 driver are: [ 104.541535][ T7945] atmio16 [ 104.542527][ T7945] atmio16d [ 104.543497][ T7945] comedi: valid board names for ni_at_ao driver are: [ 104.545577][ T7945] at-ao-6 [ 104.546681][ T7945] at-ao-10 [ 104.547754][ T7945] comedi: valid board names for ni_at_a2150 driver are: [ 104.551852][ T7945] ni_at_a2150 [ 104.553030][ T7945] comedi: valid board names for adq12b driver are: [ 104.559868][ T7945] adq12b [ 104.561077][ T7945] comedi: valid board names for mpc624 driver are: [ 104.563324][ T7945] mpc624 [ 104.564290][ T7945] comedi: valid board names for c6xdigio driver are: [ 104.566475][ T7945] c6xdigio [ 104.567667][ T7945] comedi: valid board names for aio_iiro_16 driver are: [ 104.570176][ T7945] aio_iiro_16 [ 104.571444][ T7945] comedi: valid board names for aio_aio12_8 driver are: [ 104.573733][ T7945] aio_aio12_8 [ 104.574884][ T7945] aio_ai12_8 [ 104.575982][ T7945] aio_ao12_4 [ 104.577079][ T7945] comedi: valid board names for fl512 driver are: [ 104.579189][ T7945] fl512 [ 104.581451][ T7945] comedi: valid board names for dmm32at driver are: [ 104.583709][ T7945] dmm32at [ 104.584924][ T7945] comedi: valid board names for dt282x driver are: [ 104.587536][ T7945] dt2821 [ 104.588780][ T7945] dt2821-f [ 104.591701][ T7945] dt2821-g [ 104.593197][ T7945] dt2823 [ 104.594879][ T7945] dt2824-pgh [ 104.596345][ T7945] dt2824-pgl [ 104.597880][ T7945] dt2825 [ 104.599128][ T7945] dt2827 [ 104.601566][ T7945] dt2828 [ 104.602930][ T7945] dt2829 [ 104.604271][ T7945] dt21-ez [ 104.605804][ T7945] dt23-ez [ 104.607213][ T7945] dt24-ez [ 104.608622][ T7945] dt24-ez-pgl [ 104.610463][ T7945] comedi: valid board names for dt2817 driver are: [ 104.613258][ T7945] dt2817 [ 104.614631][ T7945] comedi: valid board names for dt2815 driver are: [ 104.617502][ T7945] dt2815 [ 104.618846][ T7945] comedi: valid board names for dt2814 driver are: [ 104.621952][ T7945] dt2814 [ 104.623298][ T7945] comedi: valid board names for dt2811 driver are: [ 104.626074][ T7945] dt2811-pgh [ 104.627660][ T7945] dt2811-pgl [ 104.629097][ T7945] comedi: valid board names for dt2801 driver are: [ 104.633160][ T7945] dt2801 [ 104.634559][ T7945] comedi: valid board names for das6402 driver are: [ 104.637389][ T7945] das6402-12 [ 104.639012][ T7945] das6402-16 [ 104.640590][ T7945] comedi: valid board names for das1800 driver are: [ 104.643477][ T7945] das-1701st [ 104.645043][ T7945] das-1701st-da [ 104.646681][ T7945] das-1702st [ 104.648190][ T7945] das-1702st-da [ 104.649887][ T7945] das-1702hr [ 104.651498][ T7945] das-1702hr-da [ 104.653118][ T7945] das-1701ao [ 104.654652][ T7945] das-1702ao [ 104.656164][ T7945] das-1801st [ 104.657729][ T7945] das-1801st-da [ 104.659315][ T7945] das-1802st [ 104.662369][ T7945] das-1802st-da [ 104.663977][ T7945] das-1802hr [ 104.665492][ T7945] das-1802hr-da [ 104.667096][ T7945] das-1801hc [ 104.668700][ T7945] das-1802hc [ 104.670243][ T7945] das-1801ao [ 104.671643][ T7945] das-1802ao [ 104.672180][ T1166] raw-gadget.0 gadget.7: failed to queue suspend event [ 104.673142][ T7945] comedi: valid board names for das800 driver are: [ 104.678795][ T7945] das-800 [ 104.680377][ T7945] cio-das800 [ 104.681682][ T7945] das-801 [ 104.682782][ T7945] cio-das801 [ 104.684027][ T7945] das-802 [ 104.685166][ T7945] cio-das802 [ 104.686349][ T7945] cio-das802/16 [ 104.687637][ T7945] comedi: valid board names for isa-das08 driver are: [ 104.689875][ T7945] isa-das08 [ 104.691076][ T7945] das08-pgm [ 104.692232][ T7945] das08-pgh [ 104.693380][ T7945] das08-pgl [ 104.694592][ T7945] das08-aoh [ 104.695892][ T7945] das08-aol [ 104.697429][ T7945] das08-aom [ 104.698976][ T7945] das08/jr-ao [ 104.700711][ T7945] das08jr-16-ao [ 104.702636][ T7945] pc104-das08 [ 104.704215][ T7945] das08jr/16 [ 104.705711][ T7945] comedi: valid board names for das16m1 driver are: [ 104.708025][ T7945] das16m1 [ 104.710942][ T7945] comedi: valid board names for dac02 driver are: [ 104.713112][ T7945] dac02 [ 104.714066][ T7945] comedi: valid board names for rti802 driver are: [ 104.716256][ T7945] rti802 [ 104.717383][ T7945] comedi: valid board names for rti800 driver are: [ 104.719513][ T7945] rti800 [ 104.720734][ T7945] rti815 [ 104.721764][ T7945] comedi: valid board names for pcm3724 driver are: [ 104.724000][ T7945] pcm3724 [ 104.725003][ T7945] comedi: valid board names for pcl818 driver are: [ 104.727192][ T7945] pcl818l [ 104.728342][ T7945] pcl818h [ 104.729406][ T7945] pcl818hd [ 104.730606][ T7945] pcl818hg [ 104.731743][ T7945] pcl818 [ 104.732800][ T7945] pcl718 [ 104.734085][ T7945] pcm3718 [ 104.735224][ T7945] comedi: valid board names for pcl816 driver are: [ 104.737870][ T7945] pcl816 [ 104.739154][ T7945] pcl814b [ 104.745356][ T7945] comedi: valid board names for pcl812 driver are: [ 104.747549][ T7945] pcl812 [ 104.748700][ T7945] pcl812pg [ 104.749896][ T7945] acl8112pg [ 104.751124][ T7945] acl8112dg [ 104.752270][ T7945] acl8112hg [ 104.753451][ T7945] a821pgl [ 104.754370][ T7945] a821pglnda [ 104.755568][ T7945] a821pgh [ 104.756658][ T7945] a822pgl [ 104.757789][ T7945] a822pgh [ 104.759306][ T7945] a823pgl [ 104.760669][ T7878] raw-gadget.0 gadget.7: failed to queue resume event [ 104.765289][ T7945] a823pgh [ 104.766814][ T7945] pcl813 [ 104.768241][ T7945] pcl813b [ 104.769847][ T7945] acl8113 [ 104.771401][ T7945] iso813 [ 104.772731][ T7945] acl8216 [ 104.774206][ T7945] a826pg [ 104.775582][ T7945] comedi: valid board names for pcl730 driver are: [ 104.778540][ T7945] pcl730 [ 104.780144][ T7945] iso730 [ 104.781518][ T7945] acl7130 [ 104.782674][ T1166] raw-gadget.0 gadget.7: failed to queue suspend event [ 104.782899][ T7945] pcm3730 [ 104.787131][ T7945] pcl725 [ 104.788493][ T7945] p8r8dio [ 104.789823][ T7945] acl7225b [ 104.791462][ T7945] p16r16dio [ 104.792985][ T7945] pcl733 [ 104.794379][ T7945] pcl734 [ 104.795732][ T7945] opmm-1616-xt [ 104.797364][ T7945] pearl-mm-p [ 104.798934][ T7945] ir104-pbf [ 104.800497][ T7945] comedi: valid board names for pcl726 driver are: [ 104.803342][ T7945] pcl726 [ 104.804640][ T7945] pcl727 [ 104.805959][ T7945] pcl728 [ 104.807296][ T7945] acl6126 [ 104.808618][ T7945] acl6128 [ 104.809984][ T7945] comedi: valid board names for pcl724 driver are: [ 104.812728][ T7945] pcl724 [ 104.814130][ T7945] pcl722 [ 104.815437][ T7945] pcl731 [ 104.816686][ T7945] acl7122 [ 104.817995][ T7945] acl7124 [ 104.819281][ T7945] pet48dio [ 104.821550][ T7945] pcmio48 [ 104.822930][ T7945] onyx-mm-dio [ 104.824558][ T7945] comedi: valid board names for pcl711 driver are: [ 104.827209][ T7945] pcl711 [ 104.828536][ T7945] pcl711b [ 104.829883][ T7945] acl8112hg [ 104.832812][ T7945] acl8112dg [ 104.834336][ T7945] comedi: valid board names for amplc_pc263 driver are: [ 104.842723][ T7945] pc263 [ 104.843661][ T7945] comedi: valid board names for amplc_pc236 driver are: [ 104.845865][ T7945] pc36at [ 104.846783][ T7945] comedi: valid board names for amplc_dio200 driver are: [ 104.849068][ T7945] pc212e [ 104.849974][ T7945] pc214e [ 104.851125][ T7945] pc215e [ 104.852303][ T7945] pc218e [ 104.853505][ T7945] pc272e [ 104.854473][ T7945] comedi: valid board names for comedi_parport driver are: [ 104.857036][ T7945] comedi_parport [ 104.858526][ T7945] comedi: valid board names for comedi_test driver are: [ 104.860303][ T7878] raw-gadget.0 gadget.7: failed to queue resume event [ 104.862306][ T7945] comedi_test [ 104.865124][ T7945] comedi: valid board names for comedi_bond driver are: [ 104.869996][ T7945] comedi_bond [ 104.885383][ T1166] raw-gadget.0 gadget.7: failed to queue suspend event [ 104.960503][ T7878] raw-gadget.0 gadget.7: failed to queue resume event [ 104.966173][ T7914] raw-gadget.0 gadget.7: failed to queue suspend event [ 104.971076][ T7948] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20002 [ 104.976710][ T7914] raw-gadget.0 gadget.7: failed to queue disconnect event [ 105.117100][ T7958] trusted_key: encrypted_key: insufficient parameters specified [ 105.196513][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.239233][ T7969] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.244586][ T7969] tmpfs: Unknown parameter 'nosfs/binder0' [ 105.253367][ T7969] binder: BINDER_SET_CONTEXT_MGR already set [ 105.256371][ T7969] binder: 7968:7969 ioctl 4018620d 200000000140 returned -16 [ 105.259549][ T7969] binder: BINDER_SET_CONTEXT_MGR already set [ 105.262210][ T7969] binder: 7968:7969 ioctl 4018620d 200000000100 returned -16 [ 105.299465][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.474'. [ 105.420586][ T7978] gfs2: error -5 reading superblock [ 105.454726][ T7981] netlink: 348 bytes leftover after parsing attributes in process `syz.6.476'. [ 105.534250][ T7981] kvm: kvm [7980]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 105.539364][ T7981] kvm: kvm [7980]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 105.558879][ T7981] kvm: kvm [7980]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 105.579434][ T7981] kvm: kvm [7980]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 105.583215][ T7981] kvm: kvm [7980]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 105.784850][ T7990] binder: 7989:7990 ioctl c0306201 200000000080 returned -14 [ 105.793964][ T7990] binder: 7989:7990 ioctl c0306201 2000000003c0 returned -14 [ 105.808323][ T5523] usb 12-1: USB disconnect, device number 2 [ 107.256798][ T7934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.428735][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.6.482'. [ 107.444258][ T8025] ./sys/bus/nd/drivers/nd_pmem/unbind: Can't lookup blockdev [ 107.596161][ T8037] Unable to extract alua_access_type [ 107.726381][ T8049] xt_l2tp: invalid flags combination: 8 [ 107.838450][ T8057] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 107.900987][ T42] kauditd_printk_skb: 133 callbacks suppressed [ 107.901000][ T42] audit: type=1800 audit(1786066046.566:3807): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 107.925419][ T42] audit: type=1400 audit(1786066046.586:3808): avc: denied { write } for pid=8060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.987855][ T42] audit: type=1800 audit(1786066046.646:3809): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 108.010160][ T40] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 108.023851][ T42] audit: type=1400 audit(1786066046.686:3810): avc: denied { write } for pid=8067 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.048876][ T42] audit: type=1800 audit(1786066046.696:3811): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 108.074810][ T8062] ftl_cs: FTL header not found. [ 108.077228][ T42] audit: type=1800 audit(1786066046.736:3812): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150002 res=0 errno=0 [ 108.089882][ T42] audit: type=1800 audit(1786066046.736:3813): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150043 res=0 errno=0 [ 108.108436][ T42] audit: type=1800 audit(1786066046.736:3814): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=150014 res=0 errno=0 [ 108.130381][ T42] audit: type=1800 audit(1786066046.766:3815): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150031 res=0 errno=0 [ 108.159167][ T42] audit: type=1800 audit(1786066046.816:3816): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=150172 res=0 errno=0 [ 108.165579][ T8062] block2mtd: mtd2: [/dev/loop0] erase_size = 4KiB [4096] [ 108.176689][ T40] usb 11-1: config 0 has an invalid interface number: 120 but max is 0 [ 108.179793][ T40] usb 11-1: config 0 has no interface number 0 [ 108.181989][ T40] usb 11-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.185776][ T40] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.189341][ T40] usb 11-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.193008][ T40] usb 11-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 108.200492][ T40] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.208409][ T40] usb 11-1: config 0 descriptor?? [ 108.215081][ T40] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.120/input/input7 [ 108.529581][ T8080] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 108.570178][ T5882] usb 11-1: USB disconnect, device number 3 [ 108.766484][ T8087] can: request_module (can-proto-0) failed. [ 108.877552][ T8102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48838 sclass=netlink_route_socket pid=8102 comm=syz.6.501 [ 108.915437][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.7.500'. [ 108.977651][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 108.987552][ T8107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.442482][ T8144] netlink: ct family unspecified [ 109.448083][ T8144] openvswitch: netlink: Actions may not be safe on all matching packets [ 109.481821][ T8143] tmpfs: Unknown parameter 'apol' [ 109.572120][ T8150] binder: BINDER_SET_CONTEXT_MGR already set [ 109.603821][ T8150] binder: 8148:8150 ioctl 4018620d 200000000100 returned -16 [ 109.630681][ T8149] i801_smbus 0000:00:03.0: PCI INT A: failed to register GSI [ 109.633070][ T8149] i801_smbus 0000:00:03.0: Failed to enable SMBus PCI device (-16) [ 109.638444][ T8149] i801_smbus 0000:00:03.0: probe with driver i801_smbus failed with error -16 [ 109.648263][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 109.663249][ T8166] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 109.884995][ T8194] nvmet: adding nsid 1 to subsystem testnqn [ 109.889736][ T8193] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 109.901352][ T8193] qnx6: wrong signature (magic) in superblock #1. [ 109.905540][ T8194] [ 109.906517][ T8194] ====================================================== [ 109.909257][ T8194] WARNING: possible circular locking dependency detected [ 109.911553][ T8194] syzkaller #0 Not tainted [ 109.913163][ T8194] ------------------------------------------------------ [ 109.915372][ T8194] syz.2.524/8194 is trying to acquire lock: [ 109.917262][ T8194] ffff88803ac471e8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 109.920568][ T8194] [ 109.920568][ T8194] but task is already holding lock: [ 109.922881][ T8194] ffff88805a79c868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 109.925645][ T8194] [ 109.925645][ T8194] which lock already depends on the new lock. [ 109.925645][ T8194] [ 109.928837][ T8194] [ 109.928837][ T8194] the existing dependency chain (in reverse order) is: [ 109.931639][ T8194] [ 109.931639][ T8194] -> #2 (&subsys->lock){+.+.}-{4:4}: [ 109.933972][ T8194] lock_acquire+0x1b9/0x370 [ 109.935553][ T8194] __mutex_lock+0x1a4/0x1bd0 [ 109.937146][ T8194] nvmet_ns_device_path_store+0x57/0x1c0 [ 109.939087][ T8194] configfs_write_iter+0x302/0x4e0 [ 109.940876][ T8194] vfs_write+0x6ac/0x1050 [ 109.942411][ T8194] ksys_write+0x12a/0x250 [ 109.943922][ T8194] do_syscall_64+0x115/0x870 [ 109.945523][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.947491][ T8194] [ 109.947491][ T8194] -> #1 (&p->frag_sem){.+.+}-{4:4}: [ 109.949775][ T8194] lock_acquire+0x1b9/0x370 [ 109.951395][ T8194] down_read+0x99/0x4c0 [ 109.952863][ T8194] __configfs_open_file+0xe8/0x9c0 [ 109.954605][ T8194] do_dentry_open+0x6ab/0x14d0 [ 109.956245][ T8194] vfs_open+0x82/0x3f0 [ 109.957705][ T8194] dentry_open+0x71/0xd0 [ 109.959200][ T8194] ima_calc_file_hash+0xe1/0x380 [ 109.960912][ T8194] ima_collect_measurement+0x94f/0xb30 [ 109.962785][ T8194] process_measurement+0xdfe/0x2350 [ 109.964558][ T8194] ima_file_check+0xc3/0x110 [ 109.966120][ T8194] security_file_post_open+0xc4/0x210 [ 109.967997][ T8194] path_openat+0x985/0x4280 [ 109.969577][ T8194] do_file_open+0x20e/0x430 [ 109.971173][ T8194] do_sys_openat2+0x10f/0x1e0 [ 109.972797][ T8194] __x64_sys_openat+0x12d/0x210 [ 109.974477][ T8194] do_syscall_64+0x115/0x870 [ 109.976075][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.978097][ T8194] [ 109.978097][ T8194] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 109.980752][ T8194] check_prev_add+0xeb/0xe60 [ 109.982355][ T8194] __lock_acquire+0x136c/0x1a40 [ 109.984031][ T8194] lock_acquire+0x1b9/0x370 [ 109.985743][ T8194] __mutex_lock+0x1a4/0x1bd0 [ 109.987683][ T8194] process_measurement+0x5ab/0x2350 [ 109.989522][ T8194] ima_file_check+0xc3/0x110 [ 109.991223][ T8194] security_file_post_open+0xc4/0x210 [ 109.993347][ T8194] path_openat+0x985/0x4280 [ 109.995298][ T8194] do_file_open+0x20e/0x430 [ 109.997255][ T8194] file_open_name+0x1c3/0x3e0 [ 109.999250][ T8194] filp_open+0x2e/0x50 [ 110.000748][ T8194] nvmet_file_ns_enable+0x95/0x420 [ 110.002574][ T8194] nvmet_ns_enable+0x35f/0x5d0 [ 110.004243][ T8194] nvmet_ns_enable_store+0x11e/0x160 [ 110.006085][ T8194] configfs_write_iter+0x302/0x4e0 [ 110.008031][ T8194] vfs_write+0x6ac/0x1050 [ 110.009639][ T8194] ksys_write+0x12a/0x250 [ 110.011215][ T8194] do_syscall_64+0x115/0x870 [ 110.012833][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.014980][ T8194] [ 110.014980][ T8194] other info that might help us debug this: [ 110.014980][ T8194] [ 110.018016][ T8194] Chain exists of: [ 110.018016][ T8194] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &subsys->lock [ 110.018016][ T8194] [ 110.022146][ T8194] Possible unsafe locking scenario: [ 110.022146][ T8194] [ 110.024441][ T8194] CPU0 CPU1 [ 110.026115][ T8194] ---- ---- [ 110.027799][ T8194] lock(&subsys->lock); [ 110.029129][ T8194] lock(&p->frag_sem); [ 110.031239][ T8194] lock(&subsys->lock); [ 110.033360][ T8194] lock(&ima_iint_mutex_key[depth]); [ 110.035060][ T8194] [ 110.035060][ T8194] *** DEADLOCK *** [ 110.035060][ T8194] [ 110.037563][ T8194] 6 locks held by syz.2.524/8194: [ 110.039155][ T8194] #0: ffff888037b36470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 110.042006][ T8194] #1: ffff888023ffc450 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 110.044865][ T8194] #2: ffff88803df80880 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 110.048023][ T8194] #3: ffff88803ac1bb70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 110.051315][ T8194] #4: ffffffff8fd31308 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 110.054471][ T8194] #5: ffff88805a79c868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 110.057377][ T8194] [ 110.057377][ T8194] stack backtrace: [ 110.059299][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.2.524 Not tainted syzkaller #0 PREEMPT(full) [ 110.059315][ T8194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 110.059323][ T8194] Call Trace: [ 110.059340][ T8194] [ 110.059346][ T8194] dump_stack_lvl+0x100/0x190 [ 110.059362][ T8194] print_circular_bug.cold+0x178/0x1c7 [ 110.059382][ T8194] check_noncircular+0x146/0x160 [ 110.059396][ T8194] ? arch_stack_walk+0xa6/0xf0 [ 110.059409][ T8194] check_prev_add+0xeb/0xe60 [ 110.059425][ T8194] ? stack_trace_save+0x8e/0xc0 [ 110.059437][ T8194] __lock_acquire+0x136c/0x1a40 [ 110.059452][ T8194] lock_acquire+0x1b9/0x370 [ 110.059464][ T8194] ? process_measurement+0x5ab/0x2350 [ 110.059479][ T8194] ? __pfx___might_resched+0x10/0x10 [ 110.059495][ T8194] __mutex_lock+0x1a4/0x1bd0 [ 110.059510][ T8194] ? process_measurement+0x5ab/0x2350 [ 110.059522][ T8194] ? process_measurement+0x5ab/0x2350 [ 110.059537][ T8194] ? __pfx___mutex_lock+0x10/0x10 [ 110.059554][ T8194] ? __pfx___might_resched+0x10/0x10 [ 110.059569][ T8194] ? down_write+0x146/0x1f0 [ 110.059584][ T8194] ? process_measurement+0x5ab/0x2350 [ 110.059596][ T8194] process_measurement+0x5ab/0x2350 [ 110.059609][ T8194] ? find_held_lock+0x2b/0x80 [ 110.059618][ T8194] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 110.059632][ T8194] ? __pfx_process_measurement+0x10/0x10 [ 110.059648][ T8194] ? avc_has_perm+0x135/0x1e0 [ 110.059662][ T8194] ? __pfx_avc_has_perm+0x10/0x10 [ 110.059674][ T8194] ? hook_file_open+0x24f/0x8f0 [ 110.059691][ T8194] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 110.059706][ T8194] ima_file_check+0xc3/0x110 [ 110.059718][ T8194] ? __pfx_ima_file_check+0x10/0x10 [ 110.059731][ T8194] security_file_post_open+0xc4/0x210 [ 110.059748][ T8194] path_openat+0x985/0x4280 [ 110.059761][ T8194] ? stack_depot_save_flags+0x479/0x9d0 [ 110.059778][ T8194] ? __pfx_path_openat+0x10/0x10 [ 110.059789][ T8194] ? kasan_save_stack+0x3f/0x50 [ 110.059801][ T8194] ? kasan_save_stack+0x30/0x50 [ 110.059812][ T8194] ? kasan_save_track+0x14/0x30 [ 110.059824][ T8194] ? __kasan_slab_alloc+0x89/0x90 [ 110.059838][ T8194] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 110.059849][ T8194] ? do_getname_kernel+0x5d/0x250 [ 110.059866][ T8194] ? filp_open+0x1d/0x50 [ 110.059882][ T8194] ? nvmet_file_ns_enable+0x95/0x420 [ 110.059902][ T8194] do_file_open+0x20e/0x430 [ 110.059920][ T8194] ? __pfx_do_file_open+0x10/0x10 [ 110.059943][ T8194] ? rcu_is_watching+0x12/0xc0 [ 110.059961][ T8194] file_open_name+0x1c3/0x3e0 [ 110.059974][ T8194] ? __pfx_file_open_name+0x10/0x10 [ 110.059987][ T8194] ? do_getname_kernel+0x5d/0x250 [ 110.060000][ T8194] ? __asan_memcpy+0x3c/0x60 [ 110.060010][ T8194] ? do_getname_kernel+0x1be/0x250 [ 110.060023][ T8194] filp_open+0x2e/0x50 [ 110.060036][ T8194] nvmet_file_ns_enable+0x95/0x420 [ 110.060051][ T8194] nvmet_ns_enable+0x35f/0x5d0 [ 110.060064][ T8194] nvmet_ns_enable_store+0x11e/0x160 [ 110.060084][ T8194] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 110.060110][ T8194] configfs_write_iter+0x302/0x4e0 [ 110.060128][ T8194] vfs_write+0x6ac/0x1050 [ 110.060154][ T8194] ? __pfx_configfs_write_iter+0x10/0x10 [ 110.060173][ T8194] ? __pfx_vfs_write+0x10/0x10 [ 110.060225][ T8194] ksys_write+0x12a/0x250 [ 110.060243][ T8194] ? __pfx_ksys_write+0x10/0x10 [ 110.060257][ T8194] do_syscall_64+0x115/0x870 [ 110.060271][ T8194] ? clear_bhb_loop+0x70/0xc0 [ 110.060283][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.060294][ T8194] RIP: 0033:0x7f55f299e0d9 [ 110.060305][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.060317][ T8194] RSP: 002b:00007f55f385c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.060331][ T8194] RAX: ffffffffffffffda RBX: 00007f55f2c25fa0 RCX: 00007f55f299e0d9 [ 110.060338][ T8194] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 110.060346][ T8194] RBP: 00007f55f2a35024 R08: 0000000000000000 R09: 0000000000000000 [ 110.060353][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.060362][ T8194] R13: 00007f55f2c26038 R14: 00007f55f2c25fa0 R15: 00007fff038ad618 [ 110.060378][ T8194] [ 110.081463][ T8193] qnx6: unable to read the first superblock [ 110.185124][ T8194] binder: BC_ACQUIRE_RESULT not supported [ 110.242217][ T8194] binder: 8191:8194 ioctl c0306201 2000000003c0 returned -22