last executing test programs: 18m29.550388516s ago: executing program 32 (id=321): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000040)='&@!\x00', &(0x7f0000000080)='\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000200)='\x00']}, &(0x7f0000000340)={[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='*.#\x00']}, 0x800) r1 = socket$inet6(0xa, 0x1, 0x7db6) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xff, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r4, r4}, 0xffffffffffffffff, 0xfe, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x7, 0x1, 0x6, 0x800100000000}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300029781a000100010000000000000081000000000000000000000014000200fc6e39205e0000000001000000000000"], 0x30}}, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) 13m53.882731724s ago: executing program 33 (id=1286): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x4d03f) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x18) 13m9.917558929s ago: executing program 34 (id=1442): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="2000000340000000840000000200000006000400280100000b", @ANYRES32=r2], 0x20, 0x6040}, 0x6) 12m16.757140822s ago: executing program 35 (id=1646): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040000"], 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0xff0f0000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 12m14.362303179s ago: executing program 36 (id=1656): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\xe4\xda\xf9\xcd7el\xb7\xe6\b\x00\xd8\x8f\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x92\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xd9\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7\xf2\xa0D-N\xf9\xba!L]h;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\xeaq\xbb\x03&\xb4mi\xc7\xff\xca\xd8\x9f\xae\xa3\x04\xaa\x10\xe7\x98\xe48\x8d', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f0904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x40, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setitimer(0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x3008, 0x40, 0xfffffffe, 0x2b9b, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x7fffffff}]}) 7m47.606146003s ago: executing program 37 (id=2558): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x100010, 0xffffffffffffffff, 0xd77e0000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r2 = syz_usb_connect(0x2, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040480b03100001000000010902390002010080fa0904000000ff0000000904010000ff0000000904010103ff000000070501024000000705810240"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) syz_usb_ep_read(r2, 0x1, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x1, &(0x7f0000000040)={0x5, "810556c721393f4084c89ea7f77d040b00"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r4 = syz_clone(0x20100000, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0) syz_open_procfs(r4, 0x0) 5m28.86222213s ago: executing program 38 (id=3022): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, 0x0, 0x0) 5m24.817649676s ago: executing program 39 (id=2908): r0 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5m18.669310027s ago: executing program 40 (id=3084): capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 5m12.722341982s ago: executing program 41 (id=3036): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1, 0x80, 0x6) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="61050603030502069907"], 0x15) 4m39.644321388s ago: executing program 42 (id=3393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1001, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 4m36.492676824s ago: executing program 43 (id=3409): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r1, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}, 0x1, 0xffffffffffffffa6}, 0x8000) 4m33.539949017s ago: executing program 44 (id=3437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x44}}, 0x0) 4m33.472788461s ago: executing program 45 (id=3436): ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) 4m5.813945193s ago: executing program 46 (id=3539): syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mount$9p_fd(0x0, 0x0, 0x0, 0x14c98, &(0x7f0000000040)=ANY=[]) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800004000000053, 0x3) 3m51.512589262s ago: executing program 47 (id=3711): mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) 3m50.122073876s ago: executing program 48 (id=3728): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac1414aaac14140000000b0014000000000000000000000007"], 0x38}, 0x0) 3m49.754060395s ago: executing program 49 (id=3734): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={[&(0x7f00000000c0)='{[\x00', &(0x7f0000000100)='[!\x00']}, 0x0) 3m47.217364632s ago: executing program 50 (id=3745): r0 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) 3m45.861440262s ago: executing program 51 (id=3750): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x0, 0x0) 3m23.593156751s ago: executing program 52 (id=3817): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/8, 0x8, 0x0, 0x0, 0x1, 0x10}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 3m19.874786294s ago: executing program 53 (id=3830): iopl(0x3) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000ac0)=[{&(0x7f0000000080)="ee", 0x1}], 0x1, 0x4) 3m17.736161888s ago: executing program 54 (id=3839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4048010) 2m56.614660473s ago: executing program 2 (id=3886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) inotify_init() setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 2m55.877387793s ago: executing program 2 (id=3890): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r1 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000ec0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x40, 0x5, 0x1, 'e'}}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x54f554893171c338, 0x11, 0xd8, {0xd8, 0x7, "fbce8571fe062660047d3d38a221bf2e1a004d1676f52bb687bdfa04ac2de9e59306befe919b48e2310291eddf5a09089b24ad7bf0b3d51e4d79e6f0ff2fd64e6b3d8c7d0d74b36cf32e1c3c580b5bf67e8247caa96d5c1f2e5c82b301b5bcf9ccfa785866f53b8226e0808dfd04bae36ee72c0026a1128c67f21c7526614650752e8201a248dddf992dbfe7e71e645ced49745aef117194f4f6076b2381f6db45ff961fb6eafc1df4fa7073b886a0ed6490c7fe1246b84933a9540f7e43d2cec3f51c3dc3b91a0a1dc744517c246ec686872ff52845"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xa, 0xf8, "ceb535338cd6495fbb7584974a0af91bffaedd388d5c161a21f3fc0cedc6dc3ab94a68e37f9808f26d0567ee70467634624f4672ffbcaf0cfd4a9df20af75db612f1aa4ec6da4be2929676e454b6e3b73d9ce6632ad09cf5fae9a9cf7fde6515eaed3ec98f2f41f72d5ca37cf7bbdb0e4281df83e3728c60fd7d7a5d85591cf88d579854a80db2dd4770f526feafc305e02b9f6f48b817dc1d740a6b90bcf21cea121d96918e8e58e5fe088081cb6c811ec0dde7ddcf9c4d4f3618575ec981294e00823921c344e01cc9a12cefc90891544ca0bec6f3b392026f23327ef67efc80ff228c040bc5582b4117f5b8c78e7eb4fe6c1ea7bd7c70"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0xc0, 0x5, 0x5, "3bdbd420a8"}, 0x0}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="8af89f24183eb7176db1ab4325244d81bfb74a49a2c11f13172f6e63c39c9d9e82563d4af8a070fc44197d78ad59a41ecae4fa7fb50dfb11dbf0f7f50ca998203d2ffa4cdb3107ba45a288aa3c1018fdff4e28d95d1d9249ffff7976b5b759cf12db6a80012b431bfc6f27c0862872506b6e8e3ab43d089595c71c85323faa2d67532da94448e8ceb306296ec013cb6ba6b498866f40b4f842978cd8b5914c723e5f1a523446c12d9e678a052c958216ac397433540ef03df5a8f078cf19bfe97b13bbe0661bc52f687aa4782f82dc04c111018e7bfa34a529290135b7309b6d61b6ca39fcb43db133c9368d0234b15b4e43c59eec10fd56b6"], &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000300)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="400d00b6000000c13fa4dd07999cfc259ef2e1ed7ca3d16ef183999ebae35ba20f1a5aa48360b15921c53daa2784c6a470c9171eb2b5a9b6067516e0b7836831e03cad371234cd6680b2eec2f23fd0ca9a56621d7b05f5fc12cb74625a79d235043ddd845869c5632ef0bc341eaf563ce9f61bc9175f44a50afc9a9e0ab7ac75bc5f57"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x18, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_connect(0x6, 0x371, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x10c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xd8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffc}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x6, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x45}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3e5b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0xfffffffffffffdef, 0x4, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x30000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x927a}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) 2m52.720360585s ago: executing program 2 (id=3898): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2m52.553474623s ago: executing program 2 (id=3899): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m52.355334713s ago: executing program 2 (id=3901): openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1901) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m51.389113928s ago: executing program 2 (id=3903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m50.139983567s ago: executing program 55 (id=3903): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m35.995827246s ago: executing program 1 (id=3941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '&'}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x80000001, 0x672, 0xc, 0x7, 0x7ab, 0x200, 0x3, 0x7ff}, 0x0, 0x0, &(0x7f0000000240), 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000000)={0x1, 0xc41c}) preadv(r2, &(0x7f0000003f40)=[{&(0x7f0000000300)=""/105, 0x69}, {&(0x7f00000003c0)=""/74, 0x4a}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f0000000700)=""/102, 0x66}], 0x4, 0x1, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r6, 0x0, &(0x7f0000000780)=""/4115}, 0x1a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="50110f7e178f16e0"], 0x0) 2m33.183270321s ago: executing program 1 (id=3945): socket$kcm(0x10, 0x0, 0x0) r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) write(r0, &(0x7f0000000000)="080018000000", 0x6) read(r0, &(0x7f00000003c0)=""/14, 0xe) 2m32.574957997s ago: executing program 1 (id=3948): file_getattr(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x18, 0x100) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac000705820100020109040200"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfffffffe, 0xc, 0xda, 0x5d02, r0, 0x6, '\x00', 0x0, r0, 0x1, 0x0, 0x4, 0x5}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x0, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r5 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x44010) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) fsopen(0x0, 0x0) 2m28.951273203s ago: executing program 7 (id=3954): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101097, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2m28.56691305s ago: executing program 7 (id=3957): socket$kcm(0x10, 0x0, 0x0) r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10) write(r0, &(0x7f0000000000)="080018000000", 0x6) read(r0, &(0x7f00000003c0)=""/14, 0xe) 2m27.123840424s ago: executing program 7 (id=3961): mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x10005) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) r4 = syz_open_procfs$pagemap(r1, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000340)={0x60, 0x2, &(0x7f00006f1000/0x3000)=nil, &(0x7f0000ebb000/0x4000)=nil, 0x1ff, &(0x7f0000000300)=[{0x8, 0x2, 0x2}], 0x1, 0x1, 0x5, 0x12, 0x42, 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write(r6, &(0x7f00000003c0)="9a33cb7a49", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1}}, 0x40) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000008d0000000000"], 0x0, 0x34}, 0x28) socket$l2tp6(0xa, 0x2, 0x73) 2m25.311888302s ago: executing program 7 (id=3963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m25.21144095s ago: executing program 1 (id=3964): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 2m24.866979489s ago: executing program 7 (id=3966): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) 2m24.589681632s ago: executing program 1 (id=3967): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)}}], 0x2, 0x40480c0) sendto$inet(r1, &(0x7f0000000000)="1ec419", 0x3, 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m22.908696099s ago: executing program 1 (id=3973): mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x10005) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) r4 = syz_open_procfs$pagemap(r1, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000340)={0x60, 0x2, &(0x7f00006f1000/0x3000)=nil, &(0x7f0000ebb000/0x4000)=nil, 0x1ff, &(0x7f0000000300)=[{0x8, 0x2, 0x2}], 0x1, 0x1, 0x5, 0x12, 0x42, 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write(r6, &(0x7f00000003c0)="9a33cb7a49", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1}}, 0x40) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000008d0000000000"], 0x0, 0x34}, 0x28) socket$l2tp6(0xa, 0x2, 0x73) 2m22.821085897s ago: executing program 7 (id=3974): r0 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r0, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m22.368847671s ago: executing program 56 (id=3973): mlock2(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6(0xa, 0x3, 0x10005) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) r4 = syz_open_procfs$pagemap(r1, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000340)={0x60, 0x2, &(0x7f00006f1000/0x3000)=nil, &(0x7f0000ebb000/0x4000)=nil, 0x1ff, &(0x7f0000000300)=[{0x8, 0x2, 0x2}], 0x1, 0x1, 0x5, 0x12, 0x42, 0x8}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write(r6, &(0x7f00000003c0)="9a33cb7a49", 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1}}, 0x40) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000008d0000000000"], 0x0, 0x34}, 0x28) socket$l2tp6(0xa, 0x2, 0x73) 2m22.350898764s ago: executing program 57 (id=3974): r0 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r0, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m29.869672966s ago: executing program 6 (id=4135): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0103"], 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1m29.586296918s ago: executing program 6 (id=4138): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4, 0x1100) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000440)=""/102400, 0x19000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffeae, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='udf\x00', 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x94}}, 0x0) 1m29.127107733s ago: executing program 6 (id=4141): openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x46, 0x3e}, 0x18) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x80000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x6b4e1c1017bef5ac, 0x0, &(0x7f0000000500)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000700)={&(0x7f00000003c0)="120eb51c09523d85223b584dd4b8b51f5fae9c4f92c3ebf188846516fd2d224eb16784acefd27bd99a0b73b5190b1602b7b7e418fcc007f1df8de7633d8c336ac3a4928b4dd76ff6bd3c15ba3f462dc6016a467d0d5ffe3d3fb39728e921b43f1726f1e43c9cace17cb79359581dce9dcbf51a10f969bacc426a48cba644c44ec49f657ef468c8b079b1bb07dfe22b44172ea1881f5d859ea334bc0255e23cf26879f55715df8cfaf4a15c3ae90169e0aa66069a46a88e6615d0635bfccfbce61d721c225f33ab3d60cbe77b6f29b63d556cdab48a47410a8cfba41e70043bba23762b9e558c9729d288", 0xea}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) 1m24.734920477s ago: executing program 6 (id=4149): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 1m24.144114971s ago: executing program 6 (id=4151): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0x2f, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000500)={r2, 0x800, {0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x5, 0x1a, 0x0, "4c34c59b20d56236fc221a71649fb0b4662df02f087d0ac37fda5dc428193230c95a3b53477ae9a55ddd18ef63a604942e4aa31b3eb60bba16869be793703556", "d4d64e72b620dbd04dbb6b1529e00014900726fa0bf1ffd15faffe3690b1d83aa4c8d80706ae87131935c4243886fc606a4d09393c432b1c58d9cfee685d2c12", "2661210d09ca41ce43ba288d3778e611791bbf979b6e37ead2d45df8a8010ddf", [0x9, 0x6]}}) write(r2, &(0x7f0000000180)='1', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2fde0) 1m22.964963645s ago: executing program 6 (id=4153): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) 1m22.27784654s ago: executing program 58 (id=4153): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) 1m20.617198713s ago: executing program 5 (id=4161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x0, 0x0, 0xb, 0xd623, 0x0, 0x6}}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x5015, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x20000010) uname(&(0x7f0000000200)=""/133) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1m19.777075903s ago: executing program 5 (id=4163): r0 = socket$alg(0x26, 0x5, 0x0) mount$afs(&(0x7f0000000100)=@cell={0x23, '', 'syz1', '.backup'}, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000380)={[{}, {@dyn}]}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) ptrace(0x10, 0x0) r1 = socket(0x1e, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r3, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) recvmmsg(r4, &(0x7f0000004380)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/147, 0x93}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/97, 0x61}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/144, 0x90}], 0xa, &(0x7f0000004280)=""/240, 0xf0}, 0x1c000002}], 0x1, 0x40002001, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) 1m18.397200914s ago: executing program 5 (id=4164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x1, @local}, 0x4a, {0x2, 0x4e23, @dev}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast1}, {0x0, @broadcast}, 0xe, {0x2, 0x4e20, @remote}, 'ip6tnl0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, 0x0, 0x0}, 0x0) 1m14.608389142s ago: executing program 5 (id=4174): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 1m13.874388812s ago: executing program 5 (id=4175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054f02000000000001090224000100000001090400000103000000092100000001221800090581030020"], 0x0) syz_usb_connect(0x3, 0x33d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2d, 0x2e, 0xec, 0x40, 0x4e2, 0x1414, 0xa890, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32b, 0x2, 0x1, 0x5, 0x10, 0x6, "", [{{0x9, 0x4, 0x95, 0x3, 0x3, 0xda, 0x88, 0x51, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0xa}}], [{{0x9, 0x5, 0xe, 0x0, 0x8, 0x7, 0x6, 0x3, [@generic={0xfc, 0x5, "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"}, @generic={0x2, 0x4}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x1, 0xf, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1c}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x11, 0x4}]}}, {{0x9, 0x5, 0xa, 0x3, 0x0, 0xe6, 0x8, 0x1, [@generic={0x2, 0x3}]}}]}}, {{0x9, 0x4, 0x57, 0x9, 0x6, 0xff, 0xff, 0xff, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x4c}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x4, "a5a1"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x3, 0x2, 0xb9c7, 0x6, 0x41}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0xb6, "c58351037847"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x1, 0x1, 0xa7}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x3, 0x6, [0x6, 0x7, 0x7, 0xa, 0xa, 0x7], 0x3}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x3, 0x8, '.'}]}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0x1, 0x0, [@generic={0x2c, 0xc, "d72a72d150e606e8e1643aa64604c063f6f90a9834c8e1b24df33529a95a8ac014e6833290b5a98ede35"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xce, 0xcf, 0x0, [@generic={0xc0, 0x7, "7693673573910e7f6a834f36e898573339cc5ee0f3b567427a70952b1716540a28b976185c7d3f4d311cf62966b1027e6cc127f50d8f9e46ff0c88d48528e664c536212818b4e51fbb8783d731de937c6867f610f52230a5a997bd09d485a965864be223bad522cb069fd052ec695f1d57638ad491c324dd7a3813f6fb4fe9a555b70fdbffef9fc7ae2e0f264914b7144fae2f7def7f791807e9dd2854ae31f957f9feb0e81551b76e4f575e7100edbfbdf22e76b63ac9d53a84098869ca"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xa, 0x40, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x82, 0x800}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x0, 0x8, [@generic={0x5a, 0x1, "718c3fd05ee363b1dd2def91c73eb19c46f05e7dee674331017bab45aa81e875349e80646ec9b053afd3304aeea4e10c53d1fc93f5f86441e86613d8b2085c3dedcc8a85d861e6ba34214ab6507520089aeda7f5f8fa75bb"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0x5, 0x4, 0x200, 0xb5, 0x7, 0x4}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x9, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1a, 0x5}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x1, 0xf8, 0x0, 0xff, 0x6}, 0x34, &(0x7f0000000540)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0x0, 0x2, [0x0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x400, 0xf, 0x8, [0x1fe0000, 0xf, 0x30, 0x3fcf]}, @ptm_cap={0x3}]}, 0x6, [{0xdb, &(0x7f0000000580)=@string={0xdb, 0x3, "f6d602f848d7bdd9998b164f2827ae063ab85602bebe73c2f3f34f70f198d8e0fbced014b5109a01a62fcac0555cb5f0f31925766bae4bf8cc77f6cb23240411d065baca6b0eae5ae0daf76d1c0c37f2bdc0a0f611c93e14010e51e4a3df6658953e547700919ca043bf3298e4596f546e0953d45882b6ba11dcb5d2ac08f9036fa6ff86fbb8398d82c21d2d0e75adcb966876c0216a5f3264543768feb0b4b39723f2803b7b9dbb5779a3ac4c040fc2479b249b97a41432551b68ee7a114fefec010363bff1a1712f85e898976190f298a8cb2d6bb420f997"}}, {0x87, &(0x7f0000000680)=@string={0x87, 0x3, "7fed140989432123330f34bed41ffdd02129316cd99ed454679b51a86d191cb158a9ef4afe897fda6d37ef46683e4c6021c2e9e57be4049ca9b96d8e847b90118ec1dfecc0b240ac8bfd47cb55352a25ba23974b44f01d4ffd41f69e2a3f7c858b9c66e5a89f22cdcd736d68ab031090fee4ea61fc8f08d8e6127b21747fd5233a67743a56"}}, {0xce, &(0x7f0000000740)=@string={0xce, 0x3, "3b5a4b049dc853b0517815d0949ad0d55a0ef25ea72bb5cb7010ee57b9ca034b8d232ab70bb7388e6b4ca8ae17fe3589b05e1b058786f95a75912a5759e0b45ea849087707a817e4e0c50fcd088c102d6fffde830498893bedc7457659fabdf1383fb21f300f319e9001fdcddd8f813417a65894702873efe0efff90b525a865728be75f29b25a161afc07c137535da1015210eeac5808d9d9d81a9b8102500188adcd967946a1e7a0a3d86c81131e7565bc73f74b49799c3c60e722c66c212908c9116023b434931dc71072"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41b}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, '\x00'}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 1m11.816998268s ago: executing program 5 (id=4186): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x2, 0xd1, 0x1ff, 0x99f5, 0x9, 0x5}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)={@void, @void, @eth={@remote, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x16, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}, "a902"}}}}}, 0x24) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e24, 0x2000002, @remote, 0x29}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000080)=[@hoplimit={{0x14, 0x29, 0x34, 0x10001}}], 0x18}, 0x4004000) 1m10.615049977s ago: executing program 59 (id=4186): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x2, 0xd1, 0x1ff, 0x99f5, 0x9, 0x5}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) add_key(&(0x7f0000000200)='logon\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)={@void, @void, @eth={@remote, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x16, 0x67, 0x0, 0x7, 0x32, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}, "a902"}}}}}, 0x24) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e24, 0x2000002, @remote, 0x29}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000080)=[@hoplimit={{0x14, 0x29, 0x34, 0x10001}}], 0x18}, 0x4004000) 15.257211891s ago: executing program 4 (id=4322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000800)={0x28, 0x24, 0x1, 0x0, 0x0, "", [@generic="000000000100000000000100ffffffff00", @nested={0x4, 0x2}]}, 0x28}], 0x1}, 0x4008) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mkdir(0x0, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000000601030000000000000000030000000c0000020073797a32000019000500040000000000050005000a000000050001475d00000013000300776173683a6e65742c69666163650000"], 0x58}}, 0x4000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x11080, 0x0, 0x0, 0x7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000008ea00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076003008cb89e08f088a8", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.792972654s ago: executing program 4 (id=4325): syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000008351210004000010203010902260001011810040904000001010300060724030202000709050c"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000140)={0x2, 0x6}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x4c831, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040800) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x14, 0x4) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000004c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) syz_emit_ethernet(0xc2, &(0x7f0000002ec0)={@multicast, @random="d8be17d19221", @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "1ed996", 0x8c, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@hopopts={0x67, 0x7, '\x00', [@pad1, @generic={0x2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x1ff, [0x8, 0x4, 0x2]}}]}, @srh={0x3b, 0x0, 0x4, 0x0, 0x3b, 0x10, 0xf65}, @srh={0x0, 0x0, 0x4, 0x0, 0x7, 0x68, 0x8}, @hopopts={0x33}, @dstopts={0x5c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @generic, @padn]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x3ff, 0x0, 0x800}}}}}}}, 0x0) 12.686213458s ago: executing program 8 (id=4332): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000004140)={0x11, @empty, 0x4e24, 0x0, 'lc\x00', 0x2c, 0xfffffff3, 0xd}, 0x2c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)}}], 0x1, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000100)=0x200006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x200000f2, &(0x7f0000000340)}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffa, 0x19, 0x0, 0x100, 0x32, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.156582697s ago: executing program 4 (id=4336): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xa4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000280)={0x0, 'macsec0\x00', {0x1}, 0x7259}) 9.833036734s ago: executing program 9 (id=4338): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='jA', 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600)) mkdirat(0xffffffffffffffff, 0x0, 0x20) r6 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x2, 0x0) 9.631544113s ago: executing program 4 (id=4339): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x28) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read(r2, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$binfmt_script(r3, &(0x7f0000010380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002004e0f7f00000100000000000000001400020002004e207f0000020000000000000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x70, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '1234567890123456'}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "00172233f60ad0b992422bc1ccddeeff13596dbe548e3414b3da8002"}}]}]}, 0x70}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018", 0x5, 0x20000800, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000000)="01", 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r7, 0x0, 0x0}, 0x10) 9.627079753s ago: executing program 3 (id=4340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4048010) 9.489644633s ago: executing program 3 (id=4341): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) epoll_create(0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d800"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000300000000000008004500000000000000fb019078ac1e0100000004bb100cb53c2664ef62345700077f00008069aeaafe860ffff7ffff01094d432b335212508606000000200000"], 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000186dd06100001000074000000fe80000000000000faffffffffffff36aaaaaaaaaabb20010000000000000000000000000002ef9f62239609e9e3f1ce91ddc6a32634d43a9dd48d6aefe54620106e9d24e071b186f42bc4d9d74fd9c8d8a9bde221f3810922e2d1aa1b9d6c0751ad025ddd9952ce25e134ac3b1b816d23f6e8b154d8c0e304da9be388121d86f5c19f2917552aa6438fdeac6a9bf9776d027f9025"], 0x34) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000f00)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010000080"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b050021"], 0x38}, 0x1, 0x0, 0x0, 0x4090}, 0x4) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x10, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYRES64=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) dup(r7) 9.281097349s ago: executing program 0 (id=4342): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/29, 0x1d, 0xf000000}, 0xfffffffa}], 0x1, 0x12141, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000400)={0xfffffff8, {{0xa, 0x4e21, 0x9, @mcast1, 0x8}}, 0x0, 0x6, [{{0xa, 0x4e21, 0x1, @mcast2, 0x1}}, {{0xa, 0x4e23, 0xd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e22, 0x5, @loopback, 0x80000000}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x7}}, {{0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}, 0x100}}]}, 0x390) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x1, 0x8, 0xb01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.738228281s ago: executing program 0 (id=4343): r0 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r0, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) pipe(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.490462231s ago: executing program 8 (id=4344): mmap(&(0x7f0000567000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x6ce4000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="e6c37adc001c00128009000100766c616e0000ac82b000000c000280060001000200000008", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r3, 0x0, r3) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f00007f9000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.894023231s ago: executing program 9 (id=4345): listen(0xffffffffffffffff, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2e02, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x40001000}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000000c0)) 6.825103052s ago: executing program 4 (id=4346): syz_usb_connect$midi(0x3, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000008351210004000010203010902260001011810040904000001010300060724030202000709050c"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000140)={0x2, 0x6}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x4c831, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040800) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x14, 0x4) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000004c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) syz_emit_ethernet(0xc2, &(0x7f0000002ec0)={@multicast, @random="d8be17d19221", @void, {@ipv6={0x86dd, @tcp={0xc, 0x6, "1ed996", 0x8c, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@hopopts={0x67, 0x7, '\x00', [@pad1, @generic={0x2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x1ff, [0x8, 0x4, 0x2]}}]}, @srh={0x3b, 0x0, 0x4, 0x0, 0x3b, 0x10, 0xf65}, @srh={0x0, 0x0, 0x4, 0x0, 0x7, 0x68, 0x8}, @hopopts={0x33}, @dstopts={0x5c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @generic, @padn]}], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x3ff, 0x0, 0x800}}}}}}}, 0x0) 6.811448834s ago: executing program 3 (id=4347): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x7fffffff, 0x5, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000240)={r4, 0x52da}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7a, 0x5, 0x9, 0x2, 0x81, 0x6, 0x94}, 0x9c) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory0/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='offline', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write$binfmt_format(r6, &(0x7f0000000180)='0\x00', 0x2) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x4) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904"], 0x0) 6.702427848s ago: executing program 0 (id=4348): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000140)=0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_le_set_cig_params={{0x3}, {0x3, 0x7}}}}, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="10002bbd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r3, @ANYBLOB="9329c8cb6dee92ad3a98d538031eacd24a8993e9498058c7faee4117c62fea54d07890e155ea6a06a5feb93b30f4b6bc4a9d421893eb"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) write(r1, &(0x7f0000000200)='2', 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000240)={0x7e, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) fstat(r0, 0x0) 5.692805816s ago: executing program 9 (id=4349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300200000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xe8}}, 0x90) 4.789862376s ago: executing program 9 (id=4350): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x3a, 0x41, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) fdatasync(r0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r2, 0x0, 0x8e, 0x87, &(0x7f0000001140)="a3091986dc16242c0aa1ec391d3dbb36f8eccf2657948b3de6eda290d634fb6a354e180104d3ff09cb9db56b86e712f03c29525c6cd29c357aa6295fb25dd08ecc4a54d7620165fc636280376c692925a80ee3cfbc3cb1ce8ca5514dd9b41d3cde50aced4366c35ad481e7d74d576babdb1d072848451bae4db33f62ca1960de5d5a32514fd1201cc9683518b976", &(0x7f0000001200)=""/135, 0x0, 0x0, 0x47, 0x0, &(0x7f00000012c0)="c91a399613997f8ce3d82d2710c796de4f34d604d074fb3796632a8417f70f5364956f0714c73a5d15edd34780298901e4466d3473e3574a24bc4692506d21bf8e44f38e367d2e", &(0x7f0000001340), 0x7, 0x0, 0x1}, 0x50) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x16, 0x0, 0x0, @broadcast}}}}}, 0x0) fchdir(r4) stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x1000, "782104751c20c74222926e89d67d8065738b333e83dbfe06c5528abf37c771c8fe97d1cb0ce49ade4a9a72840ceed922d467e90b2aeb4ddb2ab03fa81079c9cc1a5cad6886b48974d16b5b645cf23c4db87f2f70eb96da429fd09a9c4b734ce1e64d35fdd22b646eed76f3a1d5170a2f5a5a5d617b274d09ffc09f86790d93b654239266a8947bdb0ffe478295a79503e15f1be57f2c8d931cdac902814a550b7425c0bb826c50a538cf48b8b13d71bd983a19eb4465d7b2ad701b2338e57b0aaaebab5f4966d2b4d1ee2e395bc5242e87f93bbe17356aa6869c09f96b3430559c3a948683397104da676b0dd9ca210d55fed0fcd6e4e89aeb24cadef55bd65a73caadac2183e1f5183db0416382ad5daaa772fadc3e65cafb9a0cbc3e4819bd1017470b3e439a0620e13f4113672bb712a0231433762526a0ff12ee8792fb1f0182c1a1d856177923ccfd9d606268a6607ea5fa078e4e5d53d698ee9f68204a55b6fcf68dcbb5ad00d7ebf0a49944d1931a60a0be06607dd2d0e0b882e648bb4d27fcfafedc84cd072413b791d99ecd559001bea62dbaabcf52120e47c6383aa379e0e20c701d254904c566f3a4af38c56def01f569bbf70ca3844761e8c68d78fd5df18f54cfe5946f3b7dbd7711d6a359eddb23789c47b0741f745a50849ebfa15ac129de693fb40b0f53bdceb9e46a98ebf2747024c57ea6649f6e0192b6594fd3132866b21d8f3b712cba484392093d7023f83250228af07a929e57821e7fd207918dff8e2362a5d3b6b6376543605cc844d7b5dd359be9276a55e27a7317f70f287541ddbdd8e1293c2936e9b3467071ce49ab179b86d3cf36112f4ae1c764f3c11aced070f0c2606f6c1fce94d589f57fd18bd27aff8b9723b81662436865e56c8559e5ab184555eca65b081c22363327e54cb7af7e46cc24305aa6b82a03f887722fa18b172bb76f018313f0bad2eacb78e6b3bdf5e3a110d93f869685fb6bc22d5ad7a96e00445a5e6b1821e7d55fd918dc5dcfa633f5b58a512d66fa35bf96709e53ab45f7f7b51cef5365fdda87d9edb772851a7d0e919d12d92d092a546d5ec5155d94c65e15dddfbe2af0723a18790018608dab5eaa113552ed7db49dba8acbe72210b82ad658c3860a17bb911ec7f7a614c06c9e3feae78c017ef5e34c7d48b9b79c07f7003576efcf72e7f3e50c5edbc8e2a3bf1f9700915c7df41c92512aa030d8371432b8be8df5893a5fd0007f98cc0bfc7e9eb886dddeab1c9433c26c92f25c3fccaa8be3cd75e38b7918e3ab7f86aa2b33dc7ea27b099ee3d70c7dfdc6db7c7be42c8799000636d0fd0015c08df562b01956d722cd69a7b6c977972d93b494e1d446a91e111ab0e69c2ac98ed8aa794eb8c640a7266548e4d05db69daa65f4baeb868e281f83f6fbf365c32a4a23fe58063e7b542af6dfddbd934a0bdcbb8ae0e301364c4b9f9bf92b4ad61abc2200190ebffea36d37284e63c96c49e5accfc9291c21230cf6466b90c13226129796302d8426dc6145ab727cbbfd30375b20d0bf5b0ea3cbf69a6ae757bda20d375e01a66602c72c491f46fb1b4cbf7b6b0353d07a67da929a9aee1715c5a24d2a2053cab38a3bdd0cc790cceccf8ea3fb71dfb235d51dca3d3b74616be99fa12edc84aa218d0556e56cf2b3ef5ac0695867d3675d136756c17a0fb121b795994dae4bb1f55bd17bc86a2a9118cee6317db7c31f8676a5b7a3f29c369b036aa8933f2b058c5c0c61797f96522183ae39f1f0cf3a5f2249c3489b7c0cb6aa6e4c28acc0de1ce034e14986ef83669565b6624eb5c708c28f44e5c9c9a93579fec9d29f2cf0bd41bce3d09a07bc59a4aec32a2244736c2b17c4550d87287ca6ca198cdfc57eb36d4f89062b0601006086d2588f8ee549747a425e20334c6a736fb652d92e625c6de8d1d520eed7461dd2ffa1febc168345c1f21dbc5a5e751b6420091762fee1b0bac80f4f37a9a2e0acc45de34a2922761145f5c759af93e376a364680f1f9d1c621f49331ec0deb4a2573e35d484df987cd5c9cd5fd8c04e35884bfc27f3fe5da5c4d3b597a2024b57c57285c27d6ab4e9c60403c9fa929767b23c7a3661d70c538462c087d0f807965d04d30cd690702a814405f9af36cd0334e41c23acb9019d53622c72888ab37049c8a490ec66b5e13b181a84ef9926225a1912680c9f2a90f8eb9c934141630db35db473729adb52d693b7363185e77c593d78db0bb414527c0d39dde4de1a502f0d47ca4b0ddc8dd37f021f6cc52baba9d0b196cd619d9f71213cddc69676502a4032bc2f98a9b8876ccf4c38ae60d9f500bb0c7c1527b3f81a6c1f24cabe0110f0d3407e1f04bcb00f7adff9dcc8f3445b8d11cf50ffd756f1674414adc31bd1c334276a2d41e858b9b31a767e80c1d9b53fdc3b87a7c5c6f40fc87b2480c9a08c9fcca15ad9ef3f5ec2cdad67a49882e5c54f7508a591f68e95d0b6ca203b63231b2d6c37f5d691bfd721f3b998a9c439897d2e6395c70fed37b9e809f6365c9cb88381bf21585fcd72de943f1f4cbdf7145686483730aaa542ab9cbd7f579f12dd32ee8245e233ea87d22e44ab0ca0f289b900cfa63ccb562a0a58b534216e490cb33a2efdd79a188946948f4c6679dccd25e62c42bed75a6e8585012ae20df885789e8ff0e2853beae5133f953f23c96d227a71558c8921738ba6dd5d230417442f79a72cec0806a1959cca95d78ef0b551f4ec6f8ec3dc167ce059629b4cd3e9735a44cb41367724b3ae881c7a6daaf29683d71512bd79a88a6093508063d7725660804899e2824e6d3e9688a0d3b7ee9dae5115a2ff8f966c6f8d1369f66630ef72eb19ea87bde745639a40c39fcb333aca899a151fc4dd98ffa75bf0e7fa0e0d5dc6e06a90dc4c0f79373e7f8159c3ab82df65e62c156514e1df97e4be42b991c03a31fe35ae6f3d3e342432941a493e0afbd6c945f47158ca36db081174ff604a70f92780d14fd94025b968058a6db86d3ccc5039c78b12d047ff962f1d6dba8b9c0d7dd6f1de5d1eab2385fc20609117c920e9ce21ce2b26774c489cd73ddfbd55c32b204058a5118d59b6617df250e48df9a8fa42e38673b61ac5e5d5bb015fd179420dc5fb82410b050b6bfd69b6d4f8e43c627254ea4a24d846baa067222f2d909c7f8cc6e039c16d45801ee4ef6b873440b34fa27238fc989990a6f86dbcb30ec6b1796e9048388158c48477004071c370dcee02fcf227b51287d4f29d680b71f3cfd2df5416806835a527d64995048ba65f9fa5c734fa01df0b202664065bcfa444eee3127c85781aca84922f9965cc278dca7e26085e6f8756af47b57600d268891c15641163df9f429af22dc4e0370914b88a38e2365c1504bd0def788e942b1eaca51f51f094bd8d4373f302c3cdb823189d7b1b9e03c397d9534f145cab54d356f3fd70d183ed3b26913daf63918f814a4ab15a45aec8006d302d7ee16594c184887715c01d93a1b2fba12da18f519c7c4a81836cee1303f1760846c5db69784c57672ae063fb1027c2e19384b919bef2186cbd96e5715dc54e5d9798743c4655e43e3dcdd4278946f8ed592c41d1a2c7f64eeaaad4ce2badf7d2440bb2f9e700a2b0840ea123bc7a6b75757d1e2f6c775d40e76601cb0d187d36cadd9d6e29ae0de45ebd9ad497fabdd4b61bfece34db5b53a08fee6f81fa74041bb35053e57510e2c048220e5289ea113f1115f22d67b4150b6d53c79950a84ff4a44bc8e661c7046f20b6de6fc76890cedd75c04184c086ffe9d4530047d5332e34c202669255dbaf40d097dde1185d4aeb26f04845aebe334bd995623a86dbaea98b1260d1238ad714aeb4526d269d6a4b329e5c4c9659bf15564db10e6c873e3b1e65427bda682da7f1ea3464828ed167aea98a46787ede762800d24e07803657b0da59169829f9174d46ee501632ea91416e7e2adb58f55893b9fd444758bed36f4f969e49375aefb63fcc9564ccca2948146c3bebecd55c555cc3239c9aa3051a9dbb3258960254ac81eaf107e9bdfe1e51becb2145e0f7562b7b8f677a88c4e2af48a26ba38c21e8b3f3f8fab476df232d42e7710209755baae24526521db104e5c40dbbca9574a2f9ee6f9a3d53804baa678c29fcfe7100c2fe952c6fec9e82baaf24963c0c78039ed793776f99fa5c50cde4b85e391fc8264724978f5e1d53b00c5da9bf2113eb1b2f54684bbce6b2a0cbeb0a05c13329b371605d9e2cfe77514b026be84953d3e49024026f4b0bf3417de0f7f507306a89c387b397eb7dbb82ff7d43e95062646327648cb6e4c8e63224a4c8f26fa8df4db41f7d95144f2602f207a2f11812ec346cf9e674f94d240ccbe01fcda34802ba30429eab92a592c161c4a315cc395866848605301e5c1fd88fd49f162de7c60a47384e9f82323b65a6a2095e13b51fe071747dc1a7c99585773ff1564e60f01461ebcb3fc028d90a2de498f611ab9917244ebb9cd03be0705c224da2319640af116ca6651af1ee7458757088b9984597bcbc69e28aea6db6950a7737ccfbe784994c989222e94d41c5dec779a75c2e1aaf3236d6a0730f8017c172b52c75da846cd8a35cef07ae990292ef7a267711997bdaf02c7ca2bfb8d60b896bd11ea7d42c665730a40e0e5ad4d3bba735d7c8486adce5fe82126e04c7ad3c773429f7c69eae403a5f6fdb4703472e9f061d5c32bbdabde7e047ee824f896061066f5f9d43d98025af17b26787a5494c759532361fb3d16f12404f1d07da42828cf53a2bb48b063b87cf3678ef27fd992e7a2eb45a5d6b3930c3a0b98f82fafeb6a76e1c25b8cc3b9516192c24c1764b45049fbca9c5b89569093d454619d16e5367075c3bc1e85ea2ead89ca3b5b950f7de182aa0195664643842ac407abb51800fc4c1272437f2a66d9ab65801ae0359b4afdb7d94010e7145168f2937e1d0ee02061160d6855387a459d48dd28c082acf6ec9f40615f7dc3bb216252b8eedeb2639102ea749ddcafe5c6fdd6d4895e3d5bd7f67a3d5f02b005edc3f8d31f5c6fdfe106c016b431bd5c27a62716d5d8b1f45271b07f9fc211210a6320e4df0d230d1ce921878e9e657993a84bb71aab5da54f0c14648cc31a35930477f9b517ddf1ef6bed24abcedcdc24e9b4bc392e4f159618f4042ea046e015b1db71a6d410dc8e2d3d8f27f8956c693c132731311a2dbda150b2dc688ba22e40d438f1a9347bfd0fe48704a3bfbca9f09e92e9ea7abcd8ce240f107bbc1c3687042cbe637bde85f62efb8d8969f9ee94f49d8ce069fef3636a4e6dfbb3cf211f54a57fc6449c810c748d4c1364b504474c22df27c87192a5f1b73568f6715b6f6db75bd9f6a7e80359a6c30e8cbb00b8b96b4488631bef6cd988ad4c738b4f17954a41591ca5a57cbff36f8da784224bb0606d851f418ad43a3d80bb72b56d93cd4279ad265a4b1ffbe63e903d0ac123921887368e4c94ca88345f48ba60f6f450d2643c95dae80561976ecdb40fd2e040326d128462889d2a3d1ccce5bd28afcd7c3f8bcdcb8f810cf7ba25ae0b504a34c57218b9e4083bc90bfd2c678d9151c21947a8371401fb39631ddde3b21aa8a579004b0c67ede84cfb8838a8a19d2794b6bbb93e1d68218e97c79d6f13ab3906edbf960667242bccd29e99c36582d6b4a488f7574bb14ee03df7bf5d46916d26c959c01030572d67fde3dcb7490965d4530815984e455ec477915416704b86bb02b6c9cb7941f9a8bffd0692b78f08546"}, &(0x7f0000001040)=0x1008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001080)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x3ff, 0x5, 0x5, 0x1, 0xf, 0xff}, 0x9c) 3.727849963s ago: executing program 8 (id=4351): r0 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r0, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) pipe(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.677145149s ago: executing program 8 (id=4352): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000680)=""/180, 0xb4}], 0x1, 0x6, 0x7) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1', 0x1) ioctl$BLKRRPART(r5, 0x125f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) write(r4, &(0x7f0000000280), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x4d435655, 0xf4b83c9, 0xfd54, 0xe663, 0xc55c324}}) r7 = syz_open_dev$amidi(&(0x7f0000000100), 0x9c52, 0x0) read$midi(r7, &(0x7f0000000140)=""/230, 0xe6) close(0x3) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') write$P9_RWALK(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="fd46c207608f091100006f01000000"], 0x9) splice(r0, 0x0, r8, 0x0, 0x6e0, 0xe) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fcdbdf25070096fc880d40bab4b9000000000000000000000000000114000200ff02000057b18a87965794e2000000010697d3978481212e20f4cbd1e3a35fba8a209a8f31ae1850608b114e6b13395e148d2be1306a11712db2cec58bea0235454aa712fd5bef807267bad49bd41552051df85f"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x20044014) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x8000001, 0xff92, 0x0, 0x1, 0x10000003}]}) 2.344949827s ago: executing program 3 (id=4353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000000c0)={{r1}, r2, 0xd, @unused=[0x8000000000000001, 0xb, 0x0, 0x7], @name="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"}) socketpair(0x11, 0x800, 0xffffff22, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000001100)={0x0, 0xbbc, 0x2, 0x0, 0x9, 0x24, 0xb, "f96542fd7eb4b1eb43b5307ad1ac4c90de6a2a81", "971f090ba39358b04a451924939dfb844310a747"}) (async, rerun: 64) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000001140)='syzkaller0\x00') (async, rerun: 64) r5 = gettid() ioprio_get$pid(0x1, r5) (async, rerun: 32) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001180), 0x321001, 0x0) (rerun: 32) sendfile(r6, r1, &(0x7f00000011c0)=0x6, 0x7) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001200)={0x2, [0x0, 0x0]}, &(0x7f0000001240)=0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c800}, 0x1) (async) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000013c0)={'pim6reg\x00', 0x400}) (async, rerun: 64) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x2, 0x5004) (async, rerun: 64) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000001400)) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ff8000/0x4000)=nil) (async, rerun: 32) write$char_usb(r6, &(0x7f0000001440)="a7a4fb15ae230b97ec956a2542b92fc0409c866c544c40b98543b0eed6c0", 0x1e) (async, rerun: 32) openat$adsp1(0xffffffffffffff9c, &(0x7f0000001480), 0x10000, 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000014c0)={r7, 0x800}, 0x8) (rerun: 32) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7, 0x80010, r0, 0xdeb6b000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001500), 0x101801, 0x0) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f0000001540)={0x2, 0x1, [0x7, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x1]}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/51, 0x33, 0x0, &(0x7f00000015c0)=""/60, 0x3c}, &(0x7f0000001640)=0x40) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001680)={0x0, 'macvlan0\x00', {0x4}, 0x401}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000016c0)={r8, 0xff}, &(0x7f0000001700)=0x8) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001740), 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001780)={r8, 0xe, "fac87b667bab7b8eb873389fab6a"}, &(0x7f00000017c0)=0x16) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000001800)={r9, 0xb111}, 0x8) (async, rerun: 32) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001840)='(\'&U[\x04-&\\\x00', 0x0, r4) (rerun: 32) 2.216592039s ago: executing program 4 (id=4354): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES8=0x0], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x52}, 0x94) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) madvise(&(0x7f0000894000/0x1000)=nil, 0x1000, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000500)="bc9edc5a8a8a796ad3cb76d3b625e7cdaad4950f2eab473bda43aacc4931254026b457e1fa659a7ed9867768754fd781e957af74f7e6e33a3f529dd422ee206e2ac122ac54191430276ebe4d121ba4234bcffc4a97efe1dc4f0fdff3af0c9d73c16c3f0cf7d5e6a1a2d6c627742b4f53e87455e0517e0fb871116f45797afc6ec8d834e64b2678e838540757ffc005e0366455582313d140f9b2d2d58c00436a26cdbef0acfdcd35602de762d710f947d2daf4ef31", 0x2000ec0, r1}, 0xffffffffffffff04) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x50) socket$kcm(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x40010, 0xffffffffffffffff, 0xf9ae9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000206018a02738b8f8d7b793c0d57860100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000001100b25ed8e964775ab00300686173683a458b9ac161726b00000000050005000a00000005000400e6040000e4bbb6c63b40b55ac8cd3247399e4bf96c35f24adaba945bf804f3db3ca6023f4e068ba1c20000589663aa39a1b037b4270940d57ea59c9afd89ee5d497997110379ed703a3d9b44c0168ed68862ba419157c32cb7316d9e47751b0af2c49eb0d7c94fef5d7f30a96e77b8a09e8025245b8ed292381f983e5cb95b67cd04ab3fab4d7af53446ff9761f43d87fb20532ca3fed0d2254f37f0945f7227c8b7198ae044318850b60105c6543285e5ed4128e9f15597f02c49"], 0x58}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040050) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x1694, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) 2.061860468s ago: executing program 3 (id=4355): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) r2 = timerfd_create(0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) read(r2, &(0x7f0000000080)=""/149, 0x95) unshare(0x2040400) r9 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)="02", 0x1, 0xffffffffffffffff) keyctl$chown(0x20, r9, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000140)=0x8004) 1.224169519s ago: executing program 9 (id=4356): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x62be, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x8, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x3ff, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8b, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x8, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x100, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x18000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e00000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005"], 0x1a4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000000100)='select \n', 0x10) write(r4, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PAT]=]=\"/bin\"\n', 0x4c) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004"], 0x314}], 0x1}, 0x800) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0x1000000000000d, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x25c6], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000380)={0x0, 0x1, 0x6, @random="a7f78a5ac1c9"}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000440)="2ef3470f5f79000f08360fc733f040119fcf850000470f01df420f07460f013948b83ec8ea634b75be150f23d00f21f835300000050f23f848b8d2000000000000000f23c80f21f8350c0060000f23f8b9330300000f32", 0x57}], 0x1, 0x44, &(0x7f0000000500), 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001140)={"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"}) 1.208473069s ago: executing program 0 (id=4357): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x5015, 0x0) uname(&(0x7f0000000200)=""/133) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_sctp(0x2, 0x5, 0x84) 1.20703841s ago: executing program 8 (id=4358): r0 = gettid() syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffc50c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x7fe, 0x0, 0x0, 0x1000, 0x7, r0, 0x0, 0xa}}}, &(0x7f00000007c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) pipe(0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 339.730772ms ago: executing program 0 (id=4359): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000040)='proc\x00', 0x4000, &(0x7f0000000080)={@align=0xffffffffffffff5b, {0x9e, 0x8, 0x0, 0x20000000000}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1ff}, {[0xa0, 0x0, 0x2, 0xfffffffd]}, 0x8, 0x6f, &(0x7f0000000140)=""/111}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000380)={0x1, 0x0, {0x7, 0x1c00, 0x3001, 0x6, 0x5, 0xde5cf3d7d459e718, 0x2, 0x6}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) write(r1, &(0x7f0000000000)="4734c489d0358a0d323030303030303030302030203098", 0x17) 245.537406ms ago: executing program 8 (id=4360): r0 = socket$alg(0x26, 0x5, 0x0) mount$afs(&(0x7f0000000100)=@cell={0x23, '', 'syz1', '.backup'}, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000380)={[{}, {@dyn}]}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) ptrace(0x10, 0x0) r1 = socket(0x1e, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r3, r1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) recvmmsg(r4, &(0x7f0000004380)=[{{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000041c0)=[{&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000640)=""/147, 0x93}, {&(0x7f0000000700)=""/15, 0xf}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/130, 0x82}, {&(0x7f00000024c0)=""/97, 0x61}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/144, 0x90}], 0xa, &(0x7f0000004280)=""/240, 0xf0}, 0x1c000002}], 0x1, 0x40002001, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5) 132.374476ms ago: executing program 3 (id=4361): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = msgget(0x2, 0x47a5f2ebe3f1275b) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x2, 0x2, 0x1f4}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x80000, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x1000, 0x10000003, 0x3d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8687, 0x400, 0x40040001, 0x20334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x800, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) msgsnd(r1, &(0x7f0000000080)={0x3}, 0x8, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000140), 0x10) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x8, 0x1, 0x81, 0x7a7, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x8, 0x100022}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) 993.764µs ago: executing program 0 (id=4362): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000030705000000000000000000010000020c00024000000000000000080900000000000000030c00034000000000000000090900010073797a31000000000c000640000000000000007f0c00024000000000000000090c0006400000000000000006"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x41a800, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf10, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0042239d24df25d215", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020000000000dbaaf8ff50000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800a2a9b73500000000008500000007000000b70000000000000095000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/448, @ANYRES16=r1, @ANYBLOB="20002cbd7000fcdbdf256c00000008000300", @ANYRES32=r4, @ANYBLOB="3f361fe8305d4534360040000800a100fcffffff0800a00096076c66200ac0736a0f175e1731960000000022018a0100000800260030160000080022"], 0x58}, 0x1, 0x0, 0x0, 0x4084080}, 0x801) 0s ago: executing program 9 (id=4363): fsopen(0x0, 0x1) (async) r0 = fsopen(0x0, 0x1) fcntl$dupfd(r0, 0x406, r0) (async) r1 = fcntl$dupfd(r0, 0x406, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000080), 0x0) readahead(r1, 0x7f, 0x803) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x32ce970513f32900) socket$inet6(0xa, 0x80002, 0x0) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x410000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) (async) ioctl$PPPIOCSMAXCID(r4, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000406) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000040)="00214717a70700000000030600000000000000000000721d5874f70df86d73d3432f46380feb56a29357215d78fc44fac3f4", 0x32}], 0x1, 0x7, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000fe00020007"], 0x2241c2) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) (async) openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x0) setresuid(0x0, 0xee01, 0x0) kernel console output (not intermixed with test programs): tered blocking state [ 1139.394507][T23331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.444709][T23331] bridge_slave_1: entered allmulticast mode [ 1139.475419][T23331] bridge_slave_1: entered promiscuous mode [ 1139.498951][T23338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.037304][T23488] SELinux: mls: truncated range [ 1140.049181][T23488] SELinux: error reading MLS range of context [ 1140.066446][T23488] SELinux: invalid ocon [ 1140.139438][ T29] audit: type=1400 audit(1787473703.563:1999): avc: denied { write } for pid=23490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.180468][ T41] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.279400][ T29] audit: type=1400 audit(1787473703.703:2000): avc: denied { write } for pid=23504 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.330598][T23331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.341260][T23488] SELinux: failed to load policy [ 1140.359083][T23331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.407990][T23338] team0: Port device team_slave_0 added [ 1140.428880][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1140.476981][T23338] team0: Port device team_slave_1 added [ 1140.530075][ T41] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.575099][T23331] team0: Port device team_slave_0 added [ 1140.615376][T23331] team0: Port device team_slave_1 added [ 1140.651186][T23338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.658900][T23338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.688069][T23338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.757342][ T41] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.863059][T20147] Bluetooth: hci0: command tx timeout [ 1140.909160][T23331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.919597][T23331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.990982][T23331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.032147][T23338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.039174][T23338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.077886][T23338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.122184][T23331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.130619][T23331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.190988][T23331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.404003][ T41] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.418559][T20147] Bluetooth: hci2: command tx timeout [ 1141.430764][T23516] SELinux: mls: truncated range [ 1141.435926][T23516] SELinux: error reading MLS range of context [ 1141.442241][T23516] SELinux: invalid ocon [ 1142.324722][T23331] hsr_slave_0: entered promiscuous mode [ 1142.333873][ T62] nci: nci_rsp_packet: unknown rsp opcode 0x402 [ 1142.360562][T23331] hsr_slave_1: entered promiscuous mode [ 1142.399248][T23331] debugfs: 'hsr0' already exists in 'hsr' [ 1142.413591][T23516] SELinux: failed to load policy [ 1142.463894][T23331] Cannot create hsr debugfs directory [ 1143.192258][T23338] hsr_slave_0: entered promiscuous mode [ 1143.231879][T23338] hsr_slave_1: entered promiscuous mode [ 1143.256416][T23338] debugfs: 'hsr0' already exists in 'hsr' [ 1143.271325][T23338] Cannot create hsr debugfs directory [ 1143.447785][T23506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1143.772632][T20819] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1143.855628][T23539] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1143.868048][ T41] bridge_slave_1: left allmulticast mode [ 1143.874426][ T41] bridge_slave_1: left promiscuous mode [ 1143.889607][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.907008][ T29] audit: type=1400 audit(1787473707.313:2001): avc: denied { write } for pid=23523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1143.943663][ T41] bridge_slave_0: left allmulticast mode [ 1143.949627][ T41] bridge_slave_0: left promiscuous mode [ 1143.962515][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.963497][T20819] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1143.965964][T20819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.992775][ T29] audit: type=1400 audit(1787473707.423:2002): avc: denied { write } for pid=23545 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.015025][T20819] usb 6-1: Product: syz [ 1144.019400][T20819] usb 6-1: Manufacturer: syz [ 1144.030610][T20819] usb 6-1: SerialNumber: syz [ 1144.263858][T23552] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4008'. [ 1144.296863][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.308486][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.320992][ T41] bond0 (unregistering): Released all slaves [ 1144.366014][T23555] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4009'. [ 1144.377003][T23555] netlink: 336 bytes leftover after parsing attributes in process `syz.6.4009'. [ 1144.497724][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1144.659639][T23559] tmpfs: Unknown parameter '' [ 1144.853382][T20819] rtl8150 6-1:1.0: eth29: rtl8150 is detected [ 1144.991257][T23527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.030600][T23527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.096616][T23566] xt_hashlimit: max too large, truncated to 1048576 [ 1146.239231][T20819] usb 6-1: USB disconnect, device number 38 [ 1146.424176][T23580] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4014'. [ 1146.456314][ T29] audit: type=1400 audit(1787473709.883:2003): avc: denied { write } for pid=23565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.716470][ T29] audit: type=1400 audit(1787473710.143:2004): avc: denied { write } for pid=23585 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.858174][T23587] tmpfs: Unknown parameter '' [ 1147.217941][ T41] hsr_slave_0: left promiscuous mode [ 1147.230701][ T41] hsr_slave_1: left promiscuous mode [ 1147.281559][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.298874][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.319741][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.330250][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.362989][ T41] veth1_macvtap: left promiscuous mode [ 1147.368646][ T41] veth0_macvtap: left promiscuous mode [ 1147.374542][ T41] veth1_vlan: left promiscuous mode [ 1147.379994][ T41] veth0_vlan: left promiscuous mode [ 1147.803092][T23609] xt_hashlimit: max too large, truncated to 1048576 [ 1149.451295][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1149.478997][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1150.369873][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1150.768784][T23615] SELinux: mls: truncated range [ 1150.802502][T23615] SELinux: error reading MLS range of context [ 1150.825822][T23615] SELinux: invalid ocon [ 1151.691883][T23615] SELinux: failed to load policy [ 1152.278432][ T29] audit: type=1400 audit(1787473715.703:2005): avc: denied { write } for pid=23616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1154.435695][ T29] audit: type=1400 audit(1787473717.863:2006): avc: denied { write } for pid=23649 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1154.471604][T23651] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4034'. [ 1154.494322][T23651] openvswitch: netlink: Flow actions attr not present in new flow. [ 1154.649217][T23651] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4034'. [ 1154.706682][T23651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1155.113351][ T29] audit: type=1400 audit(1787473718.543:2007): avc: denied { write } for pid=23655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1155.137897][ T5696] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1155.244102][ T29] audit: type=1400 audit(1787473718.663:2008): avc: denied { write } for pid=23676 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1155.303951][ T5696] usb 10-1: Using ep0 maxpacket: 8 [ 1155.312941][T23331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1155.313689][ T5696] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1155.346527][T23331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.353344][ T5696] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1155.367448][T23331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1155.379069][ T5696] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.391241][T23331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.394791][ T5696] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1155.423504][T23331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1155.431248][ T5696] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.443881][T23331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1155.451198][ T5696] usb 10-1: Product: syz [ 1155.456764][T23331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1155.462891][ T5696] usb 10-1: Manufacturer: syz [ 1155.470674][T23331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1155.471249][ T5696] usb 10-1: SerialNumber: syz [ 1155.758093][T23331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.771649][T23338] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1155.786324][T23338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.799827][T23338] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1155.811119][T23338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.833571][T23331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.845247][T23338] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1155.862860][T23338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1155.887731][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.894945][ T9379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.896488][ T29] audit: type=1400 audit(1787473719.323:2009): avc: denied { write } for pid=23679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1155.920726][T23338] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1155.982411][T23338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1156.031879][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.039041][ T9379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.111264][ T29] audit: type=1400 audit(1787473719.533:2010): avc: denied { write } for pid=23706 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1156.147504][ T5696] usb 10-1: selecting invalid altsetting 1 [ 1156.222220][T23331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1156.244014][T23710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4039'. [ 1156.300441][ T5696] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1156.335406][ T5696] usb 10-1: USB disconnect, device number 33 [ 1156.396643][T20378] udevd[20378]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1156.417846][T23338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.493268][T23338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.529421][ T9378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.536759][ T9378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.577443][ T9378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.584641][ T9378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.114652][ T29] audit: type=1400 audit(1787473720.543:2011): avc: denied { write } for pid=23711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1157.678438][ T29] audit: type=1400 audit(1787473721.103:2012): avc: denied { write } for pid=23744 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1158.261558][T23761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1158.268642][T23331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.281458][T23761] openvswitch: netlink: Flow actions attr not present in new flow. [ 1158.558040][T23761] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1158.676908][T23761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1158.969552][T23338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.028707][T23785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4048'. [ 1159.302419][ T29] audit: type=1400 audit(1787473722.733:2013): avc: denied { write } for pid=23769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.365004][T23331] veth0_vlan: entered promiscuous mode [ 1159.418815][ T29] audit: type=1400 audit(1787473722.793:2014): avc: denied { write } for pid=23804 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.444104][T23331] veth1_vlan: entered promiscuous mode [ 1159.464230][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1159.514716][ T29] audit: type=1400 audit(1787473722.943:2015): avc: denied { getopt } for pid=23807 comm="syz.5.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1159.533714][T23338] veth0_vlan: entered promiscuous mode [ 1159.537718][ T29] audit: type=1400 audit(1787473722.943:2016): avc: denied { create } for pid=23807 comm="syz.5.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1159.549625][T23331] veth0_macvtap: entered promiscuous mode [ 1159.584024][T23331] veth1_macvtap: entered promiscuous mode [ 1159.592157][T23338] veth1_vlan: entered promiscuous mode [ 1159.636183][T23331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.660406][T23331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.698638][T23338] veth0_macvtap: entered promiscuous mode [ 1159.724055][T23338] veth1_macvtap: entered promiscuous mode [ 1159.815199][T23338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.882034][T23338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.944847][T22287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1159.968537][T22287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.043565][ T982] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1160.085768][ T9378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.098559][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.124015][ T9378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.132633][T15447] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.192931][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.224990][ T982] usb 6-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1160.256937][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.283386][T15447] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.286945][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1160.314660][T15447] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.318030][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.351098][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.379684][ T982] usb 6-1: config 0 descriptor?? [ 1160.387290][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.411768][ T6727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.441644][ T29] audit: type=1400 audit(1787473723.863:2017): avc: denied { write } for pid=23813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1160.497913][T23835] comedi: No check for data length of config insn id 127 is implemented [ 1160.532965][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.553946][T22287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.569498][T23835] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1160.586870][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.606283][T23836] xt_hashlimit: max too large, truncated to 1048576 [ 1160.623307][T22287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.737539][T23835] comedi: Assuming n=28950 is correct [ 1160.937212][T23815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.106823][T23815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.459323][ T29] audit: type=1400 audit(1787473724.883:2018): avc: denied { write } for pid=23837 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.520339][ T982] apple 0003:05AC:024F.0038: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1161.537900][ T982] apple 0003:05AC:024F.0038: hidraw0: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.5-1/input0 [ 1161.591024][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1161.700213][T23845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4058'. [ 1161.880244][T23854] xt_hashlimit: max too large, truncated to 1048576 [ 1162.007822][ T93] usb 6-1: USB disconnect, device number 39 [ 1163.166561][T23868] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4065'. [ 1163.292195][ T10] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1163.545559][T23868] netlink: 332 bytes leftover after parsing attributes in process `syz.9.4065'. [ 1163.588723][T23874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1163.825166][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1164.019346][ T29] audit: type=1400 audit(1787473727.443:2019): avc: denied { write } for pid=23853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.077042][T23882] comedi: No check for data length of config insn id 127 is implemented [ 1164.102035][T23882] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1164.129653][T23882] comedi: Assuming n=28949 is correct [ 1164.207859][ T29] audit: type=1400 audit(1787473727.633:2020): avc: denied { write } for pid=23889 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.221860][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1164.467462][ T93] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1164.651747][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 1164.670334][ T93] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1164.711246][ T93] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1164.752989][ T10] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1164.775109][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1164.781561][ T93] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.798769][ T10] usb 9-1: can't read configurations, error -71 [ 1164.816347][ T93] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1164.827479][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1164.836528][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.853455][ T93] usb 5-1: Product: syz [ 1164.858707][ T93] usb 5-1: Manufacturer: syz [ 1164.866338][ T93] usb 5-1: SerialNumber: syz [ 1165.180197][ T93] usb 5-1: selecting invalid altsetting 1 [ 1165.191882][T20819] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1165.264746][ T29] audit: type=1400 audit(1787473728.693:2021): avc: denied { write } for pid=23904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1165.297002][ T93] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1165.318521][ T93] usb 5-1: USB disconnect, device number 42 [ 1165.387412][T20819] usb 10-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 1165.449510][T20819] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.531656][T20819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.214968][ T29] audit: type=1400 audit(1787473729.643:2022): avc: denied { write } for pid=23921 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1166.690684][T23920] SELinux: mls: truncated range [ 1166.699604][T23920] SELinux: error reading MLS range of context [ 1166.706021][T23920] SELinux: invalid ocon [ 1166.920371][T20378] udevd[20378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1167.273131][T20819] snd-ua101 10-1:1.0: probe with driver snd-ua101 failed with error -2 [ 1167.523127][T23934] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4077'. [ 1167.558474][T23934] netlink: 332 bytes leftover after parsing attributes in process `syz.6.4077'. [ 1167.631200][T23920] SELinux: failed to load policy [ 1167.671520][T23940] netlink: 'syz.4.4079': attribute type 4 has an invalid length. [ 1167.701244][T23944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.748753][T23940] netlink: 'syz.4.4079': attribute type 4 has an invalid length. [ 1167.824083][T23944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.422765][ T29] audit: type=1400 audit(1787473731.853:2023): avc: denied { append } for pid=23954 comm="syz.5.4081" name="media3" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1168.447359][T23955] FAULT_INJECTION: forcing a failure. [ 1168.447359][T23955] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.471093][ T29] audit: type=1400 audit(1787473731.863:2024): avc: denied { write } for pid=23930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1168.512071][T23958] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4082'. [ 1168.522383][T23955] CPU: 1 UID: 0 PID: 23955 Comm: syz.5.4081 Tainted: G L syzkaller #0 PREEMPT(full) [ 1168.522413][T23955] Tainted: [L]=SOFTLOCKUP [ 1168.522420][T23955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1168.522432][T23955] Call Trace: [ 1168.522439][T23955] [ 1168.522447][T23955] dump_stack_lvl+0x100/0x190 [ 1168.522481][T23955] should_fail_ex.cold+0x5/0xa [ 1168.522507][T23955] should_failslab+0xc2/0x120 [ 1168.522526][T23955] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1168.522555][T23955] ? io_submit_one+0x124/0x1fb0 [ 1168.522581][T23955] io_submit_one+0x124/0x1fb0 [ 1168.522607][T23955] ? __lock_acquire+0x4c5/0x1ec0 [ 1168.522636][T23955] ? lockdep_hardirqs_on+0x7d/0x110 [ 1168.522666][T23955] ? __pfx_io_submit_one+0x10/0x10 [ 1168.522694][T23955] ? __might_fault+0xc5/0x140 [ 1168.522722][T23955] ? __x64_sys_io_submit+0x1b1/0x3a0 [ 1168.522744][T23955] __x64_sys_io_submit+0x1b1/0x3a0 [ 1168.522770][T23955] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1168.522808][T23955] do_syscall_64+0x123/0x790 [ 1168.522838][T23955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.522858][T23955] RIP: 0033:0x7f610a19e0d9 [ 1168.522874][T23955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1168.522891][T23955] RSP: 002b:00007f610b0f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1168.522911][T23955] RAX: ffffffffffffffda RBX: 00007f610a425fa0 RCX: 00007f610a19e0d9 [ 1168.522924][T23955] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 00007f610b0d4000 [ 1168.522935][T23955] RBP: 00007f610b0f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.522946][T23955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.522957][T23955] R13: 00007f610a426038 R14: 00007f610a425fa0 R15: 00007fff3e6b0908 [ 1168.522983][T23955] [ 1168.531288][T23958] openvswitch: netlink: Flow actions attr not present in new flow. [ 1168.573359][ T29] audit: type=1400 audit(1787473731.993:2025): avc: denied { write } for pid=23959 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1168.690103][T23962] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4082'. [ 1168.799923][T23962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1169.011778][T14743] Bluetooth: hci4: command 0x0406 tx timeout [ 1170.343936][T23979] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1170.394416][ T5790] usb 10-1: USB disconnect, device number 34 [ 1170.487983][T23973] SELinux: mls: truncated range [ 1170.510677][T23973] SELinux: error reading MLS range of context [ 1170.522053][ T29] audit: type=1400 audit(1787473733.953:2026): avc: denied { write } for pid=23963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1170.528444][T23973] SELinux: invalid ocon [ 1170.876918][T23985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1170.887008][T23985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1170.899563][T23985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1170.909358][T23985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1170.919433][T23985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1170.929161][T23985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1170.939326][T23985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1170.949061][T23985] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1170.958648][T23985] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 1171.211607][ T29] audit: type=1400 audit(1787473734.633:2027): avc: denied { write } for pid=23990 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1171.531344][T24001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=24001 comm=syz.8.4090 [ 1171.729949][T23973] SELinux: failed to load policy [ 1171.914339][T24021] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4096'. [ 1171.979797][T24021] openvswitch: netlink: Flow actions attr not present in new flow. [ 1172.022024][T24028] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4096'. [ 1172.053345][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1172.059796][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1172.090952][T24031] xt_hashlimit: max too large, truncated to 1048576 [ 1172.173470][T24030] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4099'. [ 1172.336627][T24030] netlink: 332 bytes leftover after parsing attributes in process `syz.6.4099'. [ 1173.037745][T24028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1173.193395][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1173.484553][ T29] audit: type=1400 audit(1787473736.913:2028): avc: denied { write } for pid=24007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.562069][T24055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=24055 comm=syz.4.4104 [ 1173.717262][ T29] audit: type=1400 audit(1787473737.143:2029): avc: denied { write } for pid=24058 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1173.794405][ T93] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1173.805168][ T29] audit: type=1400 audit(1787473737.233:2030): avc: denied { read } for pid=24061 comm="syz.4.4106" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1173.963423][ T93] usb 9-1: Using ep0 maxpacket: 16 [ 1173.974900][T24075] ieee802154 phy0 wpan0: encryption failed: -22 [ 1173.988655][ T29] audit: type=1400 audit(1787473737.403:2031): avc: denied { write } for pid=24059 comm="syz.6.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1174.043967][ T93] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1174.081774][T22809] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1174.109545][ T93] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.141821][ T5696] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1174.179767][ T93] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.274486][ T93] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1174.292229][T22809] usb 10-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice= 1.00 [ 1174.378908][T22809] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.429454][ T93] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.459054][T22809] usb 10-1: Product: syz [ 1174.512435][T22809] usb 10-1: Manufacturer: syz [ 1174.566966][T22809] usb 10-1: SerialNumber: syz [ 1174.597011][ T93] usb 9-1: config 0 descriptor?? [ 1174.788201][T22809] em28xx 10-1:1.0: New device syz syz @ 480 Mbps (2040:6500, interface 0, class 0) [ 1174.814878][T22809] em28xx 10-1:1.0: DVB interface 0 found: bulk [ 1174.937404][ T5696] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1174.991922][ T5696] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1175.016740][ T5696] usb 6-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1175.054649][ T5696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.650729][ T29] audit: type=1400 audit(1787473739.053:2032): avc: denied { write } for pid=24054 comm="syz.8.4105" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1176.715284][T22809] em28xx 10-1:1.0: unknown em28xx chip ID (0) [ 1177.362391][ T93] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0039/input/input68 [ 1177.454136][ T5696] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1177.476801][ T93] microsoft 0003:045E:07DA.0039: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1177.494898][T22809] em28xx 10-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 1177.512470][ T93] usb 9-1: USB disconnect, device number 48 [ 1177.518904][T22809] em28xx 10-1:1.0: board has no eeprom [ 1177.523789][ T5696] usb 6-1: USB disconnect, device number 40 [ 1177.581905][T22809] em28xx 10-1:1.0: Identified as Hauppauge WinTV HVR 900 (card=10) [ 1177.670290][T22809] em28xx 10-1:1.0: dvb set to bulk mode. [ 1177.682755][T24111] FAULT_INJECTION: forcing a failure. [ 1177.682755][T24111] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.701114][T24111] CPU: 0 UID: 0 PID: 24111 Comm: syz.4.4114 Tainted: G L syzkaller #0 PREEMPT(full) [ 1177.701149][T24111] Tainted: [L]=SOFTLOCKUP [ 1177.701156][T24111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1177.701169][T24111] Call Trace: [ 1177.701176][T24111] [ 1177.701184][T24111] dump_stack_lvl+0x100/0x190 [ 1177.701219][T24111] should_fail_ex.cold+0x5/0xa [ 1177.701246][T24111] should_failslab+0xc2/0x120 [ 1177.701265][T24111] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1177.701291][T24111] ? alloc_empty_file+0x5b/0x1c0 [ 1177.701317][T24111] alloc_empty_file+0x5b/0x1c0 [ 1177.701337][T24111] path_openat+0xdb/0x2440 [ 1177.701368][T24111] ? __pfx_path_openat+0x10/0x10 [ 1177.701406][T24111] do_file_open+0x20e/0x430 [ 1177.701435][T24111] ? __pfx_do_file_open+0x10/0x10 [ 1177.701484][T24111] ? _raw_spin_unlock+0x28/0x50 [ 1177.701509][T24111] ? alloc_fd+0x471/0x7a0 [ 1177.701535][T24111] do_sys_openat2+0x10f/0x1e0 [ 1177.701556][T24111] ? __pfx_do_sys_openat2+0x10/0x10 [ 1177.701577][T24111] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1177.701607][T24111] ? __fget_files+0x21f/0x3d0 [ 1177.701641][T24111] __x64_sys_openat+0x12d/0x210 [ 1177.701662][T24111] ? __pfx___x64_sys_openat+0x10/0x10 [ 1177.701682][T24111] ? ksys_write+0x1ac/0x250 [ 1177.701712][T24111] do_syscall_64+0x123/0x790 [ 1177.701742][T24111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.701763][T24111] RIP: 0033:0x7f612fd9e0d9 [ 1177.701792][T24111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.701826][T24111] RSP: 002b:00007f6130c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1177.701850][T24111] RAX: ffffffffffffffda RBX: 00007f6130026090 RCX: 00007f612fd9e0d9 [ 1177.701864][T24111] RDX: 0000000000109081 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1177.701877][T24111] RBP: 00007f6130c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.701889][T24111] R10: 0000000000000034 R11: 0000000000000246 R12: 0000000000000001 [ 1177.701900][T24111] R13: 00007f6130026128 R14: 00007f6130026090 R15: 00007ffd7c008158 [ 1177.701929][T24111] [ 1177.925444][T22810] em28xx 10-1:1.0: Binding DVB extension [ 1178.176657][T22809] usb 10-1: USB disconnect, device number 35 [ 1178.244306][T22809] em28xx 10-1:1.0: Disconnecting em28xx [ 1178.259375][T22810] zl10353_read_register: readreg error (reg=127, ret==-19) [ 1178.270797][ T29] audit: type=1400 audit(1787473741.693:2033): avc: denied { write } for pid=24077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.275916][T24119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=24119 comm=syz.5.4116 [ 1178.320389][T24113] fido_id[24113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1178.327138][T22810] em28xx 10-1:1.0: dvb frontend not attached. Can't attach xc3028 [ 1178.360862][T22810] em28xx 10-1:1.0: Registering input extension [ 1178.368636][T22809] em28xx 10-1:1.0: Closing input extension [ 1178.437234][T22809] em28xx: Freeing device [ 1178.489722][ T29] audit: type=1400 audit(1787473741.913:2034): avc: denied { write } for pid=24121 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1178.494343][T24123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4117'. [ 1178.567129][T24125] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4117'. [ 1178.586514][T24125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1178.589364][T24123] openvswitch: netlink: Flow actions attr not present in new flow. [ 1178.611818][ T93] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1178.660911][T24128] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4118'. [ 1178.674589][T24128] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1178.674714][T24128] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1178.675168][T24128] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1178.675232][T24128] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1178.675515][T24128] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1178.675565][T24128] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1178.675779][T24128] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1178.675824][T24128] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1178.675837][T24128] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 1178.774517][ T93] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1178.777236][ T93] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1178.921324][ T93] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1178.952719][ T93] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1178.970000][ T93] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.988633][T24138] xt_hashlimit: max too large, truncated to 1048576 [ 1178.998964][ T93] usb 9-1: Product: syz [ 1179.004759][ T93] usb 9-1: Manufacturer: syz [ 1179.009460][ T93] usb 9-1: SerialNumber: syz [ 1179.051223][ T93] usb 9-1: config 0 descriptor?? [ 1179.066665][T24114] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1179.081798][T24114] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1179.101484][ T93] usb 9-1: ucan: probing device on interface #0 [ 1179.964606][T24150] xt_hashlimit: max too large, truncated to 1048576 [ 1180.082120][T20819] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1180.305725][T20819] usb 6-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1180.432983][T20819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.551571][T20819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1180.657962][T20819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.780335][ T29] audit: type=1400 audit(1787473744.193:2035): avc: denied { append } for pid=24110 comm="syz.8.4115" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1180.826319][T20819] usb 6-1: config 0 descriptor?? [ 1180.890999][ T93] ucan 9-1:0.0 can0: registered device [ 1180.975979][ T29] audit: type=1400 audit(1787473744.233:2036): avc: denied { open } for pid=24110 comm="syz.8.4115" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1181.034647][ T93] ucan 9-1:0.0 can0: firmware string: unknown [ 1181.055392][ T29] audit: type=1400 audit(1787473744.473:2037): avc: denied { write } for pid=24156 comm="syz.6.4124" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1181.075054][ T93] usb 9-1: USB disconnect, device number 49 [ 1181.152585][T24143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.161272][ T29] audit: type=1400 audit(1787473744.483:2038): avc: denied { write } for pid=24130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1181.220456][T24143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.053263][T20819] apple 0003:05AC:024F.003A: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1182.204346][ T29] audit: type=1400 audit(1787473745.563:2039): avc: denied { write } for pid=24170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1182.238748][T20819] apple 0003:05AC:024F.003A: hidraw0: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.5-1/input0 [ 1182.278188][T20819] usb 6-1: USB disconnect, device number 41 [ 1182.488953][T24175] fido_id[24175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1182.593051][T24165] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1182.865520][ T29] audit: type=1400 audit(1787473746.293:2040): avc: denied { mounton } for pid=24184 comm="syz.4.4129" path="/17/file0" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1182.879889][T24185] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4129'. [ 1183.100851][T24196] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4132'. [ 1183.172042][T24196] openvswitch: netlink: Flow actions attr not present in new flow. [ 1183.250213][T24199] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4132'. [ 1183.253252][ T29] audit: type=1400 audit(1787473746.673:2041): avc: denied { write } for pid=24178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1183.308906][ T29] audit: type=1400 audit(1787473746.733:2042): avc: denied { connect } for pid=24200 comm="syz.5.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1183.334464][T24199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.415525][ T29] audit: type=1400 audit(1787473746.843:2043): avc: denied { read } for pid=24200 comm="syz.5.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1183.838460][ T29] audit: type=1400 audit(1787473747.263:2044): avc: denied { write } for pid=24210 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1184.643528][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4128'. [ 1186.453160][ T982] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1186.584041][T24254] SELinux: mls: truncated range [ 1186.589148][T24254] SELinux: error reading MLS range of context [ 1186.595401][T24254] SELinux: invalid ocon [ 1186.693073][ T982] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1186.720789][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1186.720809][ T29] audit: type=1400 audit(1787473750.133:2047): avc: denied { write } for pid=24218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1186.798932][ T982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.812370][ T982] usb 9-1: Product: syz [ 1186.824086][ T982] usb 9-1: Manufacturer: syz [ 1186.843888][ T982] usb 9-1: SerialNumber: syz [ 1186.968888][ T29] audit: type=1400 audit(1787473750.393:2048): avc: denied { write } for pid=24266 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1187.666335][T24254] SELinux: failed to load policy [ 1187.705895][ T982] rtl8150 9-1:1.0: eth1: rtl8150 is detected [ 1187.807380][T24276] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4146'. [ 1187.822595][T22810] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1187.854245][T24276] openvswitch: netlink: Flow actions attr not present in new flow. [ 1187.909807][T24260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.946588][T24278] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4146'. [ 1187.970131][T24260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1188.022019][T24278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1188.081780][T22810] usb 5-1: Using ep0 maxpacket: 8 [ 1188.213432][T20819] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1188.343013][T22810] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1188.361836][ T5696] usb 9-1: USB disconnect, device number 50 [ 1188.393335][T20819] usb 6-1: Using ep0 maxpacket: 16 [ 1188.401564][T22810] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1188.431928][T22810] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.452766][T22810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1188.475760][T22810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.486384][T20819] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1188.491781][T22810] usb 5-1: Product: syz [ 1188.537732][T22810] usb 5-1: Manufacturer: syz [ 1188.555410][T20819] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1188.558228][T22810] usb 5-1: SerialNumber: syz [ 1188.644189][T20819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.671836][T20819] usb 6-1: Product: syz [ 1188.690711][T20819] usb 6-1: Manufacturer: syz [ 1188.724795][T20819] usb 6-1: SerialNumber: syz [ 1188.770761][T20819] usb 6-1: config 0 descriptor?? [ 1188.857931][ T29] audit: type=1400 audit(1787473752.283:2049): avc: denied { write } for pid=24277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.021823][ T5790] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1189.134192][ T29] audit: type=1400 audit(1787473752.553:2050): avc: denied { write } for pid=24297 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.203833][ T5790] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1189.228789][ T5790] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1189.257255][ T5790] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1189.268480][ T5790] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1189.296739][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1189.307267][ T5790] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.323964][T22810] usb 5-1: selecting invalid altsetting 1 [ 1189.412141][ T5696] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1189.439445][ T5790] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1189.447131][T22810] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1189.476448][T22810] usb 5-1: USB disconnect, device number 43 [ 1189.547979][T24105] udevd[24105]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.593662][ T5696] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1189.640753][ T5696] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.657738][T24105] udevd[24105]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1189.694508][ T5696] usb 9-1: Product: syz [ 1189.718637][ T5696] usb 9-1: Manufacturer: syz [ 1189.744940][ T5696] usb 9-1: SerialNumber: syz [ 1190.364017][ T5790] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1190.511339][ T5790] usb 10-1: USB disconnect, device number 36 [ 1190.766417][ T5696] rtl8150 9-1:1.0: eth1: rtl8150 is detected [ 1191.008812][T24299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.048064][T24299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.142808][T24323] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4147'. [ 1191.413463][ T5696] usb 9-1: USB disconnect, device number 51 [ 1191.438670][ T29] audit: type=1400 audit(1787473754.863:2051): avc: denied { write } for pid=24306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.497665][T14552] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.770267][ T29] audit: type=1400 audit(1787473755.193:2052): avc: denied { write } for pid=24334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1191.878863][T14743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1191.894918][ T5583] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1191.903453][T14743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1191.921145][T14743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1191.935077][T14743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1191.946655][T14743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1192.014042][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1192.107428][ T5583] usb 10-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 1192.157345][ T5583] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1192.185725][ T5583] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1192.213037][ T5583] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.222768][ T29] audit: type=1400 audit(1787473755.653:2053): avc: denied { watch_reads } for pid=24346 comm="syz.8.4157" path="/17/file0" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1192.406134][ T5583] usb-storage 10-1:1.0: USB Mass Storage device detected [ 1192.467383][ T29] audit: type=1400 audit(1787473755.893:2054): avc: denied { write } for pid=24342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1192.547083][T14552] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.567555][ T5583] scsi host1: usb-storage 10-1:1.0 [ 1192.803317][ T9379] IPVS: starting estimator thread 0... [ 1192.827576][ T5790] usb 10-1: USB disconnect, device number 37 [ 1192.848264][ T29] audit: type=1400 audit(1787473756.273:2055): avc: denied { write } for pid=24366 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1192.856080][T14552] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.912648][T24367] IPVS: using max 57 ests per chain, 136800 per kthread [ 1193.043597][T14552] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.075038][T22810] usb 6-1: USB disconnect, device number 42 [ 1194.051860][T14743] Bluetooth: hci4: command tx timeout [ 1194.198237][T24395] xt_hashlimit: max too large, truncated to 1048576 [ 1194.612014][T14743] Bluetooth: hci1: command 0x0406 tx timeout [ 1194.698168][T24348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1194.704396][T24348] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1195.325239][ T29] audit: type=1400 audit(1787473758.743:2056): avc: denied { write } for pid=24382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1195.387300][T24348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1195.394266][T24348] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1195.515671][ T29] audit: type=1400 audit(1787473758.943:2057): avc: denied { write } for pid=24401 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1195.670702][T24348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1195.676730][T24348] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1195.691891][ T93] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1195.706000][T24348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1195.712075][T24348] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1195.866642][T24348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1195.872826][T24348] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1195.911846][ T93] usb 6-1: Using ep0 maxpacket: 16 [ 1195.937150][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1195.966877][ T93] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1196.948430][ T93] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1196.961062][ T93] usb 6-1: config 0 has no interface number 0 [ 1196.968033][ T93] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.981327][ T93] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.997543][ T93] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.044835][ T93] usb 6-1: config 0 descriptor?? [ 1197.177903][T14552] bridge_slave_1: left allmulticast mode [ 1197.198821][T14552] bridge_slave_1: left promiscuous mode [ 1197.208886][T14552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.447490][T24417] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4166'. [ 1197.448183][T14552] bridge_slave_0: left allmulticast mode [ 1197.456741][T24417] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4166'. [ 1197.488179][T14552] bridge_slave_0: left promiscuous mode [ 1197.501244][T14552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.727295][ T93] uclogic 0003:28BD:0071.003B: pen parameters not found [ 1197.743478][ T93] uclogic 0003:28BD:0071.003B: interface is invalid, ignoring [ 1197.810269][T14552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.820947][T14552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.830772][T14552] bond0 (unregistering): Released all slaves [ 1198.049425][ T5790] usb 6-1: USB disconnect, device number 43 [ 1198.403846][T24430] xt_hashlimit: max too large, truncated to 1048576 [ 1199.937941][T14552] hsr_slave_0: left promiscuous mode [ 1199.962762][T14552] hsr_slave_1: left promiscuous mode [ 1199.970558][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.980074][T14552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.013685][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.040331][T14552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.138219][T24444] FAULT_INJECTION: forcing a failure. [ 1200.138219][T24444] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.156084][T14552] veth1_macvtap: left promiscuous mode [ 1200.164596][T14552] veth0_macvtap: left promiscuous mode [ 1200.165723][T24444] CPU: 0 UID: 0 PID: 24444 Comm: syz.8.4176 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.165748][T24444] Tainted: [L]=SOFTLOCKUP [ 1200.165754][T24444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1200.165764][T24444] Call Trace: [ 1200.165770][T24444] [ 1200.165777][T24444] dump_stack_lvl+0x100/0x190 [ 1200.165805][T24444] should_fail_ex.cold+0x5/0xa [ 1200.165828][T24444] should_failslab+0xc2/0x120 [ 1200.165845][T24444] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1200.165869][T24444] ? skb_clone+0x190/0x400 [ 1200.165895][T24444] skb_clone+0x190/0x400 [ 1200.165918][T24444] nfnetlink_rcv_batch+0x1c8/0x2880 [ 1200.165945][T24444] ? kmem_cache_free+0x127/0x6b0 [ 1200.165968][T24444] ? __lock_acquire+0x4c5/0x1ec0 [ 1200.165994][T24444] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1200.166018][T24444] ? find_held_lock+0x2b/0x80 [ 1200.166049][T24444] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1200.166070][T24444] ? __asan_memset+0x23/0x50 [ 1200.166090][T24444] ? __nla_validate_parse+0x1e7/0x28b0 [ 1200.166117][T24444] ? __pfx___nla_validate_parse+0x10/0x10 [ 1200.166136][T24444] ? rcu_is_watching+0x13/0xc0 [ 1200.166155][T24444] ? cap_capable+0x107/0x430 [ 1200.166180][T24444] ? __nla_parse+0x40/0x60 [ 1200.166202][T24444] nfnetlink_rcv+0x3bd/0x440 [ 1200.166225][T24444] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1200.166254][T24444] netlink_unicast+0x585/0x850 [ 1200.166283][T24444] ? __pfx_netlink_unicast+0x10/0x10 [ 1200.166309][T24444] netlink_sendmsg+0x8b0/0xda0 [ 1200.166333][T24444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.166354][T24444] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1200.166381][T24444] ____sys_sendmsg+0xa4d/0xbe0 [ 1200.166396][T24444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1200.166417][T24444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1200.166444][T24444] ___sys_sendmsg+0x190/0x1e0 [ 1200.166464][T24444] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.166481][T24444] ? get_pid_task+0x106/0x250 [ 1200.166509][T24444] ? find_held_lock+0x2b/0x80 [ 1200.166541][T24444] __sys_sendmsg+0x160/0x210 [ 1200.166564][T24444] ? __pfx___sys_sendmsg+0x10/0x10 [ 1200.166597][T24444] do_syscall_64+0x123/0x790 [ 1200.166622][T24444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.166639][T24444] RIP: 0033:0x7f2b8b19e0d9 [ 1200.166653][T24444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.166669][T24444] RSP: 002b:00007f2b8c050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.166685][T24444] RAX: ffffffffffffffda RBX: 00007f2b8b425fa0 RCX: 00007f2b8b19e0d9 [ 1200.166696][T24444] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1200.166705][T24444] RBP: 00007f2b8c050090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.166716][T24444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.166725][T24444] R13: 00007f2b8b426038 R14: 00007f2b8b425fa0 R15: 00007ffc7e192b58 [ 1200.166747][T24444] [ 1200.464738][T14552] veth1_vlan: left promiscuous mode [ 1200.471119][T14552] veth0_vlan: left promiscuous mode [ 1200.794212][T24452] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1200.972364][ T29] audit: type=1400 audit(1787473764.393:2058): avc: denied { setopt } for pid=24455 comm="syz.8.4181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1201.357496][T14552] team0 (unregistering): Port device team_slave_1 removed [ 1201.427765][T14552] team0 (unregistering): Port device team_slave_0 removed [ 1202.283973][T22287] IPVS: starting estimator thread 0... [ 1202.398626][T24337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.406437][T24337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.414585][T24337] bridge_slave_0: entered allmulticast mode [ 1202.446895][T24337] bridge_slave_0: entered promiscuous mode [ 1202.452045][T24476] IPVS: using max 77 ests per chain, 184800 per kthread [ 1202.490729][T24337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.505364][T24337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.929690][T24337] bridge_slave_1: entered allmulticast mode [ 1202.963159][T24337] bridge_slave_1: entered promiscuous mode [ 1203.186145][T24337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.246531][T24337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.178861][T14552] IPVS: stop unused estimator thread 0... [ 1204.198637][T24337] team0: Port device team_slave_0 added [ 1204.242883][T24337] team0: Port device team_slave_1 added [ 1204.351256][T14743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1204.371962][T14743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1204.462120][T14743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1204.974213][T14743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1204.981997][T14743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1205.309425][T20147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1205.325478][T20147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1205.333890][ T29] audit: type=1400 audit(1787473768.763:2059): avc: denied { map } for pid=24489 comm="syz.8.4190" path="socket:[93869]" dev="sockfs" ino=93869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1205.334140][T20147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1205.407541][T20147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1205.420317][T20147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1205.474462][T24337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.531340][T24337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.600661][ T29] audit: type=1400 audit(1787473768.763:2060): avc: denied { accept } for pid=24489 comm="syz.8.4190" path="socket:[93869]" dev="sockfs" ino=93869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1205.731820][T24337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.751825][ T29] audit: type=1400 audit(1787473769.163:2061): avc: denied { unlink } for pid=24494 comm="syz.9.4191" name="#19" dev="tmpfs" ino=318 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1205.778955][T24337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.811850][T24337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.853363][ T29] audit: type=1400 audit(1787473769.183:2062): avc: denied { mount } for pid=24494 comm="syz.9.4191" name="/" dev="overlay" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1205.904055][T24337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.392831][T24502] comedi: No check for data length of config insn id 127 is implemented [ 1206.418225][T24502] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1206.487944][T24502] comedi: Assuming n=28941 is correct [ 1206.577224][T14552] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.691563][T24504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4189'. [ 1206.874381][ T29] audit: type=1400 audit(1787473770.303:2063): avc: denied { read } for pid=24509 comm="syz.8.4192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1206.904173][T24337] hsr_slave_0: entered promiscuous mode [ 1206.943201][T24337] hsr_slave_1: entered promiscuous mode [ 1207.154445][T24337] debugfs: 'hsr0' already exists in 'hsr' [ 1207.209959][T24337] Cannot create hsr debugfs directory [ 1207.486424][T14552] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.571982][T20147] Bluetooth: hci1: command tx timeout [ 1207.584331][ T982] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1207.878018][ T982] usb 5-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1207.888426][T14552] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.902593][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.923986][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1207.949297][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.961302][ T982] usb 5-1: config 0 descriptor?? [ 1208.021807][ T5717] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1208.063686][T14552] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.204803][ T5717] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1208.238307][T24516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.246520][ T5717] usb 9-1: config 0 has an invalid interface number: 40 but max is 0 [ 1208.285453][ T5717] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.321610][ T5717] usb 9-1: config 0 has no interface number 0 [ 1208.345741][ T5717] usb 9-1: config 0 interface 40 has no altsetting 0 [ 1208.349129][T24516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.353366][ T5717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.382976][ T5717] usb 9-1: config 0 descriptor?? [ 1208.600810][T24523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.638357][T24523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.675466][ T5717] usb 9-1: string descriptor 0 read error: -71 [ 1208.695376][ T982] apple 0003:05AC:024F.003C: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1208.743661][ T982] apple 0003:05AC:024F.003C: hidraw0: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.4-1/input0 [ 1208.743968][ T5717] usb 9-1: USB disconnect, device number 52 [ 1208.927546][ T5696] usb 5-1: USB disconnect, device number 44 [ 1209.205569][T14552] bridge_slave_1: left allmulticast mode [ 1209.222294][T14552] bridge_slave_1: left promiscuous mode [ 1209.242006][T14552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.282756][T14552] bridge_slave_0: left allmulticast mode [ 1209.289687][T14552] bridge_slave_0: left promiscuous mode [ 1209.389381][T14552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.333178][T20147] Bluetooth: hci1: command tx timeout [ 1210.335365][ T29] audit: type=1400 audit(1787473773.363:2064): avc: denied { mount } for pid=24532 comm="syz.9.4199" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1210.680134][ T29] audit: type=1400 audit(1787473773.413:2065): avc: denied { search } for pid=24532 comm="syz.9.4199" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1210.716098][ T29] audit: type=1400 audit(1787473773.413:2066): avc: denied { read } for pid=24532 comm="syz.9.4199" name="export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1210.755318][ T29] audit: type=1400 audit(1787473773.423:2067): avc: denied { open } for pid=24532 comm="syz.9.4199" path="/59/nfsd/export_features" dev="nfsd" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1211.123328][T14552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.149980][T14552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.167340][T14552] bond0 (unregistering): Released all slaves [ 1211.264084][T24547] xt_hashlimit: max too large, truncated to 1048576 [ 1212.275090][T24535] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1212.290059][T24535] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1212.307099][T24535] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1212.320769][T24535] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1212.389136][T20147] Bluetooth: hci1: command tx timeout [ 1212.410396][ T29] audit: type=1400 audit(1787473775.833:2068): avc: denied { unmount } for pid=22911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1213.174192][ T29] audit: type=1400 audit(1787473776.153:2069): avc: denied { mounton } for pid=24550 comm="syz.8.4203" path="/31/myproc/interrupts" dev="proc" ino=4026532034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 1213.599768][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1213.745929][T24565] xt_hashlimit: max too large, truncated to 1048576 [ 1213.865531][T24566] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1214.452237][T20147] Bluetooth: hci1: command tx timeout [ 1214.471080][T14552] hsr_slave_0: left promiscuous mode [ 1214.514443][T14552] hsr_slave_1: left promiscuous mode [ 1214.527794][ T29] audit: type=1400 audit(1787473777.953:2070): avc: denied { name_bind } for pid=24572 comm="syz.4.4208" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1214.569400][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.592917][T14552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.615242][T14552] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.649351][T14552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.031174][T14552] veth1_macvtap: left promiscuous mode [ 1215.101505][T14552] veth0_macvtap: left promiscuous mode [ 1215.115694][T14552] veth1_vlan: left promiscuous mode [ 1215.187164][T14552] veth0_vlan: left promiscuous mode [ 1215.358187][ T982] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1215.390762][ T982] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1219.235609][T14552] team0 (unregistering): Port device team_slave_1 removed [ 1219.276905][T14552] team0 (unregistering): Port device team_slave_0 removed [ 1219.327422][ T29] audit: type=1400 audit(1787473782.753:2071): avc: denied { ioctl } for pid=24612 comm="syz.9.4217" path="socket:[95252]" dev="sockfs" ino=95252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1219.840876][T24487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.848626][T24487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.856624][T24487] bridge_slave_0: entered allmulticast mode [ 1219.866477][T24487] bridge_slave_0: entered promiscuous mode [ 1219.875122][T24487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.882314][T24487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.908500][T24487] bridge_slave_1: entered allmulticast mode [ 1219.916014][T24487] bridge_slave_1: entered promiscuous mode [ 1220.024406][T24487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.495113][ T29] audit: type=1400 audit(1787473783.873:2072): avc: denied { mounton } for pid=24638 comm="syz.8.4222" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1220.628054][ T29] audit: type=1400 audit(1787473783.983:2073): avc: denied { getopt } for pid=24638 comm="syz.8.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1220.926430][T24487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.956086][T24646] netlink: 'syz.9.4223': attribute type 2 has an invalid length. [ 1221.010910][T24646] netlink: 'syz.9.4223': attribute type 11 has an invalid length. [ 1221.047767][T24646] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4223'. [ 1221.957126][T14552] IPVS: stop unused estimator thread 0... [ 1221.963364][T24487] team0: Port device team_slave_0 added [ 1222.001618][T24487] team0: Port device team_slave_1 added [ 1222.025611][T24650] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1222.311239][T24487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.333998][T24487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.376661][T24487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.388009][T24337] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1222.400213][T24337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1222.420082][T24337] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1222.505845][ T29] audit: type=1400 audit(1787473785.923:2074): avc: denied { read write } for pid=24661 comm="syz.4.4229" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1222.670497][ T29] audit: type=1400 audit(1787473785.923:2075): avc: denied { open } for pid=24661 comm="syz.4.4229" path="/dev/input/mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1222.892297][T24337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1222.975395][T24487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.045354][T24487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.264443][T24487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.349219][T24337] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1223.419020][T24337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.472699][T24337] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1225.019329][T24673] SELinux: mls: truncated range [ 1225.024741][T24673] SELinux: error reading MLS range of context [ 1225.031081][T24673] SELinux: invalid ocon [ 1225.394273][T24677] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4231'. [ 1225.402985][T24337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.592528][T24487] hsr_slave_0: entered promiscuous mode [ 1225.620659][T24487] hsr_slave_1: entered promiscuous mode [ 1225.696086][T24673] SELinux: failed to load policy [ 1226.747001][ T29] audit: type=1400 audit(1787473790.173:2076): avc: denied { getopt } for pid=24705 comm="syz.4.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1226.815898][T24714] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4238'. [ 1226.821994][ T29] audit: type=1400 audit(1787473790.203:2077): avc: denied { read write } for pid=24705 comm="syz.4.4237" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1226.841357][T24337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.858162][ T29] audit: type=1400 audit(1787473790.203:2078): avc: denied { open } for pid=24705 comm="syz.4.4237" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1226.914281][T24714] openvswitch: netlink: Flow actions attr not present in new flow. [ 1226.931075][ T29] audit: type=1400 audit(1787473790.353:2079): avc: denied { write } for pid=24715 comm="syz.8.4239" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1226.954477][T24716] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4238'. [ 1226.970379][ T29] audit: type=1400 audit(1787473790.383:2080): avc: denied { ioctl } for pid=24718 comm="syz.4.4240" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1226.989398][T24716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1227.224936][ T29] audit: type=1400 audit(1787473790.653:2081): avc: denied { write } for pid=24701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1227.344749][ T29] audit: type=1400 audit(1787473790.753:2082): avc: denied { ioctl } for pid=24715 comm="syz.8.4239" path="socket:[96353]" dev="sockfs" ino=96353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1227.373946][T24722] svc: failed to register lockdv1 RPC service (errno 101). [ 1227.399177][T24722] lockd_up: makesock failed, error=-101 [ 1228.071724][T24337] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.099255][T15447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.106453][T15447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.117157][T15447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.119765][ T29] audit: type=1400 audit(1787473791.543:2083): avc: denied { write } for pid=24735 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1228.124347][T15447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.533897][T24722] svc: failed to register nfsdv3 RPC service (errno 512). [ 1229.581257][T24722] svc: failed to register nfsaclv3 RPC service (errno 101). [ 1229.611316][T24722] failed to unregister tcp with rpcbind [ 1229.645023][T24722] svc: failed to register nfsdv3 RPC service (errno 97). [ 1229.680656][T24722] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1229.734734][T24722] failed to unregister tcp with rpcbind [ 1230.039737][ T29] audit: type=1400 audit(1787473793.463:2084): avc: denied { write } for pid=24744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1230.902512][ T29] audit: type=1400 audit(1787473794.323:2085): avc: denied { write } for pid=24763 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1231.333552][ T10] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1231.495471][ T10] usb 10-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1231.544891][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1231.575505][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1231.610936][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1231.639726][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.678704][T24769] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1231.729094][T24766] SELinux: mls: truncated range [ 1231.741499][T24766] SELinux: error reading MLS range of context [ 1231.755331][T24337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.780845][T24766] SELinux: invalid ocon [ 1231.951773][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1231.951793][ T29] audit: type=1400 audit(1787473795.373:2087): avc: denied { write } for pid=24787 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.225280][T24766] SELinux: failed to load policy [ 1232.352961][T24487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1232.396452][T24487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1232.418487][T24337] veth0_vlan: entered promiscuous mode [ 1232.441126][T24487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1233.439097][ T29] audit: type=1400 audit(1787473796.483:2088): avc: denied { create } for pid=24793 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1233.483953][T24487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1233.499723][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.499780][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.548460][T20147] Bluetooth: hci5: Reading Intel version command failed (-71) [ 1233.567594][T24337] veth1_vlan: entered promiscuous mode [ 1233.587164][T24487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1233.592210][ T93] usb 10-1: USB disconnect, device number 38 [ 1233.652781][T24487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1233.687857][T24487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1233.697283][ T29] audit: type=1400 audit(1787473797.123:2089): avc: denied { write } for pid=24789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.726535][T24487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1233.800127][T24337] veth0_macvtap: entered promiscuous mode [ 1233.813081][ T29] audit: type=1400 audit(1787473797.233:2090): avc: denied { write } for pid=24812 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.842779][T24337] veth1_macvtap: entered promiscuous mode [ 1233.875299][T24337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.898328][T24337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.012843][ T9379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.179692][T24487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.252741][ T9381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.279142][ T9381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.308656][T24487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.380775][T14552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.387976][T14552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.440319][T15447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.456177][ T9381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.483992][ T982] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1234.503225][T15447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.510625][ T9381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.560080][T14552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.567272][T14552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1234.653901][T22287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.683384][ T982] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1234.723940][ T982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.737457][T24826] smpboot: CPU 1 is now offline [ 1234.775881][ T982] usb 9-1: config 0 descriptor?? [ 1234.815084][ T982] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1235.018820][T24819] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4249'. [ 1235.100178][T24839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4250'. [ 1235.206261][T24839] openvswitch: netlink: Flow actions attr not present in new flow. [ 1235.250098][ T982] gspca_cpia1: usb_control_msg 05, error -71 [ 1235.284420][T24842] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4250'. [ 1235.305623][ T982] gspca_cpia1: usb_control_msg 01, error -71 [ 1235.344485][ T982] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1235.383283][ T29] audit: type=1400 audit(1787473798.793:2091): avc: denied { write } for pid=24831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1235.466029][T24842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1235.514782][ T29] audit: type=1800 audit(1787473798.923:2092): pid=24849 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4154" name="cdrom" dev="configfs" ino=96862 res=0 errno=0 [ 1235.569896][ T982] usb 9-1: USB disconnect, device number 53 [ 1235.657061][ T29] audit: type=1400 audit(1787473799.053:2093): avc: denied { write } for pid=24852 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.628906][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4254'. [ 1236.719497][T24874] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4254'. [ 1236.839413][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4254'. [ 1237.028307][ T29] audit: type=1326 audit(1787473800.453:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24854 comm="syz.0.4252" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b9499e0d9 code=0x0 [ 1237.138165][T24487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.180948][ T29] audit: type=1400 audit(1787473800.593:2095): avc: denied { write } for pid=24860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.277879][T24487] veth0_vlan: entered promiscuous mode [ 1237.335817][T24487] veth1_vlan: entered promiscuous mode [ 1237.474272][ T29] audit: type=1400 audit(1787473800.893:2096): avc: denied { write } for pid=24896 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.513954][T24487] veth0_macvtap: entered promiscuous mode [ 1237.579604][T24487] veth1_macvtap: entered promiscuous mode [ 1237.669773][T24487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1237.716451][ T5259] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1237.754393][T24889] SELinux: mls: truncated range [ 1237.779626][T24487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1237.788102][T24889] SELinux: error reading MLS range of context [ 1237.810616][T24889] SELinux: invalid ocon [ 1237.848246][T15447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.892164][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.258784][T24889] SELinux: failed to load policy [ 1238.642321][T15447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.713759][ T29] audit: type=1400 audit(1787473802.133:2097): avc: denied { write } for pid=24903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1238.764225][T14552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1238.772725][T22287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.803070][T14552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1238.842127][ T10] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1238.851562][T24923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4261'. [ 1238.943886][T24923] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1239.012737][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1239.050014][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 1239.059538][ T29] audit: type=1400 audit(1787473802.463:2098): avc: denied { write } for pid=24926 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.123720][T15447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.132753][ T10] usb 10-1: config 9 has an invalid interface number: 221 but max is 1 [ 1239.161424][T24923] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1239.186198][T15447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.196806][ T10] usb 10-1: config 9 has an invalid interface number: 221 but max is 1 [ 1239.250937][ T10] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.280426][ T29] audit: type=1400 audit(1787473802.703:2099): avc: denied { create } for pid=24928 comm="syz.8.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1239.318734][ T5259] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1239.326455][ T10] usb 10-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1239.460136][T24923] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1239.476351][T24930] Bluetooth: MGMT ver 1.23 [ 1239.485435][ T10] usb 10-1: config 9 has no interface number 0 [ 1239.521015][ T10] usb 10-1: config 9 interface 221 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1239.614203][ T10] usb 10-1: config 9 interface 221 has no altsetting 0 [ 1239.685261][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.704390][T24923] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1239.719635][ T10] usb 10-1: Product: syz [ 1239.739713][ T10] usb 10-1: Manufacturer: syz [ 1239.752227][T24923] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1239.768365][ T10] usb 10-1: SerialNumber: syz [ 1239.782753][ T29] audit: type=1400 audit(1787473803.213:2100): avc: denied { ioctl } for pid=24934 comm="syz.3.4187" path="socket:[97497]" dev="sockfs" ino=97497 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1240.535779][T24923] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1240.983183][T24914] fsa4480 0-0004: error -ENODEV: FSA4480 not found [ 1241.026332][T24935] CIFS: Attempting to mount //127.0.0.1/share [ 1241.033861][T24935] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1241.041351][T24935] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1241.052224][T24935] comedi comedi1: Minor 2 could not be opened [ 1241.060748][T24923] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1241.085374][T24914] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x04 [ 1241.114012][T24940] comedi comedi1: Cannot bond this driver to itself! [ 1241.124173][T24936] gfs2: error -5 reading superblock [ 1241.175605][T24923] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1241.198620][T24946] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4264'. [ 1241.234640][T24923] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1241.286063][ T10] usb 10-1: USB disconnect, device number 39 [ 1241.354699][T24105] udevd[24105]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1241.556411][T15447] IPVS: starting estimator thread 0... [ 1241.623772][ T29] audit: type=1400 audit(1787473805.053:2101): avc: denied { write } for pid=24932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1241.682246][T24958] IPVS: using max 79 ests per chain, 189600 per kthread [ 1241.825251][T24970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 1241.841389][ T29] audit: type=1400 audit(1787473805.263:2102): avc: denied { write } for pid=24969 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1242.603625][T24981] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4271'. [ 1242.613341][T24981] Unknown options in mask b7f2 [ 1242.700827][T24970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4266'. [ 1242.755577][ T29] audit: type=1400 audit(1787473806.033:2103): avc: denied { write } for pid=24978 comm="syz.9.4271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1242.817867][ T5259] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1244.217193][T24968] SELinux: mls: truncated range [ 1244.264494][T24968] SELinux: error reading MLS range of context [ 1245.158368][T24968] SELinux: invalid ocon [ 1245.537478][T24968] SELinux: failed to load policy [ 1245.725963][ T29] audit: type=1400 audit(1787473809.153:2104): avc: denied { write } for pid=24993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1247.585837][ T29] audit: type=1400 audit(1787473811.013:2105): avc: denied { write } for pid=25033 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1247.784502][T25040] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4284'. [ 1248.078085][T25043] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4284'. [ 1248.129394][T25040] openvswitch: netlink: Flow actions attr not present in new flow. [ 1248.175312][T25043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1248.218742][T22287] nvmet: connect request for invalid subsystem tes! [ 1248.283773][T25012] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "tes" [ 1248.545790][ T5259] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1248.623152][T25053] FAULT_INJECTION: forcing a failure. [ 1248.623152][T25053] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.761879][T25053] CPU: 0 UID: 0 PID: 25053 Comm: syz.0.4286 Tainted: G L syzkaller #0 PREEMPT(full) [ 1248.761900][T25053] Tainted: [L]=SOFTLOCKUP [ 1248.761904][T25053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1248.761911][T25053] Call Trace: [ 1248.761915][T25053] [ 1248.761920][T25053] dump_stack_lvl+0x100/0x190 [ 1248.761941][T25053] should_fail_ex.cold+0x5/0xa [ 1248.761957][T25053] should_failslab+0xc2/0x120 [ 1248.761971][T25053] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1248.761992][T25053] ? sock_alloc_inode+0x26/0x2c0 [ 1248.762011][T25053] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1248.762029][T25053] sock_alloc_inode+0x26/0x2c0 [ 1248.762046][T25053] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1248.762062][T25053] alloc_inode+0x68/0x250 [ 1248.762076][T25053] sock_alloc+0x44/0x280 [ 1248.762093][T25053] do_accept+0xf9/0x530 [ 1248.762106][T25053] ? do_raw_spin_lock+0x128/0x260 [ 1248.762119][T25053] ? __pfx_do_accept+0x10/0x10 [ 1248.762141][T25053] __sys_accept4+0x108/0x200 [ 1248.762154][T25053] ? __pfx___sys_accept4+0x10/0x10 [ 1248.762168][T25053] ? __pfx_ksys_write+0x10/0x10 [ 1248.762189][T25053] __x64_sys_accept4+0x96/0x100 [ 1248.762202][T25053] ? lockdep_hardirqs_on+0x7d/0x110 [ 1248.762219][T25053] do_syscall_64+0x123/0x790 [ 1248.762237][T25053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.762249][T25053] RIP: 0033:0x7f8b9499e0d9 [ 1248.762258][T25053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.762269][T25053] RSP: 002b:00007f8b95797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1248.762280][T25053] RAX: ffffffffffffffda RBX: 00007f8b94c25fa0 RCX: 00007f8b9499e0d9 [ 1248.762287][T25053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1248.762294][T25053] RBP: 00007f8b95797090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.762300][T25053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.762306][T25053] R13: 00007f8b94c26038 R14: 00007f8b94c25fa0 R15: 00007ffc90ab9038 [ 1248.762321][T25053] [ 1249.192005][ T29] audit: type=1400 audit(1787473812.603:2106): avc: denied { ioctl } for pid=25050 comm="syz.4.4285" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1249.267105][ T29] audit: type=1400 audit(1787473812.643:2107): avc: denied { cmd } for pid=25058 comm="syz.3.4281" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1249.312037][T25051] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4285'. [ 1249.389051][ T29] audit: type=1400 audit(1787473812.653:2108): avc: denied { write } for pid=25056 comm="syz.9.4287" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1249.576794][ T29] audit: type=1400 audit(1787473812.673:2109): avc: denied { ioctl } for pid=25056 comm="syz.9.4287" path="/dev/usbmon0" dev="devtmpfs" ino=715 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1249.763434][ T29] audit: type=1400 audit(1787473813.093:2110): avc: denied { write } for pid=25055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1249.884645][T25076] netlink: 'syz.0.4288': attribute type 3 has an invalid length. [ 1249.931342][ T29] audit: type=1400 audit(1787473813.353:2111): avc: denied { write } for pid=25082 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1249.978783][T25076] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1250.014960][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1250.090466][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1250.219531][T25095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4294'. [ 1250.241829][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1250.248713][ T9] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1250.361305][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.557468][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1250.822644][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1250.909508][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.986476][ T9] usb 4-1: config 0 descriptor?? [ 1251.071416][T25124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4297'. [ 1251.107012][T25124] openvswitch: netlink: Flow actions attr not present in new flow. [ 1251.164761][T25125] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4297'. [ 1251.386634][T25125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1251.482365][T25131] kvm: emulating exchange as write [ 1251.525947][ T9] nintendo 0003:057E:2019.003E: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 1251.635099][ T29] audit: type=1400 audit(1787473815.063:2112): avc: denied { write } for pid=25115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.753330][ T5583] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1251.826811][ T29] audit: type=1400 audit(1787473815.243:2113): avc: denied { append } for pid=25142 comm="syz.4.4300" name="sda" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1251.972976][ T5583] usb 10-1: device descriptor read/64, error -71 [ 1252.004800][ T9] nintendo 0003:057E:2019.003E: Failed to get joycon info; ret=-71 [ 1252.058419][ T9] nintendo 0003:057E:2019.003E: Failed to retrieve controller info; ret=-71 [ 1252.100468][ T29] audit: type=1400 audit(1787473815.523:2114): avc: denied { write } for pid=25146 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1252.132093][ T9] nintendo 0003:057E:2019.003E: Failed to initialize controller; ret=-71 [ 1252.326559][ T9] nintendo 0003:057E:2019.003E: probe - fail = -71 [ 1252.499741][ T5583] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1252.528895][ T9] nintendo 0003:057E:2019.003E: probe with driver nintendo failed with error -71 [ 1252.587896][ T9] usb 4-1: USB disconnect, device number 38 [ 1252.652577][ T5583] usb 10-1: device descriptor read/64, error -71 [ 1252.774301][ T5583] usb usb10-port1: attempt power cycle [ 1253.164250][ T5583] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1253.244160][ T5583] usb 10-1: device descriptor read/8, error -71 [ 1253.581753][T20819] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1254.001779][ T5583] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1254.147555][T25172] xt_hashlimit: max too large, truncated to 1048576 [ 1254.312528][T20819] usb 9-1: Using ep0 maxpacket: 8 [ 1254.711754][ T5583] usb 10-1: device not accepting address 43, error -71 [ 1255.169354][ T29] audit: type=1400 audit(1787473818.513:2115): avc: denied { bind } for pid=25170 comm="syz.0.4308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1255.215737][ T5583] usb usb10-port1: unable to enumerate USB device [ 1255.227012][T20819] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1255.251363][T20819] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1255.329173][T20819] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.378972][ T29] audit: type=1400 audit(1787473818.803:2116): avc: denied { write } for pid=25155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1255.428229][T20819] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1255.463225][T20819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.494121][T20819] usb 9-1: Product: syz [ 1256.184118][T20819] usb 9-1: Manufacturer: syz [ 1256.248850][T20819] usb 9-1: SerialNumber: syz [ 1256.300028][T20819] usb 9-1: can't set config #1, error -71 [ 1256.322095][ T29] audit: type=1400 audit(1787473819.743:2117): avc: denied { write } for pid=25194 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1256.407251][T20819] usb 9-1: USB disconnect, device number 54 [ 1257.642987][T20819] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1257.731890][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1257.785062][T25223] xt_hashlimit: max too large, truncated to 1048576 [ 1257.842149][T20819] usb 9-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1257.883950][T20819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.920459][T20819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1257.952545][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1257.967390][ T29] audit: type=1400 audit(1787473821.393:2118): avc: denied { ioctl } for pid=25204 comm="syz.4.4317" path="socket:[98746]" dev="sockfs" ino=98746 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1257.997200][T20819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.029927][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.046303][T20819] usb 9-1: config 0 descriptor?? [ 1258.092091][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 1258.132902][ T29] audit: type=1400 audit(1787473821.443:2119): avc: denied { write } for pid=25209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.167402][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.197549][ T9] usb 1-1: config 0 descriptor?? [ 1258.249165][ T29] audit: type=1400 audit(1787473821.673:2120): avc: denied { write } for pid=25233 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1258.327170][T25213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.415673][T25213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.454972][T25220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.635415][T25248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4322'. [ 1258.662796][T25220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.730189][T25250] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4322'. [ 1258.818088][T20819] apple 0003:05AC:024F.003F: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1258.889794][T20819] apple 0003:05AC:024F.003F: hidraw0: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.8-1/input0 [ 1258.934421][ T9] apple 0003:05AC:024F.0040: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 1259.023644][ T9] apple 0003:05AC:024F.0040: hidraw1: USB HID v0.00 Joystick [HID 05ac:024f] on usb-dummy_hcd.0-1/input0 [ 1259.108825][T24821] usb 9-1: USB disconnect, device number 55 [ 1259.160216][ T9] usb 1-1: USB disconnect, device number 15 [ 1259.199342][T25269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1259.206722][T25269] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.213973][T25269] IPv6: NLM_F_CREATE should be set when creating new route [ 1259.249921][T25267] fido_id[25267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1259.404669][T20819] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1259.432280][ T29] audit: type=1400 audit(1787473822.853:2121): avc: denied { write } for pid=25247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.506493][T25271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.513949][T25271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.559915][ T29] audit: type=1400 audit(1787473822.983:2122): avc: denied { write } for pid=25279 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1259.614784][T20819] usb 5-1: Using ep0 maxpacket: 8 [ 1259.631379][T20819] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1259.674521][T20819] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1259.743922][T20819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.805750][T20819] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1260.146388][T20819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.799974][T25283] SELinux: mls: truncated range [ 1260.805035][T25283] SELinux: error reading MLS range of context [ 1260.811108][T25283] SELinux: invalid ocon [ 1260.879681][T25283] SELinux: failed to load policy [ 1260.922090][T20819] usb 5-1: Product: syz [ 1260.958940][T20819] usb 5-1: Manufacturer: syz [ 1260.979662][T25271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1261.000001][T20819] usb 5-1: SerialNumber: syz [ 1261.049240][T25271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.310454][T25289] SELinux: mls: truncated range [ 1262.315679][T25289] SELinux: error reading MLS range of context [ 1262.321879][T25289] SELinux: invalid ocon [ 1262.396387][T25289] SELinux: failed to load policy [ 1262.631563][ T29] audit: type=1400 audit(1787473826.053:2123): avc: denied { write } for pid=25284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1263.484104][T25321] netlink: 'syz.0.4334': attribute type 2 has an invalid length. [ 1263.566655][T20819] usb 5-1: selecting invalid altsetting 1 [ 1263.606628][ T29] audit: type=1400 audit(1787473827.033:2124): avc: denied { write } for pid=25322 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1263.706977][T20819] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1263.740738][T25321] : entered promiscuous mode [ 1263.747992][ T6729] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.780798][ T6729] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.812498][T20819] usb 5-1: USB disconnect, device number 45 [ 1263.850434][ T6729] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.902022][T24105] udevd[24105]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1264.061912][ T9379] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.088211][ T29] audit: type=1400 audit(1787473827.513:2125): avc: denied { write } for pid=25318 comm="syz.0.4334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1264.248070][T25334] tipc: Started in network mode [ 1264.316359][T25334] tipc: Node identity 7f000001, cluster identity 4711 [ 1264.353010][T25334] tipc: Enabling of bearer rejected, failed to enable media [ 1265.042155][T20818] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1265.213524][T20818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1265.248334][T20818] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1265.308810][T20818] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.371906][T20818] usb 4-1: config 66 has 0 interfaces, different from the descriptor's value: 2 [ 1265.446595][T20818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.456299][ T29] audit: type=1400 audit(1787473828.873:2126): avc: denied { write } for pid=25335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.498691][T20818] usb 4-1: Product: syz [ 1265.520466][T20818] usb 4-1: Manufacturer: syz [ 1265.628552][T20818] usb 4-1: SerialNumber: syz [ 1265.659333][ T29] audit: type=1326 audit(1787473829.043:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25355 comm="syz.9.4338" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9595d9e0d9 code=0x0 [ 1265.688211][T20819] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1265.797348][ T29] audit: type=1400 audit(1787473829.183:2128): avc: denied { write } for pid=25359 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.890038][ T5259] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1265.896937][T20819] usb 9-1: Using ep0 maxpacket: 16 [ 1265.907112][T20819] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1265.949408][T20819] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1266.007961][T20819] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1266.098160][T20819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.138035][T20819] usb 9-1: Product: syz [ 1266.877161][T20819] usb 9-1: Manufacturer: syz [ 1266.910332][T20819] usb 9-1: SerialNumber: syz [ 1266.928775][T20818] usb 4-1: USB disconnect, device number 39 [ 1266.958885][T20819] usb 9-1: config 0 descriptor?? [ 1267.065857][T20819] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1267.137286][T20819] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1267.924587][ T5696] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1268.121739][ T5696] usb 5-1: Using ep0 maxpacket: 8 [ 1268.156629][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1268.853888][T25381] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4349'. [ 1268.863010][T25381] Unknown options in mask b7f2 [ 1268.868026][T20818] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1268.878524][T20819] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1268.949338][ T5696] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1268.991815][T20819] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1269.028639][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.099238][ T5696] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1269.147283][T20818] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1269.175148][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.195237][ T29] audit: type=1400 audit(1787473832.613:2129): avc: denied { write } for pid=25362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.240588][T20818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.275003][T25352] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4344'. [ 1269.284731][ T5696] usb 5-1: Product: syz [ 1269.301303][ T5696] usb 5-1: Manufacturer: syz [ 1269.328895][ T5696] usb 5-1: SerialNumber: syz [ 1269.338889][T20818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.378505][T20818] usb 4-1: Product: syz [ 1269.398594][T20819] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1269.426892][T20818] usb 4-1: Manufacturer: syz [ 1269.445125][T20819] em28xx 9-1:0.0: No AC97 audio processor [ 1269.469765][T20818] usb 4-1: SerialNumber: syz [ 1269.511779][T20819] usb 9-1: USB disconnect, device number 56 [ 1269.537022][T20818] kalmia 4-1:1.0: probe with driver kalmia failed with error -22 [ 1269.581468][ T29] audit: type=1400 audit(1787473833.003:2130): avc: denied { write } for pid=25390 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.616967][T20819] em28xx 9-1:0.0: Disconnecting em28xx [ 1269.704960][T20819] em28xx: Freeing device [ 1270.139428][T20819] usb 4-1: USB disconnect, device number 40 [ 1270.907670][ T5696] usb 5-1: selecting invalid altsetting 1 [ 1271.128071][ T5696] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1271.197725][ T5696] usb 5-1: USB disconnect, device number 46 [ 1271.242699][T24105] udevd[24105]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1271.306552][ T29] audit: type=1400 audit(1787473834.723:2131): avc: denied { getopt } for pid=25409 comm="syz.9.4350" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1271.449019][ T29] audit: type=1400 audit(1787473834.773:2132): avc: denied { mount } for pid=25409 comm="syz.9.4350" name="/" dev="autofs" ino=99238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1271.552528][T25402] FAULT_INJECTION: forcing a failure. [ 1271.552528][T25402] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1271.593609][ T29] audit: type=1400 audit(1787473834.853:2133): avc: denied { write } for pid=25394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.738057][ T29] audit: type=1400 audit(1787473835.133:2134): avc: denied { write } for pid=25424 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1271.824007][T25402] CPU: 0 UID: 0 PID: 25402 Comm: syz.0.4348 Tainted: G L syzkaller #0 PREEMPT(full) [ 1271.824034][T25402] Tainted: [L]=SOFTLOCKUP [ 1271.824039][T25402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1271.824046][T25402] Call Trace: [ 1271.824052][T25402] [ 1271.824057][T25402] dump_stack_lvl+0x100/0x190 [ 1271.824081][T25402] should_fail_ex.cold+0x5/0xa [ 1271.824099][T25402] get_futex_key+0x1d0/0x14f0 [ 1271.824115][T25402] ? __pfx_get_futex_key+0x10/0x10 [ 1271.824129][T25402] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 1271.824147][T25402] futex_wait_setup+0x91/0x540 [ 1271.824169][T25402] __futex_wait+0x19f/0x300 [ 1271.824189][T25402] ? __pfx___futex_wait+0x10/0x10 [ 1271.824211][T25402] ? __pfx_try_to_wake_up+0x10/0x10 [ 1271.824223][T25402] ? futex_hash+0x311/0x400 [ 1271.824236][T25402] ? __pfx_futex_wake_mark+0x10/0x10 [ 1271.824255][T25402] ? find_held_lock+0x2b/0x80 [ 1271.824270][T25402] ? futex_wake+0x4ea/0x5e0 [ 1271.824290][T25402] futex_wait+0xe6/0x370 [ 1271.824307][T25402] ? __pfx_futex_wait+0x10/0x10 [ 1271.824327][T25402] ? rcu_read_lock_any_held+0x6a/0x90 [ 1271.824345][T25402] ? find_held_lock+0x2b/0x80 [ 1271.824360][T25402] ? ksys_write+0x190/0x250 [ 1271.824379][T25402] ? ksys_write+0x190/0x250 [ 1271.824396][T25402] do_futex+0x265/0x440 [ 1271.824411][T25402] ? __pfx_do_futex+0x10/0x10 [ 1271.824426][T25402] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1271.824448][T25402] __x64_sys_futex+0x34f/0x4d0 [ 1271.824465][T25402] ? fput+0x7c/0x100 [ 1271.824480][T25402] ? __pfx___x64_sys_futex+0x10/0x10 [ 1271.824495][T25402] ? ksys_write+0x1ac/0x250 [ 1271.824510][T25402] ? __pfx_ksys_write+0x10/0x10 [ 1271.824531][T25402] do_syscall_64+0x123/0x790 [ 1271.824622][T25402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.824640][T25402] RIP: 0033:0x7f8b9499e0d9 [ 1271.824653][T25402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.824666][T25402] RSP: 002b:00007f8b957970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1271.824680][T25402] RAX: ffffffffffffffda RBX: 00007f8b94c25fa8 RCX: 00007f8b9499e0d9 [ 1271.824689][T25402] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b94c25fa8 [ 1271.824697][T25402] RBP: 00007f8b94c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.824705][T25402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1271.824713][T25402] R13: 00007f8b94c26038 R14: 00007ffc90ab8f50 R15: 00007ffc90ab9038 [ 1271.824730][T25402] [ 1272.284049][T20819] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1272.425654][T25430] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2469579899 (4939159798 ns) > initial count (1140510742 ns). Using initial count to start timer. [ 1272.443859][T20819] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1272.459219][T20819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.486660][T20819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.572227][T20819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.619610][T20819] usb 5-1: config 0 descriptor?? [ 1273.325419][ T29] audit: type=1400 audit(1787473836.753:2135): avc: denied { mount } for pid=25444 comm="syz.9.4356" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1273.352377][ T6729] IPVS: starting estimator thread 0... [ 1273.442869][T25455] IPVS: using max 78 ests per chain, 187200 per kthread [ 1273.715323][ T29] audit: type=1400 audit(1787473837.143:2136): avc: denied { unmount } for pid=22911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1273.837531][T25427] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4354'. [ 1273.848083][ T29] audit: type=1400 audit(1787473837.223:2137): avc: denied { name_bind } for pid=25423 comm="syz.4.4354" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1274.828839][T25468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4362'. [ 1274.857290][ T29] audit: type=1400 audit(1787473837.253:2138): avc: denied { write } for pid=25436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.017901][T25427] ------------[ cut here ]------------ [ 1275.023483][T25427] pgoff != vma->vm_start >> 12 [ 1275.023493][T25427] WARNING: mm/vma.h:276 at __split_vma+0xafd/0x1800, CPU#0: syz.4.4354/25427 [ 1275.037133][T25427] Modules linked in: [ 1275.041419][T25427] CPU: 0 UID: 0 PID: 25427 Comm: syz.4.4354 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.052462][T25427] Tainted: [L]=SOFTLOCKUP [ 1275.056841][T25427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1275.067028][T25427] RIP: 0010:__split_vma+0xafd/0x1800 [ 1275.072428][T25427] Code: 06 fb ff ff e8 a4 4b 9e ff 4d 89 e7 4c 89 ef 49 c1 ef 0c 4c 89 fe e8 72 45 9e ff 4d 39 fd 0f 84 e6 fa ff ff e8 84 4b 9e ff 90 <0f> 0b 90 e9 d8 fa ff ff e8 76 4b 9e ff 48 8d 7d 28 48 b8 00 00 00 [ 1275.095800][T25427] RSP: 0018:ffffc90003d3f228 EFLAGS: 00010283 [ 1275.102003][T25427] RAX: 000000000000012a RBX: ffff88805697d3c0 RCX: ffffc9000f1db000 [ 1275.110286][T25427] RDX: 0000000000080000 RSI: ffffffff826cc82c RDI: ffff888034a50000 [ 1275.118366][T25427] RBP: ffff88807a047dc0 R08: 0000000000000006 R09: 0000000200000c96 [ 1275.126862][T25427] R10: 0000000200000200 R11: 0000000000000000 R12: 0000200000200000 [ 1275.134895][T25427] R13: 0000000200000c96 R14: ffffc90003d3f5c8 R15: 0000000200000200 [ 1275.143113][T25427] FS: 00007f6130c5c6c0(0000) GS:ffff888123b86000(0000) knlGS:0000000000000000 [ 1275.152183][T25427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1275.158797][T25427] CR2: 0000001b2e9f8ff8 CR3: 0000000026dc1000 CR4: 00000000003526f0 [ 1275.166885][T25427] Call Trace: [ 1275.170171][T25427] [ 1275.173147][T25427] ? __pfx___split_vma+0x10/0x10 [ 1275.178092][T25427] ? __pfx_mas_prev+0x10/0x10 [ 1275.182826][T25427] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1275.188311][T25427] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1275.194310][T25427] ? mas_walk+0x6ef/0x9b0 [ 1275.198645][T25427] __mmap_region+0x4a7/0x30b0 [ 1275.203371][T25427] ? arch_stack_walk+0xa6/0xf0 [ 1275.208194][T25427] ? __pfx___mmap_region+0x10/0x10 [ 1275.213401][T25427] ? kfree_skbmem+0x19a/0x210 [ 1275.218093][T25427] ? stack_trace_save+0x8e/0xc0 [ 1275.223069][T25427] ? __lock_acquire+0x4c5/0x1ec0 [ 1275.228006][T25427] ? kasan_save_free_info+0x3b/0x70 [ 1275.233308][T25427] ? __kasan_slab_free+0x5f/0x80 [ 1275.238243][T25427] ? kmem_cache_free+0x127/0x6b0 [ 1275.243258][T25427] ? kfree_skbmem+0x19a/0x210 [ 1275.248015][T25427] ? consume_skb+0xd1/0x110 [ 1275.252902][T25427] ? netlink_unicast+0x58d/0x850 [ 1275.257865][T25427] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1275.262861][T25427] ? do_raw_spin_unlock+0x145/0x1e0 [ 1275.268063][T25427] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1275.273890][T25427] ? rcu_is_watching+0x13/0xc0 [ 1275.278654][T25427] ? trace_hrtimer_start+0x77/0x220 [ 1275.283868][T25427] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 1275.290131][T25427] mmap_region+0x3db/0x6d0 [ 1275.294602][T25427] ? __pfx_mmap_region+0x10/0x10 [ 1275.299585][T25427] ? shmem_get_unmapped_area+0x141/0x960 [ 1275.305302][T25427] ? __futex_wait+0x256/0x300 [ 1275.310023][T25427] ? selinux_mmap_addr+0x2b/0x110 [ 1275.315162][T25427] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1275.320071][T25427] ? security_mmap_addr+0x71/0x1e0 [ 1275.325288][T25427] ? __get_unmapped_area+0x255/0x3e0 [ 1275.330727][T25427] do_mmap+0x12c7/0x1c30 [ 1275.335139][T25427] ? __pfx_do_mmap+0x10/0x10 [ 1275.339801][T25427] ? selinux_mmap_file+0x154/0x1c0 [ 1275.345163][T25427] ? __pfx_down_write_killable+0x10/0x10 [ 1275.350869][T25427] vm_mmap_pgoff+0x28d/0x470 [ 1275.355709][T25427] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1275.360893][T25427] ? __pfx_do_futex+0x10/0x10 [ 1275.365675][T25427] ksys_mmap_pgoff+0xe4/0x610 [ 1275.370374][T25427] ? __x64_sys_futex+0x358/0x4d0 [ 1275.375340][T25427] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1275.380916][T25427] ? xfd_validate_state+0x129/0x190 [ 1275.386266][T25427] __x64_sys_mmap+0x125/0x190 [ 1275.390980][T25427] do_syscall_64+0x123/0x790 [ 1275.395647][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.401769][T25427] RIP: 0033:0x7f612fd9e0d9 [ 1275.406203][T25427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.426528][T25427] RSP: 002b:00007f6130c5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1275.435035][T25427] RAX: ffffffffffffffda RBX: 00007f6130025fa0 RCX: 00007f612fd9e0d9 [ 1275.443120][T25427] RDX: 0000000003000003 RSI: 0000000000200000 RDI: 0000200000000000 [ 1275.451129][T25427] RBP: 00007f612fe35024 R08: ffffffffffffffff R09: 00000000b80a7000 [ 1275.459158][T25427] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 1275.467240][T25427] R13: 00007f6130026038 R14: 00007f6130025fa0 R15: 00007ffd7c008158 [ 1275.475308][T25427] [ 1275.478365][T25427] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1275.485658][T25427] CPU: 0 UID: 0 PID: 25427 Comm: syz.4.4354 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.496601][T25427] Tainted: [L]=SOFTLOCKUP [ 1275.500928][T25427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1275.510995][T25427] Call Trace: [ 1275.514264][T25427] [ 1275.517173][T25427] dump_stack_lvl+0x100/0x190 [ 1275.521859][T25427] vpanic+0x553/0x970 [ 1275.525866][T25427] ? __pfx_vpanic+0x10/0x10 [ 1275.530376][T25427] panic+0xd1/0xe0 [ 1275.534099][T25427] ? __pfx_panic+0x10/0x10 [ 1275.538516][T25427] check_panic_on_warn.cold+0x19/0x34 [ 1275.543902][T25427] ? __split_vma+0xafd/0x1800 [ 1275.548594][T25427] __warn.cold+0x191/0x318 [ 1275.553020][T25427] __report_bug+0x30f/0x440 [ 1275.557518][T25427] ? __split_vma+0xafd/0x1800 [ 1275.562192][T25427] ? __pfx___report_bug+0x10/0x10 [ 1275.567227][T25427] ? __memcg_slab_post_alloc_hook+0x75c/0x1150 [ 1275.573407][T25427] ? __split_vma+0xafd/0x1800 [ 1275.578098][T25427] report_bug+0xb3/0x220 [ 1275.582362][T25427] ? __split_vma+0xafd/0x1800 [ 1275.587062][T25427] handle_bug+0x16a/0x2a0 [ 1275.591401][T25427] exc_invalid_op+0x17/0x50 [ 1275.595923][T25427] asm_exc_invalid_op+0x1a/0x20 [ 1275.600808][T25427] RIP: 0010:__split_vma+0xafd/0x1800 [ 1275.606105][T25427] Code: 06 fb ff ff e8 a4 4b 9e ff 4d 89 e7 4c 89 ef 49 c1 ef 0c 4c 89 fe e8 72 45 9e ff 4d 39 fd 0f 84 e6 fa ff ff e8 84 4b 9e ff 90 <0f> 0b 90 e9 d8 fa ff ff e8 76 4b 9e ff 48 8d 7d 28 48 b8 00 00 00 [ 1275.625731][T25427] RSP: 0018:ffffc90003d3f228 EFLAGS: 00010283 [ 1275.631805][T25427] RAX: 000000000000012a RBX: ffff88805697d3c0 RCX: ffffc9000f1db000 [ 1275.639799][T25427] RDX: 0000000000080000 RSI: ffffffff826cc82c RDI: ffff888034a50000 [ 1275.647788][T25427] RBP: ffff88807a047dc0 R08: 0000000000000006 R09: 0000000200000c96 [ 1275.655833][T25427] R10: 0000000200000200 R11: 0000000000000000 R12: 0000200000200000 [ 1275.663791][T25427] R13: 0000000200000c96 R14: ffffc90003d3f5c8 R15: 0000000200000200 [ 1275.671989][T25427] ? __split_vma+0xafc/0x1800 [ 1275.676675][T25427] ? __split_vma+0xafc/0x1800 [ 1275.681356][T25427] ? __pfx___split_vma+0x10/0x10 [ 1275.686392][T25427] ? __pfx_mas_prev+0x10/0x10 [ 1275.691083][T25427] vms_gather_munmap_vmas+0x3a5/0x1720 [ 1275.696576][T25427] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1275.702490][T25427] ? mas_walk+0x6ef/0x9b0 [ 1275.706839][T25427] __mmap_region+0x4a7/0x30b0 [ 1275.711527][T25427] ? arch_stack_walk+0xa6/0xf0 [ 1275.716306][T25427] ? __pfx___mmap_region+0x10/0x10 [ 1275.721441][T25427] ? kfree_skbmem+0x19a/0x210 [ 1275.726152][T25427] ? stack_trace_save+0x8e/0xc0 [ 1275.731034][T25427] ? __lock_acquire+0x4c5/0x1ec0 [ 1275.735979][T25427] ? kasan_save_free_info+0x3b/0x70 [ 1275.741205][T25427] ? __kasan_slab_free+0x5f/0x80 [ 1275.746180][T25427] ? kmem_cache_free+0x127/0x6b0 [ 1275.751121][T25427] ? kfree_skbmem+0x19a/0x210 [ 1275.755813][T25427] ? consume_skb+0xd1/0x110 [ 1275.760341][T25427] ? netlink_unicast+0x58d/0x850 [ 1275.765300][T25427] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1275.770235][T25427] ? do_raw_spin_unlock+0x145/0x1e0 [ 1275.775601][T25427] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1275.781509][T25427] ? rcu_is_watching+0x13/0xc0 [ 1275.786318][T25427] ? trace_hrtimer_start+0x77/0x220 [ 1275.791513][T25427] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 1275.797778][T25427] mmap_region+0x3db/0x6d0 [ 1275.802197][T25427] ? __pfx_mmap_region+0x10/0x10 [ 1275.807116][T25427] ? shmem_get_unmapped_area+0x141/0x960 [ 1275.812754][T25427] ? __futex_wait+0x256/0x300 [ 1275.817453][T25427] ? selinux_mmap_addr+0x2b/0x110 [ 1275.822657][T25427] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1275.827514][T25427] ? security_mmap_addr+0x71/0x1e0 [ 1275.832628][T25427] ? __get_unmapped_area+0x255/0x3e0 [ 1275.837917][T25427] do_mmap+0x12c7/0x1c30 [ 1275.842173][T25427] ? __pfx_do_mmap+0x10/0x10 [ 1275.846778][T25427] ? selinux_mmap_file+0x154/0x1c0 [ 1275.851906][T25427] ? __pfx_down_write_killable+0x10/0x10 [ 1275.857537][T25427] vm_mmap_pgoff+0x28d/0x470 [ 1275.862137][T25427] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1275.867302][T25427] ? __pfx_do_futex+0x10/0x10 [ 1275.871990][T25427] ksys_mmap_pgoff+0xe4/0x610 [ 1275.876690][T25427] ? __x64_sys_futex+0x358/0x4d0 [ 1275.881634][T25427] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1275.886951][T25427] ? xfd_validate_state+0x129/0x190 [ 1275.892157][T25427] __x64_sys_mmap+0x125/0x190 [ 1275.896831][T25427] do_syscall_64+0x123/0x790 [ 1275.901436][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.907341][T25427] RIP: 0033:0x7f612fd9e0d9 [ 1275.911749][T25427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.931350][T25427] RSP: 002b:00007f6130c5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1275.939758][T25427] RAX: ffffffffffffffda RBX: 00007f6130025fa0 RCX: 00007f612fd9e0d9 [ 1275.947722][T25427] RDX: 0000000003000003 RSI: 0000000000200000 RDI: 0000200000000000 [ 1275.955694][T25427] RBP: 00007f612fe35024 R08: ffffffffffffffff R09: 00000000b80a7000 [ 1275.963687][T25427] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 1275.971678][T25427] R13: 00007f6130026038 R14: 00007f6130025fa0 R15: 00007ffd7c008158 [ 1275.979682][T25427] [ 1275.982745][T25427] Kernel Offset: disabled [ 1275.987065][T25427] Rebooting in 86400 seconds..