last executing test programs: 9m43.971731317s ago: executing program 32 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 9m11.94307098s ago: executing program 33 (id=565): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 9m6.848900166s ago: executing program 34 (id=643): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x44, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x12, 0x2}, 0x8, 0x203ffffd, 0x300, 0x0, 0x2, 0x220000, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32, @ANYBLOB="795050fae45bd1157039ced472a77df413dceb35bbe52a486862ac52eb370543377dc56aa70107fd7b01e0a24106f162c04bc7620fd44d56610068dec4a37445f306c9c846570fa3c5a7f91529a0ae0057e8595b34c1c50019ed36ebeb44b0ed3bce1be84983394b88ce749ad7680c25bb10f24b11e91d96ce52c945bc5d389d936f8e49d660c9b48d0e9f7c4d34244c5cc118785a82177ade8e883880"], 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 8m16.032586197s ago: executing program 35 (id=1413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4814) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 7m17.468711765s ago: executing program 36 (id=1809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f00000001c0), 0x0}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 7m5.412757894s ago: executing program 37 (id=1983): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4814) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m4.387128231s ago: executing program 38 (id=1991): r0 = socket$unix(0x1, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x33}, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x20000005) 6m52.131899287s ago: executing program 39 (id=2071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 6m35.208093748s ago: executing program 40 (id=2365): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x80, 0x0, 0x30}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705b96d000000000000000088fb", 0xe}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x24, r3, 0x1, 0x2070bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x200050c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x13, 0x5, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x80) 6m6.469793441s ago: executing program 41 (id=2638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000f40)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x1a, 0x3, "8411a98cef33dcaafbd7cb4b56e1b4b2febf0d610000"}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r2, 0x0) 5m55.878306549s ago: executing program 42 (id=2704): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000003400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x1, @a={0x5f, 0x2, 0x2, 0x0, 0x6, 0x6e, 0x40, {0x1, 0x89, "38d8936b127de2b4d25de0cc04a970858805c02274973b4c48a247381f2a5588fbe1dff61c5d50c4ceeeb7452fd299ea2c085aee0d9b96335fcabae2fbb365211d9c943d05cd8e0a59a984c28233dcadf70fb9c3729a7974d5a1f7b109260c01e8135a94701772c7a51456a3916dbd90531890f71057807f570cb405013c617def0c3af5c5ce216fcc", 0x7, 0x40}, 0x9, 0x84, 0xb7, 0xef}}, 0x9c) 5m46.407160875s ago: executing program 43 (id=2825): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x198) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x82842) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd700001dcdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0a0018000303f1030303000008000c006400000004000801"], 0x68}, 0x1, 0x0, 0x0, 0x24004881}, 0x3400c012) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000040)={0x10}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000042903b47c11bfbddff332af5754b00aca6ed023012967804f391f49e521544c5126be0064cb8c72c90f608a8fe41709cae681719455a5b6445cd2af5c667d92fa9531f5726ed7f4556b2a52589e2e828a9b9152a756376", @ANYRES16=r1, @ANYBLOB="00032dbc7000ffdbdf2102000000080062000c0000000800690008000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x12, &(0x7f0000000340)='debug') r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x101) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="f638eead208971b63deff572ec9b7e", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m42.949971127s ago: executing program 6 (id=2848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010029bd7000fedbdf2500000046000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0xff00, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 5m42.888608251s ago: executing program 6 (id=2849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (fail_nth: 14) 5m42.791499766s ago: executing program 6 (id=2850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB="7400000009060102001f4e0000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 5m42.790350123s ago: executing program 6 (id=2851): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x2, &(0x7f0000000480)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x6}}, {@common=@version_u}, {@timeout}, {@timeout={'timeout', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0xab3f}}], [{@dont_appraise}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, 'nr_blocks'}}, {@euid_lt={'euid<', 0xee01}}, {@euid_gt={'euid>', 0xee01}}, {@pcr}, {@seclabel}]}}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x3ff, 0xc8, {}, {0x0}, 0x7, 0x6}) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80000, &(0x7f0000003b00)={[{@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x33, 0x33, 0x38, 0x0]}}, {@uid={'uid', 0x3d, r0}}, {@usrquota}, {@size={'size', 0x3d, [0x31, 0x33, 0x6b, 0x39, 0x2d, 0x23, 0x30]}}], [{@euid_lt={'euid<', r1}}, {@obj_role={'obj_role', 0x3d, '['}}, {@euid_eq={'euid', 0x3d, r2}}, {@pcr={'pcr', 0x3d, 0x6}}, {@permit_directio}]}) 5m42.714932186s ago: executing program 6 (id=2852): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000002780)={0x1, [0x8a, 0xfffffffd, 0x101], [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xb94, 0x1, 0x1}, {0x8d7c, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x77a1, 0x1, 0x1, 0x1}, {0x71e, 0x0, 0x1}, {0x5, 0x1ff, 0x1, 0x1}, {0x9, 0x44, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1}], 0x4}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) preadv2(r1, &(0x7f0000003a40)=[{&(0x7f0000000640)=""/18, 0x12}, {&(0x7f0000002900)=""/237, 0xed}, {&(0x7f0000002a00)=""/6, 0x6}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0x4, 0x2, 0xfffffffc, 0xc) r2 = syz_open_dev$dvb_demux(&(0x7f0000000440), 0x6, 0x48000) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002740)={{0x1, 0x1, 0x18, r2, {r3, 0xee00}}, './file0\x00'}) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000036000300000000000000a34297f0f0a94e3ef2a90380485edd303e0062f3ab1e29fe76299105af31fc2310d5128754693dea81d48815f85168af9392096b070773b033e33570a60e4e083c"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r10 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000000300)={0x5, {{0xa, 0x4e21, 0x1, @remote, 0x8}}}, 0x88) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002880)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r11, @ANYRES16=r4, @ANYRES32=r6, @ANYRESDEC, @ANYRESOCT], 0x58}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EVIOCREVOKE(r13, 0x40044591, &(0x7f0000000240)=0x4) r14 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r14, 0x1, 0x19, 0x0, &(0x7f0000000280)) syz_emit_ethernet(0x34, &(0x7f0000000600)=ANY=[@ANYRESDEC=r2, @ANYRESOCT, @ANYBLOB="de0e799e5e9479e9e584bcbe47f0f4"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="0180dd060002bbbbbbbbbbbb08004500ff07000000000000907800000000008000000000000000109078e206000000000000d9f515d604c4ab39c128d500ca6a060000005f0d79ca0a99ec9f978650df7567e090c24618eb6dba0d1220c7f24d0809bfab7f6744860f6f6af7dec1106392f58deb2e53d8a8262b0346cf5356ef6210dc41d42c356c511e0a7be80efb1a77a8b2cd3d3ebe8b702035260c9b3f2ed9"], 0x0) 5m42.450377236s ago: executing program 6 (id=2854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmmsg(r3, &(0x7f00000025c0)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/55, 0x37}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000780)=""/127, 0x7f}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/75, 0x4b}, {&(0x7f0000001880)=""/241, 0xf1}, {&(0x7f0000001980)=""/35, 0x23}, {&(0x7f00000019c0)=""/218, 0xda}], 0x9, &(0x7f0000001b80)=""/178, 0xb2}, 0x5}, {{&(0x7f0000001c40)=@hci, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/79, 0x4f}, {&(0x7f0000001dc0)=""/253, 0xfd}, {&(0x7f0000001ec0)=""/64, 0x40}], 0x4, &(0x7f0000001f40)=""/226, 0xe2}, 0x9}, {{&(0x7f0000002040)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)=""/34, 0x22}, {&(0x7f0000002100)=""/210, 0xd2}, {&(0x7f0000002200)=""/186, 0xba}, {&(0x7f00000022c0)=""/225, 0xe1}, {&(0x7f00000023c0)=""/87, 0x57}, {&(0x7f0000002440)=""/114, 0x72}], 0x6, &(0x7f0000002540)=""/66, 0x42}, 0x7867cea8}], 0x3, 0x100, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010"], 0xa0}}, 0x0) 5m42.375766513s ago: executing program 44 (id=2854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmmsg(r3, &(0x7f00000025c0)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000500)=""/55, 0x37}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000780)=""/127, 0x7f}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/75, 0x4b}, {&(0x7f0000001880)=""/241, 0xf1}, {&(0x7f0000001980)=""/35, 0x23}, {&(0x7f00000019c0)=""/218, 0xda}], 0x9, &(0x7f0000001b80)=""/178, 0xb2}, 0x5}, {{&(0x7f0000001c40)=@hci, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001cc0)=""/82, 0x52}, {&(0x7f0000001d40)=""/79, 0x4f}, {&(0x7f0000001dc0)=""/253, 0xfd}, {&(0x7f0000001ec0)=""/64, 0x40}], 0x4, &(0x7f0000001f40)=""/226, 0xe2}, 0x9}, {{&(0x7f0000002040)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)=""/34, 0x22}, {&(0x7f0000002100)=""/210, 0xd2}, {&(0x7f0000002200)=""/186, 0xba}, {&(0x7f00000022c0)=""/225, 0xe1}, {&(0x7f00000023c0)=""/87, 0x57}, {&(0x7f0000002440)=""/114, 0x72}], 0x6, &(0x7f0000002540)=""/66, 0x42}, 0x7867cea8}], 0x3, 0x100, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010"], 0xa0}}, 0x0) 3m50.887105253s ago: executing program 7 (id=4054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="0f4eee260f013c660faeb99ee80fc7af008036f30f1eddd2924b00b8ce008ee00f070f09", 0x26}], 0x180, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x40000000000a1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m50.618495364s ago: executing program 7 (id=4056): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010029bd7000fedbdf2500000046000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0xfeff, 0x0, 0x20008000}, 0x30) 3m50.617835231s ago: executing program 7 (id=4057): fstat(0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x4, 0x2) sendmsg$tipc(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000004c0)="c13b5849063444584d7eab81ce851c3f2ffc95c04a422acdee9681a3bc0ce180449f9ba8835365b3bb417fdad417db9e31abdc405722eeb9f21e7ef1fdefa6cda3f3c262d95960054153a580254cceda321179de8455147d5f3e4db2e4eca6ac3d4486ef3a156283a2d23281c0b933cfb2f79e322c99f6fdc1f9204a28143bae197d19c589bd2a16b61c701a8707aeb8deb9f1f9853cf1c0233b2fb52cf1891d4a4ff0a25035762d2bdf701ceb894dfc8e47d9616d4ca1ee6ce6141e3def72fcf1fa9bc39f2c6d323d550839f10e396336ef502b281636d47ccf84d062900309609b8e5bcd9b3af22bdbf066d0160e052a7eec57f8eec3d36136abd51759bc559932b572ec3c98ae30ebbd31195579ad42c6b2aceee9530ee976a82ed0cefd5ff05029f38673fb89724ffd8e0a2fb6a5abb9ba57cd09db66e672b81f88a19248564e6197c30335f0dcf4c506862a668261496ff69779e8212ac5f91eeca8e0c274c6bb562c5d3b648e027aa91cedce953573c7c035165781935455f850efdc9a42c24bcba7ee422a61e05f53d67cea8d46cf857d9c1ea80d33dab5d3f993f1d85a9e2f01f8ff5214c52ae0daccd2b367799c850c5deb387a5463c96c04409c624c46ca78fbac01b42a8ca2f602d1e27901704c24f84b22ee1ea37ec70592f934963f8e1fabb4ccc3fcfa1ffea3fe9fb4217cd010a4ae4292147745129a2eab624f7ee3111794c4cdb0b4198efdd077f08bbcdfa3ba25af557c2c1f1979aaa8d1664e4077c496144daebcefa8d6ebaa3167b1cadb9d9aa1f7c14a9564da1d7f4cdaae59982f21591cb5394c5d99783ba4a4463988461a761375620e5d134a5428bdba92762bdcd1369fd546c7a408e810be0a860598572b2afb0fa636b5fe6d1334d01b4a149aca12c2132f2a102c8e0e461f03a2ee95a83548dfd25c427c498d8109315fd6fd24ea60d85bda20c86e24ead37cb4560d7db15212dcc5c6727ef0acff8bbf21bf6eda4d86e48a2537104f5aea79f612f2a9c3ad4bd7cb0a3e7ffcf61b35d6e12261d80b8ebe05cfb44bd8ed8739135c9c74f0ff2caf4cf02c1bea04121f20461bdb6d718494319be82b39a928e0505eb98231b3c5d2567d6fcc69eb27807ed02858ecab84651027b20ddec1b67a698dfa6b901d338d5139daf40accf60d9776d78ccdd3b1b0657be922aacac6065287f3f5bb52610e64b656cdd5d75ab825c5dfc8a7ff339428b28cf796ef7067815f7eeabbad47041796a167d861e8fe0c7993e09e7af89eb0666ca419ccef28e854f001b0857a32b7cba275e55ca7b6c6a6238684290ee65987a9feabd7f0ffc9d8be1e4eaf5af74783008ae2eaa529a91192710bb4ccbbf9b29407b46473c0c0d67841022fa27e357a02d25311a5b620e5551c0aa40d9ead47f4ccc6cb7c98d2f58a3094b3c062b899c08ca5761d893112aeb03a1bdf067c1fa4939586891e7c0c7e9630d03bf09871384b778073a1dbfc5f6dadbd56bbd52760e9ceda384b78c9f2177690294c6b", 0x43c}], 0x2, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000020}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001640)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc0000000000004e1f00000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3m50.508563329s ago: executing program 7 (id=4060): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) (async) r0 = getpgid(0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) (async) r2 = pidfd_getfd(r1, r1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m50.507990201s ago: executing program 7 (id=4062): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000040), 0xfffffffffffffffc, 0x42200) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @random="c87be6970899", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x3, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1, {[@noop]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x7, 0x7, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) r8 = dup(r7) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r8, r6, &(0x7f0000000340)={0x0, 0x8f25, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18a0, 0x4000, 0x1000000, 0x153, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x800, 0xffffffff, 0x146, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcab0, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0xfffd, 0x7, 0x0, 0x0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r11, 0x1, &(0x7f0000000380)=ANY=[@ANYRES64=r10, @ANYRES32=r10]) r12 = io_uring_setup(0x10899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e2b02010301ff05"], 0x2e) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) io_uring_enter(r12, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000180)={0x7, 'team_slave_0\x00', {0xffffffff}, 0x7}) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000002c0)={0xe8, 0x6}) syz_emit_ethernet(0x70, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60081f20003a3afffe8000000000000000000000000000bbff0200000000000000000000000000010400907800000004660e189a00013afffe8000000000000000000000000000bbfc000000000200000000000000000000b3ee73f10f4f24e156fc"], 0x0) r13 = syz_open_dev$rtc(&(0x7f0000002c40), 0x0, 0x2200) ioctl$RTC_PIE_OFF(r13, 0x7006) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 3m49.948922957s ago: executing program 7 (id=4073): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) write$P9_RLCREATE(r1, &(0x7f0000000000)={0xfffffda0, 0xf, 0x1, {{0x2, 0x2, 0x2}, 0xfc}}, 0x18) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0xa96) (async, rerun: 64) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) (async, rerun: 32) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x207d, 0x6ae0}) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) (async) r8 = fanotify_init(0x1a, 0x800) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r8, 0x441, 0x4800001a, r9, 0x0) (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r10, &(0x7f00000004c0)='./file0\x00', 0x2) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 3m49.841206252s ago: executing program 45 (id=4073): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) write$P9_RLCREATE(r1, &(0x7f0000000000)={0xfffffda0, 0xf, 0x1, {{0x2, 0x2, 0x2}, 0xfc}}, 0x18) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5421, &(0x7f00000001c0)=0xa96) (async, rerun: 64) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) (async, rerun: 32) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x207d, 0x6ae0}) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) (async) r8 = fanotify_init(0x1a, 0x800) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r8, 0x441, 0x4800001a, r9, 0x0) (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r10, &(0x7f00000004c0)='./file0\x00', 0x2) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 3m20.306363314s ago: executing program 8 (id=4403): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004580)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000240)="126f364d3558f1096de63bb3d7e13e50f0140303356774f85e779570162f780f2578671b95e6eaa86cea0016f1cd299254", 0x31}], 0x1, &(0x7f00000027c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x20000000) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x63, 0x2) 3m20.202605291s ago: executing program 8 (id=4406): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffb}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 3m20.118638805s ago: executing program 8 (id=4407): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x39, @private2, 0xfffffffb}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042dbd7000ffdbdf25180000000c000600030000000100000008000300", @ANYRES32=r3, @ANYBLOB="3c003080050002000000000028000180080001000000000008000100020000000c000500150000000000000005000200000000000500020003000000"], 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f00000003c0)=@name, &(0x7f0000000400)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000440)={0x41, 0x1, 0x3}, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @generic={0x28, "59362034c31190cf5c6adce38ab3"}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, @isdn={0x22, 0x10, 0x9, 0x8, 0x1}, 0x41e, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000080)='team0\x00', 0x1, 0x452, 0xd15}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) 3m20.06756098s ago: executing program 8 (id=4408): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000680), 0x0, 0x10162, &(0x7f00000006c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x20) r2 = getpid() sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c0000001200010afdff000000000000800000000500e0004400000008006200", @ANYRES32=r2, @ANYBLOB="3d2e0110ce602c33ec9b72a8624cb5300673aee74a9f74ac2b81327fa8b77b61042f8a93dcbe8944ee8659962aa06d04788986bd6af57fc48b5e6253c723e0b4be0da7433ce245071541bb46b09fd593f41683b12d82dc65bd998067e315fac623de68c3d8738f22c0920c001f8008004700", @ANYRES32=0xee01, @ANYBLOB="dfa5"], 0x9c}}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0x990a22, 0xfffffffd}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002140), 0x8300, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000002180)={0x6, 0x3, 0x1, 0x93, 0xf7, 0x9, 0xbf, 0x34, 0x4, 0x91, 0x4, "a0789c7c7e84ef3a3467f56c7232c21260d826cd9f3c8344dca377109a5d209b"}) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000005c0)={@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2, 0x3}}, {&(0x7f0000000500)=""/106, 0x6a}, &(0x7f0000000580)}, 0xa0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r6}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000300)={"367635d59faa5d55cf5bea3daa8209cd", r8, r9, {0x1}, {0x1, 0x7ff}, 0x6, [0x5, 0x5, 0x3, 0x7, 0x4, 0x1, 0x62d1, 0x8, 0xf19, 0xc, 0x0, 0x12, 0x2, 0x10, 0x0, 0x9]}) 3m20.067065725s ago: executing program 8 (id=4410): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600140000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="030000000800000000a82fc35d000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="030000e0010000000400002004050000366e9a9328ce09ea68d220441e78abb8d97537fba09b48cbbb9353b9afe5c2b31d215001b23cab7fb6d74ef0e898c58a9a83ad8a8010451a3495b8bf90c04db3"], 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x48000) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0xfffffffe}}, 0x2e) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x8001) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000800)={0x4000, 0x20}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="170000005607000000da8ac075eb067cf7e65fb04286b711f08bc02b3f38da437215143169f1ca19a1dc8b485d8029215b3a0364f15757211bcce4e8d08acd89c2e802cc4155107a11f06fb838ed3b705be906337f4bf4381f8139cc8ac4eed1b83cfc542826e753c06e02a850330e3b7f993454255f1342605d9774dc611aa5061e9e9a8fb0746ecf9f7d9ed4fb8acf40f91c7c1e4dbc0efbf7ea25e5115555590a42c15cd8494ff03c2f06cffc4129094164abfb73386c4e267591a66df26d8f806756c0a8450f38e0e299dd9b5f888e01ee9a9a1c14", @ANYRES32=0x0], 0x18}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x8, 0x700, 0x0, 0xf37, {{0xe, 0x4, 0x1, 0x33, 0x38, 0x464, 0x0, 0xa, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x24, 0x57, 0x1, 0x0, [{@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xc6}, {@remote, 0x6dc37ca8}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r9, 0x4, 0x6, 0x8, 0x6, 0x27, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7800, 0x80000000, 0x4}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r6], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14ced6000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000005a00220d532dd632b1565cbab8"], 0x98}}, 0x0) 3m19.778440252s ago: executing program 8 (id=4411): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x66, 0x1, 0x81, 0x9, "fbdbe492cbed2333106c5716c0e5aae187cdc5c2236710825a3c4fbd55d84bfe"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xa8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3m19.574284848s ago: executing program 46 (id=4411): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x66, 0x1, 0x81, 0x9, "fbdbe492cbed2333106c5716c0e5aae187cdc5c2236710825a3c4fbd55d84bfe"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xa8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3m1.818443522s ago: executing program 0 (id=4696): syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x8, 0x28, 0x68, 0x0, 0x9, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x82, 0x2}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, 0xffffffffffffffff, 0x18}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba3500000000003a000700ff020000000000000000000000000001"], 0xfdef) 3m1.678361174s ago: executing program 0 (id=4698): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010029bd7000fedbdf2500000046000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0xff8c, 0x20008000}, 0x30) 3m1.626701192s ago: executing program 0 (id=4701): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x28}}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100911b3d"], 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99", 0xb4, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c000310"], 0x15) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000003c0)={r3, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x1c, 0xc, "7af98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab000000000e0000000000425736bbac3f4ca600000000ffff00", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0x1]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 3m0.705661192s ago: executing program 0 (id=4712): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) umount2(&(0x7f00000000c0)='./file0\x00', 0x6) umount2(&(0x7f0000000340)='./file0\x00', 0x8) 3m0.705381372s ago: executing program 0 (id=4713): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r1 = io_uring_setup(0x67bb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0xfffffffd}) (rerun: 64) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f00000003c0)={0x1, 0x1, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) exit(0x9) (async, rerun: 64) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) (rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0)="8960640300d56cde54a238f9b9a0caf7f028f71aa20051fae98d423b794889bd9e71ea630a25767039e5b0ebd0e307f59ac5cc2aba872e256eefde674537186b8145511a5e1f65a886425c2f57d5db2814e62ff3031b267bbb351e1424744ff224c5e49772", 0x65, r2}, 0x68) (async, rerun: 64) r3 = gettid() (rerun: 64) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000000)=""/172, 0xac}, {&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/75, 0x4b}], 0x4, &(0x7f0000000480)=[{&(0x7f0000000400)=""/116, 0x74}], 0x1, 0x0) (async) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000000380)) 2m59.838943006s ago: executing program 0 (id=4716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x48000) (async) read(r1, &(0x7f0000001480)=""/4096, 0x38) (async) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async, rerun: 32) r3 = fanotify_init(0x200, 0x2) (rerun: 32) fanotify_mark(r3, 0x201, 0x37, r2, 0x0) (async) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0xe1000d00) (async) open(&(0x7f0000000200)='./file0\x00', 0x4088043, 0x1) (async, rerun: 64) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) (rerun: 64) 2m59.780812972s ago: executing program 47 (id=4716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x48000) (async) read(r1, &(0x7f0000001480)=""/4096, 0x38) (async) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async, rerun: 32) r3 = fanotify_init(0x200, 0x2) (rerun: 32) fanotify_mark(r3, 0x201, 0x37, r2, 0x0) (async) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0xe1000d00) (async) open(&(0x7f0000000200)='./file0\x00', 0x4088043, 0x1) (async, rerun: 64) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) (rerun: 64) 2m19.188539331s ago: executing program 2 (id=5225): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bind$netlink(r0, &(0x7f0000002200)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) read$FUSE(r1, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_iso={0x0, {0xc, 0x1}, 0x10, 0x10, &(0x7f0000000080)="7fb8ad63fb6828af4ea04b4053f6efbe8f14a729d1d1c4201fd4623f76b3ca0da9adb990ba8e5a767147f5fff875639033fd4894f9ef9d28396232e040a7496c1bf39c4cc47d5c6f9afef04e7926926435e5ddfb", 0x54, 0x0, 0x7ff, 0x21, 0xed, 0xf0, &(0x7f0000000100)="3ceff7fe4c93bc2a8c971c1218a717d367b67d0cf2b58c63c9c54defaf354e12d3d16e66543354f1847fa27352a457771e65016b4493f3a1dc9af422026dda6a2c6098d936f41e2f5262fb0aecaf", [{0x0, 0x36f, 0xc4}, {0x1, 0x80000000, 0x5}, {0x9, 0x80000001, 0x3}, {0x5, 0x6, 0x6}, {0xfffffff9, 0x0, 0x2006}, {0x7a9, 0x5, 0x1}, {0xd, 0x80000000, 0x4}, {0x4, 0x1, 0x1}, {0x2, 0x8, 0x8}, {0x3c745e76, 0x2, 0xfff}, {0x6, 0x1}, {0xf93, 0x4, 0x3}, {0x3, 0x400}, {0x3, 0xf267, 0x7}, {0x5c, 0x8}, {0x7, 0x0, 0xb1}, {0x2, 0x1ff, 0x165c5730}, {0xfffffffc, 0x6, 0x8000}, {0x80, 0x7, 0xf}, {0x7f, 0x0, 0x5}, {0xf43, 0xfffff801, 0x100}, {0x3, 0x1, 0x6}, {0x2, 0x2, 0x1a}, {0xfffffffe, 0xfffffffb, 0x11}, {0x1, 0x4, 0x4}, {0x7d2e, 0x8, 0x400}, {0x81, 0x4, 0xc3}, {0x5, 0x8, 0x4}, {0x8, 0x7, 0xbc}, {0x4, 0x2, 0x8}, {0xd189, 0x8, 0xfffffffc}, {0xa0000000, 0xbfdd, 0x9}, {0x400, 0x0, 0xc}]}) 2m19.118421866s ago: executing program 2 (id=5226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0xe}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000100)) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0xfffffffffffffffd, 0x0) 2m19.117884619s ago: executing program 2 (id=5227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@typed={0x5, 0x12b, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a911f47", @ANYRES32=r4, @ANYBLOB="140002"], 0x34}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000000200)={{}, "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"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 2m19.048452068s ago: executing program 2 (id=5228): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf1707000000", @ANYRES32=r6, @ANYBLOB="80007f0a0a000200fffffffffffff2ff05000500"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) syz_ublk_setup_io_uring(0x16cf, &(0x7f0000000640)={0x0, 0xc5a2, 0x4000, 0x1, 0x319, 0x0, r4}, &(0x7f00000006c0), &(0x7f00000007c0), &(0x7f0000000740)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000040), 0x8, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000800), 0x1802, &(0x7f0000000840)={[{@volatile}, {@verity_require}, {@userxattr}, {@redirect_dir_nofollow}, {@xino_on}], [{@hash}, {@subj_user={'subj_user', 0x3d, '('}}]}) r7 = socket$inet6(0xa, 0x800, 0x7) mkdir(&(0x7f0000000780)='./bus\x00', 0x8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x458, 0xffffffff, 0x148, 0x0, 0x248, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x41}, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0xff, 0x0, 0x0, 0xffffffff], 'wg2\x00', 'syz_tun\x00', {}, {0xff}, 0x32, 0xe}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0xbe5], 0x8, 0xe8}}, @common=@dst={{0x48}, {0x5, 0x4, 0x0, [0x8, 0x1, 0x8, 0x6, 0x2, 0x6, 0xffff, 0x3, 0x2, 0x3, 0x6, 0x6, 0xc8, 0x1ff, 0x3, 0x9]}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x15e, 0x2}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"6bc3", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xda22, 0x32, 0x72a8, 0x1}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xf, 0x2, 0x31, {0x4}}}, @common=@frag={{0x30}, {[0x3, 0x1], 0x7df, 0x22, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x221c0e7d7e70ae76}, {0x3, 0x2, 0x2}, 0x9, 0x80000001}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2m18.948207757s ago: executing program 2 (id=5230): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000025c0)=@delchain={0x24, 0x2d, 0x1}, 0x24}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x4, 0x7}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x4, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x3, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x500) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='efs\x00', 0x1214891, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@gettaction={0x14, 0x5a, 0x1, 0xffffffff}, 0x14}}, 0x24004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) write$P9_RLCREATE(r4, &(0x7f0000000000)={0xfffffda0, 0xf, 0x1, {{0x2, 0x2, 0x2}, 0xfc}}, 0x18) open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x12) syz_emit_ethernet(0xdd, &(0x7f0000000000)=ANY=[], 0x0) 2m18.473985461s ago: executing program 2 (id=5238): setreuid(0xee01, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@rdma_args={0x48, 0x114, 0x1, {{0x8, 0x9}, {&(0x7f0000000140)=""/137, 0x89}, &(0x7f0000000300)=[{&(0x7f0000000200)=""/214, 0xd6}], 0x1, 0x1e}}], 0x48, 0x4810}, 0x4000000) 2m18.40049853s ago: executing program 48 (id=5238): setreuid(0xee01, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@rdma_args={0x48, 0x114, 0x1, {{0x8, 0x9}, {&(0x7f0000000140)=""/137, 0x89}, &(0x7f0000000300)=[{&(0x7f0000000200)=""/214, 0xd6}], 0x1, 0x1e}}], 0x48, 0x4810}, 0x4000000) 1m29.027449276s ago: executing program 4 (id=5912): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x300, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0xfffc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xdc}]}}]}, 0x3c}}, 0x4000010) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x1, 0x1, 0x9, 0x1, 0x6, 0x81}) 1m29.02297248s ago: executing program 4 (id=5913): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='pagemap\x00') (async) syz_usb_disconnect(0xffffffffffffffff) (async) close_range(r1, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x28}}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) (async) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10", 0xa8, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x10082, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000280)="660f380ae5c4a2f547da66ba6100b00deeb8010000000f01c10f23fcb90b020000b81ed40000ba000000000f300fc76a00b8010000000f01d965f30f090f1c30", 0x40}], 0x1, 0x20, &(0x7f0000000300), 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req={0x8, 0xfffffffb, 0x3, 0x9}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000d80)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)="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", 0x10a}, {&(0x7f0000000a40)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1bae1e0054a863f3d5cfe6cb53113dd495b47b9faed884e7cb5d026b340fbb37b4fe035bbb095873048aaa195608fac456346ea9e2247187552439166bf334c1982a782935caa9fff293783d7d0d17fe92da8b2f312eb807b57de5c227c263cbf776209aebc1d6b39570886a11f949c412b95016253dbc57c011436", 0x9d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801705d2daf096c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000640)="ca7ff61666f2571d909f150fef16a43a029f01bfbc8198b34a47f16ad416fda7c1d16687c69478abdb96becd9381a2540caa78d3ade03f6eb215b50f7e6895e5d5c4be79adf5bb1b08cf0aa228293c58f1c558d436c394096c6c5f3c3dbfc04b60542b38f8f8cee43543f1b97327b33814174df70a507f59c0b53a413536e08b49f241e475adcf3dfe17ee7ee47a6f0abe383db3e4fabc351441feb872cd53829a852c025f94d5d455a6c624", 0xac}, {&(0x7f0000000b40)="178247202bdbe8177661bac9a5b20d2cce2b562b265b9056dc4fb72cde5589f0d512c6745d364e8b45bb0f90b122f861fa0faaf2efc049cd6d007965f5a9a28b60f20eb3eada8827eb9e88d7e404744935a286cc666adf2d61571d6e90d8b7908d6ccfade3d6be7e4154b04ddff85fc87180489696ad008da15a9e1cb3997b4cafec3ab3b35d5e8f40665b640f84a69d126d373c6974488a84c78e4b5ea42407fff31642c09bf55ae06548ef467e41239dbeb7a6871508d22447ec336fa478d2cbdaa4ce6ce9a8ff2ebd3481b5bc5393d401393ec76a77469e006b974825619f2c95179bfa6d6e131d7e", 0xea}], 0x2, 0x0, 0x0, 0x24004800}], 0x2, 0x20000000) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 1m28.907444068s ago: executing program 4 (id=5915): r0 = socket$unix(0x1, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) (async) userfaultfd(0x80801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0x40082104, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb, 0x2}}}}]}, 0x40}}, 0x4000010) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000000380)="146ab63ae46ae0f85ccdd3e4e9ad4999010064cc252586b22b8833", 0x4, 0x0, 0x9}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) (async, rerun: 64) r6 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x2e0, 0x0, 0x440, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@empty, @local, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bridge_slave_0\x00', 'dummy0\x00', {0xff}, {}, 0x84, 0x5, 0x6, 0x4c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffc, 0x5}}}, {{@ipv6={@mcast2, @private2, [0xff, 0xffffff00, 0x0, 0xffffff00], [0xff000000, 0xff, 0x0, 0xffffff00], 'macvtap0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x88, 0x6, 0x6, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@udplite={{0x30}, {[0x4e21, 0x4e23], [0x4e23, 0x4e20], 0x2}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0x0, 0xff, 0xffffffff], 'rose0\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0xc1, 0x5}, 0x0, 0x120, 0x160, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6, 0x84, 0x0, 0x0, 0x0, 0x4]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x10, 0x10001, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xee5f356c6f495b18, 0x100fffe00, 0xff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'veth1_macvtap\x00', 'dummy0\x00', {}, {}, 0x1d, 0x6, 0x4, 0x19}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) (async) listen(r5, 0x2) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) (async, rerun: 32) listen(r7, 0xd) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1m28.786391318s ago: executing program 4 (id=5918): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0x8, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000", @ANYRES16=r2, @ANYBLOB="02002abd7000ffdbdf25350000000c009900060000007b0000000a00340001010101010100000a00060050505050505000001400fe003d092daa60b1d0314b588cd03991c02f08001f010700000008001f01ff0000000500200105000000140055004cc3d16b5edb2ee2d81e5afcf4ac394608001f018d00000023003400cd213e7488cbd78f0d9af0f2446231ab551353af2c53fde07f726fe62c5a9a00"], 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) listen(r3, 0x5) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) (async) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r8 = accept4$unix(r3, 0x0, 0x0, 0x80800) getsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000340), &(0x7f0000000480)=0x4) (async) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x1}, 0x10010) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000380)={0x0, 0x0, "555581", 0xf1}) 1m28.637741844s ago: executing program 4 (id=5920): r0 = socket$inet(0x2, 0x3, 0x9) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0x268000, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x7, 0x7, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000580)={0x0, r5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4, r6}) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r7, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e1f, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0xff, @remote}, 'ip6gretap0\x00'}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000640)=0x6bb, 0x4) 1m28.393917045s ago: executing program 4 (id=5924): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f0000000080)=0xc) (async, rerun: 64) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x0, 0x0, 0x8001]}, &(0x7f0000000140)=0x44) (async, rerun: 64) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x4, 0xeca2}, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000200)=""/245) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000300)={0x0, 0x14, 0x200, 0x7db, "3de53ba6bd0b19b150a283b1ce0cb759b6b95c8b2a1bf1e4b65bbf0f8678eba3"}) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x0, 0x6, [0x2, 0x9, 0x9, 0xd4, 0x9, 0xfe01]}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0)=r2, 0x4) (async) r3 = dup2(r1, r1) (async) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x2) (async) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x20203, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000480)) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000004c0)={0x8, 0x9}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000500)={0x0, 0xfa50, 0x1}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x1, 0x4, 0x6, 0xd5af, 0x7}, &(0x7f0000000600)=0x98) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001680)={@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, {&(0x7f0000000640)=""/4096, 0x1000}, &(0x7f0000001640), 0xd}, 0xa0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001740)) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000001780)=0x1) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(0xffffffffffffffff, 0x8010aebb, &(0x7f00000017c0)={0xe000, 0xc000}) (async, rerun: 32) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000001800)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001880)=@assoc_value, &(0x7f00000018c0)=0x8) ioctl$KVM_CAP_HYPERV_SEND_IPI(r4, 0x4068aea3, &(0x7f0000001900)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000001980)={0x8, 'batadv_slave_1\x00', {'veth1_to_batadv\x00'}, 0x8}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000001ac0)={r0, &(0x7f00000019c0)='\x00', 0x183a40, &(0x7f0000001a00)={@align=0x9d8, {0x2, 0x7, 0x5, 0xfffffffffffffffa}}, 0xe, &(0x7f0000001a40), &(0x7f0000001a80)}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000001b00)) (async) fremovexattr(0xffffffffffffffff, &(0x7f0000001c40)=@random={'btrfs.', ',\x00'}) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000001c80)={0x2, 'ipvlan1\x00', 0x4}, 0x18) (async, rerun: 32) ioctl$CDROM_NEXT_WRITABLE(r4, 0x5394, &(0x7f0000001cc0)) (rerun: 32) 1m13.37641165s ago: executing program 49 (id=5924): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f0000000080)=0xc) (async, rerun: 64) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x0, 0x0, 0x8001]}, &(0x7f0000000140)=0x44) (async, rerun: 64) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x4, 0xeca2}, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000200)=""/245) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000300)={0x0, 0x14, 0x200, 0x7db, "3de53ba6bd0b19b150a283b1ce0cb759b6b95c8b2a1bf1e4b65bbf0f8678eba3"}) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x0, 0x6, [0x2, 0x9, 0x9, 0xd4, 0x9, 0xfe01]}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000003c0)=r2, 0x4) (async) r3 = dup2(r1, r1) (async) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x2) (async) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x20203, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000480)) (async) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000004c0)={0x8, 0x9}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000500)={0x0, 0xfa50, 0x1}) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, 0x1, 0x4, 0x6, 0xd5af, 0x7}, &(0x7f0000000600)=0x98) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001680)={@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, {&(0x7f0000000640)=""/4096, 0x1000}, &(0x7f0000001640), 0xd}, 0xa0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001740)) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000001780)=0x1) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(0xffffffffffffffff, 0x8010aebb, &(0x7f00000017c0)={0xe000, 0xc000}) (async, rerun: 32) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r1, 0x4068aea3, &(0x7f0000001800)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001880)=@assoc_value, &(0x7f00000018c0)=0x8) ioctl$KVM_CAP_HYPERV_SEND_IPI(r4, 0x4068aea3, &(0x7f0000001900)) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000001980)={0x8, 'batadv_slave_1\x00', {'veth1_to_batadv\x00'}, 0x8}) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000001ac0)={r0, &(0x7f00000019c0)='\x00', 0x183a40, &(0x7f0000001a00)={@align=0x9d8, {0x2, 0x7, 0x5, 0xfffffffffffffffa}}, 0xe, &(0x7f0000001a40), &(0x7f0000001a80)}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000001b00)) (async) fremovexattr(0xffffffffffffffff, &(0x7f0000001c40)=@random={'btrfs.', ',\x00'}) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000001c80)={0x2, 'ipvlan1\x00', 0x4}, 0x18) (async, rerun: 32) ioctl$CDROM_NEXT_WRITABLE(r4, 0x5394, &(0x7f0000001cc0)) (rerun: 32) 2.820037836s ago: executing program 5 (id=7080): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}, 0xf99}], 0x1, 0x10101, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) fcntl$notify(r2, 0x402, 0x8) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x3, 0xe, 0x4}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700000000a1cb5b45e7f6626600"}, 0x2}) 2.759889388s ago: executing program 5 (id=7081): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001cc0)={'ipvlan1\x00', 0x0}) syz_usb_connect$uac3(0x4, 0x114, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x102, 0x3, 0x1, 0x4, 0x50, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x24, 0x30, 0xcb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x43, 0x6}, [@selector_unit={0x8, 0x24, 0xc, 0x9, 0x3, 'B5*'}, @source_unit={0xc, 0x24, 0xb, 0x4, 0x0, 0x5, 0x9, 0x942d}, @extension_unit={0x11, 0x24, 0xa, 0x4, 0x5, [0x3, 0x1, 0x2]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x401, 0x2, 0xe9, 0xc104, 0x400, 0x6, 0x9, 0xeaf9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x80000001, 0x483, 0x5, 0x0, 0x7, 0x7, 0x80}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xb, 0x4, 0xc, 0xfc}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x7, 0x69, {0xa, 0x25, 0x25, 0x1, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xcb, 0x9, "6217b14029e7801da8"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0x5, 0x8}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x70, 0x1, 0x2, 0xe0, "1aada69fc74cea"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x7, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8e, 0x50, 0x80, {0xa, 0x25, 0x25, 0x7, 0x7, 0x5}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x51, 0x9, 0x80, 0x8, 0x9}, 0xba, &(0x7f0000000500)={0x5, 0xf, 0xba, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x1, 0x2, 0x80}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x3, 0x5, 0x400, 0x2}, @generic={0xa0, 0x10, 0x2, "7745a347d696b5dd7dc5f434ef9fc4adf18211cf3bbbdc92cb598ba15b705ae031aec91b15c607ae3cf6edf5dd8e55c9d03700986ed75580ac431a7dbc3b68eca60d7c52918c98516b85d49b7b7876ff9dec6152ddd4c7bd0ec23ec23ffa6746011415dc04ae4b115af248a22d99f2fca5f809eed212313a0d13c6deb2e30e7bf4ae5b583e6019242a1e51158c3067cf4f32c3c6b55520e4dfe04256cb"}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c01}}]}) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x6, r3}, 0x14) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000680)) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r1, r8, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000000c0)={0x0, r8}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x2d, 0x20040040) 1.210055466s ago: executing program 9 (id=7094): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000014}, 0xc010) 1.159452401s ago: executing program 9 (id=7098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty, {[@rr={0x7, 0x3, 0xfe}]}}}}}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x160, 0x0, 0xfffffffffffffff8, [{{0x3, 0x2, 0x6, 0x7, 0x3c88, 0x9, {0x4, 0x5, 0x4, 0x1, 0x3, 0x12e, 0x7, 0x7, 0xfffffffa, 0xc000, 0x0, r4, r5, 0x0, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x8, '&+%*!\xeb(^-@\x00'}}, {{0x6, 0x2, 0x1, 0xffffffffffffffff, 0xc, 0x8, {0x5, 0x4, 0x3, 0x0, 0x28, 0x7ff, 0xc2, 0xce1, 0x7, 0x2000, 0x3, r4, r5, 0x6, 0x81}}, {0xffffffffffffffff, 0x7, 0xb, 0x7, '&+%*!\xeb(^-@\x00'}}]}, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x2040002, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}, {@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@seclabel}]}}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x9, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee22e72e86c01b4928d69bdefd07854c13920811fd7002dc8aada05a7c0bda02f7ff87fdc11bc4ec", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) syz_open_dev$vbi(0x0, 0x3, 0x2) r7 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xb0000) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x27d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0xaf, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x4, 0xf4, 0x1, {0x22, 0xa17}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa8, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x1, 0x6, 0xc0, 0xff, 0x5}, 0x93, &(0x7f0000000600)={0x5, 0xf, 0x93, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa4, 0xd, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0xff, 0x4, 0x401}, @generic={0x79, 0x10, 0x3, "2417785a51d038507532fc1f8782f05220da20ff8df59b23df75740945c205a66b8bc5fa184815b652a05b5738bfd02012e112fee49ff653770681ac5edd5eb28889d7a0256e33efd0140f031effebe0aa957f8dafa80ec99e87dd1c651d312c6da2c934d9a44377b0b849a112853e20db698ffe347d"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x416}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r8, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000580)={'Wc9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "0300", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b19, 0x0) 629.337772ms ago: executing program 5 (id=7118): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x2, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') io_setup(0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001240), 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x7211c2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000400)=@multiplanar_fd={0xfffffffc, 0x3, 0x4, 0x100000, 0x0, {}, {0x5, 0x0, 0x0, 0x1, 0x5, 0xe, "640aecf1"}, 0x7, 0x4, {&(0x7f0000000340)=[{0x6, 0x0, {r3}, 0x4}, {0x9dd8, 0x5, {r2}, 0x2}]}, 0xce2}) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x8000000000001, 0x0, 0x2}]) io_getevents(0x0, 0xfdfffffffeffdffa, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r5 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, 0x0) r8 = fsopen(&(0x7f0000000500)='ncpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180), 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan0\x00', {0x4}, 0xffff}) 590.351862ms ago: executing program 9 (id=7119): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000840)=0x6f7e, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 527.883248ms ago: executing program 9 (id=7120): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x4c, 0xa, 0x80, "32ffffffffbfbe1ca79676125a01000000000000000000000000000800", 0x38303553}) 527.268967ms ago: executing program 9 (id=7122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x8, 0x7, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x88, 0xfffffffa, 0x0, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x7ff, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51b, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0x8000a3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x81a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0x101, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0x8, 0x8, 0x7, 0x3, 0x4000}, {0xd831fc23, 0x81, 0x8, 0x6, 0xffff, 0x5b}, {0x1, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0xc, 0xf0}, {0x40, 0x0, 0x0, 0x4, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7ffb, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7f, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x3, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0x80f469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x5, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x4, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0x2a, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1836, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x5, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x80000008, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0xa, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x6, 0x8, 0x6, 0x9, 0xfffffff8, 0x3}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffffa, 0x4, 0x6, 0x4756, 0x4002b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xff, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x400001ff, 0x5, 0x7, 0x6, 0x400, 0x3ff}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x7}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x5}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x6, 0x7, 0x6}, {0x2, 0xfffff942, 0x4, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x3, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x8000, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0xbd9, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x5419, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0xb, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x5, 0x8, 0x1, 0x400, 0xd}, {0x8, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0x585, 0x4, 0x2}, {0x9, 0x200, 0x1, 0x8702, 0xffff8a6e, 0x9}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x6}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x100, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x4, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0xa, 0x9, 0x100, 0x4, 0x7, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x7, 0x1, 0x400, 0x6, 0x5}, {0x6, 0xfffffff7, 0x6, 0xef, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x5, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x0, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x3ff, 0xfffffffc, 0xff}, {0xd, 0x81, 0x8, 0x6, 0x0, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x6, 0xffd9}, {0x7ff, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x9, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x1, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x9}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 348.427117ms ago: executing program 3 (id=7126): timer_create(0xb, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x0, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) lseek(r0, 0x2000, 0x0) 300.042506ms ago: executing program 9 (id=7127): ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 299.926804ms ago: executing program 3 (id=7128): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) listen(r0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 299.83202ms ago: executing program 3 (id=7129): syz_open_dev$tty20(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x4}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 249.643459ms ago: executing program 1 (id=7130): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x17a8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 249.442266ms ago: executing program 5 (id=7131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 190.493897ms ago: executing program 1 (id=7132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a0101000000000000000001000000090003005e797a310000000014000480080002400000000008000140000000000900010073797a300000000044000000060a01040000000000000000010000001c000480180001800d00010073796e70726f7879000000000400028008000b40000000000900010073797a30000000001400000011"], 0xcc}}, 0x0) 190.338771ms ago: executing program 3 (id=7133): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, 0x20, 0x101, 0x70bd28, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x850) 189.933442ms ago: executing program 3 (id=7134): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 189.804337ms ago: executing program 1 (id=7135): r0 = io_uring_setup(0x9af, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x8003d7}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x2000c811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r3, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 119.829341ms ago: executing program 1 (id=7136): syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 119.675032ms ago: executing program 5 (id=7137): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, 0x0, 0x884) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 370.448µs ago: executing program 1 (id=7138): socket$netlink(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x9, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851) 189.571µs ago: executing program 3 (id=7139): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 96.261µs ago: executing program 1 (id=7140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x2c}}, 0x0) 0s ago: executing program 5 (id=7141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x10, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x2400c000) kernel console output (not intermixed with test programs): 577.610970][T28146] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 577.610991][T28146] ___sys_sendmsg+0x106/0x1e0 [ 577.611006][T28146] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.611036][T28146] __sys_sendmsg+0x170/0x220 [ 577.611053][T28146] ? __pfx___sys_sendmsg+0x10/0x10 [ 577.611076][T28146] ? rcu_is_watching+0x12/0xc0 [ 577.611096][T28146] do_syscall_64+0x115/0x870 [ 577.611114][T28146] ? clear_bhb_loop+0x40/0x90 [ 577.611129][T28146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.611140][T28146] RIP: 0033:0x7f444439ce59 [ 577.611151][T28146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.611161][T28146] RSP: 002b:00007f4445328028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.611173][T28146] RAX: ffffffffffffffda RBX: 00007f4444615fa0 RCX: 00007f444439ce59 [ 577.611180][T28146] RDX: 0000000000040010 RSI: 00002000000015c0 RDI: 0000000000000003 [ 577.611186][T28146] RBP: 00007f4445328090 R08: 0000000000000000 R09: 0000000000000000 [ 577.611192][T28146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.611199][T28146] R13: 00007f4444616038 R14: 00007f4444615fa0 R15: 00007ffc4c9dd298 [ 577.611213][T28146] [ 577.711345][T28150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6196'. [ 577.760977][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6198'. [ 578.052752][T28165] bond0: Error: CAN devices cannot be enslaved [ 578.179157][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6203'. [ 578.182591][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6203'. [ 578.199739][ T62] Bluetooth: hci1: command 0x040f tx timeout [ 578.423747][T28176] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 578.468304][T28176] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 579.049519][T28196] netlink: 'syz.1.6212': attribute type 21 has an invalid length. [ 579.051961][T28196] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6212'. [ 579.093779][T28196] openvswitch: netlink: Invalid VLAN frame [ 579.162061][T28210] binder: 28209:28210 ioctl c0306201 2000000003c0 returned -14 [ 579.179178][T28212] fuse: Bad value for 'group_id' [ 579.181407][T28212] fuse: Bad value for 'group_id' [ 579.316048][ T40] audit: type=1400 audit(2000524375.344:3268): avc: denied { read write } for pid=28216 comm="syz.3.6218" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 579.325678][ T40] audit: type=1400 audit(2000524375.344:3269): avc: denied { open } for pid=28216 comm="syz.3.6218" path="/26/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 579.372721][T28222] overlayfs: failed to resolve 'fscontext=sysadm_u': -2 [ 579.374985][ T40] audit: type=1400 audit(2000524375.404:3270): avc: denied { mounton } for pid=28221 comm="syz.3.6219" path="/27/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 579.413835][ T40] audit: type=1326 audit(2000524375.443:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28226 comm="syz.3.6220" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f444439ce59 code=0x0 [ 579.477427][T28228] bond1: (slave bond_slave_1): Device is not our slave [ 579.480498][T28228] bond1: option active_slave: invalid value (bond_slave_1) [ 579.484949][T28228] bond1 (unregistering): Released all slaves [ 579.775325][ T40] audit: type=1400 audit(2000524375.811:3272): avc: denied { write } for pid=28239 comm="syz.3.6224" name="wireless" dev="proc" ino=4026534576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 579.883812][ T40] audit: type=1400 audit(2000524375.920:3273): avc: denied { create } for pid=28253 comm="syz.3.6230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 579.890824][ T40] audit: type=1400 audit(2000524375.920:3274): avc: denied { write } for pid=28253 comm="syz.3.6230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 579.898632][ T40] audit: type=1400 audit(2000524375.920:3275): avc: denied { mounton } for pid=28253 comm="syz.3.6230" path="/syzcgroup/unified/syz3" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 579.985015][T28254] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 580.032761][T28258] netem: change failed [ 580.124977][ T40] audit: type=1400 audit(2000524376.158:3276): avc: denied { getopt } for pid=28261 comm="syz.1.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 580.174996][ T40] audit: type=1400 audit(2000524376.208:3277): avc: denied { mount } for pid=28265 comm="syz.9.6236" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 580.236098][T28269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6237'. [ 580.285177][ T62] Bluetooth: hci1: command 0x040f tx timeout [ 580.516969][T28278] loop9: detected capacity change from 0 to 524287871 [ 580.580788][T28280] hfsplus: unable to find HFS+ superblock [ 580.648707][T28280] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 580.735652][T28285] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 580.945075][T28300] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6244'. [ 581.025967][T28307] bridge6: entered promiscuous mode [ 581.028323][T28307] bridge6: entered allmulticast mode [ 581.167412][T28317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=28317 comm=syz.9.6248 [ 581.172801][T28317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=28317 comm=syz.9.6248 [ 581.177837][T28317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28317 comm=syz.9.6248 [ 581.182309][T28317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=57 sclass=netlink_tcpdiag_socket pid=28317 comm=syz.9.6248 [ 581.186784][T28317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=28317 comm=syz.9.6248 [ 581.191407][T28317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59 sclass=netlink_tcpdiag_socket pid=28317 comm=syz.9.6248 [ 581.195979][T28317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=28317 comm=syz.9.6248 [ 581.322029][T28328] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6252'. [ 581.383350][T14170] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 581.536390][T14170] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 581.540747][T14170] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 581.548284][T14170] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 581.551968][T14170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.555315][T14170] usb 6-1: Product: syz [ 581.557202][T14170] usb 6-1: Manufacturer: syz [ 581.559167][T14170] usb 6-1: SerialNumber: syz [ 581.566264][T14170] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 581.591265][ T6094] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 582.367906][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6257'. [ 582.371879][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6257'. [ 582.380302][ T62] Bluetooth: hci1: command 0x040f tx timeout [ 582.402171][T28314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.406065][T28357] bond3: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 582.409653][T28314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.417525][T28357] bond3 (unregistering): Released all slaves [ 582.447644][T28360] bond2: (slave bond_slave_1): Device is not our slave [ 582.450461][T28360] bond2: option active_slave: invalid value (bond_slave_1) [ 582.455618][T28360] bond2 (unregistering): Released all slaves [ 582.474855][T14170] usb 6-1: USB disconnect, device number 23 [ 582.622204][ T6094] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 582.626935][ T6094] ath9k_htc: Failed to initialize the device [ 582.639225][T14170] usb 6-1: ath9k_htc: USB layer deinitialized [ 582.650699][T28377] UHID_CREATE from different security context by process 1492 (syz.1.6265), this is not allowed. [ 582.770784][T28393] xt_l2tp: unknown flags: 51 [ 582.796384][T28393] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 582.796781][T28395] __nla_validate_parse: 1 callbacks suppressed [ 582.796798][T28395] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6271'. [ 582.836736][T28398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28398 comm=syz.5.6272 [ 583.313814][T28437] Bluetooth: MGMT ver 1.23 [ 583.458047][T28446] kvm: user requested TSC rate below hardware speed [ 583.564217][T28449] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6286'. [ 583.753012][T28457] FAULT_INJECTION: forcing a failure. [ 583.753012][T28457] name failslab, interval 1, probability 0, space 0, times 0 [ 583.757044][T28457] CPU: 0 UID: 0 PID: 28457 Comm: syz.5.6289 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.757062][T28457] Tainted: [L]=SOFTLOCKUP [ 583.757067][T28457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 583.757074][T28457] Call Trace: [ 583.757078][T28457] [ 583.757084][T28457] dump_stack_lvl+0x100/0x190 [ 583.757101][T28457] should_fail_ex.cold+0x5/0xa [ 583.757117][T28457] should_failslab+0xc2/0x120 [ 583.757130][T28457] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 583.757147][T28457] ? skb_clone+0x190/0x400 [ 583.757167][T28457] skb_clone+0x190/0x400 [ 583.757185][T28457] netlink_deliver_tap+0xaed/0xcc0 [ 583.757202][T28457] netlink_dump+0x631/0xd00 [ 583.757216][T28457] ? __pfx_netlink_dump+0x10/0x10 [ 583.757228][T28457] ? ctnetlink_alloc_filter+0x73e/0xab0 [ 583.757253][T28457] __netlink_dump_start+0x6d6/0x990 [ 583.757268][T28457] ctnetlink_get_conntrack+0x608/0x7d0 [ 583.757286][T28457] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 583.757303][T28457] ? __pfx_ctnetlink_start+0x10/0x10 [ 583.757317][T28457] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 583.757333][T28457] ? __pfx_ctnetlink_done+0x10/0x10 [ 583.757350][T28457] ? find_held_lock+0x2b/0x80 [ 583.757365][T28457] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 583.757388][T28457] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 583.757407][T28457] ? __lock_acquire+0x4a5/0x2630 [ 583.757434][T28457] ? avc_has_perm_noaudit+0x145/0x3b0 [ 583.757451][T28457] netlink_rcv_skb+0x159/0x420 [ 583.757465][T28457] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 583.757484][T28457] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 583.757504][T28457] ? ns_capable+0xd2/0xf0 [ 583.757526][T28457] nfnetlink_rcv+0x1b3/0x440 [ 583.757544][T28457] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 583.757568][T28457] ? netlink_deliver_tap+0x1ae/0xcc0 [ 583.757603][T28457] netlink_unicast+0x585/0x850 [ 583.757626][T28457] ? __pfx_netlink_unicast+0x10/0x10 [ 583.757644][T28457] netlink_sendmsg+0x8b0/0xda0 [ 583.757660][T28457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.757673][T28457] ? __might_fault+0x40/0x140 [ 583.757695][T28457] ____sys_sendmsg+0x9e1/0xb70 [ 583.757708][T28457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.757723][T28457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.757743][T28457] ___sys_sendmsg+0x190/0x1e0 [ 583.757758][T28457] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.757790][T28457] __sys_sendmsg+0x170/0x220 [ 583.757808][T28457] ? __pfx___sys_sendmsg+0x10/0x10 [ 583.757832][T28457] ? rcu_is_watching+0x12/0xc0 [ 583.757851][T28457] do_syscall_64+0x115/0x870 [ 583.757866][T28457] ? clear_bhb_loop+0x40/0x90 [ 583.757879][T28457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.757891][T28457] RIP: 0033:0x7fcc31d9ce59 [ 583.757902][T28457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.757913][T28457] RSP: 002b:00007fcc32d3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.757924][T28457] RAX: ffffffffffffffda RBX: 00007fcc32015fa0 RCX: 00007fcc31d9ce59 [ 583.757931][T28457] RDX: 0000000000040010 RSI: 00002000000015c0 RDI: 0000000000000003 [ 583.757938][T28457] RBP: 00007fcc32d3c090 R08: 0000000000000000 R09: 0000000000000000 [ 583.757945][T28457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.757951][T28457] R13: 00007fcc32016038 R14: 00007fcc32015fa0 R15: 00007ffcaae04398 [ 583.757966][T28457] [ 584.100066][T28482] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6297'. [ 584.196692][T28469] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 584.242422][T28486] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6299'. [ 584.491661][T28505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6305'. [ 584.581191][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 584.581202][ T40] audit: type=1400 audit(2000524380.577:3310): avc: denied { write } for pid=28510 comm="syz.3.6307" path="socket:[143817]" dev="sockfs" ino=143817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 584.611822][T28507] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 584.617764][T28507] netlink: 'syz.1.6306': attribute type 4 has an invalid length. [ 584.750088][ T40] audit: type=1400 audit(2000524380.745:3311): avc: denied { write } for pid=28519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.780401][T28529] netlink: 124 bytes leftover after parsing attributes in process `syz.5.6313'. [ 584.783258][T28529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6313'. [ 584.802709][ T40] audit: type=1400 audit(2000524380.795:3312): avc: denied { write } for pid=28531 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.934499][T28549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28549 comm=syz.1.6316 [ 585.255405][T28580] bond0: Error: CAN devices cannot be enslaved [ 585.342863][T28570] syz.1.6322 (28570): drop_caches: 1 [ 585.374786][T28589] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.6327'. [ 585.391261][T28592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6328'. [ 585.413378][T28592] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6328'. [ 585.517830][T28595] netlink: 'syz.9.6330': attribute type 1 has an invalid length. [ 585.520245][T28595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.638790][T28603] netlink: 'syz.1.6329': attribute type 10 has an invalid length. [ 585.644134][ T40] audit: type=1400 audit(2000524381.639:3313): avc: denied { read } for pid=28602 comm="syz.1.6329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.677705][T28604] xt_CT: No such helper "netbios-ns" [ 585.685492][ T40] audit: type=1400 audit(2000524381.679:3314): avc: denied { mount } for pid=28598 comm="syz.9.6332" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 585.812112][ T40] audit: type=1400 audit(2000524381.798:3315): avc: denied { write } for pid=28613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.874483][ T40] audit: type=1400 audit(2000524381.858:3316): avc: denied { write } for pid=28619 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.915656][ T40] audit: type=1400 audit(2000524381.907:3317): avc: denied { connect } for pid=28617 comm="syz.9.6336" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 585.921990][ T40] audit: type=1400 audit(2000524381.907:3318): avc: denied { watch_mount } for pid=28617 comm="syz.9.6336" path="/264" dev="tmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 585.974746][T28627] fuse: Bad value for 'fd' [ 585.998164][T28627] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 586.375171][ T40] audit: type=1400 audit(2000524382.354:3319): avc: denied { write } for pid=28629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.768345][T28646] lo speed is unknown, defaulting to 1000 [ 586.781599][T28646] xfrm0 speed is unknown, defaulting to 1000 [ 586.785275][T28646] lo speed is unknown, defaulting to 1000 [ 587.010610][T28660] openvswitch: netlink: nsh attr 12 is out of range max 3 [ 587.013100][T28660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.082763][T25356] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 587.235794][T25356] usb 8-1: config 0 has no interfaces? [ 587.237537][T25356] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 587.240393][T25356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.244686][T25356] usb 8-1: config 0 descriptor?? [ 587.456679][T25356] usb 8-1: USB disconnect, device number 12 [ 587.555415][T28662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64223 sclass=netlink_route_socket pid=28662 comm=syz.1.6347 [ 587.733988][T28669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=28669 comm=syz.1.6349 [ 587.936333][T28681] ipvlan2: entered allmulticast mode [ 587.938161][T28681] veth0_to_bridge: entered allmulticast mode [ 587.997641][T28686] overlayfs: failed to clone upperpath [ 588.108611][T28690] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 588.161391][T28681] bridge0: port 3(veth0_to_team) entered blocking state [ 588.163733][T28681] bridge0: port 3(veth0_to_team) entered disabled state [ 588.166338][T28681] veth0_to_team: entered allmulticast mode [ 588.169200][T28681] veth0_to_team: entered promiscuous mode [ 588.290329][T14170] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 588.442596][T14170] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.445666][T14170] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 588.448450][T14170] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.452012][T14170] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 588.456959][T14170] usb 8-1: New USB device found, idVendor=e725, idProduct=a4a1, bcdDevice= 0.40 [ 588.460644][T14170] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.463687][T14170] usb 8-1: Product: syz [ 588.464972][T14170] usb 8-1: Manufacturer: syz [ 588.466506][T14170] usb 8-1: SerialNumber: syz [ 588.470831][T28688] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 588.474320][T14170] cdc_ncm 8-1:1.0: skipping garbage [ 588.475932][T14170] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 588.477955][T14170] cdc_ncm 8-1:1.0: bind() failure [ 588.758166][T14170] usb 8-1: USB disconnect, device number 13 [ 588.899319][T28707] __nla_validate_parse: 3 callbacks suppressed [ 588.899337][T28707] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6362'. [ 588.906937][T28707] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6362'. [ 589.035591][T25356] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 589.191191][T28719] fuse: Bad value for 'fd' [ 589.194764][T28719] overlayfs: failed to clone upperpath [ 589.195013][T28720] overlayfs: failed to clone upperpath [ 589.205015][T25356] usb 6-1: Invalid ep0 maxpacket: 64 [ 589.314771][T28725] tipc: Started in network mode [ 589.316747][T28725] tipc: Node identity 66c457876d6b, cluster identity 4711 [ 589.320664][T28725] tipc: Enabled bearer , priority 0 [ 589.324935][T28725] syzkaller0: entered promiscuous mode [ 589.327459][T28725] syzkaller0: entered allmulticast mode [ 589.345581][T25356] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 589.405192][T28732] tipc: Resetting bearer [ 589.406428][T28733] xt_l2tp: unknown flags: 51 [ 589.414754][T28724] tipc: Resetting bearer [ 589.421589][T28733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6370'. [ 589.438895][T28724] tipc: Disabling bearer [ 589.467091][T28735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6371'. [ 589.499265][T25356] usb 6-1: Invalid ep0 maxpacket: 64 [ 589.502918][T25356] usb usb6-port1: attempt power cycle [ 589.557573][T28742] xt_hashlimit: size too large, truncated to 1048576 [ 589.655023][T28748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6375'. [ 589.663478][T28748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6375'. [ 589.668697][T28748] netem: change failed [ 589.850393][T25356] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 589.850638][T28752] vlan2: entered allmulticast mode [ 589.855583][T28752] bond0: entered allmulticast mode [ 589.857759][T28752] bond_slave_0: entered allmulticast mode [ 589.860217][T28752] bond_slave_1: entered allmulticast mode [ 589.872256][T25356] usb 6-1: Invalid ep0 maxpacket: 64 [ 589.925994][T28757] bond0: Device is already in use. [ 590.021501][T25356] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 590.037423][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 590.037435][ T40] audit: type=1400 audit(2000524386.001:3324): avc: denied { bind } for pid=28756 comm="syz.5.6378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 590.051994][T25356] usb 6-1: Invalid ep0 maxpacket: 64 [ 590.053887][T25356] usb usb6-port1: unable to enumerate USB device [ 590.269628][ T40] audit: type=1400 audit(2000524386.229:3325): avc: denied { map } for pid=28768 comm="syz.3.6380" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 590.393984][ T5846] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 590.545260][ T5846] usb 6-1: Invalid ep0 maxpacket: 64 [ 590.675617][ T5846] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 590.826594][ T5846] usb 6-1: Invalid ep0 maxpacket: 64 [ 590.828908][ T5846] usb usb6-port1: attempt power cycle [ 590.875979][T28772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6381'. [ 590.931250][ T40] audit: type=1400 audit(2000524386.885:3326): avc: denied { write } for pid=28773 comm="syz.5.6382" name="null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dmidecode_exec_t:s0" [ 590.948416][ T40] audit: type=1400 audit(2000524386.905:3327): avc: denied { accept } for pid=28773 comm="syz.5.6382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 590.985933][T28780] veth0_to_bond: entered allmulticast mode [ 590.991254][T28779] netlink: 830 bytes leftover after parsing attributes in process `syz.5.6384'. [ 590.991663][T28780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28780 comm=syz.9.6385 [ 590.996499][T28779] netem: change failed [ 591.139541][T28785] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 591.168816][ T5846] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 591.190706][ T5846] usb 6-1: Invalid ep0 maxpacket: 64 [ 591.319567][ T5846] usb 6-1: new low-speed USB device number 31 using dummy_hcd [ 591.340477][ T5846] usb 6-1: Invalid ep0 maxpacket: 64 [ 591.342285][ T5846] usb usb6-port1: unable to enumerate USB device [ 591.402673][T28796] binder: 28794:28796 ioctl c0306201 0 returned -14 [ 591.647243][T28811] fuse: Bad value for 'fd' [ 591.819474][T28833] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6402'. [ 591.907791][ T40] audit: type=1400 audit(2000524643.861:3328): avc: denied { ioctl } for pid=28836 comm="syz.5.6404" path="socket:[150436]" dev="sockfs" ino=150436 ioctlcmd=0x5312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 591.939693][ T40] audit: type=1400 audit(2000524643.891:3329): avc: denied { create } for pid=28838 comm="syz.9.6405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 591.942839][T28844] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 591.947394][ T40] audit: type=1400 audit(2000524643.891:3330): avc: denied { bind } for pid=28838 comm="syz.9.6405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 591.964269][ T40] audit: type=1400 audit(2000524643.901:3331): avc: denied { relabelto } for pid=28838 comm="syz.9.6405" name="290" dev="tmpfs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 591.972254][ T40] audit: type=1400 audit(2000524643.901:3332): avc: denied { associate } for pid=28838 comm="syz.9.6405" name="290" dev="tmpfs" ino=1541 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 591.985293][ T40] audit: type=1400 audit(2000524643.901:3333): avc: denied { ioctl } for pid=28838 comm="syz.9.6405" path="socket:[150734]" dev="sockfs" ino=150734 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x204000) [ 592.773211][T12553] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 592.783926][T28841] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 592.846058][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 592.850302][ T1134] ata1: failed to read log page 10h (errno=-5) [ 592.853062][ T1134] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 592.856792][ T1134] ata1.00: irq_stat 0x41000000 [ 592.858363][ T1134] ata1.00: failed command: READ FPDMA QUEUED [ 592.860103][ T1134] ata1.00: cmd 60/20:58:b6:24:08/10:00:00:00:00/40 tag 11 ncq dma 2113536 in [ 592.860103][ T1134] res 50/04:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 592.865732][ T1134] ata1.00: status: { DRDY } [ 592.867272][ T1134] ata1.00: error: { ABRT } [ 592.869507][ T1134] ata1.00: configured for UDMA/100 [ 592.871482][ T1134] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 592.874685][ T1134] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 592.877349][ T1134] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 592.880082][ T1134] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 08 24 b6 00 10 20 00 [ 592.882691][ T1134] blk_print_req_error: 12 callbacks suppressed [ 592.882701][ T1134] I/O error, dev sda, sector 533686 op 0x0:(READ) flags 0x80700 phys_seg 54 prio class 2 [ 592.888326][ T1134] ata1: EH complete [ 592.893300][T28878] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 592.918946][T28880] netlink: 168 bytes leftover after parsing attributes in process `syz.9.6418'. [ 592.926851][T12553] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 592.931270][T12553] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.935198][T28878] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 592.935610][T12553] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 592.942214][T12553] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.948831][T12553] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 592.951873][T12553] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 592.954547][T12553] usb 6-1: Product: syz [ 592.956088][T12553] usb 6-1: Manufacturer: syz [ 592.967818][T12553] cdc_wdm 6-1:1.0: skipping garbage [ 592.970080][T12553] cdc_wdm 6-1:1.0: skipping garbage [ 592.976419][T12553] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 592.978503][T12553] cdc_wdm 6-1:1.0: Unknown control protocol [ 593.168401][T12553] usb 6-1: USB disconnect, device number 32 [ 593.453088][ T845] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 593.602994][T12553] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 593.613286][ T845] usb 10-1: Using ep0 maxpacket: 8 [ 593.616963][ T845] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.620340][ T845] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.623564][ T845] usb 10-1: config 0 interface 0 has no altsetting 0 [ 593.625663][ T845] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 593.628489][ T845] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.632295][ T845] usb 10-1: config 0 descriptor?? [ 593.755721][T12553] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 593.759060][T12553] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.763059][T12553] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 593.766123][T12553] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.770764][T12553] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 593.773789][T12553] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 593.776537][T12553] usb 6-1: Product: syz [ 593.777808][T12553] usb 6-1: Manufacturer: syz [ 593.783160][T12553] cdc_wdm 6-1:1.0: skipping garbage [ 593.784859][T12553] cdc_wdm 6-1:1.0: skipping garbage [ 593.792309][T12553] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 593.794400][T12553] cdc_wdm 6-1:1.0: Unknown control protocol [ 594.045989][ T845] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 594.052911][ T845] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 594.055099][ T845] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 594.057289][ T845] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 594.059421][ T845] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 594.064171][ T845] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 594.123166][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 594.277791][T25356] usb 10-1: USB disconnect, device number 36 [ 594.388054][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 594.390300][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 594.394468][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 594.396433][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 594.398430][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 594.400518][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 594.404923][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 594.406943][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 594.408968][ T845] usb 6-1: USB disconnect, device number 33 [ 594.409032][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 594.412916][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 594.414836][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 594.772849][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 594.793655][T28921] netlink: 'syz.1.6429': attribute type 11 has an invalid length. [ 594.817511][T28925] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6431'. [ 594.821360][T28925] netlink: 212348 bytes leftover after parsing attributes in process `syz.9.6431'. [ 594.825978][T28925] netlink: Conntrack attr has 4 unknown bytes [ 594.828913][T28925] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6431'. [ 594.877162][T28934] sctp: [Deprecated]: syz.1.6432 (pid 28934) Use of int in max_burst socket option deprecated. [ 594.877162][T28934] Use struct sctp_assoc_value instead [ 595.304306][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880623b9400: rx timeout, send abort [ 595.314878][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 595.314890][ T40] audit: type=1400 audit(2000524647.271:3354): avc: denied { read } for pid=5125 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 595.323897][ T40] audit: type=1400 audit(2000524647.271:3355): avc: denied { search } for pid=5125 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.330506][ T40] audit: type=1400 audit(2000524647.271:3356): avc: denied { append } for pid=5125 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 595.337895][ T40] audit: type=1400 audit(2000524647.271:3357): avc: denied { open } for pid=5125 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 595.345454][ T40] audit: type=1400 audit(2000524647.271:3358): avc: denied { getattr } for pid=5125 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 595.806820][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880623b9400: abort rx timeout. Force session deactivation [ 595.885579][T28964] syzkaller0: entered promiscuous mode [ 595.887409][T28964] syzkaller0: entered allmulticast mode [ 595.985373][T28978] netlink: 180 bytes leftover after parsing attributes in process `syz.9.6448'. [ 595.988287][T28978] netlink: 180 bytes leftover after parsing attributes in process `syz.9.6448'. [ 595.992372][T28978] fuse: fd is not a fuse device [ 595.995000][T28978] overlayfs: failed to clone upperpath [ 596.055706][T28988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6450'. [ 596.058465][T28988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6450'. [ 596.073775][ T40] audit: type=1400 audit(2000524648.031:3359): avc: denied { setopt } for pid=28989 comm="syz.9.6452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 596.094447][ T40] audit: type=1400 audit(2000524648.051:3360): avc: denied { write } for pid=28992 comm="syz.1.6453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.164717][T29008] overlay: Bad value for 'uuid' [ 596.207925][ T40] audit: type=1400 audit(2000524648.161:3361): avc: denied { unmount } for pid=23687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 596.213417][T29012] 9p: Bad value for 'source' [ 596.266682][T29023] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 596.394493][ T40] audit: type=1400 audit(2000524648.352:3362): avc: denied { read } for pid=29035 comm="syz.1.6465" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 596.407479][ T40] audit: type=1400 audit(2000524648.362:3363): avc: denied { open } for pid=29035 comm="syz.1.6465" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 596.433394][T29041] fuse: Unknown parameter 'n.$Fn83gC([(W' [ 596.614277][T29056] IPVS: Error connecting to the multicast addr [ 596.634563][T29058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6473'. [ 596.637881][T29058] block nbd1: Unsupported socket: should be TCP or UNIX. [ 596.641546][T29060] overlayfs: failed to clone lowerpath [ 596.739194][T29069] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 596.785604][T29075] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6477'. [ 596.845679][T29089] veth0_to_bond: entered allmulticast mode [ 597.052593][T14170] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 597.141723][T29106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer. [ 597.213549][T14170] usb 10-1: not running at top speed; connect to a high speed hub [ 597.217211][T14170] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 597.220661][T14170] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1032, setting to 1023 [ 597.226415][T14170] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 597.229545][T14170] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.232042][T14170] usb 10-1: Product: 婠䖌蝹ꅘ﮽됞ῌ礳륖ͩ叼ꁤ㙝ᜣ᣽凈ڂ砯匔꯿➥皙딟휞호삺本慦ꖊݝ녈켾糧쁐䜵綝⋎쬡牪䓕糖泰㢇嬸혴ﭢ씭賢චꌮ굤Ⰲ䇿뷖옥ꆈ坓㪉東屄ⶇ씚ȋልꢴꕠⷌ [ 597.239131][T14170] usb 10-1: Manufacturer: Ћ [ 597.240576][T14170] usb 10-1: SerialNumber: Т [ 597.458090][T14170] usb 10-1: 1:1 : bogus bTerminalLink 7 [ 597.464096][T14170] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 597.486839][T14170] usb 10-1: USB disconnect, device number 37 [ 597.529691][T23163] udevd[23163]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.674216][T29154] netlink: 'syz.1.6500': attribute type 3 has an invalid length. [ 597.681423][T29156] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6499'. [ 597.725323][T29158] netem: change failed [ 598.001880][T29187] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.002464][T29188] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.011899][T29187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 598.068801][T29192] netem: change failed [ 598.101265][T29197] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=29197 comm=syz.5.6515 [ 598.105713][T29197] netlink: 'syz.5.6515': attribute type 23 has an invalid length. [ 598.362812][T22021] Bluetooth: hci2: command 0x0401 tx timeout [ 598.370460][ T62] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 598.472341][T25356] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 598.653007][T14170] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 598.653577][T25356] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.658981][T25356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 598.662819][T25356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 598.665798][T25356] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.669798][T25356] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.672858][T25356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.676620][T25356] usb 6-1: config 0 descriptor?? [ 598.823444][T14170] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.827269][T14170] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.831225][T14170] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.834074][T14170] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.043816][T14170] usb 8-1: usb_control_msg returned -32 [ 599.045571][T14170] usbtmc 8-1:16.0: can't read capabilities [ 599.083133][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.085667][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.088017][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.090556][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.092950][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.095173][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.097431][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.099728][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.102086][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.104564][T25356] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 599.111540][T25356] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 599.396052][T29225] usbtmc 8-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 599.705016][T29240] openvswitch: netlink: IP tunnel dst address not specified [ 599.825392][T29244] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 600.595844][ T40] kauditd_printk_skb: 157 callbacks suppressed [ 600.595861][ T40] audit: type=1400 audit(2000524652.552:3521): avc: denied { mounton } for pid=29262 comm="syz.9.6537" path="/bus" dev="hugetlbfs" ino=146309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 600.596288][T29263] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 600.610867][T29263] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 600.614439][T29263] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 600.617332][T29263] overlayfs: maximum fs stacking depth exceeded [ 600.652562][T29265] ip6tnl2: entered promiscuous mode [ 600.687621][T29269] __nla_validate_parse: 4 callbacks suppressed [ 600.687632][T29269] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6539'. [ 600.693155][T29269] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6539'. [ 600.802602][ T40] audit: type=1400 audit(2000524652.762:3522): avc: denied { connect } for pid=29276 comm="syz.9.6543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 600.804326][T29277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6543'. [ 600.811902][T29277] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6543'. [ 601.197957][T25356] usb 6-1: USB disconnect, device number 34 [ 601.405358][T25356] usb 8-1: USB disconnect, device number 15 [ 601.507818][T29285] syzkaller0: entered promiscuous mode [ 601.509472][T29285] syzkaller0: entered allmulticast mode [ 601.514877][T29284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=29284 comm=syz.3.6545 [ 601.686838][ T40] audit: type=1400 audit(2000524653.632:3523): avc: denied { bind } for pid=29288 comm="syz.3.6547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 601.891958][T22021] Bluetooth: hci3: command 0x1003 tx timeout [ 601.892023][ T62] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 602.075844][ T40] audit: type=1400 audit(2000524654.022:3524): avc: denied { getopt } for pid=29323 comm="syz.9.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 602.081978][ T40] audit: type=1400 audit(2000524654.022:3525): avc: denied { getopt } for pid=29323 comm="syz.9.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 602.090074][T29328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6560'. [ 602.094300][T29328] netem: unknown loss type 13 [ 602.097820][T29328] netem: change failed [ 602.138602][T29333] openvswitch: netlink: EtherType 50a is less than min 600 [ 602.142526][ T40] audit: type=1400 audit(2000524654.092:3526): avc: denied { shutdown } for pid=29332 comm="syz.1.6562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 602.281960][ T5846] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 602.390389][T29343] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 602.394353][T29343] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6566'. [ 602.434117][ T5846] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 602.439152][ T5846] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 602.450802][ T5846] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 602.460231][ T5846] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 602.464829][ T5846] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 602.482313][ T5846] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 602.485309][ T5846] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 602.487841][ T5846] usb 10-1: Product: syz [ 602.490083][ T5846] usb 10-1: Manufacturer: syz [ 602.496856][ T5846] cdc_wdm 10-1:1.0: skipping garbage [ 602.498462][ T5846] cdc_wdm 10-1:1.0: skipping garbage [ 602.517504][ T132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.537630][ T5846] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 602.539529][ T5846] cdc_wdm 10-1:1.0: Unknown control protocol [ 602.574628][T22021] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.588700][T22021] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 602.591652][T22021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 602.597255][T22021] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 602.600153][T22021] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 602.629529][ T132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.729180][ T132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.750113][ T40] audit: type=1400 audit(2000524654.692:3527): avc: denied { read } for pid=29362 comm="syz.3.6569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 602.770074][ T40] audit: type=1400 audit(2000524654.712:3528): avc: denied { getopt } for pid=29362 comm="syz.3.6569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 602.805237][ T40] audit: type=1400 audit(2000524654.752:3529): avc: denied { setopt } for pid=29366 comm="syz.3.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 602.806756][T29367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6570'. [ 602.810622][T29350] lo speed is unknown, defaulting to 1000 [ 602.811390][T29350] xfrm0 speed is unknown, defaulting to 1000 [ 602.814736][T29367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6570'. [ 602.839873][ T132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.846652][T29350] lo speed is unknown, defaulting to 1000 [ 603.034546][ T132] veth0_to_team: left allmulticast mode [ 603.036261][ T132] veth0_to_team: left promiscuous mode [ 603.038068][ T132] bridge0: port 3(veth0_to_team) entered disabled state [ 603.042668][ T132] bridge_slave_1: left allmulticast mode [ 603.044493][ T132] bridge_slave_1: left promiscuous mode [ 603.046258][ T132] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.049755][ T132] bridge_slave_0: left allmulticast mode [ 603.051474][ T132] bridge_slave_0: left promiscuous mode [ 603.053724][ T132] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.225974][T22108] smbdirect: ib_dev[syz1] removed [ 603.255221][ T132] bond6 (unregistering): (slave gretap1): Releasing active interface [ 603.435301][T29377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29377 comm=syz.9.6572 [ 603.493313][T29321] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 603.497063][ T6094] usb 10-1: USB disconnect, device number 38 [ 603.497214][ T132] bond2 (unregistering): (slave bridge3): Releasing active interface [ 603.737645][ T132] bond1 (unregistering): Released all slaves [ 603.751044][ T132] bond2 (unregistering): Released all slaves [ 603.764371][ T132] bond3 (unregistering): Released all slaves [ 603.778052][ T132] bond0 (unregistering): Released all slaves [ 603.795700][ T132] bond4 (unregistering): Released all slaves [ 603.810081][ T132] bond5 (unregistering): Released all slaves [ 603.834452][ T132] bond6 (unregistering): Released all slaves [ 603.852961][ T132] bond7 (unregistering): Released all slaves [ 603.987643][ T40] audit: type=1400 audit(2000524655.932:3530): avc: denied { read } for pid=29390 comm="syz.9.6575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 604.112594][T29350] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.114797][T29350] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.117054][T29350] bridge_slave_0: entered allmulticast mode [ 604.119667][T29350] bridge_slave_0: entered promiscuous mode [ 604.122845][T29350] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.125046][T29350] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.127220][T29350] bridge_slave_1: entered allmulticast mode [ 604.129773][T29350] bridge_slave_1: entered promiscuous mode [ 604.150886][T29350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.155976][T29350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.162240][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 604.183156][T29350] team0: Port device team_slave_0 added [ 604.186538][T29350] team0: Port device team_slave_1 added [ 604.223679][T29350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.226030][T29350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.234462][T29350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.246464][T29350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.248591][T29350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.256194][T29350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.281060][T29350] hsr_slave_0: entered promiscuous mode [ 604.285106][T29350] hsr_slave_1: entered promiscuous mode [ 604.287161][T29350] debugfs: 'hsr0' already exists in 'hsr' [ 604.289054][T29350] Cannot create hsr debugfs directory [ 604.291663][ T5846] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 604.445708][ T5846] usb 8-1: Using ep0 maxpacket: 8 [ 604.451185][ T5846] usb 8-1: config 0 has no interfaces? [ 604.454203][ T5446] 8021q: adding VLAN 0 to HW filter on device eth19 [ 604.454361][ T5846] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 604.459785][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 604.462446][ T5846] usb 8-1: Product: syz [ 604.463744][ T5846] usb 8-1: SerialNumber: syz [ 604.466729][ T5846] usb 8-1: config 0 descriptor?? [ 604.476357][T29416] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 604.485104][ T132] hsr_slave_0: left promiscuous mode [ 604.487862][ T132] hsr_slave_1: left promiscuous mode [ 604.489710][ T132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.493516][ T132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.545417][T29419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6580'. [ 604.647882][ T132] team0 (unregistering): Port device team_slave_1 removed [ 604.654997][ T132] team0 (unregistering): Port device team_slave_0 removed [ 604.690434][T22021] Bluetooth: hci0: command tx timeout [ 604.752386][T29435] binder: 29434:29435 ioctl c0306201 200000000080 returned -14 [ 604.784457][T29397] netlink: 'syz.3.6576': attribute type 28 has an invalid length. [ 604.789046][T29397] netlink: 'syz.3.6576': attribute type 3 has an invalid length. [ 604.791670][T29397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6576'. [ 604.878752][T29451] veth0_macvtap: left promiscuous mode [ 605.342443][ T132] IPVS: stop unused estimator thread 0... [ 605.446219][T29350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 605.455659][T29350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.458196][T29350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 605.467865][T29350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.471695][T29350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 605.476970][T29350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.479501][T29350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 605.485419][T29350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.523842][T29350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.540125][T29350] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.546995][ T90] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.549308][ T90] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.558716][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.560844][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.630280][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 605.630291][ T40] audit: type=1400 audit(2000524657.573:3548): avc: denied { write } for pid=29507 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.730779][ T40] audit: type=1400 audit(2000524657.673:3549): avc: denied { write } for pid=29514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.780905][ T40] audit: type=1400 audit(2000524657.723:3550): avc: denied { write } for pid=29520 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.835490][T29526] __nla_validate_parse: 2 callbacks suppressed [ 605.835507][T29526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6595'. [ 605.841081][T29526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6595'. [ 605.853530][ T40] audit: type=1400 audit(2000524657.803:3551): avc: denied { write } for pid=29524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.866545][T29350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.888473][T29350] veth0_vlan: entered promiscuous mode [ 605.896138][T29350] veth1_vlan: entered promiscuous mode [ 605.897318][ T40] audit: type=1400 audit(2000524657.843:3552): avc: denied { write } for pid=29529 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.908398][T29350] veth0_macvtap: entered promiscuous mode [ 605.920068][T29350] veth1_macvtap: entered promiscuous mode [ 605.930385][T29350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.936659][T29350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.942651][T22108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.947147][T22108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.953579][T22108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.959253][T22108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.975644][ T40] audit: type=1400 audit(2000524657.923:3553): avc: denied { write } for pid=29532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.050243][ T40] audit: type=1400 audit(2000524657.993:3554): avc: denied { create } for pid=29535 comm="syz.5.6596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 606.056739][T29536] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6596'. [ 606.100877][ T639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.103407][ T639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.105522][ T40] audit: type=1400 audit(2000524658.063:3555): avc: denied { read } for pid=29538 comm="syz.5.6597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 606.123638][ T40] audit: type=1400 audit(2000524658.073:3556): avc: denied { write } for pid=29537 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.140558][ T639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.143026][ T639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.225385][ T40] audit: type=1400 audit(2000524658.173:3557): avc: denied { write } for pid=29549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.325913][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6598'. [ 606.328582][T29569] netlink: 'syz.1.6598': attribute type 30 has an invalid length. [ 606.335427][ T132] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.338154][ T132] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.338227][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6598'. [ 606.340895][ T132] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.343750][T29569] netlink: 'syz.1.6598': attribute type 30 has an invalid length. [ 606.348312][ T132] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.381838][T29569] syzkaller1: entered promiscuous mode [ 606.384283][T29569] syzkaller1: entered allmulticast mode [ 606.771498][T22021] Bluetooth: hci0: command tx timeout [ 606.904618][T29575] macsec1: entered promiscuous mode [ 606.906826][T29575] macsec1: entered allmulticast mode [ 606.914431][T29576] macsec2: entered promiscuous mode [ 606.916545][T29576] macsec2: entered allmulticast mode [ 607.021979][T29583] kvm: MONITOR instruction emulated as NOP! [ 607.037633][ T8295] usb 8-1: USB disconnect, device number 16 [ 607.142205][T29600] netlink: 'syz.5.6607': attribute type 1 has an invalid length. [ 607.144773][T29600] netlink: 'syz.5.6607': attribute type 2 has an invalid length. [ 607.147020][T29600] netlink: 'syz.5.6607': attribute type 1 has an invalid length. [ 607.201785][T29607] overlay: Unknown parameter '/' [ 607.203750][T29607] overlay: Unknown parameter '/' [ 607.308511][T29619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6612'. [ 607.352093][T29623] netlink: 344 bytes leftover after parsing attributes in process `syz.3.6614'. [ 607.649489][T29644] syzkaller0: entered promiscuous mode [ 607.651403][T29644] syzkaller0: entered allmulticast mode [ 607.708830][T29552] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 607.806128][T29649] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.6621'. [ 607.809496][T29649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6621'. [ 607.867902][T29651] xt_time: unknown flags 0xc [ 607.906709][T29653] smc: net device wlan0 applied user defined pnetid SYZ0 [ 608.191187][ T8295] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 608.342284][ T8295] usb 8-1: not running at top speed; connect to a high speed hub [ 608.346392][ T8295] usb 8-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.351805][ T8295] usb 8-1: config 1 interface 0 has no altsetting 0 [ 608.356242][ T8295] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.359887][ T8295] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.365599][ T8295] usb 8-1: Product: syz [ 608.367228][ T8295] usb 8-1: Manufacturer: syz [ 608.373471][ T8295] usb 8-1: SerialNumber: syz [ 608.588521][T29658] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=29658 comm=syz.3.6625 [ 608.597835][ T8295] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 608.606038][ T8295] usb 8-1: USB disconnect, device number 17 [ 608.632747][T29672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6627'. [ 608.841719][T22021] Bluetooth: hci0: command tx timeout [ 608.851081][T12553] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 609.003899][T12553] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.006923][T12553] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.010771][T12553] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 609.013591][T12553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.226472][T12553] usb 6-1: usb_control_msg returned -32 [ 609.228208][T12553] usbtmc 6-1:16.0: can't read capabilities [ 609.428734][T22021] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 609.503026][T29687] gfs2: not a GFS2 filesystem [ 609.583237][T29691] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32 [ 610.271264][T29704] 9pnet_fd: Insufficient options for proto=fd [ 610.280742][T29705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.374114][T29713] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 610.380326][T29715] netlink: 'syz.9.6644': attribute type 13 has an invalid length. [ 610.447042][T29719] batadv0: entered promiscuous mode [ 610.455506][T29719] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 610.459099][T29719] batadv0: left promiscuous mode [ 610.490594][T29722] pvfs2: Unknown parameter '@%/$' [ 610.714482][T29734] tmpfs: Unknown parameter 'ino' [ 610.908022][T29751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6659'. [ 610.921019][T22021] Bluetooth: hci0: command tx timeout [ 610.924557][T29751] bridge5: port 1(dummy0) entered blocking state [ 610.927225][T29751] bridge5: port 1(dummy0) entered disabled state [ 610.932194][T29751] netlink: 'syz.5.6659': attribute type 10 has an invalid length. [ 610.934831][T29751] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6659'. [ 611.021787][T29755] loop9: detected capacity change from 0 to 2640 [ 611.023874][T29755] buffer_io_error: 10 callbacks suppressed [ 611.023883][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.028004][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.030326][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.032800][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.035160][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.037465][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.039885][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.042254][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.044557][T29755] ldm_validate_partition_table(): Disk read failed. [ 611.046478][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.048844][T29755] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.052678][T29755] Dev loop9: unable to read RDB block 0 [ 611.055052][T29755] loop9: unable to read partition table [ 611.056812][T29755] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 611.118277][T29757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6661'. [ 611.186581][T29770] fuse: fd is not a fuse device [ 611.624135][T26617] usb 6-1: USB disconnect, device number 35 [ 611.664979][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 611.664996][ T40] audit: type=1400 audit(2000524663.613:3572): avc: denied { create } for pid=29774 comm="syz.1.6666" name="#a1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 611.673363][ T40] audit: type=1400 audit(2000524663.613:3573): avc: denied { link } for pid=29774 comm="syz.1.6666" name="#a1" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 611.679969][ T40] audit: type=1400 audit(2000524663.613:3574): avc: denied { rename } for pid=29774 comm="syz.1.6666" name="#a2" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 611.756355][T29777] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 611.760698][ T40] audit: type=1400 audit(2000524663.703:3575): avc: denied { relabelto } for pid=29776 comm="syz.1.6667" name="5" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 611.768122][ T40] audit: type=1400 audit(2000524663.703:3576): avc: denied { associate } for pid=29776 comm="syz.1.6667" name="5" dev="tmpfs" ino=48 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 611.820742][ T40] audit: type=1400 audit(2000524663.763:3577): avc: denied { write } for pid=29350 comm="syz-executor" name="5" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 611.829147][ T40] audit: type=1400 audit(2000524663.773:3578): avc: denied { remove_name } for pid=29350 comm="syz-executor" name="file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 611.841723][ T40] audit: type=1400 audit(2000524663.773:3579): avc: denied { write } for pid=29350 comm="syz-executor" name="5" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 611.855550][ T40] audit: type=1400 audit(2000524663.773:3580): avc: denied { write } for pid=29350 comm="syz-executor" name="5" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 611.868402][ T40] audit: type=1400 audit(2000524663.773:3581): avc: denied { write } for pid=29350 comm="syz-executor" name="5" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 612.064208][T29794] batman_adv: batadv0: Adding interface: dummy0 [ 612.066175][T29794] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.073536][T29794] batman_adv: batadv0: Interface activated: dummy0 [ 612.128920][T29797] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.6672'. [ 612.131472][T29798] netlink: 'syz.5.6673': attribute type 12 has an invalid length. [ 612.132617][T29797] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6672'. [ 612.134786][T29798] netlink: 'syz.5.6673': attribute type 29 has an invalid length. [ 612.140829][T29798] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6673'. [ 612.143461][T29798] netlink: 59 bytes leftover after parsing attributes in process `syz.5.6673'. [ 612.151140][T29797] batadv0: mtu less than device minimum [ 612.153678][T29797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.157202][T29797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.161331][T29797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.165179][T29797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.168759][T29797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.172405][T29797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.176074][T29797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.179485][T29797] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.189214][T29798] netlink: 'syz.5.6673': attribute type 12 has an invalid length. [ 612.191779][T29798] netlink: 'syz.5.6673': attribute type 29 has an invalid length. [ 612.194139][T29798] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6673'. [ 612.196917][T29798] netlink: 59 bytes leftover after parsing attributes in process `syz.5.6673'. [ 614.089656][T29757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.209706][T29828] xt_hashlimit: size too large, truncated to 1048576 [ 614.238173][T29828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6680'. [ 614.311829][T29822] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 614.471175][ T5846] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 614.622077][ T5846] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 614.626304][ T5846] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 614.630811][ T5846] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 614.635182][ T5846] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 614.642472][ T5846] usb 10-1: New USB device found, idVendor=e725, idProduct=a4a1, bcdDevice= 0.40 [ 614.646106][ T5846] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.649246][ T5846] usb 10-1: Product: syz [ 614.651394][ T5846] usb 10-1: Manufacturer: syz [ 614.653351][ T5846] usb 10-1: SerialNumber: syz [ 614.658646][T29832] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 614.660989][T25356] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 614.663936][ T5846] cdc_ncm 10-1:1.0: skipping garbage [ 614.666671][ T5846] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 614.669422][ T5846] cdc_ncm 10-1:1.0: bind() failure [ 614.790427][T12553] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 614.810588][T25356] usb 6-1: Using ep0 maxpacket: 8 [ 614.813658][T25356] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 614.816207][T25356] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 614.819045][T25356] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 614.822010][T25356] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 614.824990][T25356] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.829100][T25356] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 614.832116][T25356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.868572][T29832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.871785][T29832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.942390][T12553] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.945780][T12553] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 614.948393][T12553] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 614.951132][T12553] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.956239][T12553] usb 8-1: config 0 descriptor?? [ 614.960740][T12553] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 614.962882][T12553] dvb-usb: bulk message failed: -22 (3/0) [ 614.966225][T12553] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 614.969213][T12553] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 614.971545][T12553] usb 8-1: media controller created [ 614.974961][T12553] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 614.975777][ T8295] usb 10-1: USB disconnect, device number 40 [ 614.992145][T12553] dvb-usb: bulk message failed: -22 (6/0) [ 614.995940][T12553] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 615.002520][T12553] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input53 [ 615.017612][T12553] dvb-usb: schedule remote query interval to 150 msecs. [ 615.019681][T12553] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 615.093703][T25356] usb 6-1: GET_CAPABILITIES returned 0 [ 615.095886][T25356] usbtmc 6-1:16.0: can't read capabilities [ 615.164885][ T8295] usb 8-1: USB disconnect, device number 18 [ 615.173958][ T5846] dvb-usb: bulk message failed: -22 (1/0) [ 615.178516][ T5846] dvb-usb: error while querying for an remote control event. [ 615.204197][ T8295] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 615.302259][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.305228][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.308248][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.311275][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.314003][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.316721][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.322369][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.325742][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.328946][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.332228][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.335652][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.338809][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.342279][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.351634][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.355185][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.358840][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 615.364108][ T5846] usb 6-1: USB disconnect, device number 36 [ 615.549720][T29876] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 615.990277][T26617] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 616.150212][T26617] usb 8-1: Using ep0 maxpacket: 32 [ 616.155950][T26617] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 616.160221][T26617] usb 8-1: config 0 has no interface number 0 [ 616.162702][T26617] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 616.166454][T26617] usb 8-1: config 0 interface 89 has no altsetting 0 [ 616.170609][T26617] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 616.174377][T26617] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.177655][T26617] usb 8-1: Product: syz [ 616.180537][T26617] usb 8-1: Manufacturer: syz [ 616.182696][T26617] usb 8-1: SerialNumber: syz [ 616.187041][T26617] usb 8-1: config 0 descriptor?? [ 616.196025][T26617] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 616.199811][T26617] em28xx 8-1:0.89: Video interface 89 found: [ 616.230423][ T5846] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 616.380264][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 616.383286][ T5846] usb 6-1: config index 0 descriptor too short (expected 6701, got 45) [ 616.385842][ T5846] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.388924][ T5846] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.392752][ T5846] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.395711][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0 [ 616.397741][ T5846] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 616.401190][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.405326][ T5846] usb 6-1: config 0 descriptor?? [ 616.559068][T29897] __nla_validate_parse: 2 callbacks suppressed [ 616.559080][T29897] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6712'. [ 616.797596][T26617] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 616.821036][ T5846] hid_parser_main: 5 callbacks suppressed [ 616.821050][ T5846] logitech 0003:046D:CA03.0014: unknown main item tag 0x0 [ 616.825316][ T5846] logitech 0003:046D:CA03.0014: unknown main item tag 0x0 [ 616.827534][ T5846] logitech 0003:046D:CA03.0014: unknown main item tag 0x0 [ 616.829814][ T5846] logitech 0003:046D:CA03.0014: unknown main item tag 0x0 [ 616.832287][ T5846] logitech 0003:046D:CA03.0014: unknown main item tag 0x0 [ 616.834524][ T5846] logitech 0003:046D:CA03.0014: unknown main item tag 0x0 [ 616.836838][ T5846] logitech 0003:046D:CA03.0014: unknown main item tag 0x0 [ 616.840905][ T5846] logitech 0003:046D:CA03.0014: hidraw1: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.1-1/input0 [ 616.845063][ T5846] logitech 0003:046D:CA03.0014: no inputs found [ 617.072544][T29909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6710'. [ 617.240594][T26617] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 617.243160][T26617] em28xx 8-1:0.89: board has no eeprom [ 617.300158][T26617] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 617.303402][T26617] em28xx 8-1:0.89: analog set to bulk mode. [ 617.306791][T12637] em28xx 8-1:0.89: Registering V4L2 extension [ 617.312734][T26617] usb 8-1: USB disconnect, device number 19 [ 617.324830][T26617] em28xx 8-1:0.89: Disconnecting em28xx [ 617.338172][T12637] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 617.342081][T12637] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 617.347404][T12637] em28xx 8-1:0.89: No AC97 audio processor [ 617.365391][T12637] usb 8-1: Decoder not found [ 617.367482][T12637] em28xx 8-1:0.89: failed to create media graph [ 617.370226][T12637] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 617.382183][T12637] em28xx 8-1:0.89: Registering snapshot button... [ 617.393397][T12637] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.89/input/input54 [ 617.422744][T12637] em28xx 8-1:0.89: Remote control support is not available for this card. [ 617.426437][T26617] em28xx 8-1:0.89: Closing input extension [ 617.430927][T26617] em28xx 8-1:0.89: Deregistering snapshot button [ 617.479128][T26617] em28xx 8-1:0.89: Freeing device [ 617.644716][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 617.644731][ T40] audit: type=1400 audit(2000524669.594:3587): avc: denied { ioctl } for pid=29923 comm="syz.5.6721" path="socket:[156253]" dev="sockfs" ino=156253 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 617.819051][ T40] audit: type=1400 audit(2000524669.764:3588): avc: denied { relabelfrom } for pid=29935 comm="syz.5.6727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 617.826079][ T40] audit: type=1400 audit(2000524669.764:3589): avc: denied { relabelto } for pid=29935 comm="syz.5.6727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 618.196320][T29970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6742'. [ 618.238285][T29972] lo speed is unknown, defaulting to 1000 [ 618.243215][T29972] lo speed is unknown, defaulting to 1000 [ 618.520283][ T8295] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 618.669870][ T8295] usb 10-1: Using ep0 maxpacket: 16 [ 618.674665][ T8295] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 618.677615][ T8295] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.680171][ T8295] usb 10-1: Product: syz [ 618.681531][ T8295] usb 10-1: Manufacturer: syz [ 618.683047][ T8295] usb 10-1: SerialNumber: syz [ 618.686269][ T8295] usb 10-1: config 0 descriptor?? [ 618.689659][ T8295] gspca_main: spca508-2.14.0 probing 041e:4018 [ 618.895556][ T8295] gspca_spca508: reg_read err -32 [ 618.897631][ T8295] gspca_spca508: reg_read err -32 [ 618.899682][ T8295] gspca_spca508: reg_read err -32 [ 618.901678][ T8295] gspca_spca508: reg_read err -32 [ 618.904182][ T8295] gspca_spca508: reg_read err -71 [ 618.906011][ T8295] gspca_spca508: reg write: error -71 [ 618.907779][ T8295] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 618.914209][ T8295] usb 10-1: USB disconnect, device number 41 [ 619.013670][ T5846] usb 6-1: USB disconnect, device number 37 [ 619.058519][T29981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6746'. [ 619.154328][ T40] audit: type=1400 audit(2000524671.104:3590): avc: denied { map } for pid=29978 comm="syz.1.6745" path="socket:[155342]" dev="sockfs" ino=155342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 619.164044][ T40] audit: type=1400 audit(2000524671.104:3591): avc: denied { accept } for pid=29978 comm="syz.1.6745" path="socket:[155342]" dev="sockfs" ino=155342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 619.290191][T25356] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 619.300442][T29992] netlink: 'syz.9.6750': attribute type 12 has an invalid length. [ 619.304020][T29992] netlink: 'syz.9.6750': attribute type 29 has an invalid length. [ 619.307438][T29992] netlink: 148 bytes leftover after parsing attributes in process `syz.9.6750'. [ 619.311656][T29992] netlink: 'syz.9.6750': attribute type 1 has an invalid length. [ 619.315052][T29992] netlink: 'syz.9.6750': attribute type 2 has an invalid length. [ 619.319634][T29992] netlink: 11 bytes leftover after parsing attributes in process `syz.9.6750'. [ 619.450063][T25356] usb 8-1: Using ep0 maxpacket: 8 [ 619.453094][T25356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.456665][T25356] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 619.459560][T25356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.493983][T25356] usb 8-1: config 0 descriptor?? [ 619.702562][T25356] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 619.901865][T12553] usb 8-1: USB disconnect, device number 20 [ 620.097070][T30004] loop9: detected capacity change from 0 to 2640 [ 620.105652][T23163] buffer_io_error: 8 callbacks suppressed [ 620.105662][T23163] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.113006][T30004] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.115567][T30004] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.118087][T30004] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.121076][T23163] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.123883][T23163] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.126623][T23163] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.129336][T23163] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.139186][T30004] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.141849][T30004] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.144573][T30004] ldm_validate_partition_table(): Disk read failed. [ 620.146807][T30004] Dev loop9: unable to read RDB block 0 [ 620.149029][T30004] loop9: unable to read partition table [ 620.151797][T30004] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 620.178762][ T5144] ldm_validate_partition_table(): Disk read failed. [ 620.181188][ T5144] Dev loop9: unable to read RDB block 0 [ 620.184253][ T5144] loop9: unable to read partition table [ 620.680634][T25356] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 620.841753][T25356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 620.845550][T25356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.849217][T25356] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 620.853772][T25356] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 620.856581][T25356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.861362][T25356] usb 8-1: config 0 descriptor?? [ 621.080291][T30078] netlink: 'syz.1.6772': attribute type 16 has an invalid length. [ 621.269824][T25356] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 621.272169][T25356] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 621.274456][T25356] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 621.291384][T25356] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 621.359785][ T6094] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 621.405618][T30087] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6775'. [ 621.415095][T30087] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6775'. [ 621.421471][T30087] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6775'. [ 621.519727][ T6094] usb 6-1: Using ep0 maxpacket: 16 [ 621.522577][ T6094] usb 6-1: config 47 has an invalid interface number: 60 but max is 0 [ 621.525174][ T6094] usb 6-1: config 47 has no interface number 0 [ 621.527091][ T6094] usb 6-1: config 47 interface 60 has no altsetting 0 [ 621.530869][T26617] usb 8-1: USB disconnect, device number 21 [ 621.530991][ T6094] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01bd, bcdDevice=dd.dc [ 621.536495][ T6094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.539252][ T6094] usb 6-1: Product: syz [ 621.541883][ T6094] usb 6-1: Manufacturer: syz [ 621.543697][ T6094] usb 6-1: SerialNumber: syz [ 621.670794][T30093] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6777'. [ 621.739751][ T40] audit: type=1326 audit(2000524673.685:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30089 comm="syz.9.6776" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035599ce59 code=0x7ffc0000 [ 621.757243][ T40] audit: type=1326 audit(2000524673.705:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30089 comm="syz.9.6776" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f035599ce59 code=0x7ffc0000 [ 621.768831][ T40] audit: type=1326 audit(2000524673.705:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30089 comm="syz.9.6776" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035599ce59 code=0x7ffc0000 [ 621.780940][ T40] audit: type=1326 audit(2000524673.705:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30089 comm="syz.9.6776" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f035599ce59 code=0x7ffc0000 [ 621.792196][ T40] audit: type=1326 audit(2000524673.705:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30089 comm="syz.9.6776" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035599ce59 code=0x7ffc0000 [ 621.838038][ T6094] ftdi_sio 6-1:47.60: FTDI USB Serial Device converter detected [ 621.842961][ T6094] ftdi_sio ttyUSB0: unknown device type: 0xdddc [ 621.847244][T30094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30094 comm=syz.9.6776 [ 621.852098][ T6094] usb 6-1: USB disconnect, device number 38 [ 621.855892][ T6094] ftdi_sio 6-1:47.60: device disconnected [ 622.398114][T30108] lo speed is unknown, defaulting to 1000 [ 622.400886][T30108] lo speed is unknown, defaulting to 1000 [ 622.669449][T25356] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 622.839376][T25356] usb 6-1: Using ep0 maxpacket: 16 [ 622.843830][T25356] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 622.846617][T25356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.849631][T25356] usb 6-1: Product: syz [ 622.850926][T25356] usb 6-1: Manufacturer: syz [ 622.852398][T25356] usb 6-1: SerialNumber: syz [ 622.855537][T25356] usb 6-1: config 0 descriptor?? [ 622.858881][T25356] gspca_main: spca508-2.14.0 probing 041e:4018 [ 623.039982][T30116] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6793'. [ 623.045360][T30116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6793'. [ 623.092734][T25356] gspca_spca508: reg_read err -32 [ 623.094782][T25356] gspca_spca508: reg_read err -32 [ 623.096784][T25356] gspca_spca508: reg_read err -32 [ 623.098766][T25356] gspca_spca508: reg_read err -32 [ 623.101108][T25356] gspca_spca508: reg_read err -71 [ 623.103001][T25356] gspca_spca508: reg write: error -71 [ 623.104780][T25356] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 623.108730][T25356] usb 6-1: USB disconnect, device number 39 [ 624.229615][T25356] usb 10-1: new full-speed USB device number 42 using dummy_hcd [ 624.390735][T25356] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.393896][T25356] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 624.396728][T25356] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.402636][T25356] usb 10-1: New USB device found, idVendor=0499, idProduct=1030, bcdDevice= 0.40 [ 624.405431][T25356] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.407867][T25356] usb 10-1: Product: 쮮뉪럌꣝謾⽂둢㔰臽ᢑꓡ抧컸푟添ឮ釱휸뻒魷ଖ痿䧒호摲폊간뇍絷ꢊ⏞絋샴䒚⸞狩㢳큱纷ⱦ䚉ᘁ㡒ⅱ쥽▞㒓戆짏⪝堁㴯梹ั㜟녋ꯙㆭ⠆췇ᜥ얛饤쟳慢˿櫸ず䣀ꦺﰔ絘ᵨ瘝ﵮ䏞辶㲽§ⴓ쭜瓎 [ 624.416522][T25356] usb 10-1: Manufacturer: ᐇ [ 624.417988][T25356] usb 10-1: SerialNumber: ᬔ਻螼 [ 624.479220][ T5846] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 624.624901][T30149] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6800'. [ 624.632555][T25356] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.632818][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.635001][T25356] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 624.638378][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.642814][T25356] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.645452][ T5846] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.651415][ T5846] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.654258][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.662004][ T5846] usb 6-1: config 0 descriptor?? [ 624.672664][T25356] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 624.677313][T25356] usb 10-1: USB disconnect, device number 42 [ 624.688296][T23163] udevd[23163]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.900372][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 624.900384][ T40] audit: type=1400 audit(2000524676.855:3634): avc: denied { override_creds } for pid=30168 comm="syz.9.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 624.908458][ T40] audit: type=1400 audit(2000524676.855:3635): avc: denied { accept } for pid=30168 comm="syz.9.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 625.049121][ T29] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 625.073223][ T5846] hid_parser_main: 12 callbacks suppressed [ 625.073237][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.077620][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.081452][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.083731][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.086087][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.088410][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.092680][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.095271][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.097576][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.099956][ T5846] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 625.105827][T30175] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6813'. [ 625.106449][ T5846] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 625.125999][T30175] team0 (unregistering): Port device team_slave_0 removed [ 625.132146][T30175] team0 (unregistering): Port device team_slave_1 removed [ 625.137884][T30175] team0 (unregistering): Port device netdevsim1 removed [ 625.196426][T30181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6815'. [ 625.209254][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 625.218884][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.222258][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 625.225458][ T29] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.228469][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.232448][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.235187][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.239730][T30181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6815'. [ 625.341626][T26617] usb 6-1: USB disconnect, device number 40 [ 625.442328][ T29] usb 8-1: GET_CAPABILITIES returned 0 [ 625.444146][ T29] usbtmc 8-1:16.0: can't read capabilities [ 625.647186][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.652607][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.655342][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.658114][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.660872][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 625.667774][ T29] usb 8-1: USB disconnect, device number 22 [ 625.922300][ T40] audit: type=1400 audit(2000524677.875:3636): avc: denied { getopt } for pid=30217 comm="syz.1.6832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 625.946944][T30220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6833'. [ 625.985378][T30222] usb usb7: usbfs: process 30222 (syz.1.6834) did not claim interface 0 before use [ 626.069425][T30228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6837'. [ 626.203110][T30240] lo speed is unknown, defaulting to 1000 [ 626.205662][T30240] lo speed is unknown, defaulting to 1000 [ 626.588984][ T5846] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 626.740203][ T5846] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 626.745307][ T5846] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 626.748218][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.751049][ T5846] usb 6-1: Product: syz [ 626.752449][ T5846] usb 6-1: Manufacturer: syz [ 626.754001][ T5846] usb 6-1: SerialNumber: syz [ 627.255147][T30274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6855'. [ 627.562777][T30300] fuse: Bad value for 'group_id' [ 627.564698][T30300] fuse: Bad value for 'group_id' [ 627.567159][ T40] audit: type=1400 audit(2000524679.515:3637): avc: denied { remount } for pid=30299 comm="syz.5.6863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 627.737718][ T5846] usb 6-1: selecting invalid altsetting 1 [ 627.741169][ T5846] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 627.741220][ T5846] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 627.749529][ T5846] usb 6-1: USB disconnect, device number 41 [ 627.878861][T26617] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 628.031599][T26617] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 628.034278][T26617] usb 10-1: config 1 has no interface number 0 [ 628.036339][T26617] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 628.040240][T26617] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 628.043428][T26617] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.048358][T26617] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 628.051693][T26617] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.054322][T26617] usb 10-1: Product: syz [ 628.055697][T26617] usb 10-1: Manufacturer: syz [ 628.057277][T26617] usb 10-1: SerialNumber: syz [ 628.063205][T30306] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 628.206088][ T40] audit: type=1400 audit(2000524680.155:3638): avc: denied { cmd } for pid=30346 comm="syz.1.6883" path="socket:[158781]" dev="sockfs" ino=158781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 628.244541][T30351] syzkaller0: entered promiscuous mode [ 628.246198][T30351] syzkaller0: entered allmulticast mode [ 628.356855][T30358] netlink: 'syz.3.6887': attribute type 5 has an invalid length. [ 628.470641][T30306] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 628.674137][T26617] usb 10-1: Incompatible driver and firmware versions [ 628.681037][T26617] usb 10-1: USB disconnect, device number 43 [ 628.751793][T30397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6906'. [ 629.218702][T12553] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 629.323835][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 629.327193][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.329173][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.368674][T12553] usb 6-1: Using ep0 maxpacket: 32 [ 629.374108][T12553] usb 6-1: unable to get BOS descriptor or descriptor too short [ 629.384841][T12553] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.390185][T12553] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 629.393840][T12553] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.399994][T12553] usb 6-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 629.402885][T12553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.405450][T12553] usb 6-1: Product: syz [ 629.406865][T12553] usb 6-1: Manufacturer: syz [ 629.408366][T12553] usb 6-1: SerialNumber: syz [ 629.709104][T12553] usb 6-1: 0:2 : does not exist [ 629.710812][T12553] usb 6-1: unit 3 not found! [ 629.712286][T12553] usb 6-1: unit 8 not found! [ 629.735767][T12553] usb 6-1: USB disconnect, device number 42 [ 629.756994][T23163] udevd[23163]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.443938][ T40] audit: type=1400 audit(2000524682.396:3639): avc: denied { shutdown } for pid=30445 comm="syz.3.6925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 630.520851][T30460] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 630.678703][T12553] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 630.729907][T30460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6929'. [ 630.831740][T12553] usb 10-1: config 0 has no interfaces? [ 630.834028][T12553] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 630.837516][T12553] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.844158][T12553] usb 10-1: config 0 descriptor?? [ 631.050628][T30452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.053914][T30452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.080669][T12637] usb 10-1: USB disconnect, device number 44 [ 631.238973][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 631.466505][T30485] tipc: Started in network mode [ 631.468517][T30485] tipc: Node identity 4, cluster identity 4711 [ 631.470379][T30485] tipc: Node number set to 4 [ 631.507595][ T40] audit: type=1400 audit(2000524683.456:3640): avc: denied { map } for pid=30486 comm="syz.9.6942" path="socket:[159007]" dev="sockfs" ino=159007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 631.649695][ T29] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 631.808303][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 631.811248][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.814183][ T29] usb 8-1: config 0 has no interfaces? [ 631.815782][ T29] usb 8-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 631.818405][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.822151][ T29] usb 8-1: config 0 descriptor?? [ 632.091869][T25356] usb 8-1: USB disconnect, device number 23 [ 632.355824][ T40] audit: type=1326 audit(2000524684.306:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30504 comm="syz.5.6948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc31d9ce59 code=0x7ffc0000 [ 632.366651][ T40] audit: type=1326 audit(2000524684.306:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30504 comm="syz.5.6948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc31d9ce59 code=0x7ffc0000 [ 632.377610][ T40] audit: type=1326 audit(2000524684.306:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30504 comm="syz.5.6948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc31d9ce59 code=0x7ffc0000 [ 632.385003][ T40] audit: type=1326 audit(2000524684.316:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30504 comm="syz.5.6948" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc31d9ce59 code=0x7ffc0000 [ 632.392785][ T40] audit: type=1326 audit(2000524684.316:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30504 comm="syz.5.6948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc31d9ce59 code=0x7ffc0000 [ 632.400586][ T40] audit: type=1326 audit(2000524684.316:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30504 comm="syz.5.6948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc31d9ce59 code=0x7ffc0000 [ 632.408266][ T40] audit: type=1326 audit(2000524684.316:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30504 comm="syz.5.6948" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc31d9ce59 code=0x7ffc0000 [ 632.415061][ T40] audit: type=1326 audit(2000524684.316:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30504 comm="syz.5.6948" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcc31d9ce59 code=0x7ffc0000 [ 632.589805][T30523] netlink: 'syz.9.6956': attribute type 6 has an invalid length. [ 632.592879][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6956'. [ 632.744601][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6962'. [ 632.747938][T30538] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6962'. [ 632.771578][T30540] program syz.3.6963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.777515][T30538] veth5: entered promiscuous mode [ 633.012714][T30561] input: syz1 as /devices/virtual/input/input55 [ 633.283661][T30582] netlink: 'syz.3.6983': attribute type 1 has an invalid length. [ 633.286255][T30582] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6983'. [ 633.292292][T30582] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.294675][T30582] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.364611][T30593] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6988'. [ 633.442526][T30605] lo speed is unknown, defaulting to 1000 [ 633.445047][T30605] lo speed is unknown, defaulting to 1000 [ 633.486473][T30610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6994'. [ 633.517205][T30612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6997'. [ 633.728133][ T29] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 633.879381][ T29] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 633.882262][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.885702][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.890309][ T29] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 633.893294][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.895939][ T29] usb 8-1: Product: syz [ 633.897230][ T29] usb 8-1: Manufacturer: syz [ 633.898768][ T29] usb 8-1: SerialNumber: syz [ 633.988069][ T6094] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 634.109427][ T29] usb 8-1: 0:2 : does not exist [ 634.125276][ T29] usb 8-1: USB disconnect, device number 24 [ 634.160263][ T6094] usb 10-1: Using ep0 maxpacket: 32 [ 634.164313][ T6094] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 634.168093][ T6094] usb 10-1: config 0 has no interface number 0 [ 634.172879][ T6094] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 634.176738][ T6094] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.181275][ T6094] usb 10-1: Product: syz [ 634.183271][ T6094] usb 10-1: Manufacturer: syz [ 634.185264][ T6094] usb 10-1: SerialNumber: syz [ 634.189553][ T6094] usb 10-1: config 0 descriptor?? [ 634.596841][ T6094] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 634.600365][ T6094] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 634.682444][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7009'. [ 634.686004][T30639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7009'. [ 634.995230][ T2320] IPVS: starting estimator thread 0... [ 635.098183][T30652] IPVS: using max 26 ests per chain, 62400 per kthread [ 635.406756][T30682] lo speed is unknown, defaulting to 1000 [ 635.409400][T30682] lo speed is unknown, defaulting to 1000 [ 635.718669][T12637] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 635.877848][T12637] usb 6-1: Using ep0 maxpacket: 16 [ 635.880887][T12637] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 635.885585][T12637] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 635.885631][T30625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7002'. [ 635.888571][T12637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.893832][T12637] usb 6-1: Product: syz [ 635.895172][T12637] usb 6-1: Manufacturer: syz [ 635.896639][T12637] usb 6-1: SerialNumber: syz [ 635.899695][T12637] usb 6-1: config 0 descriptor?? [ 635.903831][T12637] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 635.907034][T12637] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 636.093847][ T6094] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 636.101646][ T6094] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 636.107299][ T6094] usb 10-1: USB disconnect, device number 45 [ 636.438951][T30709] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 636.523378][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 636.523389][ T40] audit: type=1400 audit(2000524688.476:3657): avc: denied { ioctl } for pid=30706 comm="syz.3.7034" path="socket:[161267]" dev="sockfs" ino=161267 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 636.539102][T12637] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 636.614354][T12637] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 636.628803][T12637] em28xx 6-1:0.0: board has no eeprom [ 636.708020][T12637] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 636.710926][T12637] em28xx 6-1:0.0: dvb set to bulk mode. [ 636.713310][T12635] em28xx 6-1:0.0: Binding DVB extension [ 636.715390][T30726] pim6reg: entered allmulticast mode [ 636.721410][T30726] pim6reg: left allmulticast mode [ 636.723192][T12637] usb 6-1: USB disconnect, device number 43 [ 636.728577][T12637] em28xx 6-1:0.0: Disconnecting em28xx [ 636.753991][T12635] em28xx 6-1:0.0: Registering input extension [ 636.757921][T12637] em28xx 6-1:0.0: Closing input extension [ 636.780607][T12637] em28xx 6-1:0.0: Freeing device [ 636.907059][T30741] fuse: fd is not a fuse device [ 637.022234][T30754] x_tables: duplicate entry at hook 2 [ 637.026576][ T40] audit: type=1400 audit(2000524688.976:3658): avc: denied { transfer } for pid=30752 comm="syz.5.7054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 637.032778][T30754] binder: 30752:30754 ioctl c0306201 200000000680 returned -14 [ 637.387159][T30798] sctp: [Deprecated]: syz.3.7069 (pid 30798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 637.387159][T30798] Use struct sctp_sack_info instead [ 637.495855][T30807] warn_alloc: 1 callbacks suppressed [ 637.495870][T30807] syz.5.7071: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 637.507301][T30807] CPU: 1 UID: 0 PID: 30807 Comm: syz.5.7071 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.507329][T30807] Tainted: [L]=SOFTLOCKUP [ 637.507335][T30807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 637.507346][T30807] Call Trace: [ 637.507351][T30807] [ 637.507358][T30807] dump_stack_lvl+0x100/0x190 [ 637.507393][T30807] warn_alloc.cold+0x95/0x1c1 [ 637.507413][T30807] ? __pfx_warn_alloc+0x10/0x10 [ 637.507442][T30807] ? __lock_acquire+0x4a5/0x2630 [ 637.507463][T30807] ? avc_has_extended_perms+0x33a/0x1080 [ 637.507499][T30807] __vmalloc_node_range_noprof+0x136c/0x1630 [ 637.507544][T30807] ? rcu_is_watching+0x12/0xc0 [ 637.507567][T30807] ? trace_contention_end+0x122/0x170 [ 637.507588][T30807] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 637.507620][T30807] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 637.507642][T30807] ? find_held_lock+0x2b/0x80 [ 637.507662][T30807] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 637.507681][T30807] ? __pfx___mutex_lock+0x10/0x10 [ 637.507715][T30807] ? futex_wait+0x11e/0x370 [ 637.507736][T30807] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 637.507765][T30807] __vmalloc_node_noprof+0xad/0xf0 [ 637.507787][T30807] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 637.507814][T30807] dvb_dvr_do_ioctl+0x15d/0x270 [ 637.507842][T30807] dvb_usercopy+0x167/0x340 [ 637.507863][T30807] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 637.507887][T30807] ? __pfx_dvb_usercopy+0x10/0x10 [ 637.507919][T30807] ? selinux_file_ioctl+0x13b/0x290 [ 637.507943][T30807] ? selinux_file_ioctl+0xb6/0x290 [ 637.507968][T30807] dvb_dvr_ioctl+0x29/0x40 [ 637.507990][T30807] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 637.508012][T30807] __x64_sys_ioctl+0x18e/0x210 [ 637.508032][T30807] do_syscall_64+0x115/0x870 [ 637.508053][T30807] ? clear_bhb_loop+0x40/0x90 [ 637.508074][T30807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.508091][T30807] RIP: 0033:0x7fcc31d9ce59 [ 637.508107][T30807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.508124][T30807] RSP: 002b:00007fcc32d3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.508141][T30807] RAX: ffffffffffffffda RBX: 00007fcc32015fa0 RCX: 00007fcc31d9ce59 [ 637.508152][T30807] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 637.508161][T30807] RBP: 00007fcc31e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 637.508171][T30807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.508181][T30807] R13: 00007fcc32016038 R14: 00007fcc32015fa0 R15: 00007ffcaae04398 [ 637.508205][T30807] [ 637.599643][ T6094] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 637.605004][T30807] Mem-Info: [ 637.606083][T30807] active_anon:40133 inactive_anon:5181 isolated_anon:0 [ 637.606083][T30807] active_file:21209 inactive_file:672 isolated_file:0 [ 637.606083][T30807] unevictable:1768 dirty:158 writeback:0 [ 637.606083][T30807] slab_reclaimable:8928 slab_unreclaimable:105102 [ 637.606083][T30807] mapped:26405 shmem:35080 pagetables:4464 [ 637.606083][T30807] sec_pagetables:316 bounce:0 [ 637.606083][T30807] kernel_misc_reclaimable:0 [ 637.606083][T30807] free:411110 free_pcp:6323 free_cma:0 [ 637.619550][T30807] Node 0 active_anon:159556kB inactive_anon:20724kB active_file:84728kB inactive_file:2560kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44180kB dirty:632kB writeback:0kB shmem:135888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18848kB pagetables:16928kB sec_pagetables:1264kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 637.636750][T30807] Node 1 active_anon:976kB inactive_anon:0kB active_file:108kB inactive_file:128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:61440kB dirty:0kB writeback:0kB shmem:4432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 637.657628][T30807] Node 0 DMA free:7124kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.668356][T30807] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 637.670734][T30807] Node 0 DMA32 free:144008kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:159584kB inactive_anon:20724kB active_file:84728kB inactive_file:2560kB unevictable:3536kB writepending:660kB zspages:0kB present:2080628kB managed:1261088kB mlocked:0kB bounce:0kB free_pcp:18748kB local_pcp:2592kB free_cma:0kB [ 637.682576][T30807] lowmem_reserve[]: 0 0 0 0 0 [ 637.684114][T30807] Node 1 Normal free:1493144kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:976kB inactive_anon:0kB active_file:108kB inactive_file:128kB unevictable:3536kB writepending:0kB zspages:4328kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:6144kB local_pcp:0kB free_cma:0kB [ 637.697652][T30807] lowmem_reserve[]: 0 0 0 0 0 [ 637.699702][T30807] Node 0 DMA: 3*4kB (U) 1*8kB (U) 2*16kB (U) 3*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 0*4096kB = 7124kB [ 637.705938][T30807] Node 0 DMA32: 2496*4kB (UME) 4382*8kB (UME) 2970*16kB (UME) 290*32kB (UME) 98*64kB (UME) 65*128kB (UME) 39*256kB (UME) 24*512kB (UME) 5*1024kB (M) 0*2048kB 0*4096kB = 143824kB [ 637.715196][T30807] Node 1 Normal: 64*4kB (UME) 363*8kB (UME) 376*16kB (UME) 334*32kB (UME) 318*64kB (UME) 289*128kB (UME) 271*256kB (UME) 228*512kB (UME) 175*1024kB (UM) 27*2048kB (UME) 243*4096kB (UM) = 1493144kB [ 637.723914][T30807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.729167][T30807] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 637.732992][T30807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.736726][T30807] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB [ 637.740841][T30807] 57177 total pagecache pages [ 637.742863][T30807] 253 pages in swap cache [ 637.744656][T30807] Free swap = 112284kB [ 637.746245][T30807] Total swap = 124996kB [ 637.748889][T30807] 1048443 pages RAM [ 637.750833][T30807] 0 pages HighMem/MovableOnly [ 637.752900][T30807] 283860 pages reserved [ 637.754649][T30807] 0 pages cma reserved [ 637.759376][ T6094] usb 6-1: config 253 has an invalid interface number: 130 but max is 0 [ 637.761697][ T6094] usb 6-1: config 253 has no interface number 0 [ 637.763511][ T6094] usb 6-1: config 253 interface 130 has no altsetting 0 [ 637.767221][ T6094] usb 6-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 637.770633][ T6094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.772935][ T6094] usb 6-1: Product: syz [ 637.774179][ T6094] usb 6-1: Manufacturer: syz [ 637.775813][ T6094] usb 6-1: SerialNumber: syz [ 637.987400][T30780] syz_tun: entered allmulticast mode [ 637.990539][T30779] syz_tun: left allmulticast mode [ 637.996630][ T6094] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 638.018541][ T6094] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 638.020793][ T6094] dib0700: firmware download failed at 7 with -22 [ 638.024410][ T6094] usb 6-1: USB disconnect, device number 44 [ 638.590843][ T40] audit: type=1400 audit(2000524690.547:3659): avc: denied { append } for pid=30844 comm="syz.1.7084" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 638.707947][ T6094] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 638.847441][ T29] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 638.877639][ T6094] usb 10-1: Using ep0 maxpacket: 16 [ 638.882022][ T6094] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 638.885601][ T6094] usb 10-1: config 0 has no interface number 0 [ 638.888396][ T6094] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.894006][ T6094] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.898399][ T6094] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 638.902199][ T6094] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.913171][ T6094] usb 10-1: config 0 descriptor?? [ 639.010083][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 639.018704][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 639.027689][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 639.030753][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 639.033759][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.054567][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 639.060052][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.278161][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 639.279988][ T29] usbtmc 6-1:16.0: can't read capabilities [ 639.484764][ T29] usb 6-1: USB disconnect, device number 45 [ 639.532470][ T6094] uclogic 0003:28BD:0071.0017: pen parameters not found [ 639.535458][ T6094] uclogic 0003:28BD:0071.0017: interface is invalid, ignoring [ 640.057762][ T34] usb 10-1: USB disconnect, device number 46 [ 640.062679][T30870] net_ratelimit: 12 callbacks suppressed [ 640.062690][T30870] netlink: set zone limit has 4 unknown bytes [ 640.233379][ T40] audit: type=1400 audit(2000524692.187:3660): avc: denied { listen } for pid=30893 comm="syz.1.7106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.379496][T30904] netlink: 'syz.1.7110': attribute type 3 has an invalid length. [ 640.762389][T30938] __nla_validate_parse: 1 callbacks suppressed [ 640.762401][T30938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7123'. [ 640.771404][T30938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7123'. [ 640.840063][T30924] 8021q: VLANs not supported on ipvlan0 [ 640.982508][T30957] program syz.1.7130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 641.199320][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 641.216988][T23805] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 641.226288][T23805] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 641.232543][T22102] ip6_tunnel: K xmit: Local address not yet configured! [ 641.235089][T22102] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.237969][T23805] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 641.243034][T23805] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 641.270252][T12083] [ 641.271051][T12083] ============================================ [ 641.273001][T12083] WARNING: possible recursive locking detected [ 641.274907][T12083] syzkaller #0 Tainted: G L [ 641.276983][T12083] -------------------------------------------- [ 641.278916][T12083] kworker/2:7/12083 is trying to acquire lock: [ 641.280845][T12083] ffff8880331f8558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 641.283800][T12083] [ 641.283800][T12083] but task is already holding lock: [ 641.285974][T12083] ffff88802ff16558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 641.288952][T12083] [ 641.288952][T12083] other info that might help us debug this: [ 641.291455][T12083] Possible unsafe locking scenario: [ 641.291455][T12083] [ 641.293754][T12083] CPU0 [ 641.294806][T12083] ---- [ 641.295845][T12083] lock(&qdisc_xmit_lock_key#4); [ 641.297427][T12083] lock(&qdisc_xmit_lock_key#4); [ 641.299031][T12083] [ 641.299031][T12083] *** DEADLOCK *** [ 641.299031][T12083] [ 641.302304][T12083] May be due to missing lock nesting notation [ 641.302304][T12083] [ 641.305636][T12083] 13 locks held by kworker/2:7/12083: [ 641.307821][T12083] #0: ffff888036ea4540 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 641.311500][T12083] #1: ffffc9000cb7fd08 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 641.315651][T12083] #2: ffff8880566c0530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x42/0xc10 [ 641.318470][T12083] #3: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1b5/0xec0 [ 641.321248][T12083] #4: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x135/0xa60 [ 641.323897][T12083] #5: ffffffff8e7e5500 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4950 [ 641.326770][T12083] #6: ffff88802ddad228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x24ef/0x4950 [ 641.330667][T12083] #7: ffff88802ff16558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x3b5/0xc60 [ 641.333769][T12083] #8: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: ip_output+0xb3/0xc10 [ 641.336437][T12083] #9: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x356/0x2400 [ 641.339565][T12083] #10: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x26/0x2e0 [ 641.342915][T12083] #11: ffffffff8e7e5500 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x296/0x4950 [ 641.346748][T12083] #12: ffff88803c4ea228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x24ef/0x4950 [ 641.351598][T12083] [ 641.351598][T12083] stack backtrace: [ 641.353965][T12083] CPU: 2 UID: 0 PID: 12083 Comm: kworker/2:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.353987][T12083] Tainted: [L]=SOFTLOCKUP [ 641.353992][T12083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.354004][T12083] Workqueue: mld mld_ifc_work [ 641.354026][T12083] Call Trace: [ 641.354033][T12083] [ 641.354042][T12083] dump_stack_lvl+0x100/0x190 [ 641.354063][T12083] print_deadlock_bug.cold+0xbd/0xca [ 641.354089][T12083] __lock_acquire+0x12bb/0x2630 [ 641.354107][T12083] ? kmalloc_reserve+0x148/0x350 [ 641.354120][T12083] lock_acquire+0x1b1/0x370 [ 641.354133][T12083] ? sch_direct_xmit+0x3b5/0xc60 [ 641.354145][T12083] _raw_spin_lock+0x2e/0x40 [ 641.354167][T12083] ? sch_direct_xmit+0x3b5/0xc60 [ 641.354177][T12083] sch_direct_xmit+0x3b5/0xc60 [ 641.354188][T12083] ? lock_acquire+0x1b1/0x370 [ 641.354200][T12083] ? __pfx_sch_direct_xmit+0x10/0x10 [ 641.354211][T12083] ? do_raw_spin_lock+0x1b0/0x260 [ 641.354228][T12083] __dev_queue_xmit+0x2794/0x4950 [ 641.354244][T12083] ? __pfx_arpt_do_table+0x10/0x10 [ 641.354256][T12083] ? __pfx___dev_queue_xmit+0x10/0x10 [ 641.354270][T12083] ? lock_acquire+0x100/0x370 [ 641.354287][T12083] ? find_held_lock+0x2b/0x80 [ 641.354296][T12083] ? nf_hook.constprop.0+0x2f0/0x760 [ 641.354312][T12083] ? nf_hook.constprop.0+0x2f0/0x760 [ 641.354331][T12083] ? nf_hook.constprop.0+0x2fa/0x760 [ 641.354351][T12083] ? __pfx_arp_xmit_finish+0x10/0x10 [ 641.354377][T12083] arp_xmit+0x106/0x2e0 [ 641.354398][T12083] arp_send_dst+0x200/0x280 [ 641.354420][T12083] arp_solicit+0x672/0x1070 [ 641.354442][T12083] ? rcu_is_watching+0x12/0xc0 [ 641.354461][T12083] ? __pfx_arp_solicit+0x10/0x10 [ 641.354477][T12083] ? neigh_probe+0x72/0x110 [ 641.354494][T12083] ? __pfx_arp_solicit+0x10/0x10 [ 641.354509][T12083] neigh_probe+0xce/0x110 [ 641.354525][T12083] __neigh_event_send+0xacf/0x13f0 [ 641.354538][T12083] neigh_resolve_output+0x550/0x8f0 [ 641.354551][T12083] ? __pfx____neigh_create+0x10/0x10 [ 641.354565][T12083] ip_finish_output2+0x851/0x2400 [ 641.354581][T12083] ? __pfx_ip_finish_output2+0x10/0x10 [ 641.354595][T12083] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 641.354609][T12083] ? nf_nat_ipv4_out+0xb2/0x510 [ 641.354619][T12083] ? find_held_lock+0x2b/0x80 [ 641.354628][T12083] __ip_finish_output.part.0+0x444/0x6f0 [ 641.354644][T12083] ip_output+0x39b/0xc10 [ 641.354657][T12083] ? __pfx_ip_output+0x10/0x10 [ 641.354670][T12083] ? __pfx_get_random_u32+0x10/0x10 [ 641.354692][T12083] ? __pfx_ip_finish_output+0x10/0x10 [ 641.354707][T12083] ? __pfx_ip_output+0x10/0x10 [ 641.354721][T12083] ip_local_out+0x193/0x1f0 [ 641.354735][T12083] iptunnel_xmit+0x722/0xd20 [ 641.354753][T12083] ip_tunnel_xmit+0x1b85/0x3200 [ 641.354770][T12083] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 641.354788][T12083] ? unwind_next_frame+0x3be/0x2090 [ 641.354804][T12083] ? unwind_next_frame+0x3be/0x2090 [ 641.354821][T12083] __gre_xmit+0x820/0xb20 [ 641.354834][T12083] ? __pfx___gre_xmit+0x10/0x10 [ 641.354846][T12083] ? register_lock_class+0x40/0x560 [ 641.354860][T12083] ? netif_skb_features+0x9cf/0x13f0 [ 641.354874][T12083] erspan_xmit+0x55a/0x1ec0 [ 641.354886][T12083] ? look_up_lock_class+0x55/0x120 [ 641.354902][T12083] ? __pfx_erspan_xmit+0x10/0x10 [ 641.354916][T12083] dev_hard_start_xmit+0x128/0x7a0 [ 641.354931][T12083] sch_direct_xmit+0x1b2/0xc60 [ 641.354942][T12083] ? lock_acquire+0x1b1/0x370 [ 641.354955][T12083] ? __pfx_sch_direct_xmit+0x10/0x10 [ 641.354965][T12083] ? do_raw_spin_lock+0x1b0/0x260 [ 641.354982][T12083] __dev_queue_xmit+0x2794/0x4950 [ 641.354997][T12083] ? look_up_lock_class+0x55/0x120 [ 641.355012][T12083] ? __pfx___dev_queue_xmit+0x10/0x10 [ 641.355027][T12083] ? __lock_acquire+0x4a5/0x2630 [ 641.355040][T12083] ? do_raw_spin_lock+0x128/0x260 [ 641.355058][T12083] ? __asan_memcpy+0x3c/0x60 [ 641.355075][T12083] ? eth_header+0x120/0x1f0 [ 641.355086][T12083] neigh_resolve_output+0x51f/0x8f0 [ 641.355100][T12083] ip6_finish_output2+0xb0f/0x1ce0 [ 641.355118][T12083] __ip6_finish_output+0x357/0xdf0 [ 641.355134][T12083] ip6_output+0x2aa/0xa60 [ 641.355149][T12083] ? __pfx_ip6_output+0x10/0x10 [ 641.355164][T12083] ? __pfx_ip6_finish_output+0x10/0x10 [ 641.355179][T12083] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 641.355220][T12083] ? NF_HOOK.constprop.0+0x277/0x5a0 [ 641.355237][T12083] ? __pfx_ip6_output+0x10/0x10 [ 641.355251][T12083] NF_HOOK.constprop.0+0x115/0x5a0 [ 641.355271][T12083] ? __pfx_NF_HOOK.constprop.0+0x10/0x10 [ 641.355301][T12083] ? __pfx_dst_output+0x10/0x10 [ 641.355326][T12083] mld_sendpack+0x8f7/0xec0 [ 641.355348][T12083] ? __pfx_mld_sendpack+0x10/0x10 [ 641.355367][T12083] mld_ifc_work+0x75a/0xc10 [ 641.355383][T12083] ? rcu_is_watching+0x12/0xc0 [ 641.355400][T12083] process_one_work+0xa0e/0x1980 [ 641.355416][T12083] ? __pfx_process_one_work+0x10/0x10 [ 641.355432][T12083] ? __pfx_mld_ifc_work+0x10/0x10 [ 641.355449][T12083] worker_thread+0x5ef/0xe50 [ 641.355464][T12083] ? __pfx_worker_thread+0x10/0x10 [ 641.355477][T12083] ? kthread+0x13a/0x450 [ 641.355489][T12083] ? __pfx_worker_thread+0x10/0x10 [ 641.355502][T12083] kthread+0x370/0x450 [ 641.355514][T12083] ? __pfx_kthread+0x10/0x10 [ 641.355526][T12083] ret_from_fork+0x72b/0xd50 [ 641.355541][T12083] ? __pfx_ret_from_fork+0x10/0x10 [ 641.355554][T12083] ? __switch_to+0x800/0x1100 [ 641.355570][T12083] ? __pfx_kthread+0x10/0x10 [ 641.355582][T12083] ret_from_fork_asm+0x1a/0x30 [ 641.355601][T12083] [ 641.508405][ C3] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.156720][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 645.396739][ C2] ip6_tunnel: K xmit: Local address not yet configured!