last executing test programs: 7m51.415136201s ago: executing program 3 (id=476): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010100}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x11}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, 0x0, 0x40040) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) 7m50.380004196s ago: executing program 3 (id=478): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) ptrace(0x10, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) syz_pidfd_open(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000005, 0x30}, 0xc) r4 = dup(r3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x34000) 7m47.205421777s ago: executing program 3 (id=479): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dt2815\x00', [0x8002f, 0x80, 0x10002, 0x4, 0x1, 0xcc7, 0x80000008, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x2, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x488, 0x6, 0x4000000, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x800008, 0x4, 0x401, 0xfffffffd]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8000000000015) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x34}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 7m33.229394574s ago: executing program 3 (id=502): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000005, 0x30}, 0xc) r1 = dup(r0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="1d", 0x1}], 0x1}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x34000) 7m31.538109452s ago: executing program 3 (id=505): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x18, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe}}, 0x18}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) ptrace(0x10, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) syz_pidfd_open(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0xf8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40000005, 0x30}, 0xc) r4 = dup(r3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x8}}, 0x34000) 7m28.473611171s ago: executing program 3 (id=506): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0xce, r2}, 0x38) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 7m12.305929142s ago: executing program 32 (id=506): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0xce, r2}, 0x38) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 18.44947724s ago: executing program 0 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioprio_set$pid(0x1, 0x0, 0x0) getpid() r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_vhci(0x0, 0x40) r3 = fsopen(&(0x7f0000000080)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioprio_get$pid(0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400000000004beafd0d36020a841a000000230f00000000a2bc5603", 0x20}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) 16.363314574s ago: executing program 4 (id=1206): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000409000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000409000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) brk(0x200000ff8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x1e4, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xff9c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1d3}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x86}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x581}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x3}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x80080) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 14.700774573s ago: executing program 4 (id=1208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) open_tree(r4, &(0x7f0000000640)='\x00', 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xeeee0000, 0x1000, 0x9, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x7}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x41000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) 14.689534598s ago: executing program 0 (id=1209): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000380), 0x917) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x100040) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000015, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) capget(&(0x7f0000000180), 0x0) r5 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-@\x00', 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0x5, 0x1, 0x5}) keyctl$clear(0x7, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r7, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, 0x0, 0x0, 0x0}) 13.373677518s ago: executing program 0 (id=1211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332cf83b4cb3783030303030303030303030"]) madvise(&(0x7f0000c2a000/0x2000)=nil, 0x2000, 0x17) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x900, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYRESHEX=r5]) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000001480)) r6 = syz_open_dev$loop(&(0x7f0000000040), 0xff, 0x1) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r7, 0x4004e502, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) 13.366583188s ago: executing program 4 (id=1212): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001adb1348f7b971f78d0104a299c7f836b4fa7d3609467ff52339f44405bf7d2c7ffeb4ea61db4ab6e77505c026eebe08515a8c115652d9c127fb027f1c8a3fb41522c2af65e1e189b8d4f2f56547955b38968a61f935a39e34f861864c5239acb481c259dca40e9fb2a6cfc4ef992fb8250583e709a58d38c9d08676d4cf28082ac0fe5"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x2400c4e4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000010280)=@ethtool_per_queue_op={0x4b, 0xf, [0xf, 0x38e, 0x1, 0x8, 0x6, 0xe, 0x8000, 0x9, 0xe, 0xd2, 0x0, 0x720, 0xfffffc00, 0x7, 0xffffff81, 0x8, 0x6, 0x5, 0xef02, 0x2, 0x44d, 0x6, 0xc2b, 0xfffffff8, 0x7, 0x4, 0x2, 0x1631e2fc, 0x1, 0x6, 0x0, 0xfffffff8, 0x4, 0xfffffff8, 0x5, 0x0, 0x5, 0x1, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xcfa, 0x1ef, 0x2, 0x7, 0x236, 0x3, 0x1000, 0x8, 0x3, 0x8, 0x7707, 0x5, 0x101, 0x6, 0x9, 0x1, 0x401, 0x0, 0xf, 0x1000, 0xc120, 0x5, 0xdf, 0x87ae, 0x0, 0x1, 0x7, 0x1, 0x9, 0x3, 0x3, 0x9, 0x9, 0x3, 0x1, 0x8, 0x5847, 0x5, 0x2, 0x100, 0x8, 0xfffffffc, 0x8, 0xb, 0x10000, 0x101, 0xffffffff, 0xf3, 0xfffffff8, 0x2, 0x9, 0x80, 0xe, 0x7, 0x9, 0xffffff24, 0x44d, 0x8000, 0x2, 0x4, 0x3, 0x2, 0xb5, 0x3af, 0x2, 0x800, 0xffc, 0x67, 0x3, 0x9, 0x0, 0x0, 0x0, 0x7fc, 0xba58, 0xe, 0x8, 0x10001, 0x3, 0xc, 0x4, 0x8, 0x9, 0x2], "254cd9ffe8c44b69c9dbcf7145a16dd490871278a30085417b574b698395a0148fa2fb1f45aa55c9f8b30e0929ec129eb4a50b58679e3979cefded17b06be655a636c89b9d621c3dae77"}}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) unshare(0x20000080) r10 = signalfd(r6, &(0x7f0000010500), 0xfffffdf6) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000100c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 11.193188257s ago: executing program 5 (id=1216): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x448c4}, 0x20000051) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x4, 0x0, &(0x7f00000001c0)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/153}, 0x20) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0xc, 0x40000, 0x8, 0x7, 0x746f, 0x48, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x8002}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x4000810) 9.962785448s ago: executing program 5 (id=1221): gettid() r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5c}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) close(r0) timer_create(0x1, 0x0, &(0x7f0000000000)) 8.580219099s ago: executing program 2 (id=1222): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d", 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0x11, 0x2, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) io_setup(0xeb0, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000340)) io_setup(0x1fe, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000600)) io_setup(0x4, &(0x7f00000004c0)) sendto$inet(r1, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x6a, 0x1, 0x0, &(0x7f0000000640)) 8.437921925s ago: executing program 1 (id=1223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040) process_mrelease(0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x5, [{0xffffff03, 0x81}, {0x16, 0x7}, {0x4, 0xd4}, {0x6, 0x10}, {0x4, 0xfffffffe}]}}) bind$tipc(r2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbf8, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4044005) 7.541144769s ago: executing program 5 (id=1224): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f000061b000/0x4000)=nil, 0x4000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_clone3(&(0x7f00000001c0)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000c14010026bd7000fbdbdf2508003d00050000000800110000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"}) syz_emit_ethernet(0x1c1, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x601, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet6(0xa, 0x3, 0x5) 7.2513487s ago: executing program 2 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x06O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcR\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2E\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x89V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xda\xb5\xba\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x80\x00\x00\x00!\x16Tu\xe3I\f\x171~\xdf\xe6\xc82\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\x85\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa7\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x9be\xe4\x00\x00\x00\x80\xf1\xacQ\xb9O\xd4\x14\xa1\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83nk\xd3\xc9/m\x1aT\x8f\'\xef\xa6D\xab\xcfs\x97.\xf2\xf4wK`\xa9S\x98>0\x92\xd9\xb8\xb2\x17,\xd6\xf8\n\x93\xc1\x10qk.\xf6\x9bY\xe6\x92\xef\xa2o\\\x9b\xeb\x93v\x11B\xf6', 0x6) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fcdbdf251400000008000300", @ANYRES32=0x0, @ANYBLOB="a0c382f301f99d202c7bff9a121e701392ab8fc7f33e0a51b2bc700c80"], 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x8008804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc008aeba, 0x0) fcntl$addseals(r0, 0x409, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0xa) mount$fuse(0x0, 0x0, 0x0, 0x120809, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYBLOB="7b47888aceba6d13577b0264855128b17d82d971a7a6ca9d4b79c8ad78ddf918335ebda9cf19401ed765abc74a64f262d19daab80d6a851986898796847108ac76f9c7781661742b36d2afd2f26fc8ef89701d4178c83483a2005e591d734515bee8cdc1e9d3f2b62bffc31c449894ccc92fac57f9a7d8fccb50b05e6663b6940eacc235fffd78131a8f71eb38e99735c64f67c401fcc79a6353b27a48c0202ddd1c4af1cd75655cce45a1facb7111e7987d9f44dc7ce687c46d344983d3c00f0969747256e953637fc5ca625dd8d652"]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r4, 0x0, 0x7400, 0x400, &(0x7f00000007c0)) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="33fa2bbd7000fcdbdf250700000008000300", @ANYRES32=r7, @ANYBLOB="140004006361696630000000000000000000000008000500090000000a00e8"], 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) mkdirat(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0/file0\x00') setpgid(0x0, 0x0) setpgid(0x0, 0x0) 7.156158448s ago: executing program 0 (id=1226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x400}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8894}, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.753699327s ago: executing program 4 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) getpid() ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) syz_emit_vhci(0x0, 0x40) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioprio_get$pid(0x2, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a5a440000000010109023b000101000000090400001202060000052406000005240000000d240f010000000000000000"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400000000004beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e0020030002000000000000000003000058009100"/72, 0x48}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 6.339172036s ago: executing program 2 (id=1228): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0xa, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x2081) r5 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x20000000004) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) 6.254065437s ago: executing program 1 (id=1229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) r4 = io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x4, 0x20001, 0x2d6}) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x5, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000019100)={0x8, 0x0, {0xffffffffffffffff, @usage, 0x0, 0x5, 0x0, 0x200, 0x9, 0x81f6, 0x40, @struct={0x7, 0x3}, 0x20, 0x4, [0x4, 0x1, 0x1, 0x86, 0xfffffffffffff0f7, 0x80]}, {0x2, @struct={0x7f, 0x9}, 0x0, 0x3, 0x8, 0x5b7, 0xee79, 0x6, 0x2, @struct={0x5, 0x9}, 0x40, 0x7, [0x2, 0xfffffffffffffffb, 0xd0c, 0x1, 0x7, 0xe]}, {0xdcf, @struct={0x5, 0x101}, 0x0, 0x0, 0x5, 0x7fffffffffffffff, 0x6, 0x2, 0xe8, @struct={0x8, 0x3}, 0x10001, 0x5, [0x2, 0x0, 0x6, 0xec, 0x800, 0x7f]}, {0x3, 0x3, 0x100}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000019500)={r8, 0x3, 0x1, [0x80000000, 0x9, 0x2, 0xfffffffffffffff5, 0xfffffffffffffffe], [0x7f03, 0x2, 0x5, 0x1, 0x7, 0x3, 0x0, 0x5, 0x485, 0xd2, 0x3, 0xd02e, 0x9, 0x0, 0x3, 0x7, 0x80, 0xfffffffffffffff9, 0x7, 0x3, 0x1185c00, 0x9, 0x8, 0x8000000000000001, 0x3, 0x99e2, 0x5, 0x5, 0x2, 0x8000, 0x0, 0x1d94, 0xc, 0x2, 0x7f, 0xff, 0x3, 0x9, 0x1, 0x12e60d8f, 0xd2b, 0xf, 0xf25e, 0x5, 0x2, 0xff, 0x1000, 0xfffffffffffffffe, 0x0, 0x2, 0x8000000000000001, 0xe7, 0x5, 0x9, 0xffffffffffff2c66, 0x100000000, 0x9, 0x7ff, 0x4, 0x9, 0xff, 0x401, 0x600000000000000, 0x6, 0x100000000, 0x0, 0x8, 0x0, 0x4, 0x100000000, 0x9b, 0x80000001, 0xe, 0x0, 0xa1d, 0x3, 0x2, 0xff, 0x3, 0x3, 0x8000000000000000, 0x9d0, 0xfff, 0x1, 0x1, 0x5, 0x7fff, 0x72, 0x81, 0x5, 0x800, 0x2, 0x7ff, 0x4, 0x5, 0x7fff, 0x4, 0xff, 0x3, 0x7, 0x5, 0x7, 0x34, 0x8000000000000000, 0x1, 0xffffffff, 0x3, 0x8, 0xfffffffffffffff7, 0x100, 0x8, 0x5, 0x9, 0x5, 0x9, 0xfffffffffffffff8, 0xdb73, 0x1c0, 0xa, 0x6, 0x9]}) r9 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r9, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) socket$inet(0x10, 0x3, 0x0) 5.844226908s ago: executing program 5 (id=1230): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000409000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000409000/0x2000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) brk(0x200000ff8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) io_uring_setup(0xd71, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r8 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x1e4, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xff9c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1d3}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x86}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x581}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x3}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x80080) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000280)=ANY=[]) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 4.715831339s ago: executing program 0 (id=1231): open(&(0x7f00000000c0)='./file0\x00', 0x140, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0x8, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x0, 0x54f0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x40001) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x601dd09f, 0x0, 0x3, 0x6c4ba42, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x7cdd141a, 0x3, 0x7f, 0x1, 0x0, 0x4, 0x0, 0x5, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0xd, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x9e7a, 0xc, 0x1, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x20000000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r7, r1, 0x25, 0x4, @void}, 0x10) 4.715447905s ago: executing program 1 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) iopl(0x3) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0x80802, 0x0) sendfile(r0, r0, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000080)) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000004c0)={0x28, 0x4, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = gettid() sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008080) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4.714753643s ago: executing program 2 (id=1241): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/152, 0x1a0, 0x98, 0x0, 0x9}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) unshare(0x8040480) unshare(0x2a020480) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10000000}, 0x240080c0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) 3.058957539s ago: executing program 1 (id=1233): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80800) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x3000) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r9 = shmat(0xffffffffffffffff, &(0x7f0000af6000/0x2000)=nil, 0x2000) shmdt(r9) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x2}, {}, {}, 0x70bd2b, 0x0, 0x2, 0x1, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) shutdown(r1, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 3.053768263s ago: executing program 5 (id=1234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@md0, 0x0, &(0x7f0000000300)='./file0\x00') sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000bc0)={0x42c, 0x3f4, 0x300, 0x70bd25, 0x25dfdbfc, {0x5, 0x1, 0xf, [0x3, 0x401, 0x9, 0x7da, 0x203, 0x3, 0xed34, 0x1000, 0x2b7, 0x4, 0x5, 0x4, 0x4, 0x2, 0x2506, 0x3, 0x8, 0xc5c, 0xb, 0x5, 0xfffffffb, 0x9, 0x5, 0xf, 0x10001, 0x401, 0xffffff80, 0x241, 0x8, 0x8, 0x2, 0x8, 0x7, 0x1, 0x1, 0x9, 0x1ff, 0x6, 0x1, 0x8, 0x6, 0x9, 0x7, 0x6e4, 0x2, 0x40000000, 0x7, 0x9, 0x10, 0x7, 0x4, 0x4, 0x6, 0xa82a, 0x5, 0x400, 0x4, 0x6, 0x116, 0x0, 0x8, 0x2, 0x9, 0x8], [0xebaa, 0x8, 0x3, 0x1, 0xa, 0x6, 0x2, 0x2, 0x5, 0x4, 0x9, 0xfffffffd, 0x1, 0x9, 0x401, 0x5, 0x79ed6eaa, 0x73, 0xfffffffa, 0x3, 0x9419, 0x5, 0x5, 0x80000001, 0x1, 0x10, 0x7bbe, 0x3, 0x0, 0xfffffffe, 0x3, 0x5f9, 0xe5a, 0x2, 0x3fe000, 0x9, 0x4, 0x5, 0x7fff, 0x6, 0x2, 0xb, 0x2, 0x401, 0x3, 0x80, 0x9, 0x6e0, 0x9, 0xe, 0x1, 0x9, 0xde, 0xd0e4, 0x1000, 0x8001000, 0xf1b, 0x401, 0x2, 0x1, 0xd, 0x6, 0x7, 0x40], [0x2, 0x5, 0x670, 0x9, 0x5, 0x0, 0xffffffff, 0x8, 0x8, 0x4, 0x5, 0xd, 0xeaa, 0xe, 0x9, 0xffffffa4, 0x8, 0xca93, 0xf8000000, 0x0, 0xde, 0x8, 0x10, 0x3, 0x6, 0x4, 0x3, 0x7fff, 0x6, 0x7, 0x5, 0x800, 0x4, 0x6, 0x5, 0x1, 0x5, 0x4, 0x6, 0x4, 0x5, 0xbe, 0x10, 0x9, 0x5, 0x4, 0x100003ff, 0x9, 0x1, 0x100, 0xd, 0xe58d, 0x3, 0x1, 0x5, 0x2, 0x3, 0x2, 0x30, 0x2d0defeb, 0x7, 0xffffff80, 0x3], [0x524bac62, 0x400, 0x8001, 0x10, 0x4, 0xfffffffd, 0x2, 0x73, 0x80, 0x200, 0x3ff, 0xffffffff, 0x700000, 0x40, 0x12, 0xf1e3, 0x7, 0xe0000, 0x8, 0x32c8, 0x4cec, 0x3, 0x7f, 0xffffffff, 0x6, 0xfffffffc, 0x8, 0x2, 0xfffffffd, 0x4, 0x9, 0x9, 0x0, 0x0, 0xad1, 0x8000, 0x0, 0x7, 0x0, 0x5757, 0x4, 0xf, 0x46, 0x4, 0x4, 0x100, 0x81, 0x1, 0x0, 0x1, 0x7fff, 0x1ff, 0x3, 0x4, 0x3, 0x6, 0x40, 0x4, 0xb786, 0xffff, 0xe, 0x1ff], 0x9, ['\x00', '\x00', 'smaps\x00', '\x00']}, ["", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000000), 0x4) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) getsockopt$sock_buf(r6, 0x1, 0x19, 0x0, &(0x7f0000003080)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000280)={0x7, 'dummy0\x00', {0x5}, 0x5}) 2.459204055s ago: executing program 4 (id=1235): r0 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000420040014001400746561"], 0x3c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000640)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}, 0x4008080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x20080, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x4004000) 2.447471462s ago: executing program 2 (id=1236): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "fafac0348886ec6ca005b2d292649e4dbd42a3446049d9952cc199677d836942efd66f9bf786ec9cb4995e7d321d39b373e0fbadb55c66bcb7119c0074afe6bc", 0x19}, 0x48, 0xfffffffffffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a50000000060a0b04000000000000000002000000300004802c0001800a000100696e6e653e519faf1c0002800800024000000084080003400000000708000140000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', 'syz', 0x20, 0xffb}, 0x2b, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000083f558c570616e00004280080015008618050005001700fe00000004001200"], 0x48}}, 0x0) keyctl$get_persistent(0x16, 0x0, r1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'macvlan0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "2be9192e134934371f20fc664918e3e09c78f7ab3012e2397d43a41dd59111f2", "4d208a0bf892aceff916fc5c2655406702f03088c42eb5b2adb7719df8cf4d1e", "aacae6fe743cd3b8a6f6e21161ca85731e264f6655fec2dfff30f06c2458c26c", "f8a5a6d6884854e17058000d6deafe1190eef34064d94a036c653ff3ec76f16d", "3d358b4fbb139e74d533b3ee1c5d0a8394e27d9eee171fe899dbd36a499335d1", "238d42bf6be2711c19d25cfc", 0x0, 0x5, 0x5, 0x9, 0x4}}) 752.453977ms ago: executing program 5 (id=1237): syz_open_dev$sndctrl(0x0, 0x0, 0x8801) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0xa400, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x27) syz_usb_connect$hid(0x6, 0x5d, 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x1, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0xdf, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x240141, 0x0) creat(0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) mknod$loop(0x0, 0x800, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) creat(0x0, 0x175) creat(0x0, 0x0) 618.003969ms ago: executing program 1 (id=1238): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0xfffffffe, 0x400, 0xc00}}, 0x120) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/149, 0x95}, {&(0x7f0000000340)=""/134, 0x86}, {0x0}, {0x0}], 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), r4, 0x0, 0x1, 0x4}}, 0x20) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x735}, 0x14}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000005c0)=ANY=[@ANYBLOB="662c72f11364d3fb21082e36f1f8c3599996a600b4a079fd1c565a17cd7f11fd39cf86120f466d95ac021b360d14edd5e548b34ecd0d2a0d18641045dcb764e8bef7e2e931d4226f0858bba21b7c33f5d28fbe22eae611ade6ac5670558d9a0b64e077da2ac5208f18a27fdeada418891cecb78416087758510ccf7dd7b1ad2840936099339648ceeb4ae244e9048b52691963fd598f18bf7032bf5cf4a6c3ac267cab9285e6da5a89c7430a15cdbe0fdbc9da403bf6d06be006211d53953ccab90afcc78f6731e3f1831689acded7604dcf737c3d62356dc93ddfca5377cc3089940980b4ed072aa2fe3968df", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r5, 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r9, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004054) getdents64(r8, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 565.910734ms ago: executing program 0 (id=1239): prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000f77000/0x4000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) close(r2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f00000001c0)={0x20071026, r0}, &(0x7f0000000280)={0x0, 0x9, 0x3, 0x0, 0x4, 0x3}) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c3c9ed0177a7ebc4675544401f81bfb004ad7fbc3a82b84720e6654737ec5ae7908c2761c1db2c622ba62a5a3f015896d9f03756a6c71304e4b3ddea352da5e875d91d63a00521891a45ef4d5d16aa6adf58d174977ca0589d3da2bb1eadb663247"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) 539.612771ms ago: executing program 4 (id=1240): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) io_uring_enter(0xffffffffffffffff, 0x6eb1, 0x30a, 0x45, &(0x7f0000000100)={[0x14]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r3, 0x639fe759bb2d0663, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf252d000000080003007e1b608997fd8240ebb40251084a5602178b9f07c3f4d956f95cb86c1fe150d5d965d7bf6855acdb67f5817577c10ba80f67de289c95e5ec704a0000000000fe083d88e400351998e5", @ANYRES32=r4, @ANYRES32=r3], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="280000001200010a0000000000006224bb81e90513752b00"/40], 0x28}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) r8 = syz_io_uring_setup(0x754f, &(0x7f0000000440)={0x0, 0xe2b, 0x80, 0x0, 0x1a4}, &(0x7f00000004c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r7, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0) listen(r6, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040054, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty}, 0x1c) close_range(r6, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 62.741851ms ago: executing program 2 (id=1242): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x5) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000380)='\x01\x00\x00\x00ce\xec\x11(\x9f\xad\x0f~4\x1d\xbcs\x02t\xa5>\xf8\xfcT8\xad\x8e\xa9\xd9\x9e\x9a-\xe9-\x17\xbd\xfe\xec8\xf6\xdc\xdfg\x18\a\xf8V\x8cVC1\xbe\xef`,\x8c\xaf\xda', &(0x7f0000000300)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\b\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8dH\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xe49\xf7o$e&1\x02\x00\x00\x00\xab\xfcKs\x06,\xd2\xc5^]\xd9\x13*\xb4\xe9\xab\x91\x15cXP\x85W\x84{Z\x0f\x88\b\x9dVsU\xe2$^\x88\xa8\xd1rT\xbci%/\xea', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) userfaultfd(0x1) syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/hci\x00') setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000500), 0x3) close(0x3) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 0s ago: executing program 1 (id=1252): r0 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000420040014001400746561"], 0x3c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000640)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}, 0x4008080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x20080, 0x3, 0xf, 0xd, 0xf6, 0x4, 0x10, 0x9d, 0x4, [0x1, 0x4, 0x1, 0x468, 0x80, 0x3, 0x9, 0x80]}}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)='k', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)}}], 0x2, 0x4004000) kernel console output (not intermixed with test programs): h [ 422.419759][ T8727] netlink: 5 bytes leftover after parsing attributes in process `syz.2.546'. [ 422.682849][ T8730] netlink: 56 bytes leftover after parsing attributes in process `syz.2.546'. [ 423.293863][ T8727] gretap0: entered promiscuous mode [ 423.301504][ T8727] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 423.309627][ T8727] netlink: 3 bytes leftover after parsing attributes in process `syz.2.546'. [ 425.149410][ T5805] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 425.149452][ T5805] Bluetooth: hci4: connection err: -111 [ 427.994212][ T6073] hsr_slave_0: left promiscuous mode [ 428.018665][ T6073] hsr_slave_1: left promiscuous mode [ 430.212034][ T5805] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 430.212077][ T5805] Bluetooth: hci2: connection err: -111 [ 432.350566][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.392639][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.420493][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.449717][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.476633][ T6073] batman_adv: batadv0: Interface deactivated: macvtap1 [ 432.486688][ T6073] batman_adv: batadv0: Removing interface: macvtap1 [ 432.515239][ T6073] batman_adv: batadv0: Interface deactivated: macvtap2 [ 432.528337][ T6073] batman_adv: batadv0: Removing interface: macvtap2 [ 432.558973][ T6073] batman_adv: batadv0: Interface deactivated: macvtap3 [ 432.577560][ T6073] batman_adv: batadv0: Removing interface: macvtap3 [ 432.597975][ T6073] batman_adv: batadv0: Interface deactivated: macvtap4 [ 432.615358][ T6073] batman_adv: batadv0: Removing interface: macvtap4 [ 432.671152][ T6073] batadv_slave_0: left promiscuous mode [ 432.711805][ T6073] veth1_macvtap: left promiscuous mode [ 432.717367][ T6073] veth0_macvtap: left promiscuous mode [ 432.744566][ T6073] veth1_vlan: left promiscuous mode [ 432.749932][ T6073] veth0_vlan: left promiscuous mode [ 436.070213][ T8800] netlink: 5 bytes leftover after parsing attributes in process `syz.4.559'. [ 436.316202][ T8803] netlink: 56 bytes leftover after parsing attributes in process `syz.4.559'. [ 436.457370][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 436.473138][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 436.620780][ T8567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.640980][ T8567] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.679286][ T8567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 436.691056][ T8567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.721950][ T8800] gretap0: entered promiscuous mode [ 436.729612][ T8800] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 436.737449][ T8800] netlink: 3 bytes leftover after parsing attributes in process `syz.4.559'. [ 436.769546][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.776711][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.892818][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.899954][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.058409][ T5805] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 438.058561][ T5805] Bluetooth: hci3: connection err: -111 [ 440.280675][ T8567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.335044][ T29] audit: type=1326 audit(1772512926.549:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 440.439589][ T29] audit: type=1326 audit(1772512926.549:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 440.487671][ T6073] IPVS: stop unused estimator thread 0... [ 440.543194][ T29] audit: type=1326 audit(1772512926.755:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 440.732974][ T29] audit: type=1326 audit(1772512926.755:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 440.911180][ T29] audit: type=1326 audit(1772512926.783:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 440.970329][ T29] audit: type=1326 audit(1772512926.783:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 441.089477][ T29] audit: type=1326 audit(1772512926.783:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 441.180376][ T29] audit: type=1326 audit(1772512926.792:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 441.291082][ T29] audit: type=1326 audit(1772512926.792:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 441.388079][ T29] audit: type=1326 audit(1772512926.792:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8804 comm="syz.0.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 441.755745][ T8871] tipc: Enabling of bearer rejected, failed to enable media [ 442.759899][ T8895] siw: device registration error -23 [ 442.834783][ T8896] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 443.187023][ T8567] veth0_vlan: entered promiscuous mode [ 443.322370][ T8567] veth1_vlan: entered promiscuous mode [ 443.523543][ T8567] veth0_macvtap: entered promiscuous mode [ 443.554984][ T8567] veth1_macvtap: entered promiscuous mode [ 443.600563][ T5883] libceph: connect (1)[c::]:6789 error -13 [ 443.637197][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 443.681397][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.724040][ T8567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.781178][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.798007][ T8906] ceph: No mds server is up or the cluster is laggy [ 443.839443][ T8919] netlink: 56 bytes leftover after parsing attributes in process `syz.0.574'. [ 443.850780][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.907426][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.937680][ T5957] libceph: connect (1)[c::]:6789 error -13 [ 443.956014][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.000615][ T5957] libceph: mon0 (1)[c::]:6789 connect error [ 445.236807][ T5805] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 445.236851][ T5805] Bluetooth: hci3: connection err: -111 [ 446.351611][ T6073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.598340][ T6073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.858816][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.881046][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.971502][ T8934] Malformed UNC in devname [ 446.971502][ T8934] [ 446.978224][ T8934] CIFS: VFS: Malformed UNC in devname [ 447.050888][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 447.050918][ T29] audit: type=1400 audit(1772512932.826:624): avc: denied { mounton } for pid=8567 comm="syz-executor" path="/root/syzkaller.ewhlTD/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 447.369560][ T29] audit: type=1400 audit(1772512933.097:625): avc: denied { mounton } for pid=8567 comm="syz-executor" path="/root/syzkaller.ewhlTD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 447.490678][ T29] audit: type=1400 audit(1772512933.097:626): avc: denied { mounton } for pid=8567 comm="syz-executor" path="/root/syzkaller.ewhlTD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 447.540887][ T29] audit: type=1400 audit(1772512933.106:627): avc: denied { mounton } for pid=8567 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 448.430608][ T29] audit: type=1400 audit(1772512934.126:628): avc: denied { module_load } for pid=8937 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 452.024136][ T29] audit: type=1326 audit(1772512937.100:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46c19c799 code=0x7ffc0000 [ 452.112165][ T29] audit: type=1326 audit(1772512937.100:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46c19c799 code=0x7ffc0000 [ 453.449916][ T29] audit: type=1326 audit(1772512937.110:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8961 comm="syz.5.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa46c19c799 code=0x7ffc0000 [ 454.042541][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 454.737813][ T8992] team0: Port device batadv1 added [ 455.278282][ T29] audit: type=1326 audit(1772512940.533:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 455.312997][ T29] audit: type=1326 audit(1772512940.533:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 455.342797][ T29] audit: type=1326 audit(1772512940.533:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 455.370560][ T29] audit: type=1326 audit(1772512940.533:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 455.453493][ T29] audit: type=1326 audit(1772512940.589:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 456.871245][ T9033] netlink: 'syz.4.588': attribute type 1 has an invalid length. [ 457.004975][ T29] audit: type=1400 audit(1772512942.123:637): avc: denied { bind } for pid=9020 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 457.695195][ T9054] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 457.854516][ T29] audit: type=1400 audit(1772512942.947:638): avc: denied { create } for pid=9051 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 457.901341][ T9056] bond2: (slave gretap1): making interface the new active one [ 457.914526][ T9056] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 457.963251][ T9059] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 457.989800][ T9059] Error validating options; rc = [-22] [ 458.166654][ T29] audit: type=1400 audit(1772512942.965:639): avc: denied { write } for pid=9051 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 458.648656][ T9072] netlink: 'syz.5.592': attribute type 21 has an invalid length. [ 458.672958][ T9072] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.736614][ T792] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 458.967352][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 459.003145][ T792] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 459.080872][ T792] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 459.136932][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.166788][ T792] usb 3-1: Product: syz [ 459.178767][ T792] usb 3-1: Manufacturer: syz [ 459.194335][ T792] usb 3-1: SerialNumber: syz [ 459.925771][ T9089] sit1: entered allmulticast mode [ 460.368079][ T5957] usb 3-1: USB disconnect, device number 11 [ 460.470018][ T9103] overlayfs: failed to clone upperpath [ 461.387141][ T29] audit: type=1400 audit(1772512946.249:640): avc: denied { ioctl } for pid=9107 comm="syz.2.599" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 461.710524][ T9121] overlayfs: failed to clone upperpath [ 462.147491][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.156580][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.725123][ T29] audit: type=1400 audit(1772512947.502:641): avc: denied { append } for pid=9130 comm="syz.0.602" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 462.748460][ T9131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.602'. [ 462.835146][ T29] audit: type=1400 audit(1772512947.502:642): avc: denied { map } for pid=9130 comm="syz.0.602" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 463.322435][ T29] audit: type=1400 audit(1772512947.857:643): avc: denied { accept } for pid=9130 comm="syz.0.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 463.429318][ T9146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.605'. [ 463.946275][ T9150] syz_tun: entered allmulticast mode [ 463.977933][ T29] audit: type=1400 audit(1772512948.185:644): avc: denied { getopt } for pid=9138 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 464.063787][ T9150] syzkaller1: entered promiscuous mode [ 464.078127][ T6578] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 464.088601][ T9150] syzkaller1: entered allmulticast mode [ 464.300107][ T6578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.554576][ T6578] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 464.566509][ T6578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 464.580076][ T6578] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 464.606315][ T6578] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 464.622908][ T6578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 464.633626][ T6578] usb 3-1: Product: syz [ 464.637798][ T6578] usb 3-1: Manufacturer: syz [ 464.642649][ T6578] usb 3-1: SerialNumber: syz [ 464.660629][ T6578] usb 3-1: config 0 descriptor?? [ 464.672556][ T6578] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 464.680205][ T6578] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 464.689254][ T6578] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 465.374395][ T9148] syz_tun: left allmulticast mode [ 465.736521][ T29] audit: type=1400 audit(1772512950.327:645): avc: denied { ioctl } for pid=9168 comm="syz.0.609" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 466.713141][ T5869] usb 3-1: USB disconnect, device number 12 [ 466.944129][ T9188] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 467.031320][ T9190] netlink: 40 bytes leftover after parsing attributes in process `syz.5.613'. [ 467.499837][ T9195] netlink: 'syz.5.613': attribute type 8 has an invalid length. [ 467.935543][ T9194] ALSA: mixer_oss: invalid OSS volume '' [ 470.087200][ T29] audit: type=1400 audit(1772512954.330:646): avc: denied { map } for pid=9208 comm="syz.4.618" path="socket:[21818]" dev="sockfs" ino=21818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 471.343078][ T29] audit: type=1400 audit(1772512955.565:647): avc: denied { create } for pid=9233 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 471.363074][ T5940] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 471.507555][ T29] audit: type=1400 audit(1772512955.715:648): avc: denied { read } for pid=9233 comm="syz.5.622" path="socket:[20624]" dev="sockfs" ino=20624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 471.583744][ T5940] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 471.622954][ T5940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 471.710285][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 471.753330][ T5940] usb 1-1: SerialNumber: syz [ 472.094153][ T5940] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 472.161085][ T5940] usb-storage 1-1:1.0: USB Mass Storage device detected [ 472.346321][ T5940] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 472.557478][ T5940] usb 1-1: USB disconnect, device number 11 [ 474.289414][ T29] audit: type=1400 audit(1772512958.325:649): avc: denied { setattr } for pid=9254 comm="syz.2.621" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 474.299960][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 476.478574][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 476.662264][ T5883] usb 6-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 476.703139][ T5883] usb 6-1: config 1 interface 0 has no altsetting 0 [ 476.779830][ T5883] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 476.829048][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.861225][ T5883] usb 6-1: Product: syz [ 476.865910][ T5883] usb 6-1: Manufacturer: syz [ 476.893476][ T5883] usb 6-1: SerialNumber: syz [ 476.928517][ T9270] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 478.864792][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 479.255261][ T5883] usb 6-1: USB disconnect, device number 2 [ 479.517183][ T9288] team0: Port device team_slave_0 removed [ 479.633249][ T9294] overlayfs: failed to clone upperpath [ 480.027295][ T29] audit: type=1400 audit(1772512963.226:650): avc: denied { create } for pid=9290 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 480.062427][ T29] audit: type=1400 audit(1772512963.235:651): avc: denied { sys_admin } for pid=9290 comm="syz.5.634" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 480.290180][ T9302] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 480.758710][ T9312] netlink: 'syz.1.629': attribute type 1 has an invalid length. [ 480.971284][ T9307] team0: Port device gtp0 added [ 481.695576][ T9322] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 481.931225][ T9322] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 482.096471][ T9320] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 482.104657][ T9320] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 482.113162][ T9320] overlayfs: d_ino too big (15, ino=9223372036854775912, xinobits=3) [ 482.121521][ T9320] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 482.130386][ T9320] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 482.139353][ T9320] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 482.147720][ T9320] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 482.156422][ T9320] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 482.164927][ T9320] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 482.173884][ T9320] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 482.239284][ T29] audit: type=1400 audit(1772512965.125:652): avc: denied { mount } for pid=9317 comm="syz.5.638" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 482.372854][ T29] audit: type=1400 audit(1772512965.172:653): avc: denied { mounton } for pid=9317 comm="syz.5.638" path="/15/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 482.417042][ T29] audit: type=1400 audit(1772512965.836:654): avc: denied { unmount } for pid=8567 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 483.224103][ T29] audit: type=1400 audit(1772512966.229:655): avc: denied { setopt } for pid=9326 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 483.424617][ T9335] bridge0: entered promiscuous mode [ 483.429902][ T9335] bridge0: entered allmulticast mode [ 483.972658][ T29] audit: type=1400 audit(1772512966.257:656): avc: denied { connect } for pid=9326 comm="syz.0.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 484.043694][ T9339] raw_sendmsg: syz.4.643 forgot to set AF_INET. Fix it! [ 485.725906][ T9350] tipc: Enabling of bearer rejected, failed to enable media [ 486.867093][ T6578] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 487.257682][ T6578] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 487.799574][ T6578] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 487.892662][ T6578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 487.950164][ T6578] usb 5-1: SerialNumber: syz [ 488.295773][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.303469][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.335103][ T9396] bridge0: entered allmulticast mode [ 488.411700][ T9399] bridge_slave_1: left allmulticast mode [ 488.417699][ T9399] bridge_slave_1: left promiscuous mode [ 488.454561][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.938542][ T9404] fuse: Unknown parameter 'user_i00000000000000000000' [ 489.275671][ T792] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 489.676347][ T9399] bridge_slave_0: left allmulticast mode [ 489.686795][ T9399] bridge_slave_0: left promiscuous mode [ 489.693605][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.844220][ T792] usb 6-1: Using ep0 maxpacket: 32 [ 489.849585][ T6578] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 489.883179][ T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.899070][ T6578] usb-storage 5-1:1.0: USB Mass Storage device detected [ 489.945794][ T792] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 489.967260][ T6578] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 491.103282][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.194159][ T6578] usb 5-1: USB disconnect, device number 12 [ 491.207336][ T792] usb 6-1: config 0 descriptor?? [ 491.235441][ T792] hub 6-1:0.0: bad descriptor, ignoring hub [ 491.358591][ T792] hub 6-1:0.0: probe with driver hub failed with error -5 [ 491.364297][ T9426] autofs: Unknown parameter 'fd00000000000000000000' [ 491.712754][ T792] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 491.858730][ T29] audit: type=1400 audit(1772512974.741:657): avc: denied { bind } for pid=9430 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.045604][ T6578] usb 6-1: USB disconnect, device number 3 [ 492.131942][ T29] audit: type=1400 audit(1772512975.003:658): avc: denied { append } for pid=9437 comm="syz.5.656" name="sg0" dev="devtmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 493.911146][ T9453] netlink: 132 bytes leftover after parsing attributes in process `syz.4.654'. [ 494.799665][ T9467] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 494.909391][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.660'. [ 495.283439][ T6578] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 495.492175][ T6578] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 495.786818][ T6578] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 495.821842][ T6578] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 495.841166][ T6578] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 495.862210][ T6578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.881511][ T6578] usb 1-1: Product: syz [ 495.885943][ T6578] usb 1-1: Manufacturer: syz [ 495.890608][ T6578] usb 1-1: SerialNumber: syz [ 495.922560][ T6578] usb 1-1: config 0 descriptor?? [ 496.109010][ T9466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 496.149285][ T5950] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 496.343384][ T5950] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 496.365911][ T10] usb 1-1: USB disconnect, device number 12 [ 496.403205][ T5950] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 496.430418][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 496.448245][ T5950] usb 3-1: SerialNumber: syz [ 496.801471][ T9487] overlayfs: failed to clone upperpath [ 500.115590][ T6578] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 500.362996][ T9514] FAT-fs (loop3): unable to read boot sector [ 500.375522][ T29] audit: type=1400 audit(1772512982.710:659): avc: denied { mounton } for pid=9497 comm="syz.1.667" path="/154/file0" dev="tmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 500.399675][ T5950] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 500.451075][ T5950] usb-storage 3-1:1.0: USB Mass Storage device detected [ 500.512739][ T6578] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.522923][ T6578] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 500.534440][ T5950] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 500.549292][ T6578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.613868][ T29] audit: type=1400 audit(1772512982.944:660): avc: denied { mounton } for pid=9517 comm="syz.5.671" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 500.807536][ T5950] usb 3-1: USB disconnect, device number 13 [ 500.934953][ T1558] kernel read not supported for file /701/net/arp (pid: 1558 comm: kworker/0:2) [ 500.961052][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.670'. [ 500.991076][ T6578] usb 5-1: config 0 descriptor?? [ 501.291730][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 501.639016][ T6578] usb 5-1: USB disconnect, device number 13 [ 501.989159][ T9540] comedi comedi0: Minor 2147483647 is invalid! [ 503.049718][ T9554] xt_HMARK: spi-set and port-set can't be combined [ 503.985926][ T29] audit: type=1400 audit(1772512986.059:661): avc: denied { audit_write } for pid=9562 comm="syz.4.680" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 504.308982][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 504.334603][ T9569] team0: Device batadv1 is of different type [ 506.787525][ T9590] overlayfs: failed to resolve './file2': -2 [ 506.873230][ T9591] vivid-000: ================= START STATUS ================= [ 506.882160][ T9591] vivid-000: Radio HW Seek Mode: Bounded [ 506.888210][ T9591] vivid-000: Radio Programmable HW Seek: false [ 506.894764][ T9591] vivid-000: RDS Rx I/O Mode: Block I/O [ 506.900422][ T9591] vivid-000: Generate RBDS Instead of RDS: false [ 506.906968][ T9591] vivid-000: RDS Reception: true [ 506.912027][ T9591] vivid-000: RDS Program Type: 0 inactive [ 506.918130][ T9591] vivid-000: RDS PS Name: inactive [ 506.923588][ T9591] vivid-000: RDS Radio Text: inactive [ 506.929355][ T9591] vivid-000: RDS Traffic Announcement: false inactive [ 506.936545][ T9591] vivid-000: RDS Traffic Program: false inactive [ 506.943064][ T9591] vivid-000: RDS Music: false inactive [ 506.948737][ T9591] vivid-000: ================== END STATUS ================== [ 508.457980][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 508.800706][ T9608] comedi comedi0: Minor 2147483647 is invalid! [ 509.215368][ T9604] nbd: socks must be embedded in a SOCK_ITEM attr [ 510.034855][ T8797] udevd[8797]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 510.531140][ T8796] udevd[8796]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 511.985746][ T1558] Process accounting resumed [ 512.858725][ T1558] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 513.059926][ T1558] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 513.134482][ T1558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.171446][ T1558] usb 3-1: Product: syz [ 513.183682][ T1558] usb 3-1: Manufacturer: syz [ 513.203213][ T1558] usb 3-1: SerialNumber: syz [ 514.822042][ T1558] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 515.077851][ T1558] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 515.101573][ T1558] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 515.596160][ T1558] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 515.612642][ T1558] usb 3-1: USB disconnect, device number 14 [ 516.346818][ T9665] comedi comedi0: Minor 2147483647 is invalid! [ 516.784751][ T9667] netlink: 'syz.1.700': attribute type 21 has an invalid length. [ 516.809219][ T9667] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.812671][ T9664] batman_adv: batadv0: Adding interface: macvtap3 [ 516.830245][ T9664] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.860174][ T9664] batman_adv: batadv0: Interface activated: macvtap3 [ 517.791659][ T9677] tipc: Started in network mode [ 517.812007][ T9677] tipc: Node identity e20ac9ecd9d1, cluster identity 4711 [ 517.837745][ T9677] tipc: Enabled bearer , priority 0 [ 518.015879][ T9676] tipc: Resetting bearer [ 518.345584][ T29] audit: type=1400 audit(1772512999.351:662): avc: denied { write } for pid=9678 comm="syz.0.697" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 519.176896][ T5940] tipc: Node number set to 1004259820 [ 519.735375][ T29] audit: type=1400 audit(1772513000.810:663): avc: denied { name_bind } for pid=9682 comm="syz.2.703" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 520.277348][ T9673] tipc: Disabling bearer [ 520.911259][ T9710] overlayfs: failed to clone upperpath [ 521.421995][ T5883] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 521.604150][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 521.618635][ T29] audit: type=1326 audit(1772513002.597:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 521.676556][ T29] audit: type=1326 audit(1772513002.634:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 521.748230][ T5883] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 521.766551][ T29] audit: type=1326 audit(1772513002.634:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 521.796068][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.833917][ T29] audit: type=1326 audit(1772513002.634:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 521.865942][ T5883] usb 5-1: Product: syz [ 521.870113][ T5883] usb 5-1: Manufacturer: syz [ 521.894292][ T5883] usb 5-1: SerialNumber: syz [ 521.904731][ T9720] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 521.989705][ T5883] usb 5-1: config 0 descriptor?? [ 522.043632][ T29] audit: type=1326 audit(1772513002.644:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 522.068599][ T29] audit: type=1326 audit(1772513002.644:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 522.711684][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.822455][ T29] audit: type=1326 audit(1772513002.644:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 522.865121][ T29] audit: type=1326 audit(1772513002.644:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.0.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0fe79c799 code=0x7ffc0000 [ 522.893990][ T10] libceph: connect (1)[c::]:6789 error -101 [ 522.908225][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.947626][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 522.998297][ T9724] ceph: No mds server is up or the cluster is laggy [ 523.236033][ T5883] airspy 5-1:0.0: Board ID: 4f [ 523.267559][ T5883] airspy 5-1:0.0: Firmware version: O [ 523.371765][ T9712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.445219][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.557386][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.652264][ T9714] binder: 9713:9714 ioctl c0306201 0 returned -14 [ 523.700195][ T5883] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 523.771330][ T9738] batadv_slave_0: entered promiscuous mode [ 523.781042][ T5883] airspy 5-1:0.0: Registered as swradio24 [ 523.793291][ T5883] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 523.829061][ T9738] batman_adv: batadv0: Adding interface: macvtap1 [ 523.836661][ T9738] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.951817][ T5883] usb 5-1: USB disconnect, device number 14 [ 523.958704][ T9738] batman_adv: batadv0: Interface activated: macvtap1 [ 525.826096][ T9752] netlink: 5 bytes leftover after parsing attributes in process `syz.1.715'. [ 525.836475][ T9752] gretap0: entered promiscuous mode [ 525.852503][ T9752] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 525.860306][ T9752] netlink: 3 bytes leftover after parsing attributes in process `syz.1.715'. [ 526.209386][ T9751] netlink: 56 bytes leftover after parsing attributes in process `syz.1.715'. [ 526.748524][ T792] hid-generic 0000:008B:0000.0002: unknown main item tag 0x0 [ 526.906981][ T5805] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 527.744972][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.257641][ T9762] loop7: detected capacity change from 0 to 1 [ 528.430091][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.603045][ T792] hid-generic 0000:008B:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 528.773165][ T9771] fido_id[9771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 528.802993][ T9773] overlayfs: failed to clone upperpath [ 528.937551][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 529.177162][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 529.177194][ T29] audit: type=1326 audit(1772513009.641:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 529.557408][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 529.607380][ T29] audit: type=1326 audit(1772513009.641:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 529.653788][ T29] audit: type=1326 audit(1772513009.650:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.2.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 529.705590][ T9776] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 530.890978][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 531.067073][ T5805] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 531.924101][ T29] audit: type=1400 audit(1772513012.222:687): avc: denied { setattr } for pid=9781 comm="syz.1.722" name="NETLINK" dev="sockfs" ino=22564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 533.547408][ T29] audit: type=1326 audit(1772513013.747:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 533.619876][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 533.628974][ T9805] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 533.638354][ T29] audit: type=1326 audit(1772513013.747:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 533.673343][ T5950] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 533.703339][ T29] audit: type=1326 audit(1772513013.747:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 533.747310][ T29] audit: type=1326 audit(1772513013.747:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 533.791052][ T24] usb 1-1: device descriptor read/64, error -71 [ 533.794607][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 533.852412][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 533.876539][ T10] usb 6-1: can't read configurations, error -71 [ 533.882933][ T29] audit: type=1326 audit(1772513013.747:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 533.908701][ T5950] usb 5-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 533.961055][ T29] audit: type=1326 audit(1772513013.756:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 533.986922][ T5950] usb 5-1: config 1 interface 0 has no altsetting 0 [ 534.017758][ T5950] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 534.047713][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.069345][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 534.105609][ T5950] usb 5-1: Product: syz [ 534.109785][ T5950] usb 5-1: Manufacturer: syz [ 534.139485][ T5950] usb 5-1: SerialNumber: syz [ 534.169422][ T9809] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 534.250756][ T24] usb 1-1: device descriptor read/64, error -71 [ 534.372043][ T24] usb usb1-port1: attempt power cycle [ 534.753303][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 534.785911][ T24] usb 1-1: device descriptor read/8, error -71 [ 534.848264][ T9814] batadv_slave_0: entered promiscuous mode [ 534.857734][ T9814] batman_adv: batadv0: Adding interface: macvtap1 [ 534.864584][ T9814] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 534.890413][ T9814] batman_adv: batadv0: Interface activated: macvtap1 [ 535.028437][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 535.042294][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 535.064787][ T24] usb 1-1: device descriptor read/8, error -71 [ 535.181356][ T24] usb usb1-port1: unable to enumerate USB device [ 535.581769][ T5950] usb 5-1: USB disconnect, device number 15 [ 536.966035][ T51] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 536.966079][ T51] Bluetooth: hci4: connection err: -111 [ 537.029416][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 537.249595][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 537.459660][ T9832] can0: slcan on ttyS3. [ 537.539471][ T9832] ubi31: attaching mtd0 [ 537.562834][ T9832] ubi31: scanning is finished [ 537.567633][ T9832] ubi31: empty MTD device detected [ 537.761803][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.772730][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.866541][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 537.866556][ T29] audit: type=1400 audit(1772513017.367:696): avc: denied { create } for pid=9828 comm="syz.5.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 537.911077][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 538.130456][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.161869][ T10] usb 3-1: config 0 descriptor?? [ 538.183093][ T29] audit: type=1400 audit(1772513017.470:697): avc: denied { ioctl } for pid=9828 comm="syz.5.733" path="socket:[23644]" dev="sockfs" ino=23644 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 538.254362][ T9832] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 538.261999][ T9832] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 538.269274][ T9832] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 538.276424][ T9832] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 538.283918][ T9832] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 538.290754][ T9832] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 538.298813][ T9832] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 755454249 [ 538.308808][ T9832] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 538.320115][ T9836] ubi31: background thread "ubi_bgt31d" started, PID 9836 [ 538.420790][ T9828] can0 (unregistered): slcan off ttyS3. [ 539.429326][ T9840] sit1: entered allmulticast mode [ 539.957086][ T29] audit: type=1326 audit(1772513019.734:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 540.530729][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 540.582154][ T9860] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 540.673197][ T29] audit: type=1326 audit(1772513019.734:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 540.784217][ T9852] syz_tun: entered allmulticast mode [ 540.914476][ T29] audit: type=1326 audit(1772513019.743:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9854 comm="syz.4.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 541.378653][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 541.679037][ T9844] syz_tun: left allmulticast mode [ 541.737210][ T10] usb 3-1: USB disconnect, device number 15 [ 543.107057][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 543.565700][ T5869] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 543.712591][ T5869] usb 5-1: device descriptor read/64, error -71 [ 544.446529][ T9899] overlayfs: failed to clone lowerpath [ 544.455302][ T5856] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 544.482019][ T9899] overlayfs: failed to clone lowerpath [ 544.596919][ T5869] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 544.616355][ T9902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.654466][ T5856] usb 1-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 544.674131][ T5856] usb 1-1: config 1 interface 0 has no altsetting 0 [ 544.717218][ T5856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 544.761550][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.781151][ T5869] usb 5-1: device descriptor read/64, error -71 [ 544.792669][ T5856] usb 1-1: Product: syz [ 544.820922][ T5856] usb 1-1: Manufacturer: syz [ 544.825588][ T5856] usb 1-1: SerialNumber: syz [ 544.949906][ T5869] usb usb5-port1: attempt power cycle [ 544.950786][ T9894] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 545.218873][ T51] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 545.219023][ T51] Bluetooth: hci2: connection err: -111 [ 545.860689][ T5869] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 546.447355][ T5856] usb 1-1: USB disconnect, device number 17 [ 546.471602][ T5869] usb 5-1: device descriptor read/8, error -71 [ 547.815779][ T29] audit: type=1400 audit(1772513027.095:701): avc: denied { getopt } for pid=9908 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 548.184700][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.751'. [ 548.582067][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.749'. [ 548.861796][ T9920] team0: Port device team_slave_0 removed [ 549.327795][ T9925] /dev/nullb0: Can't open blockdev [ 549.765241][ T29] audit: type=1326 audit(1772513028.498:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 549.841317][ T29] audit: type=1326 audit(1772513028.498:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 549.890971][ T29] audit: type=1326 audit(1772513028.498:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 549.914850][ T29] audit: type=1326 audit(1772513028.517:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 549.938507][ T29] audit: type=1326 audit(1772513028.526:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 549.978753][ T29] audit: type=1326 audit(1772513028.536:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 550.255590][ T9933] xt_HMARK: spi-set and port-set can't be combined [ 550.380594][ T29] audit: type=1326 audit(1772513028.536:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 550.414312][ T29] audit: type=1326 audit(1772513028.536:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 551.077649][ T29] audit: type=1326 audit(1772513028.536:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9922 comm="syz.4.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0a4119c799 code=0x7ffc0000 [ 552.219700][ T9950] overlayfs: failed to resolve './file2': -2 [ 553.084692][ T9949] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 553.092578][ T9949] team0: Device batadv1 is of different type [ 553.126392][ T9942] vivid-004: ================= START STATUS ================= [ 553.134070][ T9942] vivid-004: Radio HW Seek Mode: Bounded [ 553.139692][ T9942] vivid-004: Radio Programmable HW Seek: false [ 553.145891][ T9942] vivid-004: RDS Rx I/O Mode: Block I/O [ 553.173395][ T9942] vivid-004: Generate RBDS Instead of RDS: false [ 553.179737][ T9942] vivid-004: RDS Reception: true [ 553.184718][ T9942] vivid-004: RDS Program Type: 0 inactive [ 553.190435][ T9942] vivid-004: RDS PS Name: inactive [ 553.195701][ T9942] vivid-004: RDS Radio Text: inactive [ 553.201153][ T9942] vivid-004: RDS Traffic Announcement: false inactive [ 553.207956][ T9942] vivid-004: RDS Traffic Program: false inactive [ 553.214279][ T9942] vivid-004: RDS Music: false inactive [ 553.219791][ T9942] vivid-004: ================== END STATUS ================== [ 553.386966][ T5869] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 553.684556][ T5869] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 553.708993][ T5869] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 553.728940][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 553.747763][ T5869] usb 6-1: SerialNumber: syz [ 553.794350][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 555.099310][ T9974] netlink: 'syz.4.762': attribute type 4 has an invalid length. [ 555.393049][ T5950] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 555.425420][ T5869] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 555.451749][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 555.451765][ T29] audit: type=1326 audit(1772513034.232:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 555.486836][ T5869] usb-storage 6-1:1.0: USB Mass Storage device detected [ 555.626908][ T5869] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 555.648509][ T29] audit: type=1326 audit(1772513034.232:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 555.696085][ T5950] usb 3-1: device descriptor read/64, error -71 [ 556.086555][ T29] audit: type=1326 audit(1772513034.232:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 556.112511][ T29] audit: type=1326 audit(1772513034.232:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 556.165667][ T29] audit: type=1326 audit(1772513034.232:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 556.192637][ T5869] usb 6-1: USB disconnect, device number 6 [ 556.204366][ T29] audit: type=1326 audit(1772513034.232:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 556.231325][ T29] audit: type=1326 audit(1772513034.232:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 556.276096][ T5950] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 556.286396][ T29] audit: type=1326 audit(1772513034.232:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 556.337408][ T29] audit: type=1326 audit(1772513034.232:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 556.397268][ T29] audit: type=1326 audit(1772513034.232:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19c799 code=0x7ffc0000 [ 556.455005][ T5950] usb 3-1: device descriptor read/64, error -71 [ 556.563765][ T9987] netlink: 16 bytes leftover after parsing attributes in process `syz.5.764'. [ 556.573624][ T5950] usb usb3-port1: attempt power cycle [ 556.946802][ T5950] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 557.983978][ T5950] usb 3-1: device descriptor read/8, error -71 [ 558.656018][T10007] netlink: 'syz.0.776': attribute type 4 has an invalid length. [ 560.902303][T10026] zonefs (nullb0) ERROR: Not a zoned block device [ 563.981204][ T5950] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 564.144186][T10049] block device autoloading is deprecated and will be removed. [ 564.751131][ T5950] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 564.964759][ T5950] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 565.079457][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 565.094395][ T5950] usb 1-1: SerialNumber: syz [ 565.324859][ T5950] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 565.351661][ T5950] usb-storage 1-1:1.0: USB Mass Storage device detected [ 565.387368][ T5950] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 565.395890][ T792] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 565.505143][ T5950] usb 1-1: USB disconnect, device number 18 [ 565.553265][ T792] usb 3-1: device descriptor read/64, error -71 [ 565.895039][T10067] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 565.954486][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.5.782'. [ 565.979739][ T792] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 566.632509][ T792] usb 3-1: device descriptor read/64, error -71 [ 566.654513][T10061] batman_adv: batadv0: Adding interface: macvtap2 [ 566.662566][T10061] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.690500][T10061] batman_adv: batadv0: Interface activated: macvtap2 [ 566.751344][ T792] usb usb3-port1: attempt power cycle [ 566.779898][T10071] netdevsim netdevsim5: Direct firmware load for / [ 566.779898][T10071] failed with error -2 [ 566.825729][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 566.825746][ T29] audit: type=1400 audit(1772513044.877:788): avc: denied { firmware_load } for pid=10062 comm="syz.5.782" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 566.893864][T10071] netdevsim netdevsim5: Falling back to sysfs fallback for: / [ 566.893864][T10071] [ 567.183326][T10083] 9p: Bad value for 'rfdno' [ 567.448219][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'. [ 567.626739][ T792] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 567.659328][ T792] usb 3-1: device descriptor read/8, error -71 [ 568.022251][ T792] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 568.814430][ T792] usb 3-1: device not accepting address 23, error -71 [ 568.821546][ T792] usb usb3-port1: unable to enumerate USB device [ 569.046950][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 569.055279][ T51] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 569.055403][ T51] Bluetooth: hci2: connection err: -111 [ 570.269248][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.299739][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.311406][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 570.320723][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.850924][ T24] usb 1-1: config 0 descriptor?? [ 571.168551][ T5957] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 571.360163][ T24] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 571.367491][ T24] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 571.391967][ T5957] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 571.409231][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0003/input/input8 [ 571.432647][ T5957] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 571.920374][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 571.930238][ T5957] usb 3-1: SerialNumber: syz [ 572.342303][ T24] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 572.475921][ T24] usb 1-1: USB disconnect, device number 19 [ 572.500348][T10114] fido_id[10114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 572.745465][T10116] batman_adv: batadv0: Adding interface: macvtap2 [ 572.752584][T10116] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.778296][T10116] batman_adv: batadv0: Interface activated: macvtap2 [ 572.986163][T10120] ceph: No mds server is up or the cluster is laggy [ 574.323946][ T5957] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 574.347697][ T5957] usb-storage 3-1:1.0: USB Mass Storage device detected [ 574.395509][ T5957] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 574.478682][ T5957] usb 3-1: USB disconnect, device number 24 [ 575.065677][T10139] netlink: 'syz.2.797': attribute type 16 has an invalid length. [ 575.073440][T10139] netlink: 'syz.2.797': attribute type 17 has an invalid length. [ 575.464095][T10155] netlink: 35 bytes leftover after parsing attributes in process `syz.2.799'. [ 575.581190][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 575.611709][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 575.628189][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 575.639200][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 575.649928][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 576.206087][T10163] loop3: detected capacity change from 0 to 1 [ 576.234823][T10163] buffer_io_error: 42 callbacks suppressed [ 576.234840][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 576.384084][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 576.392342][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 576.413835][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 576.526311][ T29] audit: type=1400 audit(1772513053.932:789): avc: denied { connect } for pid=10162 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 576.882107][ T29] audit: type=1400 audit(1772513054.035:790): avc: denied { ioctl } for pid=10162 comm="syz.0.800" path="socket:[23060]" dev="sockfs" ino=23060 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 576.925085][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 576.942704][T10163] ldm_validate_partition_table(): Disk read failed. [ 576.959274][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 576.977203][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 576.998724][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 577.019787][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 577.035871][T10163] Dev loop3: unable to read RDB block 0 [ 577.044108][T10163] Buffer I/O error on dev loop3, logical block 0, async page read [ 577.053349][T10163] loop3: unable to read partition table [ 577.060909][T10163] loop3: partition table beyond EOD, truncated [ 577.070655][T10163] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 577.296634][ T29] audit: type=1400 audit(1772513054.671:791): avc: denied { name_bind } for pid=10170 comm="syz.4.802" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 579.555086][ T29] audit: type=1400 audit(1772513056.691:792): avc: denied { setopt } for pid=10190 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 579.628435][T10184] netlink: 'syz.5.801': attribute type 4 has an invalid length. [ 579.774584][T10189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.802'. [ 582.694530][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 584.425154][T10217] nbd: socks must be embedded in a SOCK_ITEM attr [ 584.550346][ T24] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 584.568380][ T29] audit: type=1400 audit(1772513061.434:793): avc: denied { map } for pid=10221 comm="syz.5.815" path="socket:[24419]" dev="sockfs" ino=24419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 585.883105][T10237] netlink: 80 bytes leftover after parsing attributes in process `syz.2.818'. [ 588.229155][T10245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.238242][T10245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.037707][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 589.059592][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 589.067431][ T24] usb 5-1: can't read configurations, error -71 [ 589.573990][ T29] audit: type=1400 audit(1772513066.157:794): avc: denied { bind } for pid=10250 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 589.600884][ T29] audit: type=1400 audit(1772513066.176:795): avc: denied { listen } for pid=10250 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 589.623829][ T29] audit: type=1400 audit(1772513066.186:796): avc: denied { write } for pid=10250 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 589.645533][ T29] audit: type=1400 audit(1772513066.186:797): avc: denied { accept } for pid=10250 comm="syz.5.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 592.232969][T10288] sctp: [Deprecated]: syz.1.829 (pid 10288) Use of int in max_burst socket option. [ 592.232969][T10288] Use struct sctp_assoc_value instead [ 592.350265][T10287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.825'. [ 592.967428][T10289] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 592.995509][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 593.009692][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.016052][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.017502][T10289] Error validating options; rc = [-22] [ 595.812228][T10311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.815085][ T792] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 595.828593][T10311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.121970][T10313] netlink: 'syz.2.834': attribute type 4 has an invalid length. [ 596.788549][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.835'. [ 598.209370][ T51] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 598.209414][ T51] Bluetooth: hci2: connection err: -111 [ 599.340281][T10330] netlink: 56 bytes leftover after parsing attributes in process `syz.4.837'. [ 599.506594][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 599.528781][ T24] usb 6-1: unable to read config index 0 descriptor/start: -32 [ 599.536352][ T24] usb 6-1: chopping to 0 config(s) [ 599.584743][ T24] usb 6-1: can't read configurations, error -32 [ 599.745614][ T24] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 600.289703][T10339] gretap0: left promiscuous mode [ 600.651673][T10339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.251774][T10337] libceph: secret too big 289 [ 603.318005][T10364] overlayfs: failed to resolve './file2': -2 [ 603.355545][T10364] vivid-001: ================= START STATUS ================= [ 603.363367][T10364] vivid-001: Radio HW Seek Mode: Bounded [ 603.369327][T10364] vivid-001: Radio Programmable HW Seek: false [ 603.375975][T10364] vivid-001: RDS Rx I/O Mode: Block I/O [ 603.381618][T10364] vivid-001: Generate RBDS Instead of RDS: false [ 603.389203][T10364] vivid-001: RDS Reception: true [ 603.395547][T10364] vivid-001: RDS Program Type: 0 inactive [ 603.401822][T10364] vivid-001: RDS PS Name: inactive [ 603.407989][T10364] vivid-001: RDS Radio Text: inactive [ 603.415300][T10364] vivid-001: RDS Traffic Announcement: false inactive [ 603.422530][T10364] vivid-001: RDS Traffic Program: false inactive [ 603.429819][T10364] vivid-001: RDS Music: false inactive [ 603.438119][T10364] vivid-001: ================== END STATUS ================== [ 603.697193][ T29] audit: type=1400 audit(1772513079.375:798): avc: denied { getopt } for pid=10362 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 603.707499][ T5940] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 603.773901][T10367] openvswitch: netlink: IP tunnel dst address not specified [ 603.785856][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 603.841304][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 603.953119][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 603.965000][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 603.966644][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.981069][ T5940] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.003492][ T5940] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 604.035006][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.074825][T10373] netlink: 72 bytes leftover after parsing attributes in process `syz.1.847'. [ 604.262751][ T5940] usb 6-1: config 0 descriptor?? [ 606.074834][ T6578] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 606.292953][ T6578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.380231][ T6578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.499452][ T6578] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 606.964244][ T6578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.980267][ T6578] usb 3-1: config 0 descriptor?? [ 607.167039][ T5940] usbhid 6-1:0.0: can't add hid device: -71 [ 607.173042][ T5940] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 607.218099][ T5940] usb 6-1: USB disconnect, device number 9 [ 607.436328][T10397] netlink: 'syz.4.850': attribute type 4 has an invalid length. [ 607.453596][T10397] netlink: 'syz.4.850': attribute type 4 has an invalid length. [ 607.484242][ T6578] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 607.499678][ T6578] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 607.524266][ T6578] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0004/input/input9 [ 609.929736][ T6578] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 609.942531][ T5805] Bluetooth: hci5: unexpected event 0x04 length: 245 > 10 [ 609.942601][ T5805] Bluetooth: hci5: connection err: -111 [ 611.398725][ T6578] usb 3-1: USB disconnect, device number 25 [ 612.545166][T10428] overlayfs: failed to clone lowerpath [ 613.318887][T10444] netlink: 'syz.2.870': attribute type 10 has an invalid length. [ 614.120218][ T29] audit: type=1400 audit(1772513088.355:799): avc: denied { bind } for pid=10435 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 614.676123][T10444] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 616.904994][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'. [ 616.944333][T10459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 619.989286][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 620.259495][ T29] audit: type=1400 audit(1772513094.865:800): avc: denied { name_connect } for pid=10478 comm="syz.5.879" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 620.352758][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 620.364578][ T24] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 620.384642][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.403045][ T24] usb 1-1: Product: syz [ 620.412342][ T24] usb 1-1: Manufacturer: syz [ 620.422343][ T24] usb 1-1: SerialNumber: syz [ 620.437782][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.879'. [ 620.448082][ T24] usb 1-1: config 0 descriptor?? [ 620.502458][ T5940] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 620.835641][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.849173][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.227115][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.237473][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.522654][ T24] airspy 1-1:0.0: Board ID: 4f [ 621.531959][ T24] airspy 1-1:0.0: Firmware version: O [ 621.717618][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.727881][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.744541][ T24] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 621.758930][ T24] airspy 1-1:0.0: Registered as swradio24 [ 621.765103][ T24] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 621.790816][ T24] usb 1-1: USB disconnect, device number 20 [ 622.366741][T10502] kAFS: unable to lookup cell '(,c' [ 622.929194][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 623.105587][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.158018][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.180025][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 623.201603][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.221619][ T10] usb 6-1: config 0 descriptor?? [ 623.774295][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 623.805499][ T5940] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 623.845981][ T5940] usb 5-1: can't read configurations, error -71 [ 623.868618][ T29] audit: type=1400 audit(1772513098.232:801): avc: denied { read } for pid=10503 comm="syz.0.874" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 623.934337][ T29] audit: type=1400 audit(1772513098.232:802): avc: denied { open } for pid=10503 comm="syz.0.874" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 624.254401][ T10] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 624.264216][ T10] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 624.275150][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0005/input/input10 [ 624.317591][ T10] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 624.416875][T10505] input: syz0 as /devices/virtual/input/input11 [ 625.176158][T10517] : entered promiscuous mode [ 625.479480][ T29] audit: type=1400 audit(1772513099.738:803): avc: denied { set_context_mgr } for pid=10519 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 625.503763][ T29] audit: type=1400 audit(1772513099.738:804): avc: denied { call } for pid=10519 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 625.527173][ T5883] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 625.892873][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 626.928454][ T5805] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 626.928498][ T5805] Bluetooth: hci4: connection err: -111 [ 628.019019][ T5957] usb 6-1: USB disconnect, device number 10 [ 628.473919][T10547] xt_connbytes: Forcing CT accounting to be enabled [ 628.483148][T10547] set match dimension is over the limit! [ 628.579045][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.885'. [ 630.274065][T10569] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 630.296517][ T62] Bluetooth: hci1: Frame reassembly failed (-84) [ 631.594937][T10613] SET target dimension over the limit! [ 632.191295][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 632.200212][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.890'. [ 632.520681][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 632.540168][ T5805] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 633.133028][T10623] nft_compat: unsupported protocol 5 [ 633.626591][T10634] netlink: 'syz.4.895': attribute type 10 has an invalid length. [ 634.163858][T10634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.172180][T10634] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 634.846832][T10641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.405340][ T5957] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 636.551687][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.565155][ T29] audit: type=1400 audit(1772513110.103:805): avc: denied { ioctl } for pid=10644 comm="syz.2.907" path="mnt:[4026532836]" dev="nsfs" ino=4026532836 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 636.565185][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.880989][ T5957] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 636.897933][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.018473][ T5957] usb 5-1: config 0 descriptor?? [ 638.070303][ T5957] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 638.085931][ T5957] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 638.148961][ T5957] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0006/input/input12 [ 638.224753][ T5957] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 639.522273][T10679] max out of range [ 640.047233][ T5957] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 641.595297][ T5883] usb 5-1: USB disconnect, device number 25 [ 641.735221][T10694] batman_adv: batadv0: Adding interface: macvtap3 [ 641.752562][T10694] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.790227][T10694] batman_adv: batadv0: Interface activated: macvtap3 [ 642.404105][T10695] batman_adv: batadv0: Adding interface: macvtap3 [ 642.420420][T10695] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.456299][T10695] batman_adv: batadv0: Interface activated: macvtap3 [ 642.932077][T10702] fuse: Unknown parameter 'user_i00000000000000000000' [ 644.284696][T10708] ieee802154 phy0 wpan0: encryption failed: -22 [ 644.285297][ T29] audit: type=1400 audit(1772513117.333:806): avc: denied { write } for pid=10707 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 645.555707][ T29] audit: type=1400 audit(1772513118.502:807): avc: denied { setattr } for pid=10707 comm="syz.2.913" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 647.016300][ T5805] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 647.016342][ T5805] Bluetooth: hci3: connection err: -111 [ 649.201838][T10732] overlayfs: failed to resolve './file2': -2 [ 649.504852][ T29] audit: type=1400 audit(1772513122.207:808): avc: denied { getopt } for pid=10730 comm="syz.4.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 650.218615][T10742] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 650.228647][T10742] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 651.687109][ T5805] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 651.687152][ T5805] Bluetooth: hci4: connection err: -111 [ 653.740994][T10766] netlink: 'syz.4.924': attribute type 7 has an invalid length. [ 653.748923][T10766] netlink: 'syz.4.924': attribute type 8 has an invalid length. [ 653.750190][ T29] audit: type=1400 audit(1772513126.182:809): avc: denied { connect } for pid=10753 comm="syz.4.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 655.812603][T10791] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 655.875028][T10792] overlayfs: missing 'lowerdir' [ 655.893675][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 656.446431][T10796] netlink: 'syz.2.933': attribute type 11 has an invalid length. [ 659.210123][ T5805] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 659.210166][ T5805] Bluetooth: hci3: connection err: -111 [ 659.234997][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.241362][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 659.679424][ T29] audit: type=1400 audit(1772513131.729:810): avc: denied { read } for pid=10821 comm="syz.2.940" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 659.778143][ T29] audit: type=1400 audit(1772513131.757:811): avc: denied { open } for pid=10821 comm="syz.2.940" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 659.923446][ T29] audit: type=1400 audit(1772513131.766:812): avc: denied { ioctl } for pid=10821 comm="syz.2.940" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 661.204106][T10844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.939'. [ 662.998127][T10855] fuse: Unknown parameter 'user_i00000000000000000000' [ 663.537535][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.544942][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.572952][T10859] bridge0: entered allmulticast mode [ 663.895260][T10859] bridge_slave_1: left allmulticast mode [ 663.903437][T10859] bridge_slave_1: left promiscuous mode [ 664.405660][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.452673][T10859] bridge_slave_0: left allmulticast mode [ 664.459212][T10859] bridge_slave_0: left promiscuous mode [ 664.468277][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.606083][ T5805] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 666.606113][ T5805] Bluetooth: hci3: connection err: -111 [ 670.251654][ T29] audit: type=1400 audit(1772513141.626:813): avc: denied { read } for pid=10912 comm="syz.4.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 670.951106][ T29] audit: type=1400 audit(1772513142.271:814): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 671.209143][T10923] overlayfs: failed to clone lowerpath [ 671.317409][T10926] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.957'. [ 671.327172][T10926] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.957'. [ 671.419634][ T5805] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 673.054188][T10928] netlink: 'syz.0.960': attribute type 6 has an invalid length. [ 673.065460][T10928] netlink: 'syz.0.960': attribute type 6 has an invalid length. [ 673.346108][ T5883] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 673.989148][ T5883] usb 1-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 674.474489][ T5883] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 68, using maximum allowed: 30 [ 674.487205][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 674.514607][ T5883] usb 1-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 674.529670][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.539428][ T5883] usb 1-1: Product: syz [ 674.546861][ T5883] usb 1-1: Manufacturer: syz [ 674.560533][ T5883] usb 1-1: SerialNumber: syz [ 674.570385][ T5883] usb 1-1: config 0 descriptor?? [ 674.802659][ T5883] usb 1-1: USB disconnect, device number 21 [ 674.831864][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.965'. [ 676.134752][ T29] audit: type=1400 audit(1772513146.985:815): avc: denied { execheap } for pid=10955 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 676.673769][T10968] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 676.682767][T10968] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 681.302427][T11006] fuse: Unknown parameter 'user_i00000000000000000000' [ 681.681924][T11016] netlink: 72 bytes leftover after parsing attributes in process `syz.0.977'. [ 684.104566][T11030] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 684.139378][T11030] bond4: (slave lo): Enslaving as an active interface with an up link [ 684.392207][T11030] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 685.748988][T11024] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 685.860814][T10598] Bluetooth: (null): Non-link packet received in non-active state [ 686.182320][T10598] Bluetooth: (null): Invalid header checksum [ 686.200606][T10598] Bluetooth: (null): Invalid header checksum [ 686.215629][T10598] Bluetooth: (null): Invalid header checksum [ 686.228394][T10598] Bluetooth: (null): Invalid header checksum [ 686.489291][T10604] Bluetooth: (null): Invalid header checksum [ 687.428867][ T5805] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 687.428907][ T5805] Bluetooth: hci2: connection err: -111 [ 689.014279][T11079] netlink: 72 bytes leftover after parsing attributes in process `syz.2.993'. [ 691.970857][T11091] FAT-fs (nullb0): bogus number of reserved sectors [ 691.978183][T11091] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 692.182221][ T5940] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 692.966341][ T5940] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 692.991150][ T5940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 693.000671][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 693.013469][ T5940] usb 3-1: SerialNumber: syz [ 694.143490][ T5940] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 694.161555][ T5940] usb-storage 3-1:1.0: USB Mass Storage device detected [ 694.178687][ T5940] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 694.331039][ T5940] usb 3-1: USB disconnect, device number 26 [ 694.592132][T11115] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 694.645714][T11115] bond0: (slave dummy0): Releasing backup interface [ 694.683686][T11116] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 694.721837][T11115] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 694.731487][T11115] team0: Failed to send options change via netlink (err -105) [ 694.739213][T11115] team0: Port device dummy0 added [ 694.766973][T11116] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 696.405903][T11116] team0: Failed to send options change via netlink (err -105) [ 696.413487][T11116] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 696.422461][T11116] team0: Port device dummy0 removed [ 696.429837][T11116] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 697.099726][T11128] comedi comedi0: Minor 2147483647 is invalid! [ 700.314533][ T5805] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 700.314577][ T5805] Bluetooth: hci4: connection err: -111 [ 703.934892][T11167] overlayfs: unescaped trailing colons in lowerdir mount option. [ 704.120506][T11170] netlink: 'syz.1.1012': attribute type 20 has an invalid length. [ 704.364158][T11160] overlayfs: overlapping lowerdir path [ 704.612841][ T29] audit: type=1400 audit(1772513173.766:816): avc: denied { execute } for pid=11161 comm="syz.4.1006" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 707.726710][ T5805] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 707.726751][ T5805] Bluetooth: hci2: connection err: -111 [ 709.281516][T11205] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1018'. [ 714.345649][T11229] overlayfs: missing 'lowerdir' [ 715.002959][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 715.082272][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 715.800201][ T24] usb 6-1: config 0 has an invalid interface number: 80 but max is 0 [ 715.808383][ T24] usb 6-1: config 0 has no interface number 0 [ 715.817598][ T24] usb 6-1: too many endpoints for config 0 interface 80 altsetting 25: 34, using maximum allowed: 30 [ 715.832009][ T24] usb 6-1: config 0 interface 80 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 715.846234][ T24] usb 6-1: config 0 interface 80 has no altsetting 0 [ 715.857885][ T24] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 715.867056][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.875438][ T24] usb 6-1: Product: syz [ 715.879603][ T24] usb 6-1: Manufacturer: syz [ 715.884954][ T24] usb 6-1: SerialNumber: syz [ 715.965840][ T24] usb 6-1: config 0 descriptor?? [ 716.668860][ T29] audit: type=1400 audit(1772513185.047:817): avc: denied { getopt } for pid=11256 comm="syz.2.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 716.698151][ T24] usb 6-1: can't set config #0, error -71 [ 716.794900][ T24] usb 6-1: USB disconnect, device number 11 [ 717.060727][T11265] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1032'. [ 719.059307][T10598] Bluetooth: hci1: Frame reassembly failed (-84) [ 719.687358][T11287] syz.2.1036 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 719.717923][T11287] ubi: mtd0 is already attached to ubi31 [ 721.257734][ T5805] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 724.881877][ T9808] Bluetooth: hci4: unexpected event 0x04 length: 245 > 10 [ 724.881920][ T9808] Bluetooth: hci4: connection err: -111 [ 724.913928][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 724.920507][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.417945][T11315] QAT: failed to copy from user cfg_data. [ 726.437653][ T29] audit: type=1400 audit(1772513194.186:818): avc: denied { ioctl } for pid=11313 comm="syz.2.1043" path="socket:[27906]" dev="sockfs" ino=27906 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 726.530086][T11324] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1045'. [ 727.676847][T11317] netlink: set zone limit has 4 unknown bytes [ 728.393763][T11347] overlayfs: missing 'workdir' [ 729.545713][T11363] overlayfs: unescaped trailing colons in lowerdir mount option. [ 729.743446][T11367] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 729.780077][T11367] netlink: 'syz.2.1050': attribute type 20 has an invalid length. [ 729.978018][ T29] audit: type=1400 audit(1772513197.478:819): avc: denied { mounton } for pid=11352 comm="syz.4.1049" path="/180/file0" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.093857][ T29] audit: type=1400 audit(1772513197.525:820): avc: denied { read } for pid=11352 comm="syz.4.1049" name="/" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.120303][ T29] audit: type=1400 audit(1772513197.534:821): avc: denied { open } for pid=11352 comm="syz.4.1049" path="/180/file0" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 730.316527][ T5940] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 730.538470][ T5940] usb 5-1: config 0 has an invalid interface number: 80 but max is 0 [ 730.546654][ T5940] usb 5-1: config 0 has no interface number 0 [ 730.553986][ T5940] usb 5-1: too many endpoints for config 0 interface 80 altsetting 25: 34, using maximum allowed: 30 [ 730.569035][ T5940] usb 5-1: config 0 interface 80 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 730.587430][ T5940] usb 5-1: config 0 interface 80 has no altsetting 0 [ 730.625679][ T5940] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 730.638609][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.648742][ T5940] usb 5-1: Product: syz [ 730.653789][ T5940] usb 5-1: Manufacturer: syz [ 730.659509][ T5940] usb 5-1: SerialNumber: syz [ 730.670212][ T5940] usb 5-1: config 0 descriptor?? [ 732.473997][T11384] batman_adv: batadv0: Adding interface: macvtap3 [ 732.535222][T11384] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.575449][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 732.605336][T11384] batman_adv: batadv0: Interface activated: macvtap3 [ 732.766065][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 732.783252][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 732.798825][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 732.811308][ T24] usb 3-1: SerialNumber: syz [ 734.198523][ T5805] Bluetooth: hci1: command 0x1003 tx timeout [ 734.204892][ T9808] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 735.440848][ T5940] usb 5-1: USB disconnect, device number 26 [ 736.174557][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 736.186230][ T24] usb-storage 3-1:1.0: USB Mass Storage device detected [ 736.222065][ T24] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 737.082450][T11428] netlink: 'syz.4.1063': attribute type 10 has an invalid length. [ 737.147926][T11429] loop5: detected capacity change from 0 to 7 [ 737.205655][T11430] netlink: 'syz.4.1063': attribute type 10 has an invalid length. [ 737.213574][T11430] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1063'. [ 737.270929][ T29] audit: type=1400 audit(1772513203.689:822): avc: denied { write } for pid=11421 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 737.331302][T11429] Dev loop5: unable to read RDB block 7 [ 737.337023][T11429] loop5: AHDI p1 [ 737.340914][T11429] loop5: partition table partially beyond EOD, truncated [ 737.352232][T11430] batadv0: entered promiscuous mode [ 737.357484][T11430] batadv0: entered allmulticast mode [ 737.643246][T11430] bond0: (slave batadv0): Releasing backup interface [ 737.653011][T11430] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 737.661076][ T24] usb 3-1: USB disconnect, device number 27 [ 737.674561][ T29] audit: type=1400 audit(1772513204.185:823): avc: denied { append } for pid=11413 comm="syz.4.1063" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 738.270478][T11441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11441 comm=syz.0.1068 [ 738.623580][ T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 739.014135][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 739.255713][ T24] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 739.264036][ T24] usb 3-1: config 8 has no interface number 0 [ 739.270577][ T24] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 739.282009][ T24] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 739.607599][ T24] usb 3-1: config 8 interface 177 has no altsetting 0 [ 739.614759][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 739.623985][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.659214][T11427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 740.023643][ T24] usb 3-1: string descriptor 0 read error: -71 [ 740.032367][ T24] ir_toy 3-1:8.177: required endpoints not found [ 740.047738][ T24] usb 3-1: USB disconnect, device number 28 [ 740.252711][T11457] overlayfs: missing 'workdir' [ 741.557474][T11463] comedi comedi0: Minor 2147483647 is invalid! [ 741.887768][T11471] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1073'. [ 745.742958][ T792] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 745.877816][T11500] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1080'. [ 745.887300][T11500] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1080'. [ 745.961445][T11500] IPv6: sit1: Disabled Multicast RS [ 746.959645][T11502] libceph: resolve '0..' (ret=-3): failed [ 748.169421][T11525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.464532][T11529] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 749.420499][ T792] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 749.690796][ T792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.702879][ T792] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 749.725064][ T792] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 749.739740][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 749.750576][ T792] usb 3-1: SerialNumber: syz [ 749.880769][ T792] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 749.889277][ T792] usb-storage 3-1:1.0: USB Mass Storage device detected [ 749.906697][ T792] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 752.175604][ T24] usb 3-1: USB disconnect, device number 29 [ 752.317941][T11555] batman_adv: batadv0: Adding interface: macvtap4 [ 752.324587][T11555] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.350268][T11555] batman_adv: batadv0: Interface activated: macvtap4 [ 754.025332][T11571] trusted_key: encrypted_key: insufficient parameters specified [ 754.076478][T11571] netlink: 'syz.0.1105': attribute type 10 has an invalid length. [ 754.084404][T11571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1105'. [ 754.095273][T11571] batman_adv: batadv0: Adding interface: vlan1 [ 754.101548][T11571] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.127651][T11571] batman_adv: batadv0: Interface activated: vlan1 [ 754.263513][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 754.551767][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 754.568940][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 754.883755][T11576] fuse: Unknown parameter 'user_i00000000000000000000' [ 755.033059][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 755.051910][ T24] usb 6-1: SerialNumber: syz [ 755.418124][ T9808] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 755.777717][T11581] IPVS: length: 528 != 8 [ 755.784923][T11585] siw: device registration error -23 [ 755.797701][T11581] xt_hashlimit: size too large, truncated to 1048576 [ 758.344932][ T51] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 758.344976][ T51] Bluetooth: hci2: connection err: -111 [ 758.380813][ T24] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 758.389463][ T24] usb-storage 6-1:1.0: USB Mass Storage device detected [ 758.416690][ T24] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 758.852039][ T24] usb 6-1: USB disconnect, device number 13 [ 759.012775][ T6578] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 759.038719][T11609] batman_adv: batadv0: Adding interface: macvtap5 [ 759.046223][T11609] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.509677][T11609] batman_adv: batadv0: Interface activated: macvtap5 [ 759.707612][ T6578] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.717874][ T6578] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 759.732261][ T6578] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 759.742574][ T6578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 759.752936][ T6578] usb 3-1: SerialNumber: syz [ 760.778808][ T6578] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 760.787692][ T6578] usb-storage 3-1:1.0: USB Mass Storage device detected [ 760.838981][ T6578] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 761.719067][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'. [ 761.728056][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1108'. [ 763.033151][T11635] batman_adv: batadv0: Adding interface: macvtap5 [ 763.039702][T11635] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.081983][T11635] batman_adv: batadv0: Interface activated: macvtap5 [ 763.316810][ T10] usb 3-1: USB disconnect, device number 30 [ 764.380448][T11640] fuse: Unknown parameter '0x0000000000000004:g1'Dklz [ 764.380448][T11640] .ut+̃7U' [ 765.565294][T11660] gretap0: left promiscuous mode [ 765.735833][T11662] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 765.849661][T11656] netlink: 'syz.1.1115': attribute type 10 has an invalid length. [ 766.034264][ T29] audit: type=1400 audit(1772513229.549:824): avc: denied { mounton } for pid=11657 comm="syz.0.1114" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 766.057291][T11660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.710004][T11662] team0: Device dummy0 is of different type [ 766.724838][T11656] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 768.098805][T11677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1118'. [ 768.885967][T11685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11685 comm=syz.4.1120 [ 769.224367][T11686] kAFS: unable to lookup cell '' [ 769.235329][T11686] kAFS: unable to lookup cell '(,c' [ 770.692886][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 770.701903][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1122'. [ 771.255489][T11703] batman_adv: batadv0: Adding interface: macvtap6 [ 771.261969][T11703] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.287365][T11703] batman_adv: batadv0: Interface activated: macvtap6 [ 772.030651][ T5920] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 772.294036][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.309223][ T5920] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 772.329997][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 772.339557][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 772.347603][ T5920] usb 5-1: SerialNumber: syz [ 772.357281][ T5920] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 772.371638][ T5920] usb-storage 5-1:1.0: USB Mass Storage device detected [ 772.411203][ T5920] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 772.439471][T11718] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 772.568065][T11718] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.807848][T11720] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.816181][T11720] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 772.830245][T11720] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 773.089292][T11721] bond5: (slave wlan0): Opening slave failed [ 774.577412][ T10] usb 5-1: USB disconnect, device number 27 [ 775.283605][ T49] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 775.299262][T10596] Bluetooth: hci1: Frame reassembly failed (-84) [ 776.414439][T11738] Bluetooth: hci5: command 0x0406 tx timeout [ 776.427606][ T29] audit: type=1400 audit(1772513239.922:825): avc: denied { read write } for pid=11740 comm="syz.4.1133" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 776.488830][T11746] veth0: entered promiscuous mode [ 776.510003][T11747] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11747 comm=syz.1.1132 [ 776.530961][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 776.673236][ T29] audit: type=1400 audit(1772513239.922:826): avc: denied { open } for pid=11740 comm="syz.4.1133" path="/191/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 777.489682][T11738] Bluetooth: hci1: command 0x1003 tx timeout [ 777.494082][ T9808] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 777.836986][ T5883] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 777.888072][T11766] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 778.276408][ T29] audit: type=1400 audit(1772513241.391:827): avc: denied { relabelto } for pid=11765 comm="syz.5.1137" name="99" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 778.302283][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 778.318731][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 778.338732][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 778.346720][ T5883] usb 5-1: SerialNumber: syz [ 778.351836][ T29] audit: type=1400 audit(1772513241.662:828): avc: denied { associate } for pid=11765 comm="syz.5.1137" name="99" dev="tmpfs" ino=605 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 778.434847][ T29] audit: type=1400 audit(1772513241.812:829): avc: denied { setattr } for pid=11765 comm="syz.5.1137" name="99" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 778.779959][T11770] batman_adv: batadv0: Adding interface: macvtap6 [ 778.791387][T11770] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.828485][T11770] batman_adv: batadv0: Interface activated: macvtap6 [ 781.204888][ T9808] Bluetooth: hci3: unexpected event 0x04 length: 245 > 10 [ 781.204956][ T9808] Bluetooth: hci3: connection err: -111 [ 782.304776][ T5883] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 782.313445][ T5883] usb-storage 5-1:1.0: USB Mass Storage device detected [ 782.413778][ T5883] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 782.480640][ T5883] usb 5-1: USB disconnect, device number 28 [ 784.297132][ T9808] Bluetooth: hci2: unexpected event 0x04 length: 245 > 10 [ 784.297172][ T9808] Bluetooth: hci2: connection err: -111 [ 785.809323][T11807] kAFS: unable to lookup cell '(,c' [ 788.930204][ T29] audit: type=1400 audit(1772513251.633:830): avc: denied { remove_name } for pid=8567 comm="syz-executor" name="binderfs" dev="tmpfs" ino=609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 788.965029][ T29] audit: type=1400 audit(1772513251.671:831): avc: denied { rmdir } for pid=8567 comm="syz-executor" name="99" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 790.074863][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 790.081267][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.967099][T11824] FAT-fs (nullb0): bogus number of reserved sectors [ 790.973725][T11824] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 791.000662][ T29] audit: type=1400 audit(1772513253.542:832): avc: denied { mounton } for pid=11821 comm="syz.2.1150" path="/syzcgroup/unified/syz2" dev="rpc_pipefs" ino=22732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 792.065416][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1152'. [ 792.835285][ T792] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 793.007809][ T792] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 793.023921][ T792] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 793.033992][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 793.049204][ T792] usb 3-1: SerialNumber: syz [ 793.445569][T11857] kAFS: unable to lookup cell '' [ 793.456413][T11857] kAFS: unable to lookup cell '(,c' [ 793.485131][T11856] netlink: 'syz.0.1154': attribute type 4 has an invalid length. [ 793.549117][T11856] netlink: 'syz.0.1154': attribute type 4 has an invalid length. [ 794.287800][ T6578] IPVS: starting estimator thread 0... [ 794.385179][T11862] IPVS: using max 40 ests per chain, 96000 per kthread [ 794.431347][T11864] netlink: 'syz.1.1158': attribute type 4 has an invalid length. [ 794.490663][T11864] netlink: 'syz.1.1158': attribute type 4 has an invalid length. [ 794.663925][ T792] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 794.684769][ T792] usb-storage 3-1:1.0: USB Mass Storage device detected [ 794.716276][ T792] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 795.922787][ T792] usb 3-1: USB disconnect, device number 31 [ 796.073955][T11872] syz.2.1159 (11872): drop_caches: 2 [ 797.957671][ T29] audit: type=1400 audit(1772513260.089:833): avc: denied { sys_module } for pid=11882 comm="syz.1.1162" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 798.404953][ T29] audit: type=1400 audit(1772513260.398:834): avc: denied { write } for pid=11892 comm="syz.2.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 800.583167][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1165'. [ 800.600643][T11908] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1165'. [ 800.794499][T11913] comedi comedi0: Minor 2147483647 is invalid! [ 801.031093][T11917] FAT-fs (nullb0): bogus number of reserved sectors [ 801.037806][T11917] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 802.193479][T11926] syz.4.1170 (11926): drop_caches: 2 [ 802.670716][ T792] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 802.830888][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 802.845365][ T792] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.882891][ T792] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.904450][ T792] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 802.916288][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.596729][ T792] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 803.613886][T11939] netlink: 'syz.1.1174': attribute type 3 has an invalid length. [ 804.366921][ T10] usb 3-1: USB disconnect, device number 32 [ 804.641167][T11949] xt_TCPMSS: Only works on TCP SYN packets [ 805.329187][T11956] comedi comedi0: Minor 2147483647 is invalid! [ 806.693954][T11965] FAT-fs (nullb0): bogus number of reserved sectors [ 806.700581][T11965] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 807.720281][ T29] audit: type=1400 audit(1772513269.107:835): avc: denied { ioctl } for pid=11962 comm="syz.0.1182" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 809.286271][ T29] audit: type=1400 audit(1772513270.678:836): avc: denied { map } for pid=11962 comm="syz.0.1182" path="socket:[29232]" dev="sockfs" ino=29232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 809.350105][ T29] audit: type=1400 audit(1772513270.678:837): avc: denied { read } for pid=11962 comm="syz.0.1182" path="socket:[29232]" dev="sockfs" ino=29232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 809.411342][T11991] FAT-fs (nullb0): bogus number of reserved sectors [ 809.417968][T11991] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 809.716484][T12002] fuse: Bad value for 'fd' [ 810.734005][T12012] comedi comedi0: Minor 2147483647 is invalid! [ 810.956188][T12002] ipip0: entered promiscuous mode [ 811.553634][T12021] FAT-fs (nullb0): bogus number of reserved sectors [ 811.560264][T12021] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 811.587032][T12002] ipip0: entered allmulticast mode [ 812.510750][T12038] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 812.963096][ T9808] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 812.993350][T12038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.001202][T12038] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 813.185058][T12042] netlink: 'syz.2.1195': attribute type 4 has an invalid length. [ 813.250252][T12044] netlink: 'syz.2.1195': attribute type 4 has an invalid length. [ 813.334961][T12046] evm: overlay not supported [ 813.416681][ T29] audit: type=1400 audit(1772513274.476:838): avc: denied { watch } for pid=12035 comm="syz.4.1194" path="/200/bus/file1" dev="overlay" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 813.737636][ T29] audit: type=1400 audit(1772513274.476:839): avc: denied { watch_sb watch_reads } for pid=12035 comm="syz.4.1194" path="/200/bus/file1" dev="overlay" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 813.875300][T12055] libceph: resolve '0..' (ret=-3): failed [ 814.900448][T12061] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1200'. [ 815.977293][T12072] comedi comedi0: Minor 2147483647 is invalid! [ 816.953997][T12078] comedi comedi0: Minor 2147483647 is invalid! [ 819.334807][T12089] netlink: 'syz.1.1207': attribute type 4 has an invalid length. [ 819.387516][T12087] FAT-fs (loop11): unable to read boot sector [ 819.393775][T12090] netlink: 'syz.1.1207': attribute type 4 has an invalid length. [ 820.066203][T12098] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 820.577398][T12102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.601892][T12115] 9p: Bad value for 'rfdno' [ 821.722757][ T29] audit: type=1400 audit(1772513282.315:840): avc: denied { ioctl } for pid=12107 comm="syz.0.1211" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 821.747744][ T5869] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 821.937327][T12123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.099469][T12123] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 822.481623][ T5869] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 822.501392][ T5869] usb 5-1: config 0 has no interface number 0 [ 822.521462][ T5869] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 822.537677][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.553168][ T5869] usb 5-1: Product: syz [ 822.559949][ T5869] usb 5-1: Manufacturer: syz [ 822.565515][ T5869] usb 5-1: SerialNumber: syz [ 822.577554][ T5869] usb 5-1: config 0 descriptor?? [ 822.892164][T12130] block device autoloading is deprecated and will be removed. [ 822.979461][ T5869] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 823.006829][ T5869] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 823.040767][ T5869] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 823.066934][ T5869] usb 5-1: media controller created [ 823.122656][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.216327][T12139] overlayfs: failed to clone upperpath [ 823.395650][T12143] comedi comedi0: Minor 2147483647 is invalid! [ 823.831127][ T5869] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 823.959304][T12134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12134 comm=syz.4.1212 [ 824.157289][T12134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=12134 comm=syz.4.1212 [ 824.874963][T12134] fuse: Bad value for 'fd' [ 826.371491][ T5869] usb 5-1: USB disconnect, device number 29 [ 827.208957][T12176] autofs: Unknown parameter './cgroup.net/syz0' [ 829.156698][T12181] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 829.227133][ T792] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 831.485524][T12214] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 831.556484][ T792] usb 5-1: device descriptor read/all, error -71 [ 831.566697][ T29] audit: type=1400 audit(1772513291.004:841): avc: denied { create } for pid=12203 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 831.836989][ T29] audit: type=1400 audit(1772513291.014:842): avc: denied { write } for pid=12203 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 832.245152][T12227] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.1234'. [ 832.254584][T12227] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.1234'. [ 832.751364][ T29] audit: type=1326 audit(1772513291.023:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 833.190613][ T29] audit: type=1326 audit(1772513291.023:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 833.457462][ T29] audit: type=1326 audit(1772513291.032:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.2.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feea3f9c799 code=0x7ffc0000 [ 833.643409][T12236] trusted_key: encrypted_key: insufficient parameters specified [ 833.870953][T12239] fuse: Unknown parameter 'f' [ 833.913252][T12228] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 833.922584][T12228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 833.932294][T12228] batman_adv: batadv0: Adding interface: vlan1 [ 833.938430][T12228] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.963831][T12228] batman_adv: batadv0: Interface activated: vlan1 [ 833.999247][ T29] audit: type=1400 audit(1772513293.792:846): avc: denied { accept } for pid=12238 comm="syz.5.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 834.926521][T12255] kAFS: unable to lookup cell '(,c' [ 835.440224][T12243] [ 835.442579][T12243] ============================================ [ 835.448719][T12243] WARNING: possible recursive locking detected [ 835.454863][T12243] syzkaller #0 Tainted: G L [ 835.460829][T12243] -------------------------------------------- [ 835.466426][T12245] can0: slcan on ttyS3. [ 835.466957][T12243] syz.5.1237/12243 is trying to acquire lock: [ 835.477142][T12243] ffff8880329c90f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x2e/0x360 [ 835.486045][T12243] [ 835.486045][T12243] but task is already holding lock: [ 835.493394][T12243] ffff8880329ca0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 835.503073][T12243] [ 835.503073][T12243] other info that might help us debug this: [ 835.511112][T12243] Possible unsafe locking scenario: [ 835.511112][T12243] [ 835.518543][T12243] CPU0 [ 835.521804][T12243] ---- [ 835.525061][T12243] lock(&dev->mutex#4); [ 835.529302][T12243] lock(&dev->mutex#4); [ 835.533536][T12243] [ 835.533536][T12243] *** DEADLOCK *** [ 835.533536][T12243] [ 835.541658][T12243] May be due to missing lock nesting notation [ 835.541658][T12243] [ 835.549954][T12243] 1 lock held by syz.5.1237/12243: [ 835.555047][T12243] #0: ffff8880329ca0f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x180/0x3310 [ 835.565164][T12243] [ 835.565164][T12243] stack backtrace: [ 835.571056][T12243] CPU: 0 UID: 0 PID: 12243 Comm: syz.5.1237 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.571088][T12243] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 835.571096][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.571114][T12243] Call Trace: [ 835.571122][T12243] [ 835.571134][T12243] dump_stack_lvl+0x100/0x190 [ 835.571171][T12243] print_deadlock_bug.cold+0xbd/0xca [ 835.571205][T12243] __lock_acquire+0x12bb/0x2630 [ 835.571242][T12243] lock_acquire+0x1cf/0x380 [ 835.571272][T12243] ? comedi_do_insn+0x2e/0x360 [ 835.571296][T12243] ? __pfx___might_resched+0x10/0x10 [ 835.571320][T12243] __mutex_lock+0x1a2/0x1b90 [ 835.571344][T12243] ? comedi_do_insn+0x2e/0x360 [ 835.571367][T12243] ? comedi_do_insn+0x2e/0x360 [ 835.571391][T12243] ? __pfx___mutex_lock+0x10/0x10 [ 835.571415][T12243] ? __pfx___might_resched+0x10/0x10 [ 835.571439][T12243] ? __up_read+0x2c5/0x700 [ 835.571462][T12243] ? comedi_do_insn+0x2e/0x360 [ 835.571482][T12243] comedi_do_insn+0x2e/0x360 [ 835.571506][T12243] comedi_dio_bitfield2+0x3c0/0x420 [ 835.571529][T12243] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 835.571553][T12243] ? find_held_lock+0x2b/0x80 [ 835.571579][T12243] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 835.571614][T12243] ? lockdep_hardirqs_on+0x78/0x100 [ 835.571636][T12243] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 835.571671][T12243] bonding_dio_insn_bits+0x2b9/0x570 [ 835.571701][T12243] ? kasan_save_track+0x14/0x30 [ 835.571731][T12243] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 835.571760][T12243] ? __x64_sys_ioctl+0x18e/0x210 [ 835.571790][T12243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.571814][T12243] insn_rw_emulate_bits+0x2a2/0x5e0 [ 835.571850][T12243] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 835.571887][T12243] ? comedi_check_chanlist+0x27e/0x300 [ 835.571921][T12243] parse_insn+0x83f/0x19f0 [ 835.571948][T12243] ? trace_kmalloc+0x101/0x130 [ 835.571972][T12243] ? __pfx_parse_insn+0x10/0x10 [ 835.571998][T12243] ? __kmalloc_noprof+0x320/0x850 [ 835.572029][T12243] do_insn_ioctl+0x152/0x4e0 [ 835.572059][T12243] comedi_unlocked_ioctl+0xf68/0x3310 [ 835.572089][T12243] ? tomoyo_path_number_perm+0x188/0x580 [ 835.572112][T12243] ? futex_wait+0x125/0x380 [ 835.572137][T12243] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 835.572170][T12243] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 835.572200][T12243] ? do_vfs_ioctl+0x226/0x13e0 [ 835.572229][T12243] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 835.572259][T12243] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 835.572290][T12243] ? __fget_files+0x215/0x3d0 [ 835.572310][T12243] ? hook_file_ioctl_common+0x146/0x410 [ 835.572342][T12243] ? selinux_file_ioctl+0x139/0x290 [ 835.572365][T12243] ? selinux_file_ioctl+0xb4/0x290 [ 835.572389][T12243] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 835.572420][T12243] __x64_sys_ioctl+0x18e/0x210 [ 835.572450][T12243] do_syscall_64+0x106/0xf80 [ 835.572472][T12243] ? clear_bhb_loop+0x40/0x90 [ 835.572496][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.572518][T12243] RIP: 0033:0x7fa46c19c799 [ 835.572536][T12243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.572557][T12243] RSP: 002b:00007fa46d110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.572578][T12243] RAX: ffffffffffffffda RBX: 00007fa46c415fa0 RCX: 00007fa46c19c799 [ 835.572592][T12243] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000004 [ 835.572606][T12243] RBP: 00007fa46c232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 835.572619][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.572632][T12243] R13: 00007fa46c416038 R14: 00007fa46c415fa0 R15: 00007ffdc16099f8 [ 835.572653][T12243] [ 835.943325][ T792] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 836.225704][T12245] can0 (unregistered): slcan off ttyS3. [ 836.281689][ T792] usb 5-1: Using ep0 maxpacket: 32 [ 836.800460][T10596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.810567][ T792] usb 5-1: device descriptor read/all, error -71 [ 836.877654][T10596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.947260][T10596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.009309][T12258] base_sock_release(ffff88807840a840) sk=ffff88807a1cd000 [ 837.043009][T10596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.321866][T10596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.333735][T10596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.355244][T10596] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 837.364382][T10596] bond0 (unregistering): Released all slaves [ 837.444176][T10596] #{6c: left promiscuous mode [ 837.492628][T10596] : left promiscuous mode [ 837.554070][T10596] tipc: Left network mode [ 837.569413][T10596] IPVS: stopping backup sync thread 7438 ... [ 837.685309][T10596] hsr_slave_0: left promiscuous mode [ 837.701777][T10596] hsr_slave_1: left promiscuous mode [ 837.712328][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.719769][T10596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.728016][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.735397][T10596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.746631][T10596] batman_adv: batadv0: Interface deactivated: macvtap1 [ 837.753486][T10596] batman_adv: batadv0: Removing interface: macvtap1 [ 837.761647][T10596] batman_adv: batadv0: Interface deactivated: macvtap3 [ 837.768775][T10596] batman_adv: batadv0: Removing interface: macvtap3 [ 837.775804][T10596] batman_adv: batadv0: Interface deactivated: vlan1 [ 837.784023][T10596] batman_adv: batadv0: Removing interface: vlan1 [ 837.794873][T10596] batadv_slave_0: left promiscuous mode [ 837.800905][T10596] veth1_macvtap: left promiscuous mode [ 837.806366][T10596] veth0_macvtap: left promiscuous mode [ 837.812149][T10596] veth1_vlan: left promiscuous mode [ 837.817374][T10596] veth0_vlan: left promiscuous mode [ 837.925403][T10596] team0 (unregistering): Port device team_slave_1 removed [ 837.938076][T10596] team0 (unregistering): Port device team_slave_0 removed [ 837.971927][ T10] infiniband syz0: ib_query_port failed (-19) [ 838.213708][T10596] IPVS: stop unused estimator thread 0... [ 838.283562][T10596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.326370][T10596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.390430][T10596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.455229][T10596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.519523][T10596] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.575285][T10596] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.630786][T10596] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.691899][T10596] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.811354][T10596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.854524][T10596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.907222][T10596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.971369][T10596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.087646][T10596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.137502][T10596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.196265][T10596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.249642][T10596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.372185][T10596] bridge_slave_1: left allmulticast mode [ 839.377841][T10596] bridge_slave_1: left promiscuous mode [ 839.393282][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.415480][T10596] bridge_slave_0: left allmulticast mode [ 839.421123][T10596] bridge_slave_0: left promiscuous mode [ 839.427006][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.693051][T10596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.702506][T10596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.712070][T10596] bond0 (unregistering): Released all slaves [ 839.751584][T10596] bond2 (unregistering): (slave gretap1): Releasing active interface [ 839.876823][T10596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.886401][T10596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.896564][T10596] bond0 (unregistering): Released all slaves [ 839.903859][T10596] bond1 (unregistering): Released all slaves [ 839.912302][T10596] bond2 (unregistering): Released all slaves [ 839.920634][T10596] bond3 (unregistering): Released all slaves [ 839.929557][T10596] bond4 (unregistering): (slave lo): Releasing backup interface [ 839.937354][T10596] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 839.949310][T10596] bond4 (unregistering): Released all slaves [ 839.957368][T10596] bond5 (unregistering): Released all slaves [ 840.000299][T10596] team0: Port device gtp0 removed [ 840.154169][T10596] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 840.163323][T10596] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 840.172064][T10596] bond0 (unregistering): Released all slaves [ 840.263919][T10596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.273380][T10596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.282650][T10596] bond0 (unregistering): Released all slaves [ 840.403665][T10596] tipc: Left network mode [ 840.414715][T10596] tipc: Left network mode [ 840.435978][T10596] tipc: Disabling bearer [ 840.442879][T10596] tipc: Left network mode [ 841.008308][T10596] hsr_slave_0: left promiscuous mode [ 841.013966][T10596] hsr_slave_1: left promiscuous mode [ 841.019880][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.027250][T10596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.043118][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.050716][T10596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.058233][T10596] batman_adv: batadv0: Interface deactivated: macvtap1 [ 841.067142][T10596] batman_adv: batadv0: Removing interface: macvtap1 [ 841.074343][T10596] batman_adv: batadv0: Interface deactivated: macvtap3 [ 841.081188][T10596] batman_adv: batadv0: Removing interface: macvtap3 [ 841.092289][T10596] hsr_slave_0: left promiscuous mode [ 841.099263][T10596] hsr_slave_1: left promiscuous mode [ 841.105097][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.112464][T10596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.120398][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.128546][T10596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.137120][T10596] batman_adv: batadv0: Interface deactivated: macvtap1 [ 841.143964][T10596] batman_adv: batadv0: Removing interface: macvtap1 [ 841.151456][T10596] batman_adv: batadv0: Interface deactivated: macvtap3 [ 841.158475][T10596] batman_adv: batadv0: Removing interface: macvtap3 [ 841.165439][T10596] batman_adv: batadv0: Interface deactivated: vlan1 [ 841.172295][T10596] batman_adv: batadv0: Removing interface: vlan1 [ 841.180371][T10596] batman_adv: batadv0: Interface deactivated: macvtap5 [ 841.187220][T10596] batman_adv: batadv0: Removing interface: macvtap5 [ 841.198579][T10596] batman_adv: batadv0: Interface deactivated: macvtap6 [ 841.206244][T10596] batman_adv: batadv0: Removing interface: macvtap6 [ 841.215223][T10596] hsr_slave_0: left promiscuous mode [ 841.222042][T10596] hsr_slave_1: left promiscuous mode [ 841.227677][T10596] batman_adv: batadv0: Interface deactivated: macvtap1 [ 841.234739][T10596] batman_adv: batadv0: Removing interface: macvtap1 [ 841.241797][T10596] batman_adv: batadv0: Interface deactivated: macvtap2 [ 841.249391][T10596] batman_adv: batadv0: Removing interface: macvtap2 [ 841.256862][T10596] batman_adv: batadv0: Interface deactivated: macvtap3 [ 841.263891][T10596] batman_adv: batadv0: Removing interface: macvtap3 [ 841.270780][T10596] batman_adv: batadv0: Interface deactivated: macvtap4 [ 841.277667][T10596] batman_adv: batadv0: Removing interface: macvtap4 [ 841.284496][T10596] batman_adv: batadv0: Interface deactivated: macvtap5 [ 841.291445][T10596] batman_adv: batadv0: Removing interface: macvtap5 [ 841.298294][T10596] batman_adv: batadv0: Interface deactivated: macvtap6 [ 841.305210][T10596] batman_adv: batadv0: Removing interface: macvtap6 [ 841.314691][T10596] hsr_slave_0: left promiscuous mode [ 841.320481][T10596] hsr_slave_1: left promiscuous mode [ 841.325974][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.333397][T10596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.341285][T10596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.348641][T10596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.356097][T10596] batman_adv: batadv0: Interface deactivated: macvtap1 [ 841.362990][T10596] batman_adv: batadv0: Removing interface: macvtap1 [ 841.369823][T10596] batman_adv: batadv0: Interface deactivated: macvtap2 [ 841.376898][T10596] batman_adv: batadv0: Removing interface: macvtap2 [ 841.383837][T10596] batman_adv: batadv0: Interface deactivated: macvtap3 [ 841.390667][T10596] batman_adv: batadv0: Removing interface: macvtap3 [ 841.403072][T10596] batadv_slave_0: left promiscuous mode [ 841.408633][T10596] veth1_macvtap: left promiscuous mode [ 841.414126][T10596] veth0_macvtap: left promiscuous mode [ 841.419605][T10596] veth1_vlan: left promiscuous mode [ 841.424871][T10596] veth0_vlan: left promiscuous mode [ 841.430520][T10596] batadv_slave_0: left promiscuous mode [ 841.436297][T10596] veth1_macvtap: left promiscuous mode [ 841.441759][T10596] veth0_macvtap: left promiscuous mode [ 841.448053][T10596] veth1_vlan: left promiscuous mode [ 841.453282][T10596] veth0_vlan: left promiscuous mode [ 841.459187][T10596] batadv_slave_0: left promiscuous mode [ 841.464724][T10596] veth1_macvtap: left promiscuous mode [ 841.470196][T10596] veth0_macvtap: left promiscuous mode [ 841.476046][T10596] batadv_slave_0: left promiscuous mode [ 841.481984][T10596] veth0_macvtap: left promiscuous mode [ 841.487453][T10596] veth1_vlan: left promiscuous mode [ 841.492708][T10596] veth0_vlan: left promiscuous mode [ 841.611463][T10596] team0 (unregistering): Port device batadv1 removed [ 841.662366][T10596] team0 (unregistering): Port device team_slave_1 removed [ 841.672672][T10596] team0 (unregistering): Port device team_slave_0 removed [ 841.771499][T10596] team0 (unregistering): Port device team_slave_1 removed [ 841.820627][T10596] pim6reg (unregistering): left allmulticast mode [ 841.954137][T10596] team0 (unregistering): Port device team_slave_1 removed [ 843.105661][T10596] IPVS: stop unused estimator thread 0... [ 843.116432][T10596] IPVS: stop unused estimator thread 0... [ 843.128710][T10596] IPVS: stop unused estimator thread 0...