last executing test programs: 2m58.980605699s ago: executing program 1 (id=574): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$sysctl(r0, &(0x7f0000000100)='4\x00', 0x2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000080)) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) getpid() r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}}, 0xc090) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x23, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff1}, {0xf, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 2m58.895395525s ago: executing program 1 (id=575): r0 = syz_open_dev$media(&(0x7f0000000000), 0xffffffff9ae85022, 0x30200) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000240)={0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r3) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) ioctl$RTC_WKALM_RD(r1, 0x40187013, &(0x7f00000000c0)) 2m58.793387112s ago: executing program 1 (id=576): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000400fb08dd810ec18ef2a1411fefd7ba712947a2b5ee3c8b4739917675a136a12d122d462d56fb00daea2e4f21e8e0f518992709c67b84ee283c66c6338760b4b8be15706d3046cc919823f675e1467f55bd4ea644ef927b8bc7b8389e0df5b0991a79b5d1ef3dcef606d4a9c541a8aa4559ebdc3a8c13126dbebec9dcc1f5629c3032d7", @ANYRES16=r0, @ANYBLOB="010025bd7000000000000100000040000180060001000a00000008000600776c630008000900610000000c00070000000000000000000800050000000000080008000000000008000b0073697000"], 0x54}}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x6, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001f00)='usbip-vudc.0', 0xc) (fail_nth: 8) 2m58.680298727s ago: executing program 1 (id=578): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) chroot(&(0x7f0000000580)='./file0/../file0\x00') (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private, 0x200}]}]}}}}}}}, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x10000000010, 0x101) (async) chdir(&(0x7f0000000000)='./file0\x00') mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 2m58.679479582s ago: executing program 1 (id=579): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000008c0)="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", 0x5a9}], 0x1}}], 0x2, 0x119e75c40673edef) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x4, 0x200, 0x4, 0x5, 0xf34}) 2m58.608867152s ago: executing program 1 (id=582): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x403, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKMODE={0x5, 0x11, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m58.541664938s ago: executing program 32 (id=582): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x403, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKMODE={0x5, 0x11, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m55.069502231s ago: executing program 3 (id=635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100000000000004000000000000002000000000000000840000000800000000000000000000000000ffff0a010100"], 0x58, 0x4855}, 0x24000052) 2m55.069131784s ago: executing program 3 (id=636): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf}}, './file0\x00'}) openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)=0x1) write$tun(r2, &(0x7f0000000140)={@void, @val={0x2, 0x3, 0xeb2f, 0x4, 0x1000, 0x1}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @broadcast, @loopback, @empty, @loopback}}, 0x3e) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x27, 0x0, 0x28, "02798027a0c2c971e46cda0f261e11ee", "7016d988bb47fe60c94e51c3f39ef4701067"}, 0x27, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200200, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) timer_create(0x3, &(0x7f0000000280)={0x0, 0x7}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000340)={{r5, r6+10000000}, {0x0, 0x989680}}, 0x0) mq_notify(r1, &(0x7f0000000400)={0x0, 0x41, 0x1, @thr={&(0x7f0000000380)="7c0ad9d628a2e74c38c5f4418d5b6ecb08c1369fc2c9d57056ae25fb549b18677b123416255951ab953dc7893aaf97e0a79bd021f5c9", &(0x7f00000003c0)="d393342f1b8bdad9dcff404aae3fa9c9a2b36dbf72addc90de3f6bd95a983f693bf69c6f638d78453e15f7fe1beaa3b4af8e"}}) lseek(0xffffffffffffffff, 0x1, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000440)={0x9, 0x3ff, {0xffffffffffffffff}, {0xee00}, 0x0, 0x9}) r8 = syz_open_procfs(r7, &(0x7f0000000480)='attr\x00') r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0xd0, 0xbe, &(0x7f0000000500)="91c3355adfbe4777ece6acbdc0f9af21820458958351364dcd9210c677ef26a54aa41132c3f27fd77443a8b06b85bd2d825f664b7e70c632d57ca01b067c648fa4eac66cc9f73321a9becb5b8d136637e7ce13483b7df7f6171fd15d2d8061281135ad49ec72fafbda54bf74d1254f1ed02afe7125034c507688d1bb80a1cc11a5a6f033954d39e847fd1a51d398e8acf4f824090c91f5e233488553cc04fac853acbda6805e62c2667978e33a6cb850cd0b6725d7c77d8bc7fdb0b4ccadca09113098e6431330b8dd72f50b4bf55fa5", &(0x7f0000000600)=""/190, 0x2, 0x0, 0xfb, 0x0, &(0x7f00000006c0)="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", &(0x7f00000007c0), 0xb57d587b0e50b68, 0x0, 0xc0000}, 0x50) close(0xffffffffffffffff) statfs(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/125) r10 = syz_open_dev$sndctrl(&(0x7f0000000940), 0x98, 0x20000) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000980)=0x2) fcntl$setlease(r10, 0x400, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x8, 0x6}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f0000000b00)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r2, 0xc0186445, &(0x7f0000000b40)={0x4, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r8, 0xc0186445, &(0x7f0000000b80)={0x6, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f0000000bc0)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000c00)={r11, 0x8a1, 0x6, 0x8, 0x2, [r12, r13, r14, r15], [0x6db, 0x6, 0xffff, 0xffff6aaa], [0x6, 0x1ff, 0x6, 0x2], [0x34e, 0x7, 0x5, 0x3113]}) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000cc0)) 2m55.010299304s ago: executing program 3 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x3, 0x0, 0x4000000000004, 0xfffffffd, 0x6, {0x2, 0xfff, 0x808, 0xfffffffffbd, 0x8, 0x81, 0xfaae, 0x6, 0x2, 0x4000, 0xe44, r2, r3, 0x4, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r4, &(0x7f00000000c0)='\x00', 0x400002, 0x19a4a9584e2c10e4) unshare(0x62020600) 2m54.160134618s ago: executing program 3 (id=662): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b90800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="120980ff0000", 0x0, 0x4, 0x4, 0x0, 0x0}) 2m54.090055159s ago: executing program 3 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}]}, 0x98}}, 0x0) r1 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000e3f000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000002840)={0xfffff4ce, 0x6, 0x10001, 0x9, 0x9, "2ea468089ad0c9043d6e07b9f3c1bebdb0c261", 0x1ff, 0x4697}) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4000003e, r2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDADDIO(r5, 0x4b34, 0x2) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) shmget(0x3, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) 2m54.088921491s ago: executing program 3 (id=666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000000c0)=0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x7, 0x8, 0xbd, 0x4, 0x9}) 2m38.850695847s ago: executing program 33 (id=666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000000c0)=0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x7, 0x8, 0xbd, 0x4, 0x9}) 2m9.038085177s ago: executing program 0 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_MODE={{0x3}, 0x6}}}, 0x7) setregid(0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b40)={0x0, &(0x7f0000000840)=[@wr_drn={0x68, 0x20, {0x2, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0x51dc}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x93, 0x7, 0x80000000, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0x75c5, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x5, 0x9}}, @wr_drn={0x68, 0x20, {0x5, 0x7}}, @out_dx={0x6a, 0x28, {0xd86e, 0x1, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x591, 0x1ff, 0x0, 0x3}}, @nested_create_vm={0x12d, 0x18}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x57, {0x1, "66ba4200b00feec4a18a2a22410f01c8c4a2f9307b070f07c40179176737410f01df26660fef3fc4e250f55cbfefb9a7080000b800000000ba010000000f30"}}, @uexit={0x0, 0x18, 0x8}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host_nat=0x6c02, 0x1, 0x8, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x2b, 0x0, 0xfffffffffffffffb, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0xf4d}}], 0x2f7}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000b80)={"bef27be3d7f8b49d9c9466a57974071b467cf3971397f413a5b745ef49edfeaa716da77f177770d1e1b82c7997aae964f2e34420a57441a514d974035fa5059e838e5758240072b9d742da460f150177e0b042b98dfede7be39f7f26badc75c1838f898b37fce614b946ecacec6b3c80760d2172babf25a7035aeee87f48d8a2fc87ef61bf4bea80f27bedcf9fb5899b78f92fa4dd784b5edbdf48e91207480a222f0faec16db25fd242ad3fc43fd54745dabd3da6527c6a97a888d014892b222a6916f610a5095247b873cbaffcba24ae27ed182c1a4aab97989c4ac1d27abc7dc98f0ccce763494b0fc5346109a7cb5c8c052496de2313fcad25754e7974a61205d89025514ebbda6dcc3a14e81e8feb1fead4452029b74688b2f4802df22762a556e509964545961ae6f8e8ff272ddb9ac7944066b82210bd0b611cb42fe4fa7d7a2d12929fe584538de861ee71cc371b8a74e1493f2b64887e541f079cb6184fe6dace585630ef4df3a27db2eddb207f8d55723a6aa92a9c6c92f7424feb168215e6e514abd9e95544e5fa482837a50b0ad2f3d9fa12614d2cfdad3f9459ebfb2ca70cd45a8a5066731a029fc0a7e997783bf9894ca4f9c7b04f28a0293bcfa5e446b8deb902a5b3840185db3c9f2a70169f04e952868b43bd85aa6c1876387db125f049e47898a651715cfcf45b1ab2e10f2c70a8bb532a3100cfde6d63d6f3ab0814687975db11030a240653ae4dbe4733231638778cff6411012bc7b3b6ecfb0d39275e2e1f15da261fd5119ef1620ea2928e3af714c7165f8a1cce5d4acfb30e172f4b7304a572575160829a1a413794c30d5ceb0e2b526b08df862fbeb3ff626c95e6dbc0ca2df7c82622e3330be6fa71c36cfbe7353d3c8f7c5d5f49c7ffa5cce20c4b615616033ce0a741cf5ba3ba5a27bac0b25d58a38affe6abc5fc642ed36693d1553c933c13aeb774092db5baa6ea503e29d08c2ef7786144377222b038df9e06ebe6739cba64219f49f1179f06de85bc5d939b03495e7d39271ad1d6ebef6a450179135c3a3307906f68218e9d3ca8c057e18f6478a406178a2960a37ddfcf7bfd0169f640a526b23d9430525a91d3101d63e118934f287d1764b458d82c68803000cb140ebb5075dba405272783d3f6c6bc5f9bf999928e68806fdb8af5d88507dafc776931e82be94ff449ed3b424820291bc1d1c60695a0f3d15ce512c93759db666654276f714ea8884483964c2d6473beae25ba4d85888af1f090b6080316cd2d253cb7a939fa105c3f0c85051c096db733b76cc5a1bf4a88b54dfa0c3e144045ba92fccc1ec7507146771392f75ad390b243b065cfc3f0078413fc1a408c1c720ae1e55381c3c5c895eaa288c8a257786bdf095037225fd7fdb4b2b76e12a178954b7295224531ecc5afe501cb922e76c09ccf8cf3"}) 2m9.037763666s ago: executing program 0 (id=1366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x400005}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xffbb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0x9}, r3, 0x8001}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x60}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r4}, 0x38) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMREADAUDIO(r5, 0x5392, &(0x7f0000000040)={@msf={0x3, 0x8b, 0x5}, 0x1, 0x0, 0x0}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 2m8.897884449s ago: executing program 0 (id=1368): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m8.83606223s ago: executing program 0 (id=1369): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x4c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r1, r2, 0x3, 0x5, 0x4}, 0x50) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x7, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x1, 0x5, 0x8001, 0x4, 0x2, 0x800, 0x6a, 0x8d], 0x8000000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSBRKP(r6, 0x541e, 0x4) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000b7080000000000d5f6007b8af8ff00000000b7080200090000007b8af0ff00000000bfa100000000000007210000f8ffffffef5400000000000407040000f0ffffffb702000008000000182300004a6a7b6b030d2f5736796240cc56f09c4d82dce70014b5c0e94523bedcd254ed6b195a471b61c91f0e140925092a7f0cb236e98525c46081e80459d879b5faf7ec81c73c2bdea0817ff0f1e073d6a248dfcf85b01cba2b6db41de355553bafd614d627da0cf90300"/211, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 2m8.834862668s ago: executing program 0 (id=1370): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ccgx-ucsi 0x08\x00', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000032c0)={{{@in=@empty, @in=@remote}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000033c0)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000032c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f00000033c0)=0xe8) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@nullb, r2, &(0x7f0000003400)) (async) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@nullb, r2, &(0x7f0000003400)) write(r1, &(0x7f0000000700)='ccgx-ucsi 0x08', 0xe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) setitimer(0x1, &(0x7f0000000280)={{}, {0x0, 0x2710}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000400)={0x40000118}) (async) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000400)={0x40000118}) read$FUSE(r1, &(0x7f0000001280)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xb, 0xc3, &(0x7f000000cf3d)=""/195, 0x76b64272995f1375, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x6}, 0x94) 2m8.63956571s ago: executing program 0 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x20000008}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x40000) 1m53.616695361s ago: executing program 34 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0xd, 0xe}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x320, 0x20000008}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x40000) 3.910257835s ago: executing program 5 (id=2735): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) capset(&(0x7f0000000600)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x400}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x70bd27, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x9}, 0x3}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000000700)) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, &(0x7f0000000040)="d93937f5a4264335cdef726eb393eb56a2ec451dc4ecb1f447fac3129349ab1be7bb6772192b174c3443191a0c2a997d70b6cc8cbbb600796b48b39e808cd5f73f2c20ad2db514ded8a28b9cfcdfc11c1f7a8c44330a1db2c47a58a96f2b41f27ad6ed51f2e8dc8ae1f3116f11fc10710b926e7906be81a1749e9713a65f214e28fa14dca5d1ee203643176e4de37cd60b9f4d28ec3753ca01c9120519bf5b1b1a3be60c32b4453d9895eeb7a9a5d1ef0b7fc0aa8f4f3f50205bf5a16619a70224821ffd8348e85b7339c33738d64b6f", 0xd0, 0x4, &(0x7f0000000200)={0x23, 0x46, 0x6, 0xc5}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000010000008000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x2000000000000397, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000004000000000000018200000b3f2e60e36b97a65e8b75403bb65054e76ad2fe750bc2e69a8dcc3bfd3ca19d1a1562dd6ff20d0574cad50878fb87a7d158d177cda159be3dc291b35", @ANYRES32=r4, @ANYBLOB="000000000000000061000000000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) listen(0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000180)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x0, 0x0, 0x0, 0x500, 0x0, 0x44301c2, r7}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 3.789545783s ago: executing program 6 (id=2736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x48000) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x20, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009c6afcff000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xfffffcc2, 0x0, 0x0, 0x9, '\x00', 0x0, 0x24}, 0x94) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="07ad25bd707f00001000011061cc63819bdbda8353987584716b5e2df64093ce7f9007a31f0f"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0x0, 0x1, 0x6}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x8005) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xfffffffffffffea1, 0x1, {0x2, '\x00', 0x101, 0x0, 0x7, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) 3.705765666s ago: executing program 5 (id=2737): syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d02400000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) nanosleep(&(0x7f0000000300)={0x2}, 0x0) (async, rerun: 32) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b80)) (async) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902"], 0x0) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (async, rerun: 64) r5 = dup(r2) (rerun: 64) r6 = fcntl$dupfd(r1, 0x406, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) (async, rerun: 32) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5}) (async, rerun: 32) write$char_usb(r0, &(0x7f0000000380)="b00000f6179eab2d7e77d4e088f3ddfecbe46e6875ae7023ff9ff70200fd69edc600009d156fe4e2690d692b4245a7496ce5bc97a295f2806e8fac4762bf500337a1a3ae10e674ae52c71af9ffb38ef4bee8deae1c32f6ca281f20452ddd4f8522cc9da2e208a6a07d553b28f2ecc63b8d59b03563d7d28b55cc2ed1", 0x7c) (async, rerun: 64) close(r0) (async, rerun: 64) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000140)) (async) fcntl$setstatus(r7, 0x4, 0x2000) 3.70532891s ago: executing program 5 (id=2738): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000000)={0xb}, 0x20) mknod(0x0, 0x4, 0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='0', 0x1) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @remote}, 0x14) write$binfmt_register(r2, &(0x7f0000000240)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\x01\x01\x01\x01\x01\x01', 0x3a, '\x01\x01\x01\x01\x01\x01', 0x3a, './file0', 0x3a, [0x43, 0x50, 0x4f, 0x4f, 0x50, 0x43]}, 0x39) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@caif=@rfm={0x25, 0x3, "cf3380e253261052e8e01095d0756746"}, {&(0x7f00000000c0)=""/128, 0x80}, &(0x7f0000000140), 0x11}, 0xa0) 3.610016812s ago: executing program 5 (id=2739): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="04130d0308000000849a5b18f74e14e403fc6c145d0c1d35beb0e1029d1bfef2129c4ae60e3e1e38609470c1505b9c5a2af9ec25cb187349e5a474083c0b5df3f405bd604b3119af580c54cd8859bd2c348876e599de838ce297c3b8ec5cfd2a29a3c8a0e11d00897d7faa5cbada5709e4e77bfcc87e1c715b3c66f1716a74d5"], 0x10) (async) syz_usb_connect$uac2(0x2, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512138240000102030109027c000301084006080b0001010120020904000000010120000924010000011c0042071f8942a79da8cfa10381c580a798bf96629311a4942880b30103030e047f100006090401000001022000090401010101022000090501090004050702082501020a01f9ff0904020000010220000904020101010220000905"], 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x69, 0x400002) io_uring_setup(0x69ff, &(0x7f00000000c0)={0x0, 0x43bd, 0x2, 0x3, 0x83e5, 0x0, r1}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000ae3a6a20c17a9557f5352b7a52d24c9b375c8607c5c28293039efd1196de10cde8dd70e9789de5c1bef74132812603a33d0d8343e4871a0a7a434174305f315b6f72e292e47c33421ea4ee3c344c938135b6b646c2d7bd65df514ebad6d90230287ff4d46677125ffe8f1cf74bda5b39a5f2768987f9356eef75dbca1af2bcc09cefea83660de710cb5a2a4f6c07bb68b07142b875748d76d8ae608c6dc4d84577b98ddefd3496f18308a63adf67aad29a07ba2b5da732b6fd489f117b2d8b18a3c66506dc9d1f3d0eb953e21ceffce0ff3cf6d25e7f1dd32b50250fa23489a062698bfda138902abf635aee4121eb9dc81edd53faf8d85caeb4cd8dc827e8d476b453607093488f4a7d5d09f2b9219801bb45413f514d4c3e28a7c47408", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r3], 0xf4}}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4004) (async) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="8400000010000104000000000300000000000000", @ANYRES32=r9, @ANYRES64=0x0], 0x84}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8) (async) pwritev(r5, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x1, 0x3e42, 0x407ff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000540)={0x7, [[0xd, 0x4, 0x1, 0x6, 0x8a56, 0x4, 0x0, 0x7], [0x800, 0x0, 0x4000009, 0xff, 0x6, 0x5e8d, 0x2000000, 0x7d9], [0x6, 0x40, 0x15, 0x80, 0x2, 0x40, 0x9]], '\x00', [{0xc, 0x5, 0x0, 0x0, 0x1}, {0x3, 0xc26d, 0x1, 0x0, 0x1, 0x1}, {0xfd, 0x77, 0x0, 0x1}, {0x17b, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x1}, {0xb, 0x210f, 0x1}, {0x580000, 0x9, 0x0, 0x1, 0x1}, {0x2, 0x56, 0x0, 0x1}, {0x1, 0x8, 0x1, 0x1}, {0x9, 0x48af80, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x8, 0x1}, {0x7fffffff, 0xa, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x9}) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r11, 0x4b40, &(0x7f0000000200)=""/125) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000b628182ca08853400000000000000"], 0x50) 3.549225263s ago: executing program 6 (id=2741): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='b', 0x1) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x110) 3.546975658s ago: executing program 6 (id=2744): r0 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004085}, 0x4054) (async) r3 = fsmount(r1, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r4, &(0x7f00000005c0)=""/4096, 0x1000) (async) wait4(r0, 0x0, 0x40000000, 0x0) r5 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x86) fchdir(r6) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) lseek(r7, 0x101, 0x1) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000080)={0x4, 0x4}, 0x2) (async) getdents(r7, &(0x7f00000002c0)=""/201, 0xc9) 3.480141505s ago: executing program 4 (id=2745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x6}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 3.478595029s ago: executing program 4 (id=2746): r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x220100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000580)) r1 = creat(&(0x7f0000001800)='./file0\x00', 0x83b24041df3a533f) lseek(r1, 0xffffffffffffff7f, 0x1) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)}, 0x34000041) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000e80)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x3, 0x0, [{0x7, 0x5, 0x8, '\x00', 0x55}, {0x7, 0x86, 0x8, '\x00', 0xff}, {0x7, 0x1f, 0x4e, '\x00', 0x3}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x5, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8}, {0x40, 0x90, 0x4, '\x00', 0x8}, {0x1, 0x4, 0x9, '\x00', 0x4}, {0x6, 0x27, 0x0, '\x00', 0x11}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0x3, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x5, '\x00', 0x7}, {0x0, 0x71, 0x6, '\x00', 0x9}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0x9, '\x00', 0x2}, {0x5, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x24, '\x00', 0x1}, {0x58, 0x4, 0x61, '\x00', 0x81}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x0, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xf, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa, '\x00', 0x9}]}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x80, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1e50}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x154}, {}, {}, {}, {}, {}, {0x40000000}, {}, {0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x4000000e}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x40000001}, {0x80000019}, {}, {}]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) write$tun(r5, 0x0, 0xfdef) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x9830b0, 0x0) 3.349235823s ago: executing program 6 (id=2748): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x1}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) (async) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$pppl2tp(0x18, 0x1, 0x1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') ioctl$SIOCGIFMTU(r14, 0x8921, &(0x7f00000001c0)={'lo\x00'}) 2.479834386s ago: executing program 4 (id=2751): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x1000000000000) ioctl(r0, 0x890b, &(0x7f0000000100)="00000000000000000000dc0000000000010000006c61706230") r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009441"]) 2.349833942s ago: executing program 4 (id=2752): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r1, r0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002080)={0x50, 0x0, r2, {0x7, 0x2d, 0x80, 0x4000, 0x2, 0x8001, 0x10001, 0x4, 0x0, 0x0, 0x2, 0x2}}, 0x50) ioctl(r0, 0x9, &(0x7f0000002100)="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") r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000003100), 0x630600, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000003580)={&(0x7f0000003140)=0x5, 0x8, &(0x7f0000003180)=[{}, {}, {}, {}, {}], &(0x7f0000003540)}) fsync(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000035c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000003600)={r4, 0x80000, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003680), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x1c, r7, 0x8, 0x5, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0xbcfb8a5a22bf66ab) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000037c0), r6) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000003880)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x3c, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x20000080) sendto(r6, &(0x7f00000038c0)="35f37207c49e7ae1d1e4c32f727d4f33e8be00c951d87c47602609edb302c74919325c25c56e7420fd1ede2ae0c5d64fd510bcc7cf4bfb03aef9b7b8469d6e0610b699f5938635edf654b054632dd8cd88e4c25afc764626de68cd488b009d", 0x5f, 0x20008050, &(0x7f0000003940)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000003a80)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x3c, r8, 0x101, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10001}, 0x4088) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000003bc0)={&(0x7f0000003ac0)=[0x0, 0x0, 0x0], &(0x7f0000003b00)=[0x0, 0x0], &(0x7f0000003b40)=[0x0, 0x0, 0x0], &(0x7f0000003b80)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000003d00)={&(0x7f0000003c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003c40)=[0x0, 0x0], &(0x7f0000003c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003cc0)=[0x0], 0x4, 0x2, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000003d40)={r10, r12, 0x5, 0x1, 0x10000}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000003dc0), r6) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x5c, r13, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c0}, 0x40842) ioctl$FBIOBLANK(r3, 0x4611, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000003f40)={&(0x7f0000003f00)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000003f80)={r14, r9, r11, 0x4, 0x7fffffff, 0xc, 0x2, 0x8005, 0xfffffdb0, 0xb8, 0x1ff, 0x24000}) syz_open_dev$dri(&(0x7f0000003fc0), 0x0, 0x741000) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004040), r6) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000004180)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004140)={&(0x7f0000004080)={0xc0, r15, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x277, 0x44}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3f}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x85}, @NL80211_ATTR_STA_WME={0x54, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2d}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xe, 0xac, "309fbefb4dbc3b2d99c9"}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 2.280251944s ago: executing program 4 (id=2753): openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x3, 0x5, 0x4005, 0x80000000, 0x0, 0x45, 0xfffffffffffffffd, 0x8000000000bdb], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 1.067726168s ago: executing program 6 (id=2755): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x206000, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000040)) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)=@multiplanar_overlay={0x7fff, 0x7, 0x4, 0x800001, 0x4, {r2, r3/1000+10000}, {0x5, 0x8, 0x72, 0x7, 0x4, 0x2, "5032a836"}, 0x1, 0x3, {&(0x7f00000001c0)=[{0x7fff, 0x80000001, {0x6}, 0x4}, {0x7, 0xfff, {0x4}, 0x8000}]}, 0x7}) close_range(r0, r0, 0x0) r4 = mq_open(&(0x7f00000002c0)='/dev/userio\x00', 0x1, 0x22, &(0x7f0000000300)={0x3, 0xffffffffffff9300, 0x97, 0x1000}) mq_timedreceive(r4, &(0x7f0000000340)=""/44, 0x2c, 0xfffffffffffffffb, &(0x7f0000000380)={0x77359400}) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x4954cc66f0e6c59b) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000480)=0x1, 0x4) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f00000004c0)={0x200}) r6 = mq_open(&(0x7f0000000500)=':)],\x00', 0x80, 0x2, &(0x7f0000000540)={0x4, 0x6, 0x9, 0xffff}) mq_timedreceive(r6, &(0x7f0000000580)=""/240, 0xf0, 0x0, &(0x7f0000000680)={0x0, 0x989680}) fcntl$addseals(r6, 0x409, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0), 0xf54b86056214c67d, 0x0) mq_notify(r6, &(0x7f0000001740)={0x0, 0xc, 0x2, @thr={&(0x7f0000000700)="e447df896d9d324ab2d469", &(0x7f0000000740)="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"}}) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001780), 0xa540, 0x0) ioctl$CDROM_MEDIA_CHANGED(r7, 0x5325, 0x3) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000017c0)=0x1000, 0x4) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r8, &(0x7f0000001800)="2aebd2c354567d6f782e09a5f5ada7f198f7bd131e6efc3960a152cf1720513f6ece997c0ed35a75935df9262ccd659c1d844334600175b31f5e369f8689490b0c24ede544885e4f013ddb040760d9bbb3eb8e24b7d96e1888bc50caa470538bf19e47c745d1d0156db60f786ee2547ce74b7662cf7451f18a4457a60909bee44df30258b1ed0e11a68c579b6cbe9340f497efac6842debc185096cd9b6f203ba77a2b9accf5f6ead11da0cf01d4bf7bcde2c265283ff5334f3e539559be49721cc441f97df78917d5780fa36948c19fe820b2843758b4", 0xd7, 0x1, &(0x7f0000001900), 0x12) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001940)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) write(r1, &(0x7f00000019c0)="421526e8745ba27f613b61089ae24774328b190283d4e46ede6f8865e32fb6694bc5876a3ecb102d2e1a0c5bb5a0dc0f578330687eef3ebf4bdc525261fc392946bd96d18647d480dbc5b06dd060b8e74fab17a5c0674bfb07", 0x59) r9 = syz_open_dev$sndpcmc(&(0x7f0000001a40), 0x3ff, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r9, 0x40044145, &(0x7f0000001a80)=0x5) ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000001ac0)=""/4096, &(0x7f0000002ac0)=0x1000) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r10, 0x8010aebb, &(0x7f0000002b00)={0x40000, 0x103000}) sendto$inet(0xffffffffffffffff, &(0x7f0000002b40)="4f279dff0ea8b5769e6e7d4eab06eaff0a5e8f362d5b7482fce072459e1a126b74e6195047ed597164a777ffb845e1caddd3c6e55e63d5dc2ac02a6919c067f8fa6b5e31986dd120b987cd08f44a8f34", 0x50, 0x20040080, &(0x7f0000002bc0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1.067364405s ago: executing program 4 (id=2756): mbind(&(0x7f00002d5000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000c80)=0xb, 0x5, 0x3) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback={0xffff0000000005b4}, 0x1}, 0x80, 0x0}, 0x0) r5 = semget$private(0x0, 0x6, 0x1b5) semop(r5, &(0x7f0000000200)=[{0x0, 0xffff}], 0x2aaaaae1) semctl$SETVAL(r5, 0x0, 0x10, &(0x7f00000000c0)=0xd3) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r8, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r9 = socket(0x3, 0xa, 0xc6) semctl$GETNCNT(r5, 0x2, 0xe, &(0x7f0000000b80)=""/234) sendmsg$inet(r9, &(0x7f0000000b40)={&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000580)="7954ef00795f7fab4ced06f3a79c8ec2df0fca20df05f2267b55cf8b5bab18506c966739c439466f6620e506d34def762a0eebeb22aa29695024316bdbfbea752b2a2939d54440a356eda81921ef637c26077c0fbfbbfd376992dc61072ff406ed87a767ce80710859e6c52a3e2631f87d48a8767f6939e4029345fc2746ce4049b9875d6361aaeca29102020977df8276c19441a705e8b8c6e334005efcc39f1859e90694040919dc860acb077c105c8e6675b0a3a4dbbf4da19182fae843a4c25660fe99c61d2fa07749c95ff7b05a8641561bb47daa8d2ff24b4e43e3aa893a5dd3157ce54ae99ca856ec3758", 0xee}, {&(0x7f0000000680)="cbb7ef0201ec390ebf6f23127d6f2f5a4546bcfe7f3fff716330b93574b3ce38dcb8a2c896ef9d39a5234470d182e2d624bbaf7c7764abeb907816ad08d7b35a734fb63fb34630bd4d4e9222b1061de3a03ddd0b1a1a4b6b195c6bc1e00e061a0ab5f2deb6cc981f0d5b89a3d377397634e5f939451af6629465b1fca8d068f2d249da045da534c27a7fa763a5797e56", 0x90}, {&(0x7f0000000740)="6231aa2fb040467a345e5c6c6bc226d05115a60f1828d86a95acc3dba799b131b9d39c2c68958763d43c565be01e5768439ad00389483e276e9a36", 0x3b}], 0x3, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8d75}}], 0x90}, 0x84) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r6) r11 = dup(r10) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r12 = syz_io_uring_setup(0x531c, &(0x7f0000000340)={0x0, 0x16e0, 0x1000, 0x2, 0x5, 0x0, r11}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) syz_ublk_setup_queues(r11, r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x69}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x1000, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x10146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f71, 0x80, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400b4ac, 0x20, 0x8, 0x9d7c, 0x0, r12}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r13 = socket(0x10, 0x3, 0x0) recvmmsg(r13, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) r14 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r16, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0xc, 0x2, 0x5, 0x29a}, {0x7, 0x1, 0x1, 0x4, 0x5, 0x6}, 0x0, 0x1, 0xad4}}]}}]}, 0x58}}, 0x44080) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 979.358907ms ago: executing program 6 (id=2757): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcbfffff811628000000000095ff000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x1000, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0x198, 0x1, [@m_simple={0xb0, 0x16, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x6, 0xffffffffffffffff, 0x4}}, @TCA_DEF_DATA={0xa, 0x3, 'vcan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x10000000, 0x7f, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xeb, 0x2, 0x401, 0xdd}}]}, {0x2d, 0x6, "6fa6f9ed095cb0677dcafb618347e2f4e0421953df3bc7fc96e095e0d16047b1e3e112809c1f0d81a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0xf2f2a92e329a0d7c}}}}, @m_gact={0xe4, 0x8, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x200, 0x6, 0x50000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x450d, 0x5, 0x8, 0xd7, 0x7}}]}, {0x85, 0x6, "698e7a010b79116730d8ead20f176655a05772ed77e8ca5ae8aca49c2a1b0f841e6d024c7239dd357c869b7913596bf5685a4ceefce81575f5fffbd6a929d1eba23ab56f9b2f7ecfe4c21a9a7a73d5b81fc49ffb9370ac5fba9fa8988f053f00507456f6e5a9c83ec4c976be8556e5f04be5bdf8179063f70ec8adf4cedc37e6f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0xe54, 0x1, [@m_pedit={0xe50, 0x9, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7f, 0x8, 0x8, 0x2, 0x6}, 0x4, 0xc}, [{0x4, 0x0, 0x0, 0x9, 0x1, 0x7}, {0x1, 0x2, 0x9, 0x2, 0xe, 0x2}, {0x7, 0xbe4a, 0x5, 0x4, 0x297, 0x7}, {0xfffffff8, 0x8, 0x100, 0x5, 0x5, 0x5}, {0xe0, 0x8, 0x0, 0x3, 0x8, 0x10001}, {0x9, 0x4, 0xc8, 0x1, 0x47f1, 0x87}, {0xe, 0x2, 0xfffffff9, 0x8, 0x800, 0x5}, {0x5, 0x6, 0x1, 0x9, 0x10}, {0x2, 0x6, 0x5, 0xc, 0x6, 0x20}, {0x9, 0x3, 0xb8, 0x5, 0x7, 0x81}, {0x777, 0x9, 0x2, 0xc, 0x2, 0x3}, {0x9, 0x8, 0x0, 0x7, 0x28ae}, {0x1, 0x6, 0xffffffff, 0x1ff, 0x5b02dc02, 0x6}, {0x10001, 0x200, 0x1, 0x6c68, 0xb, 0x1000}, {0x2, 0x7, 0x5, 0x1c, 0x100, 0x10000}, {0x1, 0xc4c7, 0x58c5, 0x2, 0x9, 0x4}, {0x5, 0x8a0d, 0x3, 0x80, 0xffff, 0x800}, {0x1, 0x7, 0xde2, 0xf, 0x3, 0x80}, {0x3, 0xf, 0x7, 0xbd, 0xfff, 0x7}, {0x7f, 0x40, 0xe0000000, 0x8, 0xc, 0x10001}, {0x4, 0x77, 0x58e1, 0x31, 0x2, 0x4}, {0x0, 0x9, 0x7, 0x4, 0x800, 0x18}, {0x8000, 0x1, 0x1, 0x800, 0x9, 0x80}, {0xf67e, 0x3, 0x9, 0x76f, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x1, 0xb, 0x8}, {0x7, 0xae1, 0x7ff, 0x61b, 0x63de, 0x29}, {0x9, 0x8000, 0x0, 0xa8, 0x5, 0x5}, {0xd0c5, 0x10000, 0x677, 0x7fffffff, 0x3, 0x1}, {0xa, 0xf, 0x8, 0x7, 0xff, 0x7fffffff}, {0x400, 0x0, 0x4, 0x7, 0xffffffff, 0x7}, {0xd, 0x8, 0x9, 0x282c, 0x6, 0x100}, {0x8, 0x6, 0xfffffffe, 0x5, 0x1, 0x5c}, {0x2, 0x7fff, 0x7, 0x7ff, 0x1, 0x7ff}, {0x40, 0x7, 0x6bc19791, 0x0, 0x3, 0x1}, {0xfffffffc, 0x3, 0x2, 0x6b, 0xe7, 0x1}, {0x1, 0x10, 0x6, 0xdf31, 0x7, 0xfffff148}, {0xdd47, 0x7fffffff, 0x6cd9, 0xfff, 0x3e1d, 0x1}, {0x10001, 0x0, 0x8, 0x7, 0x8b, 0x4}, {0x1, 0x3, 0x2, 0x0, 0x5, 0x5}, {0x8, 0x3, 0x2, 0x0, 0x5d97110b, 0x6}, {0x26, 0x1, 0x80000000, 0x6, 0x80000000}, {0x10, 0x7, 0x6, 0xc6, 0x3, 0x3}, {0x3ff, 0x80, 0x0, 0x100, 0xf85, 0x6}, {0x3, 0xffffffc0, 0x0, 0xff, 0x81}, {0xea, 0x10000, 0xfffffbff, 0x9, 0x4, 0x7}, {0x7ff, 0x1, 0x0, 0x9, 0xf, 0x9}, {0xfffffff8, 0x8, 0x9, 0x80, 0x2}, {0x0, 0x8, 0x1, 0x2, 0x1, 0x4886}, {0x8, 0x94, 0x2, 0x2361, 0x1}, {0x536, 0x6, 0xfffffff7, 0xfff, 0x9, 0x1}, {0x4, 0x8, 0x2b3, 0x7, 0x6, 0x9}, {0xe, 0x4, 0xfffffff1, 0xdea3, 0x1ff, 0x4ac65423}, {0xa, 0x8, 0x8001, 0x6, 0xfffffff7, 0x9}, {0x2000, 0x4, 0x0, 0x4, 0x9, 0xf3f5c6e}, {0x0, 0x81, 0x2, 0x40, 0xffffffff, 0x8}, {0x7, 0xd1d8, 0x7, 0x7ff, 0x3, 0x9}, {0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x4}, {0xf, 0x80000000, 0x1, 0x3, 0x5, 0x8}, {0xd6, 0x5, 0x91, 0x3, 0x66, 0x4}, {0x5, 0xffffff80, 0x9, 0x1054, 0x7, 0x8}, {0x4, 0x7, 0x7, 0x1, 0xba67, 0x7fff}, {0x1, 0xc000000, 0x4, 0xfff, 0x4, 0x3}, {0x4, 0x2, 0x3, 0x2, 0xa, 0x8001}, {0x7fff, 0xb2b9, 0x1000, 0x9, 0x6ec00, 0x5}, {0xa, 0x7, 0x3, 0xffff62bd, 0x800, 0x4}, {0x5, 0xa, 0x6, 0x5, 0x7, 0x889}, {0x1, 0xe, 0x3, 0x945, 0x5, 0x3ff}, {0x400, 0x2, 0x1895, 0xe, 0x8, 0xfff}, {0x6, 0x99, 0x5, 0x4, 0x80, 0x5}, {0x9, 0xc, 0x2, 0x7, 0x8, 0xb245}, {0x73d, 0x10, 0x1, 0xb3, 0x5, 0x919}, {0xffffff35, 0x2, 0xfffffffc, 0x5, 0x1, 0x4945}, {0x6, 0x55, 0x967a, 0xe, 0x3, 0x4}, {0x0, 0x0, 0x75, 0x2, 0x8, 0x5}, {0x7, 0x5, 0x400c0000, 0xffffff81, 0x401, 0x8}, {0x922a, 0x9, 0x3, 0x0, 0x6, 0x81}, {0xf, 0x8, 0x1, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x2, 0x4411, 0xffffffff, 0x5}, {0x0, 0xa9e, 0x5, 0x800, 0x4000000, 0x8}, {0xffffff80, 0x5, 0x2, 0x8000, 0x80000000, 0x3}, {0x8, 0x8, 0x4, 0x9, 0xfffffff8, 0x9}, {0x80000001, 0xfffffffe, 0x4, 0x4, 0x1, 0x3}, {0x8, 0x9, 0x8, 0x7, 0x2, 0x80}, {0x7f000000, 0x1, 0x2, 0x80, 0x5, 0x7fff}, {0x75, 0x36, 0x9, 0x4, 0xa1c, 0xb}, {0x3, 0x5a02, 0x4, 0x10001, 0x0, 0x3}, {0xfffff000, 0x6, 0x1, 0x5, 0x5, 0x4}, {0x9, 0x7fff, 0x9, 0x2, 0x6, 0xfffffffe}, {0x79e, 0x3, 0x5, 0x9, 0x1, 0x7fff}, {0x2, 0x8, 0x4, 0x2, 0x2, 0x4}, {0xc8, 0x3, 0x0, 0x5, 0x15, 0x5}, {0x3, 0x6, 0x5, 0x100, 0x5f25, 0x2}, {0x3ff, 0x5, 0x10001, 0x8, 0xd32, 0xf}, {0x9, 0x2, 0x2, 0x7, 0x8, 0x401}, {0x9, 0x6, 0x0, 0xb, 0xc70, 0x7}, {0x40, 0x1, 0x9b9a48e0, 0xc5, 0x2, 0x7fffffff}, {0x7, 0x101, 0xeb, 0x800, 0x1, 0xd2e}, {0x6, 0x7f, 0xffff, 0x9, 0x2, 0x5}, {0x7fffffff, 0x7, 0x6, 0x6, 0x8, 0x8}, {0x5, 0xfffffff9, 0x7, 0xffffffff, 0x7, 0xfff}, {0x1ff, 0x9, 0x9, 0x4, 0x0, 0x4}, {0x9, 0x2, 0x7, 0x400, 0x12, 0x6}, {0x4, 0x8d, 0x4, 0x0, 0x9, 0x9}, {0x5, 0x0, 0x4, 0xfffffff7, 0x7, 0x27}, {0x0, 0x10001, 0x1, 0x8, 0x3, 0xe1}, {0x661266f2, 0x6, 0x2, 0x2, 0x3, 0x9}, {0x9, 0x3, 0x40, 0x6, 0x38c8, 0x5}, {0xe5db, 0x7, 0xffffff01, 0x100, 0x1, 0x1000}, {0xf88, 0x5, 0x40, 0x94c, 0x4, 0x200}, {0x10000, 0x0, 0x6, 0x10001, 0x4}, {0x401, 0x4, 0x1, 0x3, 0x9, 0xffffffff}, {0xb702, 0x6, 0x3ff, 0x7, 0x16620000, 0xa2f6}, {0x49, 0x9, 0xfff, 0x9, 0xffffffff, 0x5a}, {0xb, 0x7, 0x1, 0x5, 0xa6c, 0x8}, {0x8, 0x7, 0x6, 0x61e, 0x6ba, 0x4}, {0xd86, 0x800, 0x4, 0x6, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x7, 0x1, 0x7}, {0x6, 0x7f, 0x2000000, 0x4, 0x4, 0x4}, {0x5, 0x7, 0x9e, 0x0, 0x3, 0xfffffffe}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x100, 0x2, 0x1bc, 0x5, 0x2}, {0x4, 0x8, 0x800, 0x8, 0x10000, 0xb6fa}, {0x8000000, 0xff, 0x6, 0x6, 0x5, 0x9}, {0x89f, 0x0, 0x100, 0x5, 0x3, 0xaa30}, {0x2, 0x1, 0x7fffffff, 0x6, 0x10000, 0x2}, {0x0, 0xb, 0x8001, 0x4, 0x8, 0xe0}, {0x4, 0x36, 0x7, 0xb456, 0x4, 0xc0}, {0x7, 0xd, 0xb3, 0x9, 0x3ff, 0xffff}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x167297199c82e075, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x22d443be4ca0236f}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100033060000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000aa00000000000000000200000062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000232000000fe880000000000000000000000000001000000000000009aaf0a3f012d94f600000000000000000000000000000000000000000000000000fdffffffdfffff070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000004c001400726d643136300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044"], 0x13c}}, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) connect$l2tp6(r0, &(0x7f0000000380)={0xa, 0x0, 0x5, @loopback, 0x800, 0x1}, 0x20) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r5, &(0x7f0000000180)=""/145, 0x91) r7 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r7, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000005c0)=0x9, 0xfc17) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x4}}, 0x101, 0x5, 0x9, 0x3, 0x42, 0x9, 0xb1}, 0x0) r11 = ioctl$USERFAULTFD_IOC_NEW(r7, 0xaa00) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) sendto$packet(r9, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x1}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1000}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6a21}]}}}]}, 0x44}}, 0x0) 978.981585ms ago: executing program 5 (id=2758): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_io_uring_setup(0x48ac, &(0x7f0000000140)={0x0, 0xd1cd, 0x1000, 0x1, 0x359}, &(0x7f0000000240), &(0x7f0000ff4000), &(0x7f0000000000)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) (async) close_range(r1, r1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000380)=""/203, 0xcb}], 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xec}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa52}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x7ff]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}, @CTA_MARK={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040) 756.38427ms ago: executing program 5 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000140)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000100037040000800000000f0000000000", @ANYRES32=r5, @ANYBLOB="c3040500000000004800128008000100677470003c000280050005"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c001c808007ff01fd0000120000"], 0x1c}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, &(0x7f0000000280), &(0x7f0000000340)=""/140}, 0x20) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff0000000705810240000007050202400000070583030800"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b16000000000000000002000008200004801c000180090001006c000474000000000c00028008000140000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 539.476608ms ago: executing program 2 (id=2764): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x7, 0x1, 0x44, @private0, @local, 0x700, 0x8000, 0x3ff, 0x1000}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'nr0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)="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", 0xfd) (async) write(r2, &(0x7f0000000440)="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", 0xfd) sendmsg$nl_xfrm(r2, &(0x7f0000001bc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b80)={&(0x7f0000002040)=ANY=[@ANYBLOB="08040000190000022abd7000fddbdf250a010102000000000000000000000000ff0200000000000000000000000000014e2100004e2000ff0200a0a06c000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="0900000000000000030000000000000002000000000000000200000000000000dc020000000000001000000000000000ff03000000000000ffffffff000000000400000000000000080000000000000007000000000000007d10000000000000ff000000b46b6e0002010101000000000a0010000000000000000000930008008f00080000058700d59e372300d5627384fd906c1f5229328dfb35408b48b7883e5b3f3997c35d5b1a855fa59c3db156ef679fcfc4fbb948fd40ebb1eb210664f23eb792b528f99cc34870582b267d10e626dc8367cec572d38cb1612b37f332b6bfdb6954eb52825b25cb09b15ded32b8de0c6193ac7aea85b94b251cd2dfdca5f694361c8b3f06d713e81b1299dfd087720ee3ec1ea2eef071aaca0cad00e8001100ac141443000000000000000000000000ffffffff000000000000000000000000fc020000000000000000000000000001ac1414aa000000000000000000000000330300000435000002000a00ac1e01010000000000000000000000000a010100000000000000000000000000e0000001000000000000000000000000ffffffff0000000000000000000000002b0100000335000002000200ffffffff000000000000000000000000ff020000000000000000000000000001fe80000000000000000000000000002ffe8000000000000000000000000000bb2b010000053500000a0002000c000f0007000000000000009f0001007374726565626f673235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b80200003df554bf3023ca96e299eb4ac7760b06b41c242691d13b1a3d71f83f9f5dcdc453fb046c941f4b4c48812339ba773c96d24a4a7a64788a44dd49487e122b29d5f3fb98ff109d01065a1841060f3254ab845c74f6d4c8e6001901120073657169762865639864366861696e69762873657169762863636d5f62617365287874732874776f66697368292c686d6163287368613235362d6176783229292929296806000080000000309d2de770e865fcf47dde69669c11427a773798af953df2b9639f6694f61b145487635d64c4e9f2bbbcaf7081dc7e615a0f519baf3702e7da750fb417482dc34710f12782b0395c5a9c40b7612a4609121e89dfaad0ee34bd2144f45dbbcbb474d4fb20a3442c7daf0ff9d336b5b85e9c76dda38fcd92de87eb7d0fe5539597cfad0bbd539495dfe2ccc4fab98a58db8547e21f3cdafb978b225c904ff06398d90bc73cac387ef59e512d2bfc9ad600f52372b23727ed0dfad5b91a96a772b8b385a5ab08521ff8814b4953d10000008945b5587a9ed390afc60abb199211793c5d10d1a9ff46e8647a7ddf54b8e3783322dce57a25105e99b8c54ec292c38f53619e131b176302648cbec5329da8784287404169c558966ca64169bca7f9514138b54730"], 0x408}, 0x1, 0x0, 0x0, 0x4000000}, 0x40041) r3 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x4a, 0x0, &(0x7f0000000280)) (async) getsockopt$sock_buf(r4, 0x1, 0x4a, 0x0, &(0x7f0000000280)) bind$alg(r3, &(0x7f0000000fc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) accept$alg(r3, 0x0, 0x0) (async) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000340)="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", 0xc5d}], 0x2, 0x0, 0x0, 0x20004800}], 0x1, 0x24000800) recvmsg(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f00000003c0)='./file0\x00', 0x10000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r7 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r9}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 359.23791ms ago: executing program 2 (id=2765): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0xa00, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1, 0x2, 0xc5) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 356.127138ms ago: executing program 2 (id=2766): mkdir(&(0x7f0000000040)='proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0x40000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0xc0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020851000000300000018000000000000000000000000000001950000000000000018010000202078250000000000201c007b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b50afdffffffeffe850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008"], 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0xc0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c010000100001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000e5a4e63d0ca2627033000000000000000000000000000b0000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0900ffffffffff000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000080000000a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000"/244], 0x13c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x8) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, 0x0) 140.423271ms ago: executing program 2 (id=2767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x777) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) (async) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='10', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='test\n', 0x5) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000100)={0xd, @raw_data="0910d1cdacb161a34e539b8033ab0200e858d0b8265ff08ca886c0543e7c784619384b22caf782c9ed7ade616a716b9b113fd429f1aa3061dc2e34dc7f22d89f01d17ffa2b04e43b48b129b34ae06be13f0d077c51acdc7db67ad673fb7b3174780e677e1e040247fa10ef1071e8aaff14d69ad27fb3eb30c8cb1436832d0dba161e601b6513d3eae8c2ab233bcbaed962c63f09236ccafe66a084007bf82f9b60a9dbab37bb9754024121e9345f56298ef8488e4ffa56a50f0c091c96d7bf00340a9ead71ea98c8"}) 89.987908ms ago: executing program 2 (id=2768): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = socket(0x1e, 0x2, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x10, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r0, &(0x7f0000004300)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1}}, 0x10, &(0x7f00000041c0)=[{&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="c640e848ff54d9a881ca1c794bd8798a98ff2c787662ae62c492d15b5f43ef0b67dc261636c64a4c7d9bbacfc0ba75d87f825d2be3007d357d7aa6d6407469b37504060a50ff06790313b83463240b2ea04e84d36c315466fbb566d14c25e9fc", 0x60}, {&(0x7f0000004180)="49046fca886c4d", 0x7}], 0x4, &(0x7f0000004200)="8ab712ee68d7040bb69b1c7a40c5fe45afb7b05f691b0e393ef857a4d05d04aeaee8415a82b754a147657027e70a2fdbeef049b3eba692a48931dba264c7d362aba46cd0f67e5ad81951a85200b9ccefc27af5712eb833da3dd476acb5f06488fbd86f045e279c52e532aea0004ea1931e458ac7520f5c5e67552b22ec98e5671e529ad0383d7e5f57fa79be8cc9e77eca0552afd26b46e1945cb339d6410a628844061b70e00faa5167260b65e7d00b74e3932e56895c430b6f1bd2a9dfda1b247370e70bf214b80609ce82d4dfebeed3b762e26546c1404b396092712bc478e0db77c701dbc30417cd3d6c69d3f12b", 0xf0, 0x40000}, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x40002021, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f00000007c0)=ANY=[@ANYBLOB="75737271756f74615fd1086f636bed686172646c696d69743d312c00"]) 0s ago: executing program 2 (id=2769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) unshare(0x62020600) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xa400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r5, r7, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/ipc\x00') getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB="20000000f1000000010100000000000000000004f4"], 0x2000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c00078008000640000075000000050005000200000005000400000000000900020073797a3100f9000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x200000, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) kernel console output (not intermixed with test programs): netlink: 'syz.6.1849': attribute type 1 has an invalid length. [ 178.912363][T12487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.914811][T12490] overlayfs: failed to clone upperpath [ 179.101281][T12496] netlink: 'syz.4.1853': attribute type 21 has an invalid length. [ 179.140908][ T42] audit: type=1400 audit(179.074:989): avc: denied { listen } for pid=12503 comm="syz.6.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.346010][T12528] No control pipe specified [ 179.359788][ T42] audit: type=1400 audit(179.294:990): avc: denied { map } for pid=12529 comm="syz.4.1863" path="socket:[45822]" dev="sockfs" ino=45822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.517211][ T42] audit: type=1400 audit(179.454:991): avc: denied { map } for pid=12541 comm="syz.5.1866" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 179.719720][T12553] netlink: 'syz.4.1869': attribute type 2 has an invalid length. [ 179.864648][T12557] netlink: 'syz.5.1870': attribute type 2 has an invalid length. [ 179.991594][T12566] syz_tun: entered allmulticast mode [ 179.995770][T12566] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 180.000604][T12566] net_ratelimit: 108 callbacks suppressed [ 180.000622][T12566] mroute: pending queue full, dropping entries [ 180.044610][T12565] syz_tun: left allmulticast mode [ 180.092587][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.169086][T12577] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 180.242194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.247190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.251143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.254060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.257002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.260477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.263726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.268152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.311376][T12589] Process accounting resumed [ 180.556932][ T1350] usb 7-1: USB disconnect, device number 22 [ 180.636063][T12607] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 180.640422][T12607] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 180.647797][T12607] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 180.650985][T12607] SELinux: failed to load policy [ 180.709644][T12613] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 180.716036][T12613] libceph: resolve '4' (ret=-3): failed [ 180.734257][T12619] libceph: resolve '4' (ret=-3): failed [ 180.737334][T12611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.009982][T12633] team0: Device vlan2 is already an upper device of the team interface [ 181.068364][T12641] netlink: 'syz.4.1901': attribute type 2 has an invalid length. [ 181.149262][T12649] overlayfs: failed to resolve './file2': -2 [ 181.346161][T12651] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 181.352225][T12651] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 181.360377][T12651] netlink: 'syz.4.1906': attribute type 1 has an invalid length. [ 181.364651][T12651] __nla_validate_parse: 11 callbacks suppressed [ 181.364662][T12651] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1906'. [ 181.849937][T12712] overlayfs: missing 'lowerdir' [ 181.915488][T12717] trusted_key: encrypted_key: insufficient parameters specified [ 182.454972][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 182.454987][ T42] audit: type=1400 audit(182.394:1008): avc: denied { name_bind } for pid=12752 comm="syz.6.1928" src=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 182.478935][T12753] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 182.481408][T12753] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 182.485425][T12756] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(10) [ 182.488256][T12756] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 182.512399][T12756] vhci_hcd vhci_hcd.0: Device attached [ 182.522044][T12753] vhci_hcd vhci_hcd.0: Device attached [ 182.523365][T12758] usbip_core: unknown command [ 182.526777][T12758] vhci_hcd: unknown pdu 0 [ 182.528200][T12758] usbip_core: unknown command [ 182.533633][ T7994] vhci_hcd vhci_hcd.6: stop threads [ 182.535359][ T7994] vhci_hcd vhci_hcd.6: release socket [ 182.537152][ T7994] vhci_hcd vhci_hcd.6: disconnect device [ 182.567961][ T42] audit: type=1400 audit(182.504:1009): avc: denied { mounton } for pid=12752 comm="syz.6.1928" path="/76/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 182.701835][T12757] vhci_hcd: connection closed [ 182.706877][ T7994] vhci_hcd vhci_hcd.6: stop threads [ 182.713133][ T7994] vhci_hcd vhci_hcd.6: release socket [ 182.723680][ T7994] vhci_hcd vhci_hcd.6: disconnect device [ 182.841992][ T42] audit: type=1400 audit(182.774:1010): avc: denied { read } for pid=12777 comm="syz.5.1933" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 182.879358][ T42] audit: type=1400 audit(182.814:1011): avc: denied { ioctl } for pid=12777 comm="syz.5.1933" path="/227/nfsd/versions" dev="nfsd" ino=12 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 183.047130][ T42] audit: type=1400 audit(182.984:1012): avc: denied { create } for pid=12796 comm="syz.4.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 183.101971][ T42] audit: type=1400 audit(183.034:1013): avc: denied { getopt } for pid=12796 comm="syz.4.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 183.269559][ T42] audit: type=1400 audit(183.204:1014): avc: denied { write } for pid=12800 comm="syz.5.1940" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 183.466435][T12825] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1947'. [ 183.546931][T12827] program syz.6.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.869207][T12831] syzkaller1: entered promiscuous mode [ 183.871705][T12831] syzkaller1: entered allmulticast mode [ 183.928163][T12842] netlink: 'syz.2.1953': attribute type 21 has an invalid length. [ 183.940507][T12842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1953'. [ 183.948619][T12842] vhci_hcd vhci_hcd.0: remove, state 4 [ 183.960053][T12842] usb usb38: USB disconnect, device number 1 [ 184.004505][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 184.096310][T12852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1957'. [ 184.099244][ T13] vhci_hcd vhci_hcd.0: stop threads [ 184.100889][ T13] vhci_hcd vhci_hcd.0: release socket [ 184.102935][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 184.107119][ T7994] vhci_hcd vhci_hcd.0: stop threads [ 184.108807][ T7994] vhci_hcd vhci_hcd.0: release socket [ 184.110553][ T7994] vhci_hcd vhci_hcd.0: disconnect device [ 184.116412][ T7994] vhci_hcd vhci_hcd.0: stop threads [ 184.118211][ T7994] vhci_hcd vhci_hcd.0: release socket [ 184.121033][ T7994] vhci_hcd vhci_hcd.0: disconnect device [ 184.124457][ T7994] vhci_hcd vhci_hcd.0: stop threads [ 184.126468][ T7994] vhci_hcd vhci_hcd.0: release socket [ 184.129671][ T7994] vhci_hcd vhci_hcd.0: disconnect device [ 184.132271][ T7994] vhci_hcd vhci_hcd.0: stop threads [ 184.133977][ T7994] vhci_hcd vhci_hcd.0: release socket [ 184.135774][ T7994] vhci_hcd vhci_hcd.0: disconnect device [ 184.137614][ T7994] vhci_hcd vhci_hcd.0: stop threads [ 184.138670][T12852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12852 comm=syz.6.1957 [ 184.139312][ T7994] vhci_hcd vhci_hcd.0: release socket [ 184.139324][ T7994] vhci_hcd vhci_hcd.0: disconnect device [ 184.157678][ T7994] vhci_hcd vhci_hcd.0: stop threads [ 184.160595][ T7994] vhci_hcd vhci_hcd.0: release socket [ 184.165519][ T7994] vhci_hcd vhci_hcd.0: disconnect device [ 184.167481][ T7994] vhci_hcd vhci_hcd.0: stop threads [ 184.173870][ T7994] vhci_hcd vhci_hcd.0: release socket [ 184.175776][ T7994] vhci_hcd vhci_hcd.0: disconnect device [ 184.177677][T12842] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 184.227294][T12857] netlink: 'syz.5.1959': attribute type 13 has an invalid length. [ 184.255507][T12842] vhci_hcd vhci_hcd.0: remove, state 4 [ 184.257432][T12842] usb usb37: USB disconnect, device number 1 [ 184.275702][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 184.277442][ T5785] vhci_hcd vhci_hcd.0: release socket [ 184.280442][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 184.283739][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 184.285475][ T5785] vhci_hcd vhci_hcd.0: release socket [ 184.287220][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 184.289269][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 184.292163][ T5785] vhci_hcd vhci_hcd.0: release socket [ 184.293968][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 184.295836][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 184.297535][ T5785] vhci_hcd vhci_hcd.0: release socket [ 184.299303][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 184.301150][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 184.303431][ T5785] vhci_hcd vhci_hcd.0: release socket [ 184.305843][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 184.307721][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 184.309425][ T5785] vhci_hcd vhci_hcd.0: release socket [ 184.311208][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 184.314538][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 184.316300][ T5785] vhci_hcd vhci_hcd.0: release socket [ 184.318561][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 184.320583][ T5785] vhci_hcd vhci_hcd.0: stop threads [ 184.322884][ T5785] vhci_hcd vhci_hcd.0: release socket [ 184.325060][ T5785] vhci_hcd vhci_hcd.0: disconnect device [ 184.326909][T12842] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 184.335940][T12846] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 184.354467][T12846] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 2 [ 184.359053][T12846] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 184.364822][T12846] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 184.365603][T12857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12857 comm=syz.5.1959 [ 184.367804][T12846] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 184.375622][T12846] usb usb2: Product: USB/IP Virtual Host Controller [ 184.377810][T12846] usb usb2: Manufacturer: Linux syzkaller vhci_hcd [ 184.379982][T12846] usb usb2: SerialNumber: vhci_hcd.0 [ 184.431605][T12846] hub 2-0:1.0: USB hub found [ 184.438957][T12846] hub 2-0:1.0: 8 ports detected [ 184.475951][T12846] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 184.486211][T12846] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 37 [ 184.492850][T12846] usb usb37: We don't know the algorithms for LPM for this host, disabling LPM. [ 184.496787][T12846] usb usb37: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 7.02 [ 184.499726][T12846] usb usb37: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 184.503051][T12846] usb usb37: Product: USB/IP Virtual Host Controller [ 184.505303][T12846] usb usb37: Manufacturer: Linux syzkaller vhci_hcd [ 184.507433][T12846] usb usb37: SerialNumber: vhci_hcd.0 [ 184.529498][T12846] hub 37-0:1.0: USB hub found [ 184.534470][T12846] hub 37-0:1.0: 8 ports detected [ 184.675389][T12877] macsec1: entered promiscuous mode [ 184.682849][T12877] macsec1: entered allmulticast mode [ 184.817032][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'. [ 184.922201][ T42] audit: type=1400 audit(184.864:1015): avc: denied { listen } for pid=12907 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.928538][ T42] audit: type=1400 audit(184.864:1016): avc: denied { accept } for pid=12907 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.052353][ T42] audit: type=1400 audit(184.994:1017): avc: denied { getopt } for pid=12907 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.084923][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1979'. [ 185.292631][ T24] net_ratelimit: 14 callbacks suppressed [ 185.292659][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.303541][T12943] CIFS: Attempting to mount //127.0.0.1/share [ 185.358007][T12945] CIFS: VFS: Invalid response size 0 for command 0 [ 185.372389][T12943] CIFS: VFS: cifs_mount failed w/return code = -5 [ 185.391561][T12941] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1983'. [ 186.143036][T12961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.146039][T12961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.148918][T12961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.151695][T12961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.157231][T12961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.163989][ T65] Bluetooth: hci3: Malformed Event: 0x02 [ 186.204265][T12964] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 186.299719][T12971] netlink: 'syz.5.1990': attribute type 16 has an invalid length. [ 186.323910][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.364145][T12960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.474376][T12986] overlayfs: failed to clone upperpath [ 186.569388][T12989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.687265][T12999] fuse: fd is not a fuse device [ 186.767160][ T5884] bridge0: entered promiscuous mode [ 186.850799][T13018] tipc: Started in network mode [ 186.854294][T13018] tipc: Node identity ac141441, cluster identity 4711 [ 186.858831][T13018] tipc: Enabled bearer , priority 10 [ 186.902153][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 186.965247][T13030] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 187.323699][T13059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2018'. [ 187.327304][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2018'. [ 187.330936][T13059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2018'. [ 187.336686][T13061] syzkaller0: entered promiscuous mode [ 187.339852][T13061] syzkaller0: entered allmulticast mode [ 187.529933][T13077] could not allocate digest TFM handle cryptd(blake2b-160) [ 187.539626][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 187.539644][ T42] audit: type=1400 audit(187.474:1024): avc: denied { shutdown } for pid=13085 comm="syz.5.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.585970][T13088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2025'. [ 187.589938][T13088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2025'. [ 187.672009][ T848] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 187.812076][ T848] usb 7-1: device descriptor read/64, error -71 [ 187.896815][T13099] block device autoloading is deprecated and will be removed. [ 187.975510][ T24] tipc: Node number set to 2886997057 [ 188.052752][ T848] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 188.202275][ T848] usb 7-1: device descriptor read/64, error -71 [ 188.251277][T13132] tipc: Enabling of bearer rejected, failed to enable media [ 188.255924][T13130] tipc: Enabling of bearer rejected, failed to enable media [ 188.314558][ T848] usb usb7-port1: attempt power cycle [ 188.316418][T13146] /dev/sg0: Can't lookup blockdev [ 188.353234][ T42] audit: type=1400 audit(188.284:1025): avc: granted { setsecparam } for pid=13150 comm="syz.6.2044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 188.386045][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 188.392513][ T42] audit: type=1400 audit(188.324:1026): avc: denied { mount } for pid=13155 comm="syz.6.2045" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 188.481309][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2048'. [ 188.493897][T13168] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.504670][T13171] erspan0: entered promiscuous mode [ 188.619049][ T42] audit: type=1400 audit(188.554:1027): avc: denied { associate } for pid=13181 comm="syz.6.2051" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 188.657932][ T42] audit: type=1400 audit(188.594:1028): avc: denied { create } for pid=13183 comm="syz.4.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 188.665550][ T42] audit: type=1400 audit(188.594:1029): avc: denied { create } for pid=13183 comm="syz.4.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 188.672131][ T848] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 188.696624][T13184] "syz.4.2052" (13184) uses obsolete ecb(arc4) skcipher [ 188.700078][ T42] audit: type=1400 audit(188.634:1030): avc: denied { write } for pid=13183 comm="syz.4.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 188.706544][ T848] usb 7-1: device descriptor read/8, error -71 [ 188.952082][ T848] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 188.972938][ T848] usb 7-1: device descriptor read/8, error -71 [ 189.082389][ T848] usb usb7-port1: unable to enumerate USB device [ 189.119065][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2057'. [ 189.214644][T13121] ceph: No mds server is up or the cluster is laggy [ 189.297779][ T42] audit: type=1400 audit(189.234:1031): avc: denied { watch } for pid=13215 comm="syz.4.2059" path="/480/file0" dev="tmpfs" ino=2602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 189.304561][ T42] audit: type=1400 audit(189.234:1032): avc: denied { watch_sb } for pid=13215 comm="syz.4.2059" path="/480/file0" dev="tmpfs" ino=2602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.438945][T13227] tipc: Enabling of bearer rejected, failed to enable media [ 190.403561][ T34] net_ratelimit: 17 callbacks suppressed [ 190.403584][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.482341][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.522594][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.572706][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.962592][ T1350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.442446][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.602549][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.246707][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.652407][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.682516][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.482680][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.732305][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.762643][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.822348][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.522547][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.842328][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.882379][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.922630][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.563323][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.567625][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.962470][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.012218][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.042290][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.602666][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.082387][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.122507][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.379193][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 207.442017][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 207.636035][ T42] audit: type=1400 audit(207.574:1033): avc: denied { ioctl } for pid=13289 comm="syz.2.2077" path="socket:[48796]" dev="sockfs" ino=48796 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.737782][T13295] loop5: detected capacity change from 0 to 7 [ 207.744400][T13295] Dev loop5: unable to read RDB block 7 [ 207.746921][T13295] loop5: AHDI p1 p2 p3 [ 207.748776][T13295] loop5: partition table partially beyond EOD, truncated [ 207.753153][T13295] loop5: p1 start 1601398130 is beyond EOD, truncated [ 207.756526][T13295] loop5: p2 start 1702059890 is beyond EOD, truncated [ 207.933952][T13301] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.153805][T13323] fuse: Unknown parameter '' [ 208.162351][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.184721][ T42] audit: type=1400 audit(208.124:1034): avc: denied { bind } for pid=13324 comm="syz.6.2087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 208.279512][T13335] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 208.302462][T13335] batman_adv: batadv0: Adding interface: gretap1 [ 208.306424][T13335] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.314864][T13335] batman_adv: batadv0: Interface activated: gretap1 [ 208.324872][T13335] netlink: 700 bytes leftover after parsing attributes in process `syz.4.2090'. [ 208.352981][T13333] netlink: 'syz.2.2088': attribute type 3 has an invalid length. [ 208.355591][T13333] netlink: 'syz.2.2088': attribute type 1 has an invalid length. [ 208.358052][T13333] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2088'. [ 208.361008][T13333] NCSI netlink: No device for ifindex 0 [ 208.363953][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'. [ 208.367168][T13333] netlink: 'syz.2.2088': attribute type 10 has an invalid length. [ 208.369703][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 208.382236][T13333] geneve3: entered promiscuous mode [ 208.384023][T13333] geneve3: entered allmulticast mode [ 208.393868][ T42] audit: type=1400 audit(208.334:1035): avc: denied { checkpoint_restore } for pid=13342 comm="syz.5.2092" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 208.457757][T13344] kvm: kvm [13342]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 208.644002][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.730904][ T42] audit: type=1400 audit(208.664:1036): avc: granted { setsecparam } for pid=13353 comm="syz.5.2094" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 208.838205][T13360] lo: Caught tx_queue_len zero misconfig [ 209.026805][T13367] netlink: 'syz.4.2099': attribute type 1 has an invalid length. [ 209.039920][T13367] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.062258][T13367] bond7: (slave geneve3): making interface the new active one [ 209.066605][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.071406][T13367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.077205][T13367] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 209.095839][ T9041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.112181][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.125185][T13373] nfs: Unknown parameter './file0' [ 209.197056][T13384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.207680][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.256529][T13391] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2106'. [ 209.316184][T13399] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2109'. [ 209.317439][T13400] binder: 13398:13400 ioctl 4018620d 0 returned -22 [ 209.319474][T13399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 209.389362][T13412] nfs: Unknown parameter './file0' [ 209.403569][ T65] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 209.407907][ T65] CPU: 1 UID: 0 PID: 65 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.407937][ T65] Tainted: [L]=SOFTLOCKUP [ 209.407944][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 209.407968][ T65] Workqueue: hci3 hci_rx_work [ 209.408023][ T65] Call Trace: [ 209.408047][ T65] [ 209.408056][ T65] dump_stack_lvl+0x100/0x190 [ 209.408134][ T65] sysfs_warn_dup.cold+0x1c/0x28 [ 209.408184][ T65] sysfs_create_dir_ns+0x24b/0x2b0 [ 209.408282][ T65] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 209.408329][ T65] ? find_held_lock+0x2b/0x80 [ 209.408367][ T65] ? kobject_add_internal+0x25f/0x930 [ 209.408404][ T65] ? kobject_add_internal+0x25f/0x930 [ 209.408434][ T65] ? do_raw_spin_unlock+0x145/0x1e0 [ 209.408473][ T65] kobject_add_internal+0x2c8/0x930 [ 209.408512][ T65] kobject_add+0x16a/0x1e0 [ 209.408537][ T65] ? __pfx_kobject_add+0x10/0x10 [ 209.408570][ T65] ? class_to_subsys+0x10f/0x150 [ 209.408643][ T65] ? kobject_put+0xb9/0x640 [ 209.408668][ T65] ? _raw_spin_unlock+0x28/0x50 [ 209.408700][ T65] device_add+0x294/0x1970 [ 209.408737][ T65] ? __pfx_dev_set_name+0x10/0x10 [ 209.408771][ T65] ? __pfx_device_add+0x10/0x10 [ 209.408810][ T65] ? mgmt_send_event_skb+0x2fb/0x460 [ 209.408842][ T65] hci_conn_add_sysfs+0x1a3/0x260 [ 209.408875][ T65] le_conn_complete_evt+0x11eb/0x1f60 [ 209.408904][ T65] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 209.408930][ T65] ? hci_event_packet+0x186/0xcd0 [ 209.408956][ T65] hci_le_conn_complete_evt+0x23c/0x3a0 [ 209.408985][ T65] ? skb_pull_data+0x15f/0x1e0 [ 209.409014][ T65] hci_le_meta_evt+0x34a/0x5f0 [ 209.409044][ T65] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 209.409070][ T65] hci_event_packet+0x51c/0xcd0 [ 209.409097][ T65] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 209.409119][ T65] ? __pfx_hci_event_packet+0x10/0x10 [ 209.409148][ T65] ? kcov_remote_start+0x384/0x670 [ 209.409182][ T65] ? lockdep_hardirqs_on+0x78/0x100 [ 209.409216][ T65] hci_rx_work+0x451/0xfc0 [ 209.409241][ T65] process_one_work+0xa23/0x1940 [ 209.409287][ T65] ? __pfx_process_one_work+0x10/0x10 [ 209.409318][ T65] ? __pfx_hci_rx_work+0x10/0x10 [ 209.409343][ T65] worker_thread+0x5ef/0xe50 [ 209.409378][ T65] ? kthread+0x13a/0x450 [ 209.409403][ T65] ? __pfx_worker_thread+0x10/0x10 [ 209.409429][ T65] kthread+0x370/0x450 [ 209.409446][ T65] ? __pfx_kthread+0x10/0x10 [ 209.409466][ T65] ret_from_fork+0x72b/0xd50 [ 209.409508][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 209.409543][ T65] ? __switch_to+0x800/0x10f0 [ 209.409563][ T65] ? __pfx_kthread+0x10/0x10 [ 209.409582][ T65] ret_from_fork_asm+0x1a/0x30 [ 209.409630][ T65] [ 209.409653][ T65] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 209.417538][T13417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2116'. [ 209.422489][ T65] Bluetooth: hci3: failed to register connection device [ 209.449926][ T42] audit: type=1400 audit(209.384:1037): avc: denied { mount } for pid=13418 comm="syz.6.2115" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 209.534288][ T42] audit: type=1400 audit(209.454:1038): avc: denied { unmount } for pid=11496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 209.542020][ T42] audit: type=1400 audit(209.474:1039): avc: denied { unmount } for pid=11496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 209.713064][ T42] audit: type=1400 audit(209.654:1040): avc: denied { read } for pid=13449 comm="syz.2.2126" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 209.724904][ T42] audit: type=1400 audit(209.654:1041): avc: denied { open } for pid=13449 comm="syz.2.2126" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 209.734274][ T42] audit: type=1400 audit(209.664:1042): avc: denied { ioctl } for pid=13449 comm="syz.2.2126" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 209.866652][T13463] usbip-vudc usbip-vudc.0: gadget not bound [ 209.897128][T13467] hsr_slave_1 (unregistering): left promiscuous mode [ 210.160144][T13484] Invalid argument reading file caps for ./file0 [ 210.182370][ T5785] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.185942][ T5785] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.189572][ T5785] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.194548][ T5785] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.342102][ T34] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 210.482072][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 210.495943][ T34] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 210.502617][T13499] netlink: 'syz.6.2139': attribute type 12 has an invalid length. [ 210.503167][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.509630][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.513965][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 210.517551][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.521409][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.525823][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 210.529427][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.534242][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.538958][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 210.542615][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.546101][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.550125][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 210.553791][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.557635][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.562022][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 210.567815][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.571295][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.577927][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 210.581989][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.585862][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.589876][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 210.593437][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 210.597005][ T34] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 210.601211][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 210.606361][ T34] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 210.610038][ T34] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 210.614529][ T34] usb 10-1: Product: syz [ 210.616218][ T34] usb 10-1: Manufacturer: syz [ 210.617767][ T34] usb 10-1: SerialNumber: syz [ 210.622715][ T34] usb 10-1: config 0 descriptor?? [ 210.632226][ T34] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 210.633883][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.640877][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 210.645514][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.649229][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.660941][T13489] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.667673][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.873867][T13489] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 210.905234][ T848] usb 7-1: USB disconnect, device number 27 [ 210.966846][T13530] overlayfs: failed to resolve './cgroup': -2 [ 211.044063][T13533] UDC core: g1: couldn't find an available UDC or it's busy [ 211.292439][ T41] net_ratelimit: 7 callbacks suppressed [ 211.292475][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.297517][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.532099][ T65] Bluetooth: hci3: command 0x2016 tx timeout [ 211.682365][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.111134][ T63] Bluetooth: hci1: Frame reassembly failed (-84) [ 212.118529][T13560] Bluetooth: hci1: Frame reassembly failed (-84) [ 212.162850][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.322340][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.423773][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.437416][T13574] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 212.605931][T13587] kvm: user requested TSC rate below hardware speed [ 212.711154][T13594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21547 sclass=netlink_route_socket pid=13594 comm=syz.4.2172 [ 212.718249][T13594] __nla_validate_parse: 7 callbacks suppressed [ 212.718268][T13594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2172'. [ 212.860794][T13600] fuse: fd is not a fuse device [ 212.883765][ C3] usb 10-1: yurex_control_callback - control failed: -2 [ 212.887899][ T34] usb 10-1: USB disconnect, device number 14 [ 212.897572][ T34] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 212.902567][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 212.961580][T13607] 9p: Bad value for 'wfdno' [ 212.963456][T13606] fuse: fd is not a fuse device [ 213.438054][T13634] input: syz0 as /devices/virtual/input/input18 [ 213.539011][T13642] batadv_slave_0: Caught tx_queue_len zero misconfig [ 213.612302][ T5751] Bluetooth: hci3: command 0x2016 tx timeout [ 213.772956][T13661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 213.775895][T13661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 213.779955][T13657] binder: 13655:13657 ioctl 89f1 2000000005c0 returned -22 [ 213.783939][T13661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 213.786685][T13661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 213.788944][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 213.788957][ T42] audit: type=1800 audit(213.724:1051): pid=13657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2192" name="bmControls" dev="configfs" ino=52387 res=0 errno=0 [ 213.805695][ T42] audit: type=1400 audit(213.734:1052): avc: denied { call } for pid=13655 comm="syz.5.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 213.806882][T13657] binder_alloc: 13655: pid 13655 spamming oneway? 1 buffers allocated for a total size of 4096 [ 214.169311][T13698] team0 (unregistering): Port device team_slave_0 removed [ 214.172421][ T65] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 214.173024][ T5751] Bluetooth: hci1: command 0xfc11 tx timeout [ 214.191774][T13698] team0 (unregistering): Port device team_slave_1 removed [ 214.280991][T13716] Falling back ldisc for ttyS3. [ 214.415874][T13726] openvswitch: netlink: Actions may not be safe on all matching packets [ 214.453592][T13740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2205'. [ 214.511430][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2208'. [ 214.515373][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2208'. [ 214.522202][ T42] audit: type=1400 audit(214.454:1053): avc: denied { bind } for pid=13751 comm="syz.2.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.075987][T13809] sctp: [Deprecated]: syz.2.2217 (pid 13809) Use of int in max_burst socket option deprecated. [ 215.075987][T13809] Use struct sctp_assoc_value instead [ 215.090100][ T42] audit: type=1400 audit(215.024:1054): avc: denied { write } for pid=13808 comm="syz.2.2217" name="dlm" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.097473][ T42] audit: type=1400 audit(215.034:1055): avc: denied { write } for pid=13808 comm="syz.2.2217" name="spaces" dev="configfs" ino=53516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.104389][ T42] audit: type=1400 audit(215.034:1056): avc: denied { write } for pid=13808 comm="syz.2.2217" name="nodes" dev="configfs" ino=53519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.502760][ T34] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 215.535337][T13827] netlink: 'syz.6.2224': attribute type 4 has an invalid length. [ 215.540524][T13830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.545900][T13830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.652014][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 215.655934][ T34] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 215.659003][ T34] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 215.663446][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 215.667102][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.670455][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 215.674728][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 215.679202][ T34] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 215.683059][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.684732][ T42] audit: type=1400 audit(215.624:1057): avc: denied { setopt } for pid=13836 comm="syz.4.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 215.689139][ T34] usb 7-1: config 0 descriptor?? [ 215.692210][ T5741] Bluetooth: hci3: command 0x2016 tx timeout [ 215.740085][T13843] coredump: 1604(syz.4.2229): Core dump to core aborted: cannot preserve file permissions [ 215.772002][ T41] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 215.786415][ T42] audit: type=1400 audit(215.724:1058): avc: denied { create } for pid=13841 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 215.792875][ T42] audit: type=1400 audit(215.724:1059): avc: denied { connect } for pid=13841 comm="syz.4.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 215.852580][ T42] audit: type=1400 audit(215.794:1060): avc: denied { lock } for pid=13847 comm="syz.6.2232" path="/dev/ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.979462][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2237'. [ 216.108650][ T34] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 216.124738][ T34] usb 7-1: USB disconnect, device number 28 [ 216.138984][ T34] usblp0: removed [ 216.903056][T13902] bond7: entered promiscuous mode [ 216.904781][T13902] bond7: entered allmulticast mode [ 216.951066][ T6392] Bluetooth: hci1: Frame reassembly failed (-84) [ 217.098875][T13915] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 217.292258][T13923] sit0: entered promiscuous mode [ 217.298171][T13923] netlink: 'syz.6.2257': attribute type 1 has an invalid length. [ 217.506670][T13936] netlink: 'syz.5.2262': attribute type 1 has an invalid length. [ 217.598427][T13944] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 217.647172][T13944] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 217.650429][T13944] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 217.653919][T13944] vhci_hcd vhci_hcd.0: Device attached [ 217.658349][T13949] vhci_hcd: cannot find the pending unlink 3 [ 217.660600][T13949] vhci_hcd: cannot find the pending unlink 3 [ 217.762301][ T65] Bluetooth: hci3: command 0x2016 tx timeout [ 217.778830][T13949] vhci_hcd: connection closed [ 217.780708][ T12] vhci_hcd vhci_hcd.6: stop threads [ 217.784158][ T12] vhci_hcd vhci_hcd.6: release socket [ 217.789242][ T12] vhci_hcd vhci_hcd.6: disconnect device [ 217.832068][ T41] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 217.874963][T13960] sysfs: Unknown parameter './file0' [ 217.940589][T13967] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 217.959840][T13967] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.972795][T13967] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.975830][T13967] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 217.979585][T13967] bond8: (slave gre1): Error -95 calling set_mac_address [ 218.023450][T13973] gretap2: entered promiscuous mode [ 218.029765][T13973] bond8: (slave gretap2): making interface the new active one [ 218.033370][T13973] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 218.049610][T13978] __nla_validate_parse: 4 callbacks suppressed [ 218.049628][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2268'. [ 218.056716][T13978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.059749][T13978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.066295][T13978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.069516][T13978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.134007][T13986] netlink: 'syz.5.2277': attribute type 10 has an invalid length. [ 218.137302][T13986] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.140947][T13986] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.235341][T13970] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 218.789770][T14013] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 218.962018][ T65] Bluetooth: hci1: command 0x1003 tx timeout [ 218.970264][ T5741] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 219.098061][ T63] Bluetooth: hci1: Frame reassembly failed (-84) [ 219.437314][T14040] nvme_fabrics: unknown parameter or missing value 'treĵz' in ctrl creation request [ 219.559989][T14049] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 219.732814][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 219.732832][ T42] audit: type=1400 audit(2000000000.250:1073): avc: denied { map } for pid=14065 comm="syz.5.2301" path="/dev/ublkc1" dev="devtmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 219.733230][T14066] ublk1: read batch cmd buffer failed [ 219.745677][T14066] ublk1: read batch cmd buffer failed [ 219.798959][T14069] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 219.801375][T14069] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 219.806177][T14069] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 219.809196][T14069] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 219.858088][ T42] audit: type=1400 audit(2000000000.370:1074): avc: denied { ioctl } for pid=14071 comm="syz.5.2303" path="socket:[52811]" dev="sockfs" ino=52811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 220.097008][T14023] ceph: No mds server is up or the cluster is laggy [ 220.519297][T14078] autofs: Unknown parameter 'fd50x0000000000000000' [ 220.528042][T14078] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2305'. [ 220.539177][T14078] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.542883][T14078] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.574880][T14080] netlink: 'syz.6.2307': attribute type 1 has an invalid length. [ 220.580614][ T42] audit: type=1400 audit(2000000001.089:1075): avc: denied { write } for pid=14081 comm="syz.5.2306" name="functions" dev="configfs" ino=12419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.587309][T14080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.587700][ T42] audit: type=1800 audit(2000000001.089:1076): pid=14082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2306" name="c_srate" dev="configfs" ino=52884 res=0 errno=0 [ 220.932751][T14112] fuse: fd is not a fuse device [ 220.993281][T14115] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.108837][T14120] loop5: detected capacity change from 0 to 7 [ 221.118661][T14120] Dev loop5: unable to read RDB block 7 [ 221.121070][T14120] loop5: AHDI p1 p2 p3 [ 221.121777][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2322'. [ 221.124587][ T5741] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 221.125496][ T65] Bluetooth: hci1: command 0x1003 tx timeout [ 221.126165][T14120] loop5: partition table partially beyond EOD, truncated [ 221.126802][T14120] loop5: p1 start 1818582900 is beyond EOD, truncated [ 221.126825][T14120] loop5: p3 start 335544320 is beyond EOD, truncated [ 221.130097][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2322'. [ 221.146395][ T42] audit: type=1800 audit(2000000001.649:1077): pid=14120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2320" name="toss_secs" dev="configfs" ino=52142 res=0 errno=0 [ 221.152230][T14122] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 221.213188][T14124] netlink: 'syz.4.2322': attribute type 8 has an invalid length. [ 221.248084][ T42] audit: type=1400 audit(2000000001.759:1078): avc: denied { bind } for pid=14128 comm="syz.2.2324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.274806][T14129] loop4: detected capacity change from 0 to 7 [ 221.287565][T14129] Dev loop4: unable to read RDB block 7 [ 221.294223][T14129] loop4: unable to read partition table [ 221.296695][T14129] loop4: partition table beyond EOD, truncated [ 221.299214][T14129] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 221.380921][T14135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=14135 comm=syz.4.2326 [ 221.414970][T14150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14150 comm=syz.2.2330 [ 221.722297][ T848] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 221.879365][ T848] usb 7-1: device descriptor read/64, error -71 [ 221.918590][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 221.919864][ T42] audit: type=1400 audit(2000000002.429:1079): avc: denied { mounton } for pid=14184 comm="syz.5.2342" path="/326/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 221.920854][T14187] overlayfs: maximum fs stacking depth exceeded [ 221.922287][ T5741] Bluetooth: hci3: command 0x2016 tx timeout [ 221.932399][ T42] audit: type=1400 audit(2000000002.449:1080): avc: denied { connect } for pid=14184 comm="syz.5.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.007192][T14193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=14193 comm=syz.4.2343 [ 222.132008][ T848] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 222.262010][ T848] usb 7-1: device descriptor read/64, error -71 [ 222.383803][ T848] usb usb7-port1: attempt power cycle [ 222.396574][T14216] gre0: Caught tx_queue_len zero misconfig [ 222.572308][T14226] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 222.610606][T14230] binder: BINDER_SET_CONTEXT_MGR already set [ 222.612826][T14230] binder: 14229:14230 ioctl 4018620d 200000000080 returned -16 [ 222.612867][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.615791][T14230] binder: BINDER_SET_CONTEXT_MGR already set [ 222.620570][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.620649][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.620721][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.620792][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.620864][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.620935][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.621029][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.621116][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.621188][T14231] binder_alloc: binder_alloc_mmap_handler: 14229 2000000a0000-2000000a2000 already mapped failed -16 [ 222.626848][T14232] binder: 14229:14232 unknown command 1851878519 [ 222.632127][T14230] binder: 14229:14230 ioctl 4018620d 200000000080 returned -16 [ 222.633262][T14232] binder: 14229:14232 ioctl c0306201 200000000100 returned -22 [ 222.734112][ T848] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 222.763347][ T848] usb 7-1: device descriptor read/8, error -71 [ 222.933814][ T41] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 223.012119][ T848] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 223.048694][ T848] usb 7-1: device descriptor read/8, error -71 [ 223.086714][ T41] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 223.090486][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.098145][ T42] audit: type=1400 audit(2000000003.609:1081): avc: denied { connect } for pid=14256 comm="syz.6.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 223.162275][ T848] usb usb7-port1: unable to enumerate USB device [ 223.306162][ T41] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 223.369470][T14272] netlink: 'syz.4.2369': attribute type 4 has an invalid length. [ 223.375529][T14272] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2369'. [ 223.379828][T14272] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 223.440602][T14274] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 223.444281][T14274] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 224.036380][T14304] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2381'. [ 224.043223][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2381'. [ 224.065923][T14304] hsr_slave_1 (unregistering): left promiscuous mode [ 224.192696][T14312] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 224.653200][T14331] input: syz0 as /devices/virtual/input/input19 [ 224.712176][ T42] audit: type=1400 audit(2000000005.219:1082): avc: denied { watch watch_reads } for pid=14330 comm="syz.6.2389" path="/proc/631/net/dev_snmp6" dev="proc" ino=4026533251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 224.714534][T14331] comedi comedi2: bad chanlist[1]=0x000000a4 chan=164 range length=9 [ 224.743556][T14331] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 224.919636][ T42] audit: type=1804 audit(2000000005.429:1083): pid=14348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2394" name="/newroot/456/file0" dev="tmpfs" ino=2513 res=1 errno=0 [ 225.224542][T14359] ceph: No source [ 225.227596][T14359] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:19999 [ 225.680692][T14366] SET target dimension over the limit! [ 225.811699][T14368] syz.6.2399: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 225.931968][T14376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14376 comm=syz.6.2402 [ 225.940055][T14376] netlink: 'syz.6.2402': attribute type 1 has an invalid length. [ 225.956964][T14376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.972665][T14376] bond3: (slave dummy0): making interface the new active one [ 225.976128][T14376] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 226.095764][T14385] fuse: fd is not a fuse device [ 226.288128][T14400] syz.2.2409 (14400): drop_caches: 0 [ 226.385101][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.393950][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.397272][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.403489][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.406900][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.764543][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2414'. [ 226.767866][ T42] audit: type=1400 audit(2000000007.279:1084): avc: denied { getopt } for pid=14444 comm="syz.6.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 226.893715][T14457] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2416'. [ 226.905610][ T42] audit: type=1400 audit(2000000007.419:1085): avc: denied { map } for pid=14456 comm="syz.6.2416" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 226.955341][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.957769][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.960296][T14407] bridge_slave_0: entered allmulticast mode [ 226.964068][T14407] bridge_slave_0: entered promiscuous mode [ 226.967605][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.969973][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.972864][T14407] bridge_slave_1: entered allmulticast mode [ 226.975734][T14407] bridge_slave_1: entered promiscuous mode [ 227.007052][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.018432][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.040961][T14472] team0 (unregistering): left promiscuous mode [ 227.043654][T14472] team_slave_0: left promiscuous mode [ 227.045631][T14472] team_slave_1: left promiscuous mode [ 227.052122][T14472] team0 (unregistering): Port device team_slave_0 removed [ 227.060624][T14472] team0 (unregistering): Port device team_slave_1 removed [ 227.073979][T14474] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 227.082217][T14474] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 227.087303][T14407] team0: Port device team_slave_0 added [ 227.091095][T14407] team0: Port device team_slave_1 added [ 227.107088][T14474] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 227.113845][T14474] overlayfs: failed to set xattr on upper [ 227.116449][T14474] overlayfs: ...falling back to redirect_dir=nofollow. [ 227.118605][T14474] overlayfs: ...falling back to index=off. [ 227.118783][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.120374][T14474] overlayfs: ...falling back to uuid=null. [ 227.123111][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.133278][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.137909][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.138865][T14472] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 227.140175][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.140194][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.175046][T14407] hsr_slave_0: entered promiscuous mode [ 227.177402][T14407] hsr_slave_1: entered promiscuous mode [ 227.179562][T14407] debugfs: 'hsr0' already exists in 'hsr' [ 227.181355][T14407] Cannot create hsr debugfs directory [ 227.204371][T14479] SELinux: policydb string does not match my string SE Linux [ 227.207282][T14479] SELinux: failed to load policy [ 227.370577][T14407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.375059][T14407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.467471][T14407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.470844][T14407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.555641][T14407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.561590][T14407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.649071][T14407] netdevsim netdevsim4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.653055][T14407] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.818594][T14407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.826252][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.830135][T14407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.847869][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.851819][T14407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.856235][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.859954][T14407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 227.866288][T14407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.884345][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.887291][T14407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.890086][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.892525][T14407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.931849][T14407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.938812][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.942722][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.967113][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.975206][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.977604][ T6392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.985685][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.988004][ T6392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.022301][ T42] audit: type=1400 audit(2000000008.539:1086): avc: denied { mounton } for pid=14493 comm="syz.6.2423" path="/219/file0" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 228.039187][T14494] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2423'. [ 228.244487][T14502] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 228.249573][T14502] SET target dimension over the limit! [ 228.252899][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2424'. [ 228.387391][T14407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.482192][ T5751] Bluetooth: hci1: command tx timeout [ 228.609551][T14534] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.626467][T14407] veth0_vlan: entered promiscuous mode [ 228.639151][T14407] veth1_vlan: entered promiscuous mode [ 228.661324][T14407] veth0_macvtap: entered promiscuous mode [ 228.664052][T14539] overlayfs: conflicting lowerdir path [ 228.668609][T14407] veth1_macvtap: entered promiscuous mode [ 228.677436][T14534] Bluetooth: hci0: unsupported parameter 255 [ 228.679971][T14534] Bluetooth: hci0: unsupported parameter 255 [ 228.680888][T14407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.691337][T14407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.703732][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.708765][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.736548][T14542] netlink: 'syz.6.2434': attribute type 10 has an invalid length. [ 228.779077][ T12] bond3: (slave dummy0): link status definitely down, disabling slave [ 228.796273][ T12] bond3: now running without any active interface! [ 228.846409][ T5814] usb 10-1: USB disconnect, device number 15 [ 228.898297][T14542] syz_tun: entered promiscuous mode [ 228.910580][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.913346][ T7994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.919162][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.924817][ T7994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.948884][T14561] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14561 comm=syz.2.2439 [ 228.955715][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 228.962715][ T42] audit: type=1400 audit(2000000009.469:1087): avc: denied { setopt } for pid=14557 comm="syz.2.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.982084][ T42] audit: type=1400 audit(2000000009.489:1088): avc: denied { append } for pid=14552 comm="syz.5.2438" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 228.982605][T14553] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 228.991516][ T42] audit: type=1400 audit(2000000009.489:1089): avc: denied { write } for pid=14552 comm="syz.5.2438" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 228.996290][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.010728][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.040549][ T42] audit: type=1400 audit(2000000009.549:1090): avc: denied { mounton } for pid=14407 comm="syz-executor" path="/syzkaller.seuNAb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=56663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 229.094816][T14573] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 229.118122][ T5146] Dev loop4: unable to read RDB block 7 [ 229.124068][ T5146] loop4: unable to read partition table [ 229.129419][T14577] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.129578][ T5146] loop4: partition table beyond EOD, truncated [ 229.188765][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2445'. [ 229.202501][T14584] netlink: zone id is out of range [ 229.204759][T14584] netlink: del zone limit has 8 unknown bytes [ 229.219122][T14575] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2445'. [ 229.235813][T14587] input: syz0 as /devices/virtual/input/input20 [ 229.325474][ T42] audit: type=1400 audit(2000000009.829:1091): avc: denied { setattr } for pid=14589 comm="syz.2.2449" name="/" dev="configfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 229.402429][ T5146] Dev loop4: unable to read RDB block 7 [ 229.404345][ T5146] loop4: unable to read partition table [ 229.406507][ T5146] loop4: partition table beyond EOD, truncated [ 229.410802][T14604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2453'. [ 229.473403][T14607] Line length is too long: Should be less than 4094 [ 229.491337][T14609] tmpfs: Bad value for 'mpol' [ 229.557057][ T5146] Dev loop4: unable to read RDB block 7 [ 229.560115][ T5146] loop4: unable to read partition table [ 229.562466][ T5146] loop4: partition table beyond EOD, truncated [ 229.652148][ T5146] Dev loop4: unable to read RDB block 7 [ 229.655318][ T5146] loop4: unable to read partition table [ 229.657400][ T5146] loop4: partition table beyond EOD, truncated [ 229.703376][ T5146] Dev loop4: unable to read RDB block 7 [ 229.706062][ T5146] loop4: unable to read partition table [ 229.708094][ T5146] loop4: partition table beyond EOD, truncated [ 229.797534][ T5146] Dev loop4: unable to read RDB block 7 [ 229.799402][ T5146] loop4: unable to read partition table [ 229.805948][ T5146] loop4: partition table beyond EOD, truncated [ 229.808378][T14648] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 229.813982][ T42] audit: type=1326 audit(2000000010.329:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14646 comm="syz.4.2469" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe59b99e019 code=0x0 [ 230.142117][T14669] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14669 comm=syz.6.2474 [ 230.319779][T14677] cgroup: subsys name conflicts with all [ 230.389942][T14684] vxfs: unable to read disk superblock at 1 [ 230.394820][T14684] vxfs: unable to read disk superblock at 8 [ 230.397348][T14684] vxfs: can't find superblock. [ 230.468257][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 230.468271][ T42] audit: type=1326 audit(2000000010.979:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.479809][ T42] audit: type=1326 audit(2000000010.979:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.490950][ T42] audit: type=1326 audit(2000000010.989:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.500278][ T42] audit: type=1326 audit(2000000010.989:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.509610][ T42] audit: type=1326 audit(2000000010.989:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.518759][ T42] audit: type=1326 audit(2000000010.989:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.529513][T14685] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 230.529636][ T42] audit: type=1326 audit(2000000010.989:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.534602][T14685] SELinux: failed to load policy [ 230.542452][ T42] audit: type=1326 audit(2000000011.029:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.553702][ T42] audit: type=1326 audit(2000000011.029:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.563330][ T42] audit: type=1326 audit(2000000011.039:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14683 comm="syz.6.2478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192bf9e019 code=0x7ffc0000 [ 230.563421][ T5751] Bluetooth: hci1: command tx timeout [ 230.666726][ T5146] Dev loop4: unable to read RDB block 7 [ 230.669249][ T5146] loop4: unable to read partition table [ 230.671775][ T5146] loop4: partition table beyond EOD, truncated [ 230.682187][T14691] UHID_CREATE from different security context by process 25 (syz.4.2479), this is not allowed. [ 230.709326][ T5146] Dev loop4: unable to read RDB block 7 [ 230.712477][ T5146] loop4: unable to read partition table [ 230.714897][ T5146] loop4: partition table beyond EOD, truncated [ 230.898621][ T5146] Dev loop4: unable to read RDB block 7 [ 230.900510][ T5146] loop4: unable to read partition table [ 230.902693][ T5146] loop4: partition table beyond EOD, truncated [ 231.073374][ T5146] Dev loop4: unable to read RDB block 7 [ 231.075288][ T5146] loop4: unable to read partition table [ 231.077869][ T5146] loop4: partition table beyond EOD, truncated [ 231.626537][ T5751] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 231.814567][T14721] printk: legacy console [ttyGS0] disabled [ 231.946420][T14729] loop5: detected capacity change from 0 to 7 [ 231.951241][T14729] Dev loop5: unable to read RDB block 7 [ 231.954038][T14729] loop5: AHDI p1 p2 p3 [ 231.955512][T14729] loop5: partition table partially beyond EOD, truncated [ 231.958631][T14729] loop5: p1 start 1818582900 is beyond EOD, truncated [ 231.961462][T14729] loop5: p3 start 335544320 is beyond EOD, truncated [ 231.965180][ T5146] Dev loop4: unable to read RDB block 7 [ 231.967491][ T5146] loop4: unable to read partition table [ 231.969968][ T5146] loop4: partition table beyond EOD, truncated [ 231.987067][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2492'. [ 231.989980][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2492'. [ 231.998758][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2492'. [ 232.001743][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2492'. [ 232.041627][ T5146] Dev loop4: unable to read RDB block 7 [ 232.045436][ T5146] loop4: unable to read partition table [ 232.047441][ T5146] loop4: partition table beyond EOD, truncated [ 232.063348][T14741] netlink: 'syz.4.2495': attribute type 1 has an invalid length. [ 232.066851][T14741] netlink: 'syz.4.2495': attribute type 4 has an invalid length. [ 232.070258][T14741] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2495'. [ 232.105562][ T5146] Dev loop4: unable to read RDB block 7 [ 232.107926][ T5146] loop4: unable to read partition table [ 232.110268][ T5146] loop4: partition table beyond EOD, truncated [ 232.119337][ T5751] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 232.125325][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: kworker/u34:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.125348][ T5751] Tainted: [L]=SOFTLOCKUP [ 232.125362][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.125372][ T5751] Workqueue: hci1 hci_rx_work [ 232.125411][ T5751] Call Trace: [ 232.125428][ T5751] [ 232.125435][ T5751] dump_stack_lvl+0x100/0x190 [ 232.125491][ T5751] sysfs_warn_dup.cold+0x1c/0x28 [ 232.125534][ T5751] sysfs_create_dir_ns+0x24b/0x2b0 [ 232.125573][ T5751] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 232.125598][ T5751] ? find_held_lock+0x2b/0x80 [ 232.125624][ T5751] ? kobject_add_internal+0x25f/0x930 [ 232.125648][ T5751] ? kobject_add_internal+0x25f/0x930 [ 232.125673][ T5751] ? do_raw_spin_unlock+0x145/0x1e0 [ 232.125691][ T5751] kobject_add_internal+0x2c8/0x930 [ 232.125718][ T5751] kobject_add+0x16a/0x1e0 [ 232.125740][ T5751] ? __pfx_kobject_add+0x10/0x10 [ 232.125756][ T5751] ? class_to_subsys+0x10f/0x150 [ 232.125809][ T5751] ? kobject_put+0xb9/0x640 [ 232.125831][ T5751] ? _raw_spin_unlock+0x28/0x50 [ 232.125849][ T5751] device_add+0x294/0x1970 [ 232.125879][ T5751] ? __pfx_dev_set_name+0x10/0x10 [ 232.125909][ T5751] ? __pfx_device_add+0x10/0x10 [ 232.125945][ T5751] ? mgmt_send_event_skb+0x2fb/0x460 [ 232.125976][ T5751] hci_conn_add_sysfs+0x1a3/0x260 [ 232.126005][ T5751] le_conn_complete_evt+0x11eb/0x1f60 [ 232.126037][ T5751] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 232.126051][ T5751] ? hci_event_packet+0x186/0xcd0 [ 232.126067][ T5751] ? hci_event_packet+0x186/0xcd0 [ 232.126100][ T5751] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 232.126127][ T5751] ? skb_pull_data+0x15f/0x1e0 [ 232.126164][ T5751] hci_le_meta_evt+0x34a/0x5f0 [ 232.126182][ T5751] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 232.126216][ T5751] hci_event_packet+0x51c/0xcd0 [ 232.126239][ T5751] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 232.126272][ T5751] ? __pfx_hci_event_packet+0x10/0x10 [ 232.126324][ T5751] ? kcov_remote_start+0x384/0x670 [ 232.126367][ T5751] ? lockdep_hardirqs_on+0x78/0x100 [ 232.126398][ T5751] hci_rx_work+0x451/0xfc0 [ 232.126431][ T5751] process_one_work+0xa23/0x1940 [ 232.126477][ T5751] ? __pfx_process_one_work+0x10/0x10 [ 232.126519][ T5751] ? __pfx_hci_rx_work+0x10/0x10 [ 232.126542][ T5751] worker_thread+0x5ef/0xe50 [ 232.126576][ T5751] ? __pfx_worker_thread+0x10/0x10 [ 232.126598][ T5751] ? kthread+0x13a/0x450 [ 232.126624][ T5751] ? __pfx_worker_thread+0x10/0x10 [ 232.126652][ T5751] kthread+0x370/0x450 [ 232.126673][ T5751] ? __pfx_kthread+0x10/0x10 [ 232.126699][ T5751] ret_from_fork+0x72b/0xd50 [ 232.126728][ T5751] ? __pfx_ret_from_fork+0x10/0x10 [ 232.126753][ T5751] ? __switch_to+0x800/0x10f0 [ 232.126768][ T5751] ? __pfx_kthread+0x10/0x10 [ 232.126786][ T5751] ret_from_fork_asm+0x1a/0x30 [ 232.126812][ T5751] [ 232.126835][ T5751] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 232.232994][ T5751] Bluetooth: hci1: failed to register connection device [ 232.652089][ T5751] Bluetooth: hci1: command tx timeout [ 233.048955][T14761] usbcore.quirks: string doesn't fit in 127 chars. [ 234.732527][ T5751] Bluetooth: hci1: command tx timeout [ 235.140726][ T5146] Dev loop4: unable to read RDB block 7 [ 235.145264][ T5146] loop4: unable to read partition table [ 235.147724][ T5146] loop4: partition table beyond EOD, truncated [ 247.522053][ T5751] Bluetooth: hci4: command 0x0406 tx timeout [ 251.272653][ T42] kauditd_printk_skb: 484 callbacks suppressed [ 251.272666][ T42] audit: type=1400 audit(2000000031.789:1588): avc: denied { connect } for pid=14774 comm="syz.6.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.278902][T14781] nfs: Unknown parameter '01777777777777777777777' [ 251.292659][T14778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.385492][ T42] audit: type=1400 audit(2000000031.899:1589): avc: denied { ioctl } for pid=14794 comm="syz.6.2512" path="socket:[58243]" dev="sockfs" ino=58243 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.480615][T14806] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 251.482845][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2516'. [ 251.512080][ T5821] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 251.539532][ T42] audit: type=1400 audit(2000000032.049:1590): avc: denied { accept } for pid=14802 comm="syz.6.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.548023][ T42] audit: type=1400 audit(2000000032.059:1591): avc: denied { getopt } for pid=14802 comm="syz.6.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.604606][ T42] audit: type=1326 audit(2000000032.119:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.5.2519" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf5a79e019 code=0x0 [ 251.672210][ T5821] usb 9-1: Using ep0 maxpacket: 16 [ 251.676058][ T5821] usb 9-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 251.682242][ T5821] usb 9-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 251.685770][ T5821] usb 9-1: config 1 interface 0 has no altsetting 0 [ 251.690335][ T5821] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.692309][T14823] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 251.694189][ T5821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.700052][ T5821] usb 9-1: Product: syz [ 251.701791][ T5821] usb 9-1: Manufacturer: syz [ 251.704215][ T5821] usb 9-1: SerialNumber: syz [ 251.717038][T14777] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.719488][T14777] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.946067][ T5821] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 251.954562][ T5821] usb 9-1: USB disconnect, device number 8 [ 252.446914][ T5146] Dev loop4: unable to read RDB block 7 [ 252.448779][ T5146] loop4: unable to read partition table [ 252.450730][ T5146] loop4: partition table beyond EOD, truncated [ 252.468055][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'. [ 252.478951][T14843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=14843 comm=syz.4.2526 [ 252.485844][T14845] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2527'. [ 252.510513][ T5146] Dev loop4: unable to read RDB block 7 [ 252.513551][ T5146] loop4: unable to read partition table [ 252.516704][ T5146] loop4: partition table beyond EOD, truncated [ 252.542950][T14825] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 252.654597][ T42] audit: type=1400 audit(2000000033.169:1593): avc: denied { name_bind } for pid=14858 comm="syz.5.2531" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 252.665976][ T42] audit: type=1400 audit(2000000033.169:1594): avc: denied { node_bind } for pid=14858 comm="syz.5.2531" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 252.669513][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 252.679572][T14863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.756016][ T5146] Dev loop4: unable to read RDB block 7 [ 252.760366][ T5146] loop4: unable to read partition table [ 252.762434][ T5146] loop4: partition table beyond EOD, truncated [ 253.006681][T14836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.116623][ T5146] Dev loop4: unable to read RDB block 7 [ 253.120369][ T5146] loop4: unable to read partition table [ 253.123636][ T5146] loop4: partition table beyond EOD, truncated [ 253.182288][ T5146] Dev loop4: unable to read RDB block 7 [ 253.186736][ T5146] loop4: unable to read partition table [ 253.191698][ T5146] loop4: partition table beyond EOD, truncated [ 253.338113][ T5146] Dev loop4: unable to read RDB block 7 [ 253.340078][ T5146] loop4: unable to read partition table [ 253.341109][T14922] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2543'. [ 253.345118][ T5146] loop4: partition table beyond EOD, truncated [ 253.390403][T14931] pim6reg9: entered allmulticast mode [ 253.422261][ T5146] Dev loop4: unable to read RDB block 7 [ 253.425300][ T5146] loop4: unable to read partition table [ 253.427363][ T5146] loop4: partition table beyond EOD, truncated [ 253.610317][T14934] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 253.612562][T14934] syzkaller1: linktype set to 776 [ 253.762644][ T5741] Bluetooth: hci0: command 0x0406 tx timeout [ 255.684741][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.335029][T14922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.361653][ T5146] Dev loop4: unable to read RDB block 7 [ 256.365999][ T5146] loop4: unable to read partition table [ 256.368338][ T5146] loop4: partition table beyond EOD, truncated [ 256.407173][ T42] audit: type=1400 audit(2000000036.909:1595): avc: denied { setattr } for pid=14963 comm="syz.2.2553" name="MCTP" dev="sockfs" ino=63693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.410448][T14967] nla_validate_range_unsigned: 1 callbacks suppressed [ 256.410467][T14967] netlink: 'syz.5.2554': attribute type 11 has an invalid length. [ 256.427728][ T42] audit: type=1400 audit(2000000036.919:1596): avc: denied { write } for pid=14963 comm="syz.2.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.427752][T14967] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2554'. [ 256.437739][ T42] audit: type=1400 audit(2000000036.919:1597): avc: denied { read } for pid=14966 comm="syz.5.2554" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 256.475537][ T5146] Dev loop4: unable to read RDB block 7 [ 256.477363][ T5146] loop4: unable to read partition table [ 256.479654][ T5146] loop4: partition table beyond EOD, truncated [ 256.496007][T14980] netlink: 'syz.5.2557': attribute type 13 has an invalid length. [ 256.505258][ T42] audit: type=1400 audit(2000000037.019:1598): avc: denied { lock } for pid=14982 comm="syz.2.2559" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 256.598115][T15001] loop5: detected capacity change from 0 to 7 [ 256.604619][T15001] Dev loop5: unable to read RDB block 7 [ 256.607053][T15001] loop5: AHDI p1 p2 p3 [ 256.608936][T15001] loop5: partition table partially beyond EOD, truncated [ 256.612844][ T5146] Dev loop4: unable to read RDB block 7 [ 256.613232][T15001] loop5: p1 start 1818582900 is beyond EOD, truncated [ 256.614974][ T5146] loop4: unable to read partition table [ 256.615070][ T5146] loop4: partition table beyond EOD, [ 256.618366][T15001] loop5: p3 start 335544320 is beyond EOD, [ 256.620084][ T5146] truncated [ 256.628331][T15001] truncated [ 256.634282][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'. [ 256.648609][T15003] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 256.662297][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2563'. [ 256.670823][T15005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15005 comm=syz.6.2564 [ 256.735836][ T5146] Dev loop4: unable to read RDB block 7 [ 256.738298][ T5146] loop4: unable to read partition table [ 256.740706][ T5146] loop4: partition table beyond EOD, truncated [ 256.758112][T15017] netlink: 'syz.5.2568': attribute type 21 has an invalid length. [ 256.761533][T15017] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.766354][T15017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.772051][T15017] IPv6: NLM_F_CREATE should be set when creating new route [ 256.774475][T15017] IPv6: NLM_F_CREATE should be set when creating new route [ 256.777047][T15017] IPv6: NLM_F_CREATE should be set when creating new route [ 256.786826][T15018] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2569'. [ 256.803864][ T5146] Dev loop4: unable to read RDB block 7 [ 256.806842][ T5146] loop4: unable to read partition table [ 256.809406][ T5146] loop4: partition table beyond EOD, truncated [ 256.907734][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 256.924574][T15023] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.941732][T15023] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 256.951332][T15026] 9pnet_fd: p9_fd_create_unix (15026): problem connecting socket: ./file0: -111 [ 256.957493][ T5146] Dev loop4: unable to read RDB block 7 [ 256.964711][ T5146] loop4: unable to read partition table [ 256.974647][ T5146] loop4: partition table beyond EOD, truncated [ 256.979317][T15029] sg_write: data in/out 39264/136 bytes for SCSI command 0x0-- guessing data in; [ 256.979317][T15029] program syz.4.2573 not setting count and/or reply_len properly [ 257.032003][ T41] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 257.039357][ T5146] Dev loop4: unable to read RDB block 7 [ 257.041566][ T5146] loop4: unable to read partition table [ 257.045716][ T5146] loop4: partition table beyond EOD, truncated [ 257.053625][T15038] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 257.078232][ T5146] Dev loop4: unable to read RDB block 7 [ 257.080024][ T5146] loop4: unable to read partition table [ 257.084669][ T5146] loop4: partition table beyond EOD, truncated [ 257.090422][T15042] loop6: detected capacity change from 0 to 2640 [ 257.095548][T15040] UDC core: g1: couldn't find an available UDC or it's busy [ 257.107182][T14784] buffer_io_error: 321 callbacks suppressed [ 257.107199][T14784] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.115012][T14784] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.118722][T14784] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.123104][T14784] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.126977][T14784] Buffer I/O error on dev loop6, logical block 0, async page read [ 257.195430][ T41] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 257.201371][ T41] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 257.206777][ T5146] Dev loop4: unable to read RDB block 7 [ 257.209365][ T5146] loop4: unable to read partition table [ 257.214356][ T5146] loop4: partition table beyond EOD, truncated [ 257.216430][ T41] usb 10-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 257.223869][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.228601][ T41] usb 10-1: Product: syz [ 257.230522][ T41] usb 10-1: Manufacturer: syz [ 257.234080][ T41] usb 10-1: SerialNumber: syz [ 257.254307][T15017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.257013][T15017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.268677][ T41] kl5kusb105 10-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 257.269964][ T5146] Dev loop4: unable to read RDB block 7 [ 257.280580][ T5146] loop4: unable to read partition table [ 257.287434][ T5146] loop4: partition table beyond EOD, truncated [ 257.287833][ T41] usb 10-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 257.480235][T15069] vlan2: entered allmulticast mode [ 257.595665][T15079] netlink: 'syz.5.2568': attribute type 21 has an invalid length. [ 257.605023][T15079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.664727][ T5146] Dev loop4: unable to read RDB block 7 [ 257.666593][ T5146] loop4: unable to read partition table [ 257.673401][ T5146] loop4: partition table beyond EOD, truncated [ 257.751505][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 257.778262][ T5146] Dev loop4: unable to read RDB block 7 [ 257.780734][ T5146] loop4: unable to read partition table [ 257.786544][ T5146] loop4: partition table beyond EOD, truncated [ 257.874043][ T5146] Dev loop4: unable to read RDB block 7 [ 257.877672][ T5146] loop4: unable to read partition table [ 257.883081][ T5146] loop4: partition table beyond EOD, truncated [ 258.008144][T15106] file system registered [ 258.009315][ T42] audit: type=1400 audit(2000000038.519:1599): avc: denied { write } for pid=15105 comm="syz.2.2593" name="functions" dev="configfs" ino=12419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.018449][T15106] read descriptors [ 258.019747][ T42] audit: type=1400 audit(2000000038.529:1600): avc: denied { mount } for pid=15105 comm="syz.2.2593" name="/" dev="functionfs" ino=65943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 258.021474][T15106] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 258.055600][ T42] audit: type=1400 audit(2000000038.569:1601): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 258.068313][ T5737] ffs_data_put(): freeing [ 258.103627][T15109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=15109 comm=syz.2.2594 [ 258.110545][T15109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=15109 comm=syz.2.2594 [ 258.142302][ T41] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 258.154966][ T6402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.158251][ T6402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.162049][ T24] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 258.314544][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.319416][ T41] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.326410][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.326532][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.346304][ T41] usb 9-1: config 0 descriptor?? [ 258.350699][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.355321][ T24] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.361292][ T24] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.365648][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.388065][ T24] usb 11-1: config 0 descriptor?? [ 258.501326][ T5883] usb 10-1: USB disconnect, device number 16 [ 258.514237][ T5883] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 258.518802][ T5883] kl5kusb105 10-1:1.0: device disconnected [ 258.573270][ T41] usbhid 9-1:0.0: can't add hid device: -71 [ 258.575426][ T41] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 258.582333][ T41] usb 9-1: USB disconnect, device number 9 [ 258.608225][ T24] usbhid 11-1:0.0: can't add hid device: -71 [ 258.613956][ T24] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 258.623734][T15128] netlink: zone id is out of range [ 258.623980][T15129] netlink: zone id is out of range [ 258.625850][T15128] netlink: zone id is out of range [ 258.628036][T15129] netlink: zone id is out of range [ 258.628134][ T24] usb 11-1: USB disconnect, device number 3 [ 258.629810][T15128] netlink: zone id is out of range [ 258.631688][T15129] netlink: zone id is out of range [ 258.635814][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 258.635992][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2599'. [ 258.744361][ T6402] nvmet: connect request for invalid subsystem n! [ 258.748224][T15134] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 258.748613][ T42] audit: type=1400 audit(2000000039.259:1602): avc: denied { write } for pid=15136 comm="syz.6.2601" name="configs" dev="configfs" ino=12420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.749545][T15131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2599'. [ 258.763669][ T42] audit: type=1400 audit(2000000039.259:1603): avc: denied { remove_name } for pid=15136 comm="syz.6.2601" name="c.1" dev="configfs" ino=16777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.772057][ T42] audit: type=1400 audit(2000000039.259:1604): avc: denied { rmdir } for pid=15136 comm="syz.6.2601" name="c.1" dev="configfs" ino=16777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.022065][ T41] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 259.040705][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2609'. [ 259.043811][T15163] netlink: 'syz.5.2609': attribute type 30 has an invalid length. [ 259.046890][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2609'. [ 259.050147][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2609'. [ 259.053676][T15163] netlink: 'syz.5.2609': attribute type 30 has an invalid length. [ 259.172861][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 259.176748][ T41] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 259.179392][ T41] usb 9-1: config 0 has no interface number 0 [ 259.181318][ T41] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.184992][ T41] usb 9-1: config 0 interface 52 has no altsetting 0 [ 259.187146][ T41] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 259.190011][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.195877][ T41] usb 9-1: config 0 descriptor?? [ 259.232705][T14884] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 259.384030][T14884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.388071][T14884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.392086][T14884] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.397139][T14884] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.400715][T14884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.409606][ T41] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.52/input/input23 [ 259.410755][T14884] usb 7-1: config 0 descriptor?? [ 259.528017][T15198] overlayfs: invalid origin (0000) [ 259.604917][ T5884] usb 9-1: USB disconnect, device number 10 [ 260.033805][T14884] usbhid 7-1:0.0: can't add hid device: -71 [ 260.035841][T14884] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 260.049584][T14884] usb 7-1: USB disconnect, device number 33 [ 260.117524][ T5146] Dev loop4: unable to read RDB block 7 [ 260.119557][ T5146] loop4: unable to read partition table [ 260.121648][ T5146] loop4: partition table beyond EOD, truncated [ 260.311525][T15216] : renamed from vlan0 (while UP) [ 260.389881][ T5146] Dev loop4: unable to read RDB block 7 [ 260.392255][ T5146] loop4: unable to read partition table [ 260.394502][ T5146] loop4: partition table beyond EOD, truncated [ 260.427092][ T5146] Dev loop4: unable to read RDB block 7 [ 260.429091][ T5146] loop4: unable to read partition table [ 260.431059][ T5146] loop4: partition table beyond EOD, truncated [ 260.956606][T15245] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 261.014297][ T34] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 261.172067][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 261.176508][ T34] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.181362][ T34] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.185866][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 261.188863][ T34] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 261.194450][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.198502][ T5146] Dev loop4: unable to read RDB block 7 [ 261.200942][ T5146] loop4: unable to read partition table [ 261.205428][ T5146] loop4: partition table beyond EOD, truncated [ 261.208976][ T34] usb 11-1: config 0 descriptor?? [ 261.273059][ T5146] Dev loop4: unable to read RDB block 7 [ 261.275591][ T5146] loop4: unable to read partition table [ 261.278077][ T5146] loop4: partition table beyond EOD, truncated [ 261.501220][T15268] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.504607][T15268] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.567397][T15268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.573607][T15268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.638517][ T34] hid_parser_main: 5 callbacks suppressed [ 261.638544][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 261.647518][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 261.649989][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 261.652356][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 261.654579][ T34] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 261.655955][T15283] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.657162][ T34] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 261.702110][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.705528][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.709102][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.713191][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.719246][T15286] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 261.731820][ T5146] Dev loop4: unable to read RDB block 7 [ 261.739007][ T5146] loop4: unable to read partition table [ 261.743963][ T5146] loop4: partition table beyond EOD, truncated [ 261.824464][ T41] usb 11-1: USB disconnect, device number 4 [ 261.886227][T15300] xt_recent: Unsupported userspace flags (000000b2) [ 261.905905][ T5146] Dev loop4: unable to read RDB block 7 [ 261.908258][ T5146] loop4: unable to read partition table [ 261.910486][ T5146] loop4: partition table beyond EOD, truncated [ 261.913235][T15305] Mount JFS Failure: -22 [ 261.913272][T15305] jfs_mount failed w/return code = -22 [ 261.966316][T15310] openvswitch: netlink: Flow key attr not present in new flow. [ 261.997059][T15312] __nla_validate_parse: 3 callbacks suppressed [ 261.997077][T15312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2652'. [ 262.052983][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 262.053000][ T42] audit: type=1400 audit(2000000042.569:1613): avc: denied { create } for pid=15318 comm="syz.2.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 262.064921][ T42] audit: type=1400 audit(2000000042.569:1614): avc: denied { getopt } for pid=15318 comm="syz.2.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 262.142890][ T5821] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 262.166942][ T42] audit: type=1400 audit(2000000042.679:1615): avc: denied { write } for pid=15323 comm="syz.2.2656" name="strings" dev="configfs" ino=12421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.180160][ T42] audit: type=1400 audit(2000000042.679:1616): avc: denied { write } for pid=15323 comm="syz.2.2656" name="functions" dev="configfs" ino=12419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.272173][T15335] JFS: charset not found [ 262.302622][ T5821] usb 9-1: Using ep0 maxpacket: 16 [ 262.308192][ T5821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.314470][ T5821] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 262.319893][ T5821] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 262.327088][ T5821] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.336274][ T5821] usb 9-1: config 0 descriptor?? [ 262.364658][T15342] JFS: discard option not supported on device [ 262.370515][T15342] Mount JFS Failure: -5 [ 262.378970][T15342] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 262.385482][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2662'. [ 262.392941][T15344] xt_policy: neither incoming nor outgoing policy selected [ 262.426509][T15342] bond9: (slave geneve3): making interface the new active one [ 262.430664][T15342] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 262.442967][ T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 262.446637][ T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 262.449775][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 262.454005][ T12] netdevsim netdevsim2 : set [1, 1] type 2 family 0 port 20004 - 0 [ 262.537571][T15357] netlink: 'syz.6.2665': attribute type 19 has an invalid length. [ 262.578065][T15360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60103 sclass=netlink_route_socket pid=15360 comm=syz.2.2667 [ 262.746330][T15367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=15367 comm=syz.2.2667 [ 262.753145][T15304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2649'. [ 263.004603][T15377] loop2: detected capacity change from 0 to 7 [ 263.005493][T15377] Dev loop2: unable to read RDB block 7 [ 263.005512][T15377] loop2: AHDI p2 p3 [ 263.005522][T15377] loop2: partition table partially beyond EOD, truncated [ 263.005782][T15377] loop2: p2 start 1702059890 is beyond EOD, truncated [ 263.118140][ T5821] usbhid 9-1:0.0: can't add hid device: -71 [ 263.120925][ T5821] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 263.128222][ T5821] usb 9-1: USB disconnect, device number 11 [ 263.138387][ T5146] Dev loop4: unable to read RDB block 7 [ 263.140293][ T5146] loop4: unable to read partition table [ 263.143345][ T5146] loop4: partition table beyond EOD, truncated [ 263.154431][ T42] audit: type=1400 audit(2000000043.669:1617): avc: denied { execute } for pid=15382 comm="syz.4.2675" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 263.248332][ T5146] Dev loop4: unable to read RDB block 7 [ 263.250727][ T5146] loop4: unable to read partition table [ 263.254097][ T5146] loop4: partition table beyond EOD, truncated [ 263.410748][ T5146] Dev loop4: unable to read RDB block 7 [ 263.416338][ T5146] loop4: unable to read partition table [ 263.420226][ T5146] loop4: partition table beyond EOD, truncated [ 263.465534][ T5146] Dev loop4: unable to read RDB block 7 [ 263.468054][ T5146] loop4: unable to read partition table [ 263.470719][ T5146] loop4: partition table beyond EOD, truncated [ 263.554140][T15402] netlink: 15 bytes leftover after parsing attributes in process `syz.6.2680'. [ 263.882861][ T42] audit: type=1400 audit(2000000044.399:1618): avc: denied { map } for pid=15416 comm="syz.6.2685" path="socket:[64283]" dev="sockfs" ino=64283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.020768][T15424] loop8: detected capacity change from 0 to 7 [ 264.026845][T15424] loop8: [ 264.028214][T15424] loop8: partition table partially beyond EOD, truncated [ 264.119260][T15431] binder: BINDER_SET_CONTEXT_MGR already set [ 264.129844][T15431] binder: 15430:15431 ioctl 4018620d 200000000040 returned -16 [ 264.136258][T15431] binder: 15430:15431 ioctl c0306201 200000000180 returned -14 [ 264.138669][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2690'. [ 264.142500][T15433] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2690'. [ 264.143124][ T5146] Dev loop4: unable to read RDB block 7 [ 264.150729][T15433] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 264.154011][ T5146] loop4: unable to read partition table [ 264.154252][ T5146] loop4: partition table beyond EOD, truncated [ 264.203267][T15435] uhci_hcd 0000:00:1d.0: remove, state 1 [ 264.219062][T15435] usb usb1: USB disconnect, device number 1 [ 264.224154][T15435] usb 1-1: USB disconnect, device number 2 [ 264.277356][T15433] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 264.282953][T15433] overlayfs: failed to look up (tracing) for ino (-66) [ 264.572521][T15435] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 264.648239][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2698'. [ 264.660092][T15462] binder: BINDER_SET_CONTEXT_MGR already set [ 264.662760][T15462] binder: 15460:15462 ioctl 4018620d 200000004a80 returned -16 [ 264.749255][T15442] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 264.786314][T15442] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 264.789878][T15442] uhci_hcd 0000:00:1d.0: detected 2 ports [ 264.801507][T15442] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 264.820497][T15442] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 264.828786][T15442] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 264.833227][T15442] usb usb1: Product: UHCI Host Controller [ 264.835951][T15442] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 264.838755][T15442] usb usb1: SerialNumber: 0000:00:1d.0 [ 264.873134][T15442] hub 1-0:1.0: USB hub found [ 264.880775][T15442] hub 1-0:1.0: 2 ports detected [ 265.052963][T14884] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 265.067362][ T5146] Dev loop4: unable to read RDB block 7 [ 265.069842][ T5146] loop4: unable to read partition table [ 265.073417][ T5146] loop4: partition table beyond EOD, truncated [ 265.162039][ T41] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 265.212444][T14884] usb 10-1: Using ep0 maxpacket: 8 [ 265.220186][T14884] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 265.227044][T14884] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.234696][T14884] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.240940][T14884] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.246800][T14884] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.250400][T14884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.351534][ T41] usb 1-1: not running at top speed; connect to a high speed hub [ 265.362326][ T5814] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 265.390443][ T41] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 265.396415][ T41] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 265.402103][ T41] usb 1-1: Product: QEMU USB Tablet [ 265.404400][ T41] usb 1-1: Manufacturer: QEMU [ 265.406515][ T41] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 265.435877][ T41] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0009/input/input25 [ 265.459275][T14884] usb 10-1: GET_CAPABILITIES returned 0 [ 265.473733][T14884] usbtmc 10-1:16.0: can't read capabilities [ 265.513409][ T41] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 265.538307][ T5814] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.549850][ T5814] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 265.561854][ T5814] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 265.571994][ T5814] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.584403][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.611477][T15474] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 265.683266][ T5814] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.891682][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.906723][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.032571][ T10] usb 9-1: USB disconnect, device number 12 [ 266.554318][ T5146] Dev loop4: unable to read RDB block 7 [ 266.556117][ T5146] loop4: unable to read partition table [ 266.558667][ T5146] loop4: partition table beyond EOD, truncated [ 266.586008][ T42] audit: type=1800 audit(6001048711.099:1619): pid=15485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2704" name="p_it_ch_name" dev="configfs" ino=64426 res=0 errno=0 [ 266.642330][T15480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.650491][ T5146] Dev loop4: unable to read RDB block 7 [ 266.652814][ T5146] loop4: unable to read partition table [ 266.654809][ T5146] loop4: partition table beyond EOD, truncated [ 266.880808][ T5146] Dev loop4: unable to read RDB block 7 [ 266.883774][ T5146] loop4: unable to read partition table [ 266.885804][ T5146] loop4: partition table beyond EOD, truncated [ 266.897013][T15499] Option ''MO' to dns_resolver key: bad/missing value [ 266.925175][ T5146] Dev loop4: unable to read RDB block 7 [ 266.926951][ T5146] loop4: unable to read partition table [ 266.928934][ T5146] loop4: partition table beyond EOD, truncated [ 266.996150][ T5146] Dev loop4: unable to read RDB block 7 [ 266.998020][ T5146] loop4: unable to read partition table [ 267.000044][ T5146] loop4: partition table beyond EOD, truncated [ 267.774527][T15516] SELinux: failed to load policy [ 267.831800][T14884] usb 10-1: USB disconnect, device number 17 [ 267.957116][ T5146] Dev loop4: unable to read RDB block 7 [ 267.958948][ T5146] loop4: unable to read partition table [ 267.960834][ T5146] loop4: partition table beyond EOD, truncated [ 268.014170][ T42] audit: type=1807 audit(6001048712.519:1620): action=measure res=1 [ 268.020245][T15529] ima: policy update completed [ 268.023043][ T42] audit: type=1802 audit(6001048712.539:1621): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.4.2717" res=1 errno=0 [ 268.079178][ T42] audit: type=1800 audit(6001048712.589:1622): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 268.126527][ T42] audit: type=1800 audit(6001048712.609:1623): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 268.144002][ T42] audit: type=1800 audit(6001048712.609:1624): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 268.154816][ T42] audit: type=1800 audit(6001048712.619:1625): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 268.166739][ T42] audit: type=1800 audit(6001048712.669:1626): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 268.166875][ T5146] Dev loop4: unable to read RDB block 7 [ 268.194220][ T5146] loop4: unable to read partition table [ 268.198371][ T5146] loop4: partition table beyond EOD, truncated [ 268.234961][ T42] audit: type=1800 audit(6001048712.749:1627): pid=15540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2721" name="rcu_normal" dev="sysfs" ino=16 res=0 errno=0 [ 268.248432][ T42] audit: type=1800 audit(6001048712.749:1628): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 268.267922][ T42] audit: type=1800 audit(6001048712.779:1629): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 268.279944][T15544] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2723'. [ 268.289261][ T5146] Dev loop4: unable to read RDB block 7 [ 268.291154][ T5146] loop4: unable to read partition table [ 268.293202][T15544] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2723'. [ 268.297656][ T5146] loop4: partition table beyond EOD, truncated [ 268.369266][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2726'. [ 268.532099][ T5146] Dev loop4: unable to read RDB block 7 [ 268.533932][ T5146] loop4: unable to read partition table [ 268.541761][ T5146] loop4: partition table beyond EOD, truncated [ 268.568805][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2727'. [ 268.578173][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 268.627726][ T5146] Dev loop4: unable to read RDB block 7 [ 268.629539][ T5146] loop4: unable to read partition table [ 268.636922][ T5146] loop4: partition table beyond EOD, truncated [ 268.663335][T15564] vim2m vim2m.0: vidioc_s_fmt queue busy [ 268.668788][T15563] vim2m vim2m.0: vidioc_s_fmt queue busy [ 268.726654][T15561] hpfs: Bad magic ... probably not HPFS [ 268.744314][ T5146] Dev loop4: unable to read RDB block 7 [ 268.746532][ T5146] loop4: unable to read partition table [ 268.748417][ T5146] loop4: partition table beyond EOD, truncated [ 268.784393][T15571] netlink: 'syz.5.2731': attribute type 4 has an invalid length. [ 268.790923][T15571] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2731'. [ 268.884237][ T5146] Dev loop4: unable to read RDB block 7 [ 268.886224][ T5146] loop4: unable to read partition table [ 268.890472][ T5146] loop4: partition table beyond EOD, truncated [ 268.898957][T15575] ntfs3(sr0): Primary boot signature is not NTFS. [ 268.911172][T15575] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 268.968907][T15578] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2733'. [ 268.981633][T15578] tipc: Started in network mode [ 268.983301][T15578] tipc: Node identity 9, cluster identity 1 [ 268.989787][T15578] tipc: Node number set to 9 [ 269.028918][T15580] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 269.146932][T15583] netlink: 'syz.5.2735': attribute type 2 has an invalid length. [ 269.260690][T15585] syzkaller0: entered promiscuous mode [ 269.262620][T15585] syzkaller0: entered allmulticast mode [ 269.358856][ T6402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.363821][ T6402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.395261][T15592] 8021q: VLANs not supported on sit0 [ 269.488163][ T5146] Dev loop4: unable to read RDB block 7 [ 269.492683][T15599] fuse: Invalid rootmode [ 269.493161][ T5146] loop4: unable to read partition table [ 269.498767][ T5146] loop4: partition table beyond EOD, truncated [ 269.544565][T15605] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2744'. [ 269.549831][T15607] binder: 15602:15607 ioctl c018620b 0 returned -14 [ 269.573193][ T5146] Dev loop4: unable to read RDB block 7 [ 269.575823][ T5146] loop4: unable to read partition table [ 269.578341][ T5146] loop4: partition table beyond EOD, truncated [ 269.741614][ T5884] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 269.757073][T15620] syzkaller0: entered promiscuous mode [ 269.758949][T15620] syzkaller0: entered allmulticast mode [ 269.778650][T15628] 9p: Could not find request transport: *virtio [ 269.917704][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2739'. [ 269.966895][T15636] netlink: 'syz.2.2750': attribute type 1 has an invalid length. [ 269.970351][T15636] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2750'. [ 270.559270][ T5146] Dev loop4: unable to read RDB block 7 [ 270.562058][ T5146] loop4: unable to read partition table [ 270.564694][ T5146] loop4: partition table beyond EOD, truncated [ 270.590693][T15640] program syz.4.2751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.634739][ T1135] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 270.637502][ T1135] ata1.00: irq_stat 0x40000000 [ 270.642015][ T1135] ata1.00: failed command: ZAC MANAGEMENT OUT [ 270.644717][ T1135] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 13 [ 270.644717][ T1135] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 270.651258][ T1135] ata1.00: status: { DRDY ERR } [ 270.654386][ T1135] ata1.00: error: { ABRT } [ 270.656363][ T1135] ata1.00: device reported invalid CHS sector 0 [ 270.685245][ T5146] Dev loop4: unable to read RDB block 7 [ 270.687360][ T5146] loop4: unable to read partition table [ 270.689573][ T5146] loop4: partition table beyond EOD, truncated [ 270.753142][ T5146] Dev loop4: unable to read RDB block 7 [ 270.755007][ T5146] loop4: unable to read partition table [ 270.756976][ T5146] loop4: partition table beyond EOD, truncated [ 270.945686][ T5146] Dev loop4: unable to read RDB block 7 [ 270.948255][ T5146] loop4: unable to read partition table [ 270.950796][ T5146] loop4: partition table beyond EOD, truncated [ 271.685257][ T5741] Bluetooth: hci1: command tx timeout [ 272.054065][ T5884] usb 10-1: unable to get BOS descriptor or descriptor too short [ 272.059750][ T5884] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 272.063384][ T5884] usb 10-1: can't read configurations, error -71 [ 272.066698][T15648] syzkaller0: left promiscuous mode [ 272.068486][T15648] syzkaller0: left allmulticast mode [ 272.082452][T15648] bridge0: port 3(syz_tun) entered disabled state [ 272.088388][T15648] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.091722][T15648] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.157240][T15648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.165189][T15648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.219799][T15648] batman_adv: batadv0: Interface deactivated: gretap1 [ 272.246487][T15659] xfrm1: entered allmulticast mode [ 272.248856][T15664] sch_tbf: peakrate 6 is lower than or equals to rate 666 ! [ 272.263490][ T5813] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.268647][ T5813] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.272935][ T5813] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 272.281282][ T5813] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.291041][ T5813] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.298149][ T5813] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 272.305518][T15667] 9p filesystem being mounted at /409/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 272.306331][ T5813] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.323235][ T5813] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.331444][ T5813] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 272.336403][ T5813] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.339993][ T5813] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.346086][ T5813] netdevsim netdevsim2 : unset [1, 1] type 2 family 0 port 20004 - 0 [ 272.463712][T15680] 9pnet_virtio: no channels available for device syz [ 272.506445][T15682] UDC core: g1: couldn't find an available UDC or it's busy [ 272.681553][ T5884] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 272.833073][ T5884] usb 10-1: not running at top speed; connect to a high speed hub [ 272.836704][ T5884] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 272.842645][ T5884] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 272.845667][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.848185][ T5884] usb 10-1: Product: syz [ 272.849503][ T5884] usb 10-1: Manufacturer: syz [ 272.851098][ T5884] usb 10-1: SerialNumber: syz [ 272.857962][ T5884] oti6858 10-1:1.0: oti6858 converter detected [ 272.863206][ T5884] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 272.997267][T15708] devtmpfs: Unknown parameter 'usrquota_ockhardlimit' [ 273.037993][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 273.038012][ T42] audit: type=1800 audit(6001048717.549:1703): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 273.112129][T15712] [ 273.113193][T15712] ====================================================== [ 273.115994][T15712] WARNING: possible circular locking dependency detected [ 273.118839][T15712] syzkaller #0 Tainted: G L [ 273.120706][T15714] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 273.121394][T15712] ------------------------------------------------------ [ 273.121405][T15712] syz.5.2759/15712 is trying to acquire lock: [ 273.121416][T15712] ffff888056bccd70 (&p->frag_sem){++++}-{4:4}, at: configfs_rmdir+0x3fa/0x950 [ 273.124569][T15714] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 273.127417][T15712] [ 273.127417][T15712] but task is already holding lock: [ 273.127426][T15712] ffff88803957ba40 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 273.144050][T15712] [ 273.144050][T15712] which lock already depends on the new lock. [ 273.144050][T15712] [ 273.148476][T15712] [ 273.148476][T15712] the existing dependency chain (in reverse order) is: [ 273.152309][T15712] [ 273.152309][T15712] -> #3 (&sb->s_type->i_mutex_key#30){++++}-{4:4}: [ 273.153030][ T42] audit: type=1400 audit(6001048717.629:1704): avc: denied { write } for pid=15666 comm="syz.5.2759" name="functions" dev="configfs" ino=12419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.156028][T15712] lock_acquire+0x1b9/0x370 [ 273.163468][ T42] audit: type=1800 audit(6001048717.629:1705): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 273.165430][T15712] down_write+0x8b/0x1f0 [ 273.173619][T15712] configfs_depend_item_unlocked+0xf3/0x6a0 [ 273.176219][T15712] usbg_make_tpg+0x261/0x620 [ 273.178264][T15712] target_fabric_make_tpg+0xab/0x8c0 [ 273.180607][T15712] configfs_mkdir+0x51e/0xb70 [ 273.182889][T15712] vfs_mkdir+0x361/0x850 [ 273.184956][T15712] filename_mkdirat+0x48b/0x5e0 [ 273.187296][T15712] __x64_sys_mkdir+0x6b/0x90 [ 273.189548][T15712] do_syscall_64+0x115/0x870 [ 273.191781][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.193280][T15714] block nbd0: not configured, cannot reconfigure [ 273.194385][T15712] [ 273.194385][T15712] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 273.200363][T15712] lock_acquire+0x1b9/0x370 [ 273.202498][T15712] __mutex_lock+0x1a4/0x1bd0 [ 273.204703][T15712] tcm_set_name+0x29/0xb0 [ 273.206791][T15712] function_make+0x21c/0x3f0 [ 273.209006][T15712] configfs_mkdir+0x51e/0xb70 [ 273.211308][T15712] vfs_mkdir+0x361/0x850 [ 273.213370][T15712] filename_mkdirat+0x48b/0x5e0 [ 273.215695][T15712] __x64_sys_mkdir+0x6b/0x90 [ 273.217770][T15712] do_syscall_64+0x115/0x870 [ 273.219949][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.222545][T15712] [ 273.222545][T15712] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 273.225780][T15712] lock_acquire+0x1b9/0x370 [ 273.227790][T15712] __mutex_lock+0x1a4/0x1bd0 [ 273.229510][T15712] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 273.232066][T15712] configfs_read_iter+0x426/0x6f0 [ 273.234371][T15712] __kernel_read+0x397/0xad0 [ 273.236530][T15712] integrity_kernel_read+0x7e/0xb0 [ 273.239005][T15712] ima_calc_file_hash_tfm+0x25e/0x350 [ 273.241532][T15712] ima_calc_file_hash+0x1e3/0x380 [ 273.243676][T15712] ima_collect_measurement+0x94f/0xb30 [ 273.245587][T15712] process_measurement+0xdfe/0x2350 [ 273.247815][T15712] ima_file_check+0xc3/0x110 [ 273.249979][T15712] security_file_post_open+0xc4/0x210 [ 273.252483][T15712] path_openat+0x985/0x4280 [ 273.254392][T15712] do_file_open+0x20e/0x430 [ 273.256085][T15712] do_sys_openat2+0x10f/0x1e0 [ 273.257741][T15712] __x64_sys_openat+0x12d/0x210 [ 273.259878][T15712] do_syscall_64+0x115/0x870 [ 273.262087][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.264699][T15712] [ 273.264699][T15712] -> #0 (&p->frag_sem){++++}-{4:4}: [ 273.267784][T15712] check_prev_add+0xeb/0xe60 [ 273.269999][T15712] __lock_acquire+0x136c/0x1a40 [ 273.272246][T15712] lock_acquire+0x1b9/0x370 [ 273.274071][T15712] down_write_killable+0x93/0x250 [ 273.276322][T15712] configfs_rmdir+0x3fa/0x950 [ 273.278544][T15712] vfs_rmdir+0x328/0x8a0 [ 273.280479][T15712] filename_rmdir+0x31a/0x5c0 [ 273.282660][T15712] __x64_sys_unlinkat+0xf5/0x130 [ 273.284952][T15712] do_syscall_64+0x115/0x870 [ 273.287121][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.289731][T15712] [ 273.289731][T15712] other info that might help us debug this: [ 273.289731][T15712] [ 273.293985][T15712] Chain exists of: [ 273.293985][T15712] &p->frag_sem --> &opts->dep_lock --> &sb->s_type->i_mutex_key#30 [ 273.293985][T15712] [ 273.299726][T15712] Possible unsafe locking scenario: [ 273.299726][T15712] [ 273.302874][T15712] CPU0 CPU1 [ 273.304968][T15712] ---- ---- [ 273.306730][T15712] lock(&sb->s_type->i_mutex_key#30); [ 273.308710][T15712] lock(&opts->dep_lock); [ 273.310886][T15712] lock(&sb->s_type->i_mutex_key#30); [ 273.313557][T15712] lock(&p->frag_sem); [ 273.314966][T15712] [ 273.314966][T15712] *** DEADLOCK *** [ 273.314966][T15712] [ 273.317585][T15712] 3 locks held by syz.5.2759/15712: [ 273.319336][T15712] #0: ffff888023f2e450 (sb_writers#19){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 273.322815][T15712] #1: ffff88803ea443c0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 273.327468][T15712] #2: ffff88803957ba40 (&sb->s_type->i_mutex_key#30){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 273.331644][T15712] [ 273.331644][T15712] stack backtrace: [ 273.334090][T15712] CPU: 2 UID: 0 PID: 15712 Comm: syz.5.2759 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.334138][T15712] Tainted: [L]=SOFTLOCKUP [ 273.334144][T15712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.334154][T15712] Call Trace: [ 273.334179][T15712] [ 273.334188][T15712] dump_stack_lvl+0x100/0x190 [ 273.334234][T15712] print_circular_bug.cold+0x178/0x1c7 [ 273.334265][T15712] check_noncircular+0x146/0x160 [ 273.334290][T15712] check_prev_add+0xeb/0xe60 [ 273.334312][T15712] __lock_acquire+0x136c/0x1a40 [ 273.334338][T15712] lock_acquire+0x1b9/0x370 [ 273.334359][T15712] ? configfs_rmdir+0x3fa/0x950 [ 273.334384][T15712] ? __pfx___might_resched+0x10/0x10 [ 273.334417][T15712] down_write_killable+0x93/0x250 [ 273.334442][T15712] ? configfs_rmdir+0x3fa/0x950 [ 273.334465][T15712] ? __pfx_down_write_killable+0x10/0x10 [ 273.334489][T15712] ? configfs_rmdir+0x3be/0x950 [ 273.334513][T15712] configfs_rmdir+0x3fa/0x950 [ 273.334539][T15712] ? __pfx_configfs_rmdir+0x10/0x10 [ 273.334562][T15712] ? __pfx_down_write+0x10/0x10 [ 273.334587][T15712] vfs_rmdir+0x328/0x8a0 [ 273.334615][T15712] filename_rmdir+0x31a/0x5c0 [ 273.334637][T15712] ? __pfx_filename_rmdir+0x10/0x10 [ 273.334661][T15712] ? do_getname+0x191/0x390 [ 273.334684][T15712] __x64_sys_unlinkat+0xf5/0x130 [ 273.334707][T15712] do_syscall_64+0x115/0x870 [ 273.334728][T15712] ? clear_bhb_loop+0x40/0x90 [ 273.334750][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.334770][T15712] RIP: 0033:0x7faf5a79e019 [ 273.334786][T15712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.334810][T15712] RSP: 002b:00007faf5b5b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 273.334830][T15712] RAX: ffffffffffffffda RBX: 00007faf5aa26090 RCX: 00007faf5a79e019 [ 273.334842][T15712] RDX: 0000000000000200 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 273.334855][T15712] RBP: 00007faf5a83500c R08: 0000000000000000 R09: 0000000000000000 [ 273.334867][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.334879][T15712] R13: 00007faf5aa26128 R14: 00007faf5aa26090 R15: 00007fff1a024e08 [ 273.334898][T15712] [ 273.474175][ T5146] Dev loop4: unable to read RDB block 7 [ 273.477147][ T5146] loop4: unable to read partition table [ 273.479781][ T5146] loop4: partition table beyond EOD, truncated [ 273.486550][ T42] audit: type=1800 audit(6001048717.999:1706): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 273.533901][ T5884] usb 10-1: USB disconnect, device number 19 [ 273.538852][ T5884] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 273.544251][ T5884] oti6858 10-1:1.0: device disconnected [ 273.803924][ T42] audit: type=1800 audit(6001048718.319:1707): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 274.052060][ T42] audit: type=1800 audit(6001048718.569:1708): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 274.242380][ T42] audit: type=1800 audit(6001048718.759:1709): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0