last executing test programs: 18m17.552648431s ago: executing program 3 (id=183): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r4, 0x0, 0x0, 0x0, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x5}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0xffffffffffffffff, &(0x7f0000000040)=0x1e) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000280)="62febecbcd86be5c0ab6174b4dabf89e9f1a41f7a0d0b49582f89ddb1397f77a2a7aafe8c50f54bdf708224d749523ab62ecc332eb59dbee4c54b4b1634b6b38b6b60c77a7a88c7d08b3a7b82c087b082e4120bfaf5112142bf018b73577d8c1e4909970da9c4decb361a086dd6bde5826d16b951075c38c83c825b053e2619555d6cc2024ef440852cc8684d47e596a36e2a664dbb530a5ab8775f3bd9b53c47f765dabea53831c3f0ad0cbac40f049a1a3f6b4530b5bf7d218f6060c26224f85d8047d04294a02e6de2b2ee570d1bb316034e97be88127348d72cbab434d34a243e2c8b3d5edc5340810cde3920d302bbd9f", 0xf3) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) syz_usb_ep_read(r0, 0x3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000014c0)={0x14, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002980)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040000000403100844f1dd234e12f8423658f943779c386794fe37767af46c8544d86bdfc6a91dcf58eae688493c50ca56"], 0x0, 0x0, 0x0}, 0x0) 18m14.243693199s ago: executing program 3 (id=197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0xee01) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000000000803f0000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="00000000000000000000000000b3d9b2a24da8"], 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000001c0)='syz0\x00', 0x1ff) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='lp\x00', 0x3) 18m12.408777415s ago: executing program 3 (id=207): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x29, 0xfffffffe, 0x0, 0x21, 0x0, 0x4, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r5, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x24) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r8, &(0x7f0000000080)='3', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x7fffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, 0x0) mkdirat(r7, &(0x7f0000000040)='./file0\x00', 0x50) 18m11.761111346s ago: executing program 3 (id=211): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[0x4]}, 0x8) lseek(r1, 0x1, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x8}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103800, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x2, 0x0) ptrace$setsig(0x4203, r6, 0x480, &(0x7f0000000240)={0x16, 0x8}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000cb62fc40a728ab7139df0102030109024c0001000000000904f6000002098e00052406e40005240006000d240f0105000000ffffd809ff06241a0e0000052406000105240900000d240f"], 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000001c0)={{0x1e, 0x1a1}, 0x8}, 0x10) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16bce0102030109021b0001007895cf0238e00010007b07"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff", 0x16}], 0x1) syz_usb_control_io$hid(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x13c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0xd0, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffaa9}, @CTA_LABELS_MASK={0xc, 0x17, [0x65, 0x8]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xa67}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20040014}, 0x884) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1007, 0x1, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 18m10.861767296s ago: executing program 3 (id=214): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x14025}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 18m10.371212702s ago: executing program 3 (id=220): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) signalfd4(r0, &(0x7f0000000140)={[0xfffffffffffffffc]}, 0x8, 0x800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01005c804beab361de3e030000004c0001800d0001007564703a73797a300000000038000400140001000a0000ca67000001000000000000000020000200"], 0x60}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x7}, 0x18) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r6 = fcntl$dupfd(r3, 0x0, r3) read$rfkill(r6, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r7) 18m9.841332408s ago: executing program 32 (id=220): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) signalfd4(r0, &(0x7f0000000140)={[0xfffffffffffffffc]}, 0x8, 0x800) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01005c804beab361de3e030000004c0001800d0001007564703a73797a300000000038000400140001000a0000ca67000001000000000000000020000200"], 0x60}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x7}, 0x18) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r6 = fcntl$dupfd(r3, 0x0, r3) read$rfkill(r6, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r7) 16m58.55071894s ago: executing program 4 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000600000000000000a3c000000060a0b04000000000000000002000001100004800c00018008000100667764000900010073797a30000000000900020073797a32"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x40040) 16m57.869004427s ago: executing program 4 (id=502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 16m57.687089458s ago: executing program 4 (id=504): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1}, 0x1ff}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 16m56.020611194s ago: executing program 4 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x20) close(r0) r1 = socket(0x15, 0x5, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=@delsa={0x54, 0x11, 0x10, 0x70bd25, 0x25dfdbfb, {@in=@empty, 0x4d4, 0xa, 0x32}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd2a, 0x70bd2c, 0x70bd27, 0x3, [0x9, 0xae11, 0x8e, 0x4800000]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000002580)='./file0\x00', 0x9) lstat(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000340)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$evdev(&(0x7f0000000740), 0xfffffffffffffff8, 0x4000) r6 = getuid() r7 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x20d08c1, &(0x7f00000004c0)={'trans=unix,', {[{@access_any}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@loose}, {@nodevmap}], [{@uid_gt={'uid>', r5}}, {@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r6}}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, r7}}, {@seclabel}, {@euid_lt={'euid<', r8}}, {@obj_role={'obj_role', 0x3d, '/dev/rtc0\x00'}}]}}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) connect$pppl2tp(r0, &(0x7f0000001240)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x2, 0x2}}, 0x2e) ioctl$EVIOCGSW(r9, 0x8040451b, &(0x7f0000000140)=""/128) recvmmsg(r1, &(0x7f0000001a80)=[{{&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/120, 0x78}], 0x2, &(0x7f00000009c0)=""/158, 0x9e}}, {{&(0x7f0000000a80)=@tipc=@name, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/198, 0xc6}, {&(0x7f0000000c00)=""/85, 0x55}, {&(0x7f0000000c80)=""/143, 0x8f}, {&(0x7f0000000d40)=""/131, 0x83}], 0x4, &(0x7f0000000e40)=""/147, 0x93}, 0x2}, {{&(0x7f0000000f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000f80)=""/215, 0xd7}, {&(0x7f0000001080)=""/88, 0x58}, {&(0x7f0000001100)=""/68, 0x44}, {&(0x7f0000001180)=""/175, 0xaf}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/9, 0x9}, {&(0x7f00000012c0)=""/12, 0xc}, {&(0x7f0000001300)=""/26, 0x1a}], 0x8, &(0x7f00000013c0)=""/25, 0x19}, 0x1d}, {{&(0x7f0000001400)=@caif=@util, 0x80, &(0x7f0000001940)=[{&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/3, 0x3}, {&(0x7f00000015c0)=""/40, 0x28}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000001600)=""/141, 0x8d}, {&(0x7f00000016c0)=""/225, 0xe1}, {&(0x7f00000017c0)=""/61, 0x3d}, {&(0x7f0000001800)=""/150, 0x96}, {&(0x7f00000018c0)=""/10, 0xa}, {&(0x7f0000001900)=""/44, 0x2c}], 0xa, &(0x7f0000001a00)=""/102, 0x66}, 0x1}], 0x4, 0x2020, &(0x7f0000001b80)={0x0, 0x3938700}) fcntl$dupfd(r1, 0x0, r2) 16m55.86782619s ago: executing program 4 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x140) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 16m55.587462754s ago: executing program 4 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x140) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) (fail_nth: 1) 16m55.270392995s ago: executing program 33 (id=512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x140) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) (fail_nth: 1) 15m16.812946794s ago: executing program 2 (id=875): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8004) r1 = socket(0x1e, 0x2, 0x0) shutdown(r1, 0x2) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000240)="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") r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000080)) 15m16.659792937s ago: executing program 2 (id=878): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) read(r1, &(0x7f0000000640)=""/4096, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x5411, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@delsa={0x28, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x0, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x802) close_range(r0, r1, 0x0) 15m14.830406122s ago: executing program 2 (id=883): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r3 = syz_usb_connect(0x5, 0x3d7, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xb, 0x2, '8.'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, &(0x7f0000000380)={0x14, &(0x7f0000000200)={0x20, 0x1, 0x7a, {0x7a, 0x31, "c7ed69f007e53d8614dc9b386c5a8e311b6bba1c4afa661a2669662cdc07fda357fa0aa9fe748cac30b50375ced9d69b2602c87dfbdbcad660f84302a992f1ce5f0a79799aa105a40184445c469a81af5333223b7e4a60f559a080f35d57bb0006690e01ea002d170e031d5eba75f90b294fdc4b8b988fd2"}}, &(0x7f0000000280)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "61374b0d7edb3117a7c30eb58077885c23fa052d314b22ed30a54345ef89c35b43ebf69ae98da10dc98eb0bbc2dd3517db91fbf6f814618ba05281edcf45c4b459ec0d2c29827297f201864b7396a72944c0a2671cc26e715f37f3cc8772bcdd8d145385cf5c57dbaabee371c1cb0399e674d8f79954d3eea50e6c1783775ca0f652f51aa5ce4e9f64603591faf93915b89b2de99c632e3bc5724c5081feed1d9a620437b8552937219a16f6905fd8687210a6d28ca1e38746543751ed7f69"}}}, &(0x7f0000000900)={0x44, &(0x7f0000000680)={0x40, 0x14, 0xa5, "4c3fa15c6cba67f655d46b4406319c711fcce68dfff2ff33793697a5a6359a24241c8dbe1a5b9a290d03cf3e8888e0809031ae0613cf909d93e1b59132df2a2b1462a21e89e2fbbcb8a312be762a2613a2a392ff3464a1ff2f71743205b2f16ecbee3c6d48d8aeb0677f8978e1022e0657321c5d1283f18c9d9197a3b681945607b80cac1636e6a2712b364e259d4bf9b31b95966b01c22ffd6f68db96c19b27b1c2217aa7"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0xe6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x81, 0x1, "ad"}, &(0x7f0000000800)={0x20, 0x82, 0x3, "76e13f"}, &(0x7f0000000840)={0x20, 0x83, 0x3, "cad2fa"}, &(0x7f0000000880)={0x20, 0x84, 0x2, '1p'}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "ea65e8"}}) (async) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0xa2) (async) close(r5) (async) io_uring_enter(r5, 0x3096, 0x655, 0xc, &(0x7f0000000980)={[0x7]}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000009c40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@cred={{0x18}}], 0x18, 0x20040000}}], 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x1c, &(0x7f0000000140)="516f109595777c8abe0472d860dd9b1e8c211ab04c56b0f5f360174e") (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffff00, 'veth0_macvtap\x00', 'geneve0\x00', {0xff}, {0xff}, 0x29, 0x1, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x0, 0x6, 0x0, 0x4], 0x0, 0x2}, {0x2, [0x4, 0x2, 0x2, 0x4, 0x2, 0x1], 0x5}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x93, 0x9, 0x764, 0x2, 0xfffffff7, 0x1, 0x8001, 0x1]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 15m11.151647076s ago: executing program 2 (id=898): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x5, 0x0, 0x0, 0x200, 0x0, 0x4, 0xf24}}, 0x50) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') getitimer(0xe, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x44}}, 0x0) syz_clone(0x2221400, &(0x7f00000002c0)="d892763bef32fae6a4c1a8a5a97c2ae65977a9ac650ad8609ff4bd4c71e2896bed1131a47656593c3b4826b808b4dedcb4c44cf9cf35c6a82ffd883766ed83f845f06215be4fadbbe2068ec53302e15caae0fc6a2947e88c46b403c46ecb812e7de2c068faaa346e8c44ab4ec7e10633990ddba487d0404e9b579a817d42228aa94cf5924b0c5622b9163a773229e2ad90ba7ab4840b10a5c77211bc754eac210bb3b621fcc61332e941602641db", 0xae, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000380)="962f809375c8780169fafdf5059d0eb88b54216bebc3cd60297692966d35c67f2a879b66bbf3548b988943a9b25139938af9c5a95f538b0a883683021bca9db7ac33dafacde6b287e52310111881f92cdeadf4fd0db3559c79a5d939f3620d9b46e607e983a5c19e35319f59d250e11a218964a79e81c4f5e75c886edd1b04ffe145e64a1caa4ab3be9a68dc02fdd41d0ab27e60058be72d7ee0f850784b95910ce826da6a3215350853be1591984bfa9af1677b6436970997a50897963d8fa513ae1085b844e69f71addc3c4189c6c552a9b9656e66d15cba2b8e0575379f31653e617cd19ce6141402") write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x21, 0x0, 0x4, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r2, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x24) 15m8.579399626s ago: executing program 2 (id=907): timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYBLOB, @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="380001"], 0x90}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8}, 0x1c) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/106, 0x6a}], 0x1}, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005f00e97861f6c8ef85"], 0x1c}}, 0x0) 15m6.337568073s ago: executing program 2 (id=913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000000070101000000000001000000000000040007800c00034000000000000000000900010073797a30000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 15m5.269631359s ago: executing program 34 (id=913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000000070101000000000001000000000000040007800c00034000000000000000000900010073797a30000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 12.783598941s ago: executing program 5 (id=3771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x141000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x401, "43f7114335ad91150af5bfa227e892d5ff9ba082c8c1f5c9acc9d710c5fe6045"}) dup3(r6, r5, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffec5, 0x20004055, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, &(0x7f0000000040)) r8 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x800, 0x0) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r9, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@local, @in=@multicast2}}, [@migrate={0x50, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2}]}]}, 0xa0}}, 0x0) write$FUSE_DIRENTPLUS(r9, &(0x7f0000002ac0)=ANY=[@ANYBLOB="5806000000000000", @ANYRES64=r10, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a90f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32=r11, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffff", @ANYRES32=r11, @ANYRESHEX=r8, @ANYBLOB="05000000184c00000000000000000000000000000100010000000000080000000b000000257042202020200001000000000000000000000000000000ffffffff00000000070000000000000025f4000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f00000000000000040000000000000004000000010000000000000000000000070000f9ffffffffffffff0180000000000000000000000000000000080000000000806a01000000000000000000", @ANYRESHEX=r10, @ANYRES32=r12, @ANYBLOB="8a020000070000000000000005000000000000000400000000000000010000000a000000000000000000000005000000000000000200000000000000080000000000000001800000000000000d00000006000000060000000000000084010000000000008705000000000000008000000000000008000000000000000000000000000000ffffffff0600000010000000002000000b000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a000000000000000600000000000000060000000000000003000000060000000700000000800000080000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="0600000005000000000000000000000000000000fcffffffffffffff060000000400000026272e3a262800000200000000000000010000000000000001040000000000000500000000000000800000000400000005000000000000000404000000000000050000000000000004000000000000000108000000000000ff0000000000000006000000a2d70000ff7f0000004000007f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff7fc60000000000000004000000000000000100000001000000040000004f0f00005c2d2d2c0000000005000000000000000100000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES64=r11, @ANYRES32=0xee00, @ANYRES32=r12, @ANYBLOB="01000000e2620000000000000200000000"], 0x658) r13 = socket$inet_sctp(0x2, 0x5, 0x84) accept4(r13, 0x0, &(0x7f0000000080), 0x80000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) dup(0xffffffffffffffff) 11.5499507s ago: executing program 5 (id=3773): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xfb) 11.423075177s ago: executing program 5 (id=3777): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x40, 0x10, 0x2, "90d8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20030f000000979f81753e71a7c78fa137a3e5b9"], 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r3, 0x8744}], 0x1, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) r5 = accept4$inet(r3, &(0x7f0000002200), &(0x7f00000020c0)=0xfffffffffffffe73, 0x80800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000021c0)={'syztnl2\x00', &(0x7f0000002100)={'sit0\x00', r9, 0x1, 0x40, 0x6, 0x2, {{0x1d, 0x4, 0x1, 0x1f, 0x74, 0x68, 0x0, 0x40, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0xf, 0x97, [@broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x2d}]}, @lsrr={0x83, 0x13, 0x43, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102]}, @cipso={0x86, 0x20, 0x3, [{0x5, 0x8, "1ca11a768d44"}, {0x2, 0x12, "4ec0dc0529f57ae28a46cadde74087b6"}]}, @timestamp_addr={0x44, 0x1c, 0xb7, 0x1, 0xb, [{@empty, 0x7}, {@broadcast, 0x6}, {@multicast2, 0x80000001}]}]}}}}}) 10.291697913s ago: executing program 1 (id=3784): syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000dd1c0021001100000000fc00000000000000"], 0x1c}}, 0x0) socket(0xa, 0x3, 0x3a) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8003, 0x4, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000080)={0x1, r7, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0x8}) 8.545271221s ago: executing program 1 (id=3786): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan0\x00'}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x5501, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f00000002c0)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) memfd_create(0x0, 0x6) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x8) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000e00000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 8.3633837s ago: executing program 7 (id=3787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000fffe00000a20000000000a01020000000000070000050000000900010073797a300000000014000000020a0108000000070000000000000000200000001d0a0300000000000000000005000000090001"], 0x7c}}, 0x0) 7.735081936s ago: executing program 7 (id=3788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000010140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c0002400000000000000003080003400000002008000440000000010c000140ff"], 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYRES64=r1, @ANYRES64, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRES32=0x0], 0x48) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1f00, 0x12) connect$unix(r4, &(0x7f00000011c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r8, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r9 = syz_usb_connect(0x4, 0x754, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x0, 0x60, 0x3a, 0xff, 0x45e, 0x40a, 0x81b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x742, 0x1, 0x8, 0x8, 0x20, 0x8, [{{0x9, 0x4, 0x85, 0x0, 0x10, 0x42, 0xb0, 0xa9, 0x2, [@hid_hid={0x9, 0x21, 0x800, 0xb, 0x1, {0x22, 0x2b6}}], [{{0x9, 0x5, 0xe, 0x10, 0x20, 0x0, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x5, 0x64, 0x8a, [@generic={0xd9, 0x35, "8a6227da77cce0e13956d3e82e4e8df94a3954ff32423b8145ed446aaacc20223e893266270d20fd6411e3605c136880453c26b22793fbc59a7fc47a2cfa9c7d820bdbfd9a9a25719f4f94edbe9b1df737df4f44310cb504c49f9bc3aa7eba47ffa1fcc1976390712a9d59fb5a95f6a1bedb7328a30f03f07c1a6ff97f73736c1f9d65d594544d85842ed8a35b1952b6afb2bd2c1e8e53c17b2e39c2569783ba07313eaf7b5ae0484e6a6b243aaca3de2cebd7e1f92489de9de7b2caa9cc83910e4db95eb2b2b5ec3e38135a9d8b0df3f719dc35a613c1"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x6, 0x0, 0x10, [@generic={0x38, 0x23, "97b66994fc5e8a4a0cd3403928e24d19ee7aa90ae6254515bec5eb23429061187574674ba5f8e6ca05d8f3b902e1b3a67b036da33f41"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x6, 0x7, 0x5, [@generic={0xc3, 0xc, "4b802e80f5e34b0a572dd5644abc331a1c31a9f74856432c9a91f869d9f4d4bde9ffc6e1b198271006d170634f008c63c4fd09f01f9280ff6a1943f17587f3ca89a28c8f2c7bea030c0752ce0865a8c99b498c67b5912a365b94776c212684edab967321d6ba487c227eeb55fc56469afed3791f9a1c7b8dd09220eacbca468efa1611ee86f5b828c37e36c99a385cdaf9e630be64aa80f2d72e396f00b1dde3f10990580cd31e446106777f85b9545d78ce28d460ae8941062492485a024e9353"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xe, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x10}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x9, 0x40, 0x6, [@generic={0x80, 0xd, "84cbcf46c88976249cebe42dffc3e5463d8ef20afea6873c26b59d1b3998f9c6eeecff9d8819df7b981cba55cad21f3ef527682626e96d2dd6b148e5e5d51ed9804c9e15210e277789228a9995fdca11935e38e9e3f4d0ab653c0b7ae70066d94f1b50e70f982605be122625ae2b9984d1f2bbb80f21a184eb38552288b0"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x8, 0x6, 0x9, [@generic={0x17, 0x1, "e21d0454c441268676398c6f5f08e12eee8f6608c1"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xd, 0x7, 0x3, [@generic={0x9b, 0x24, "bfda86e93761fbd59c838e965b03c52bf5b700cd6e8de8f40e557fd507310900a773676d5e10ab1f1ab9b9c2d7c3ef60e7f05bcb8918eafb250f25b04edf6fd959ebb746812880d901d91f1717961ba38903af41bc861b510372858060d7e1260f86ee5335e1b5c41a8258248dbb503c5c8142a306a5f877a864a594c25ba680d244079bdb3e7b69fde413af79616ad8cc1c0314bb9a2a127a"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x0, 0x9d, 0xd, [@generic={0xc5, 0xc, "688c9bccd5c96157748176ac59ab6b3ad634638456b4c229e76265849b5ffc731ff5f67e638cbd778479cea8a9e995e8a048661ba8800295576546f1bd1eeb5f9296e051f4b9059e592f4b15bb36ae6e623a7536fa62041dbe517b77d0680826a284b2c4905053b38c89d41eae0a8d8b9058f5969013131e59155f4c844f8e6b114d52e5ca4df8c7a28b5043b3037a48a24de8f57f4a792650aafac2a71574fd60a77fb54221e1524c3362d3bdaa75a6072fa181992e0e1e9d92d1d26b74a38b66a763"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x7f, 0xd6, 0x4, [@generic={0x9b, 0x3, "981c99ad4ce082c1e3eb2e00b3227c2dcba7c7b84f79c723021eb0d2c1a10e1ec3789435f3be3c5c5d6a2ba1b572f3c234b07c013a546002cba16ffbf53b59913e2795ef026fab4293ed37f1b5f791cea1ba2bca18b0beb5773e1c220cf378746a9ab5ff4572d6cc2350b0fd9b338ce99554d609f2a63288f8dc780c7bbf67465a8c920d5a405cbad65a6c593a7e86fed0e33d9b1e0acf3ccd"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0xe, 0x42, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x81, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0x5, 0x7, [@generic={0xdb, 0x8, "ea9126775c8721c28e036d3821becebfde5c2b3bbe8622cd3cdafe0ebfda3f70180555b3307ea620d5704162f20005642c7a92fd10ad706cd94d50c397b9119fa1e4a15ec121b5aa21b483098b2e9b41279cd6f1f55c29bb424f27caadfe7198f81a125410b50396eeff4243c9da950c4f913a366222cdcaf6ec8f817935533839e62ad1bef854a679ccd284be52355875e8782b371454a6d7eb058dd3e526ea2b444c647cc49645dde1f4e891aa76da14ba8785fddaf7464f6afbd8b9a0228da52e19a1cd84e025a44423389bb58cf98a3eaea2834a8e0fc7"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xb3, 0xfa}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x2, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3de9db69f6a7963a, 0x3c, 0x5, 0x5, [@generic={0xe0, 0x22, "9cfccea297c4daefed5d71da03fcd1ae30b9f2f95d77ff1420a24f7842e606095bdcc499d08447d2e9b312ef3a96a4cba6377b4a867590f460f460e5eefe2cbcc8406f2b9b21638d990fd244e4834273ca737497f56ba4ac7fee5cd6307763a008769a28df7ff16659ea1ce6d49a1a1aa35352213547ed433584d95cc53b3473777df9fe689727cb55c36240622d07d882f46f201d5cb039635b29f5b08f8cf880534a7f5696aed38b653450560b9c85de4797f12d9d658a0082324867c6122d9723b13baa3cc6926d29d243dcab2753d22de18242d474d73178a6084fa3"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x3, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @generic={0x37, 0x1, "878df419f44bfcb17b60de1225baa06e0f161e351cfd21e15c7d4d8702c1457974e11a4d0003eef3be2453522c96aa30d2b10e4797"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xc, 0xa, 0x4, 0x10, 0x94}, 0xed, &(0x7f0000000600)={0x5, 0xf, 0xed, 0x1, [@generic={0xe8, 0x10, 0x1, "5e2a9d75b026f2e48d589869ba0e2b7068de3e7187abb06324d0268f7b72ce9035c420803c30f8dde74c557104e03a462e828474b3e2ab9797e3d35a451969472938e8b61360f3011e762b785dd150ec2d20206735ba3d51cbdd77c0a7b7116ef67b7860b44c5d6c8f24c61e02e7f9e8e74eaeed38bf7039badcaa82e05fc3dd69f7f801f9af1e5205c45831716426e6e42e1c9b8bce04c4243a765d1bb3333db281611b9753bc9f2d3a2ee2a4f1df7e07d7b1eedc4f49154fdafce68fcee8354450048b829a91a6ba84f7a05cf2d87261d3fdd7aa2d477b54ac555c698e66c0dbe1f0de54"}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io$hid(r9, &(0x7f00000004c0)={0x24, &(0x7f0000000700)={0x20, 0x3, 0x8a, {0x8a, 0x3, "a6e8d2b1fd9b6132c4c11ea80e3725f4cf691be7a23d6b02e88dcaaf6e115e670afb39c81bdbff4533b3298b441275b807944ab0a590d253f101f0f33c1077a6e6247d297cd37716d439b43035501bc452025966b3153766646eade2aaadb1695493deb3b43bb9630443156b1a51d0248350e3a8bb7e89ecd500825d10ee9877dba66e8c0aef8f50"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}, &(0x7f0000000400)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "e3"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff8, 0x0, 0x1, {0x22, 0x4b0}}}}, &(0x7f0000001180)={0x2c, &(0x7f0000000fc0)={0x0, 0x17, 0xd5, "06141c97e7cdab466da6e208c11d68016dd3459b424b8259a020e78a6c446a751d30f22c632a7919df8d0511c6643ad7ccf9d5f357311e75fc9cdbc71f26b12060fdacd686a8ec0dbf8df2aec62189c0aae045ed04c1832bec61469218e86135b3b5ddcc618a518b7999ed98b1850325e8ed05f11fbae41e4757a4ed2b655c884beae54e9a60e56ae54a3cc0f019bd1bbe68b231c0b1551cbb5d7eba2a50664bc935fb1a937ab93a03294c4b406dd0d01e7dd952138bf0dadc3f8f16d80ce0f380b6e4fc4f16f1a4c081db86a3cbdf5ddae0bda43f"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000010c0)={0x20, 0x1, 0x47, "4c1c2ba7ded3436487ab1b88b582e1c48f6e1277046f004b1de621a8c0dbb37cf292be5d014b31c463a920b1ee0d047f367c987e2d171bc29dc7eae1cc972205394484524f3f3a"}, &(0x7f0000001140)={0x20, 0x3, 0x1, 0x86}}) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000060201, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r12, 0x26, &(0x7f0000000000)) fcntl$lock(r12, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001500)={&(0x7f0000001380)="13c3bc43837d0eb9693e4b9fc00ba59599dd42b99286d173a68b7e025a9557577203cf2c31168416127b4801ffdd7f7102129ee773303e010471d25b1b604262bda248d158d2554b9a0a97a2bc74ba8309c141804090b89aa2a3df1c112a44744636647d8c60959a0e138960b33e6cb9e29fac202fd9d90ebef9dd70b41ef773a574a138d7fad7654ee43650bdde5696ce4a", &(0x7f0000001240)=""/84, &(0x7f0000001440)="b8aba43eeb8395c1c2df4872044afc0718b84ab6e669fa752123f599e7db", &(0x7f0000001480)="8357dab819450b3900b66dd0a191cd54f97f895ee484c0bcf3144804efa9a9c0272785781085892584f8b9cb3ff92df1e77d848f75777ddee34f68462a586727c3c565c54f78754405cb93224c0fe17f23", 0x6da, r7}, 0x38) fcntl$lock(r12, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r11, 0x40184152, &(0x7f0000000440)={0x0, 0x0, 0xfffffffeffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.499599141s ago: executing program 6 (id=3792): r0 = socket(0x11, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x0, 0x2, 0xfffffffffffffffe, &(0x7f0000000040)) r2 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x8a, &(0x7f0000000200)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="be971bf8bfe4fef7b9a3d1b79efe44", 0xf}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52c218d66f685772}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x8880) 7.344480389s ago: executing program 6 (id=3793): r0 = socket(0x10, 0x3, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40002, 0x126, 0x1}, 0x18) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa2bba56b85556e3) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x1, 0x3, 0x8001, 0x0, 0xc79}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f000000b800), 0x2, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[], 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000680)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "071182", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xc) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x13, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7.324027547s ago: executing program 6 (id=3794): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2712, &(0x7f0000000040)=""/102400, &(0x7f0000000000)=0x3fc4) 7.231759028s ago: executing program 5 (id=3796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) io_setup(0x202, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = fanotify_init(0xf00, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r6, 0x105, 0x4800002c, r7, 0x0) read$FUSE(r6, &(0x7f0000004f40)={0x2020}, 0x2020) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd79) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r8, 0x0, 0x8000000000}, 0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) 6.932276628s ago: executing program 1 (id=3797): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, &(0x7f0000000200)=0x9c) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) prlimit64(r2, 0xf, &(0x7f0000000000)={0x400000, 0xc78}, 0x0) 6.884208779s ago: executing program 0 (id=3798): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x30000015}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0xb, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, 0x0) writev(r4, &(0x7f0000000100)=[{0x0}], 0x1) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25GETINFOOLD(r4, 0x5411, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@delsa={0x28, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x0, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x802) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) close_range(r0, r1, 0x0) 6.883804976s ago: executing program 7 (id=3799): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0xba01}, 0x810) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1412, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xf000000}]}, 0x38}}, 0x8804) 5.713451929s ago: executing program 5 (id=3800): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ff"], 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002802000010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) listen(r0, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x8, 0xab}) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x80000001, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @remote, 0x1000b}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x8, 0x0, 0xe0e0e0e0}) 5.574404189s ago: executing program 7 (id=3801): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ff"], 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @empty, @broadcast}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002802000010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) listen(r0, 0x0) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000080)={0x8, 0xab}) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x80000001, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @remote, 0x1000b}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, 0x0, 0xe0e0e0e0}) 5.572895129s ago: executing program 1 (id=3802): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000880)=@newsa={0x138, 0x10, 0x713, 0x14, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x2, 0x4e22}, {@in6=@mcast2, 0x0, 0x32}, @in6=@mcast1, {0x200, 0x0, 0x0, 0x0, 0x0, 0x4020000000000}, {0x0, 0x0, 0x4}, {}, 0x0, 0x20, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x20008080) syz_open_dev$usbfs(&(0x7f00000000c0), 0x3, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000440)={0x200000, 0x200001, 0x4, 0x4000, 0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fanotify_init(0x208, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r4, 0x0, 0x1000}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000580)={0x20080522, r8}, &(0x7f00000005c0)={0x9, 0x81, 0x2, 0xa, 0x5, 0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @alu={0x7, 0x1, 0x9, 0x1, 0xc, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r7}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x99) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r10, 0x25, 0xa, @void}, 0x10) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x62c000, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r12, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2000000000002}) open$dir(&(0x7f0000000080)='./file0\x00', 0x10400, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x13, r11, 0xb3d68000) 5.511240565s ago: executing program 0 (id=3803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 5.399902128s ago: executing program 0 (id=3804): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xff05, 0x70bd27, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x44}, 0x1, 0x0, 0x500, 0x8080}, 0x0) 5.399282136s ago: executing program 1 (id=3805): syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) r2 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6e, 0x1a, 0x89, 0x40, 0x10b8, 0x1fa8, 0xd421, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x0, 0x2e, 0x71, 0x94}}]}}]}}, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r3 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) r6 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ac9000/0x3000)=nil) shmat(r6, &(0x7f00002b6000/0x3000)=nil, 0x6000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pidfd_send_signal(r2, 0x1d, 0x0, 0x4) (async) pipe2$9p(&(0x7f0000000040), 0x0) 5.360365304s ago: executing program 0 (id=3806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002000000000000000101000000000000"], 0x50}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000640)={{}, "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"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000402692dc4185f791f0cc82a052214d3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r5}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000880)={r6, 0x0, 0x0}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x4004090) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4.280203438s ago: executing program 0 (id=3807): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x40000) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000440)={0x1, @sdr={0x41564e57, 0x9}}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f00000004c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x70bd2d, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x800}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000400)={@broadcast, @empty, 0x1, "7d1f88f80bbe8d286c57f04c843abbec3737db4a9d77a557438242a50a4dad20", 0xaa4, 0x3, 0x3, 0x1}, 0x3c) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x36}, @private0={0xfc, 0x0, '\x00', 0x1}}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) 2.993811893s ago: executing program 6 (id=3808): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x891}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x13, 0x117, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}}], 0x40000000000037c, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0) 2.2851568s ago: executing program 7 (id=3809): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1100) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.170668007s ago: executing program 6 (id=3810): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004b40)={0x0, 0x6}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.287046036s ago: executing program 5 (id=3811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xc, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000e, 0x11, r1, 0x4002000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r4}, 0x38) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa46c1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.284059293s ago: executing program 6 (id=3812): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) ptrace$cont(0x7, 0xffffffffffffffff, 0xd3cf, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) accept(r2, &(0x7f0000000000)=@ax25={{}, [@default, @bcast, @default, @default, @remote, @default, @netrom, @netrom]}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040903000000000008000400699b000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.045665216s ago: executing program 7 (id=3813): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x1f) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, 0x0) syz_io_uring_setup(0x10e, 0x0, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 262.468712ms ago: executing program 1 (id=3814): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000810) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$proc_mixer(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Captu'], 0x86) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) splice(r3, &(0x7f0000000080)=0x4, 0xffffffffffffffff, &(0x7f0000000300)=0x100000000, 0x6, 0x1) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x3, 0x18, 0x7, 0x100, &(0x7f00000000c0)="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"}) 0s ago: executing program 0 (id=3815): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xc}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@ipv6_getroute={0x70, 0x1a, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0xc, 0xec}}, @RTA_METRICS={0x1d, 0x8, 0x0, 0x1, "1bad3b695c96e1b5b4c15c4442d9020d368ca937affff7e710"}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x8000, 0x16, 0x18}}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x6}}]}, 0x70}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) kernel console output (not intermixed with test programs): released netlink socket, switching to perfect channel medium [ 1037.070418][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1037.102552][ T5904] usb 7-1: Product: syz [ 1037.106987][ T5904] usb 7-1: Manufacturer: syz [ 1037.116087][ T5904] cdc_wdm 7-1:1.0: skipping garbage [ 1037.126747][ T5904] cdc_wdm 7-1:1.0: skipping garbage [ 1037.133431][ T5904] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1037.139479][ T5904] cdc_wdm 7-1:1.0: Unknown control protocol [ 1037.170168][T17549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3216'. [ 1037.242695][T17554] xt_hashlimit: size too large, truncated to 1048576 [ 1037.274250][ T30] audit: type=1400 audit(1742104422.365:2004): avc: denied { setopt } for pid=17543 comm="syz.5.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1037.300111][T17557] xt_hashlimit: size too large, truncated to 1048576 [ 1037.360921][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'. [ 1037.372379][T17554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3218'. [ 1037.418821][ T30] audit: type=1400 audit(1742104422.505:2005): avc: denied { setopt } for pid=17559 comm="syz.1.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1037.419464][T17560] capability: warning: `syz.1.3219' uses 32-bit capabilities (legacy support in use) [ 1037.680718][ T30] audit: type=1400 audit(1742104422.775:2006): avc: denied { create } for pid=17568 comm="syz.0.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1037.786568][T17571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.707378][ T30] audit: type=1400 audit(1742104423.795:2007): avc: denied { ioctl } for pid=17575 comm="syz.1.3224" path="socket:[106707]" dev="sockfs" ino=106707 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1038.775714][ T30] audit: type=1326 audit(1742104423.795:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.7.3225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea33b8d169 code=0x0 [ 1038.810266][T17578] fuse: Unknown parameter 'fuse' [ 1038.810266][T17584] fuse: Unknown parameter 'fuse' [ 1038.861211][ T30] audit: type=1400 audit(1742104423.835:2009): avc: denied { execute_no_trans } for pid=17577 comm="syz.0.3226" path="/62/file0" dev="tmpfs" ino=374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1039.207735][T16682] usb 7-1: USB disconnect, device number 77 [ 1039.231272][ T5871] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1039.431802][ T5871] usb 6-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1152, setting to 1024 [ 1039.547899][ T5871] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1039.566513][ T5871] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1039.575602][ T5871] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1039.585551][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.593684][ T5871] usb 6-1: Product: syz [ 1039.599542][ T5871] usb 6-1: Manufacturer: syz [ 1039.604569][ T5871] usb 6-1: SerialNumber: syz [ 1039.625438][T17597] x_tables: duplicate underflow at hook 1 [ 1039.653882][T17580] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1039.875462][ T5871] usb 6-1: USB disconnect, device number 75 [ 1039.907847][T17599] syzkaller0: entered promiscuous mode [ 1039.913547][T17599] syzkaller0: entered allmulticast mode [ 1039.949630][T16682] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1039.999594][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1040.138185][T16682] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1040.188762][T16682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1040.334294][T16682] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1040.495288][T16682] usb 1-1: language id specifier not provided by device, defaulting to English [ 1040.777270][T16682] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1040.806715][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1040.861234][T16682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.893460][T16682] usb 1-1: SerialNumber: 紙ဘᎪ࣪ᛑ쉾䶨宺ϳꋊꙆ芑邔톝 [ 1040.922542][T16682] usb 1-1: config 0 descriptor?? [ 1040.930599][T16682] em28xx 1-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1040.930696][T16682] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1041.146135][T17597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.199364][T17597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.280331][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1041.314924][T16682] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1041.324376][T16682] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1041.343174][T16682] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1041.360207][T16682] em28xx 1-1:0.0: No AC97 audio processor [ 1041.371982][T16682] usb 1-1: USB disconnect, device number 80 [ 1041.387486][T16682] em28xx 1-1:0.0: Disconnecting em28xx [ 1041.408682][T16682] em28xx 1-1:0.0: Freeing device [ 1042.411185][T16682] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1042.594747][T16682] usb 1-1: Using ep0 maxpacket: 8 [ 1042.599313][ T5904] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1042.602123][T16682] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1042.615771][T16682] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.634906][T16682] usb 1-1: config 6 has no interface number 0 [ 1042.658828][T16682] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1042.700514][T16682] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1042.709703][T16682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.717828][T16682] usb 1-1: Product: syz [ 1042.728493][T16682] usb 1-1: Manufacturer: syz [ 1042.737852][T16682] usb 1-1: SerialNumber: syz [ 1042.753594][T16682] hso 1-1:6.2: Failed to find INT IN ep [ 1042.769614][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 1042.791709][ T5904] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.802722][ T5904] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.825185][ T5904] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1042.925796][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1042.933394][ T5904] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1042.953448][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.976131][ T5904] usb 6-1: config 0 descriptor?? [ 1042.984029][T17629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3238'. [ 1043.176386][T17630] netlink: 1608 bytes leftover after parsing attributes in process `syz.0.3236'. [ 1043.187303][ T30] audit: type=1400 audit(1742104428.278:2010): avc: denied { connect } for pid=17625 comm="syz.5.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1043.478872][ T30] audit: type=1400 audit(1742104428.568:2011): avc: denied { getopt } for pid=17625 comm="syz.5.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1043.499295][ T30] audit: type=1400 audit(1742104428.588:2012): avc: denied { read } for pid=17625 comm="syz.5.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1044.391313][T16682] usb 1-1: USB disconnect, device number 81 [ 1045.448277][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1045.707642][ T5904] usbhid 6-1:0.0: can't add hid device: -71 [ 1045.718126][ T5904] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1045.763335][T13667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1045.881864][ T5904] usb 6-1: USB disconnect, device number 76 [ 1046.624872][ T54] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1046.661177][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1047.162632][ T30] audit: type=1400 audit(1742104432.258:2013): avc: denied { setopt } for pid=17665 comm="syz.1.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1047.218894][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1047.231540][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1047.242183][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1047.252657][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1047.266148][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1047.275250][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1047.763219][T13681] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.793284][T17668] lo speed is unknown, defaulting to 1000 [ 1047.992557][T13681] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.377918][T17681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.299454][T13681] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.359248][T14435] Bluetooth: hci4: command tx timeout [ 1050.096699][T16682] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1050.226394][T13681] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.466389][T16682] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1050.501090][T16682] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1050.540786][T16682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1050.683768][T16682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1050.712783][T17668] chnl_net:caif_netlink_parms(): no params data found [ 1050.725505][T16682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1051.177759][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1051.709503][T14435] Bluetooth: hci4: command tx timeout [ 1051.729755][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1052.539955][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1052.540124][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1052.614879][T16682] usb 1-1: string descriptor 0 read error: -71 [ 1052.623344][T16682] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1052.644163][T16682] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1052.770261][T16682] usb 1-1: can't set config #1, error -71 [ 1052.782396][T16682] usb 1-1: USB disconnect, device number 82 [ 1052.976197][ T30] audit: type=1400 audit(1742104438.048:2014): avc: denied { create } for pid=17720 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1053.237889][ T30] audit: type=1400 audit(1742104438.108:2015): avc: denied { getopt } for pid=17720 comm="syz.0.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1053.272342][T17733] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1053.451304][T17740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17740 comm=syz.6.3267 [ 1053.764785][ T5143] Bluetooth: hci4: command tx timeout [ 1054.097620][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.107542][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.150401][ T5873] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1054.253041][T13681] bond0 (unregistering): Released all slaves [ 1054.353055][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.489739][ T5873] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1054.499332][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.558048][T13681] bond1 (unregistering): Released all slaves [ 1054.559812][ T5873] usb 7-1: config 0 descriptor?? [ 1054.582568][ T5873] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1054.723457][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 1054.742431][T13681] bond2 (unregistering): Released all slaves [ 1054.900226][T13681] bond3 (unregistering): Released all slaves [ 1054.911381][T13681] bond4 (unregistering): Released all slaves [ 1054.965393][T17737] lo speed is unknown, defaulting to 1000 [ 1055.029103][T13681] : left promiscuous mode [ 1055.084149][T17668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.099325][T17668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.112246][T17668] bridge_slave_0: entered allmulticast mode [ 1055.124350][T17668] bridge_slave_0: entered promiscuous mode [ 1055.154927][T17668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.172214][T17668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.181398][T17668] bridge_slave_1: entered allmulticast mode [ 1055.197966][T17668] bridge_slave_1: entered promiscuous mode [ 1055.263575][T17668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.279761][T16682] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1055.312534][T17668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.461655][T16682] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1055.485746][T16682] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1055.505395][T16682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1055.520471][T17668] team0: Port device team_slave_0 added [ 1055.538958][T16682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1055.547580][T17668] team0: Port device team_slave_1 added [ 1055.564004][T16682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1055.661190][T16682] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1055.691514][T16682] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1055.703994][T16682] usb 1-1: Product: syz [ 1055.708713][T16682] usb 1-1: Manufacturer: syz [ 1055.738316][T16682] cdc_wdm 1-1:1.0: skipping garbage [ 1055.749611][T16682] cdc_wdm 1-1:1.0: skipping garbage [ 1055.771513][T16682] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1055.777581][T16682] cdc_wdm 1-1:1.0: Unknown control protocol [ 1055.849713][ T5143] Bluetooth: hci4: command tx timeout [ 1056.347792][T17668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.366742][T17668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.420766][T17668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.496583][ T30] audit: type=1400 audit(1742104441.588:2016): avc: denied { lock } for pid=17766 comm="syz.7.3273" path="socket:[107688]" dev="sockfs" ino=107688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1056.528057][T17668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.545279][T17668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.642118][T17668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.650079][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.001806][ T10] usb 7-1: USB disconnect, device number 78 [ 1057.281969][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.478485][T17668] hsr_slave_0: entered promiscuous mode [ 1057.500840][T17668] hsr_slave_1: entered promiscuous mode [ 1057.506866][T17668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.550349][T17668] Cannot create hsr debugfs directory [ 1057.919905][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.923055][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1057.949735][T17789] FAULT_INJECTION: forcing a failure. [ 1057.949735][T17789] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.069490][T17789] CPU: 1 UID: 0 PID: 17789 Comm: syz.6.3281 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 1058.069518][T17789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1058.069527][T17789] Call Trace: [ 1058.069533][T17789] [ 1058.069540][T17789] dump_stack_lvl+0x16c/0x1f0 [ 1058.069569][T17789] should_fail_ex+0x50a/0x650 [ 1058.069595][T17789] ? fs_reclaim_acquire+0xae/0x150 [ 1058.069621][T17789] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1058.069646][T17789] should_failslab+0xc2/0x120 [ 1058.069666][T17789] __kmalloc_noprof+0xcb/0x510 [ 1058.069683][T17789] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1058.069713][T17789] tomoyo_realpath_from_path+0xb9/0x720 [ 1058.069744][T17789] ? tomoyo_path_number_perm+0x235/0x590 [ 1058.069767][T17789] ? tomoyo_path_number_perm+0x235/0x590 [ 1058.069791][T17789] tomoyo_path_number_perm+0x248/0x590 [ 1058.069812][T17789] ? tomoyo_path_number_perm+0x235/0x590 [ 1058.069836][T17789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1058.069882][T17789] ? __pfx_lock_release+0x10/0x10 [ 1058.069903][T17789] ? trace_lock_acquire+0x14e/0x1f0 [ 1058.069926][T17789] ? lock_acquire+0x2f/0xb0 [ 1058.069947][T17789] ? __fget_files+0x40/0x3a0 [ 1058.069968][T17789] ? __fget_files+0x206/0x3a0 [ 1058.069987][T17789] security_file_ioctl+0x9b/0x240 [ 1058.070014][T17789] __x64_sys_ioctl+0xb7/0x200 [ 1058.070040][T17789] do_syscall_64+0xcd/0x250 [ 1058.070064][T17789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.070087][T17789] RIP: 0033:0x7fe19f98d169 [ 1058.070100][T17789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.070117][T17789] RSP: 002b:00007fe1a0851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.070134][T17789] RAX: ffffffffffffffda RBX: 00007fe19fba5fa0 RCX: 00007fe19f98d169 [ 1058.070145][T17789] RDX: 0000400000000080 RSI: 00000000c02464bb RDI: 0000000000000003 [ 1058.070156][T17789] RBP: 00007fe1a0851090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.070166][T17789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.070175][T17789] R13: 0000000000000000 R14: 00007fe19fba5fa0 R15: 00007ffd7d342928 [ 1058.070199][T17789] [ 1058.070235][T17789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1058.422253][T17785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1058.437280][ T10] usb 1-1: USB disconnect, device number 83 [ 1058.450776][T13681] batadv_slave_0: left promiscuous mode [ 1058.506028][T13681] hsr_slave_0: left promiscuous mode [ 1058.521468][T13681] hsr_slave_1: left promiscuous mode [ 1058.551983][T13681] veth1_macvtap: left promiscuous mode [ 1058.557524][T13681] veth0_macvtap: left promiscuous mode [ 1058.575135][T17795] loop6: detected capacity change from 0 to 524287999 [ 1058.587711][T13681] veth1_vlan: left promiscuous mode [ 1058.593769][T17334] loop: Write error at byte offset 1, length 4096. [ 1058.606319][T13681] veth0_vlan: left promiscuous mode [ 1058.611801][T17334] loop: Write error at byte offset 1, length 4096. [ 1058.618360][ C0] blk_print_req_error: 7 callbacks suppressed [ 1058.618375][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 1058.633968][ C0] buffer_io_error: 4 callbacks suppressed [ 1058.633982][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 1058.648135][ C0] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 1058.657641][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 1058.675800][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1058.685111][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 1061.046525][ T10] infiniband s}z1: ib_query_port failed (-19) [ 1061.943364][ T5873] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1062.024523][T17825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1062.107374][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.120017][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.141271][ T5873] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1062.150397][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.180740][ T5873] usb 1-1: config 0 descriptor?? [ 1062.399562][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1062.427200][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1062.814358][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 1062.827790][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1062.904000][ T5873] usb 1-1: USB disconnect, device number 84 [ 1063.685309][ T208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1063.803249][ T5873] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1063.987603][ T5873] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.000557][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1064.014701][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.022851][ T5873] usb 1-1: Product: syz [ 1064.027715][ T5873] usb 1-1: Manufacturer: syz [ 1064.039196][ T5873] usb 1-1: SerialNumber: syz [ 1065.150915][ T5873] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1065.201190][ T5873] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1065.208716][ T5873] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1065.247063][T17843] 9pnet_fd: Insufficient options for proto=fd [ 1065.356291][T17846] lo speed is unknown, defaulting to 1000 [ 1065.477358][T17845] Invalid ELF header type: 0 != 1 [ 1065.701321][ T5873] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 1065.709233][ T30] audit: type=1400 audit(1742104450.568:2017): avc: denied { module_load } for pid=17844 comm="syz.7.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1065.843890][ T5873] cdc_ncm 1-1:1.0 eth13: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1065.881422][T13681] IPVS: stop unused estimator thread 0... [ 1065.903265][ T5873] usb 1-1: USB disconnect, device number 85 [ 1065.910252][ T5873] cdc_ncm 1-1:1.0 eth13: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1066.036580][T17668] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1066.080463][T17668] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1066.149959][T17668] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1066.217155][T17668] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1066.380602][T17854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.432988][T17668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.451586][T17668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.471477][T13666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.478592][T13666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.526064][T13681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.533191][T13681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.584588][T17668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1066.599758][T17668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.733965][T17668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.858303][T17872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.910862][T17668] veth0_vlan: entered promiscuous mode [ 1066.932038][T17668] veth1_vlan: entered promiscuous mode [ 1066.982291][T17668] veth0_macvtap: entered promiscuous mode [ 1067.007077][T17668] veth1_macvtap: entered promiscuous mode [ 1067.238147][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.277142][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.289257][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.376359][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.425123][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.442200][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.482652][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.493551][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.504385][T17668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.514962][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.531405][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.532672][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1067.541611][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.568549][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.585193][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.595753][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.605982][ T30] audit: type=1400 audit(1742104452.698:2018): avc: denied { bind } for pid=17876 comm="syz.6.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1067.606358][T17668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.636850][T17668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.665853][T17668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.678874][T17668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.688705][T17668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.706018][T17668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.715851][T17668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.728518][T17882] batadv_slave_1: entered allmulticast mode [ 1067.752293][T17882] batadv_slave_1: entered promiscuous mode [ 1067.820907][T13666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.837628][T17884] overlayfs: missing 'lowerdir' [ 1067.839375][T13666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.863753][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3305'. [ 1067.873335][T13681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.881681][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3305'. [ 1067.885144][T13681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.955162][T17887] netlink: 'syz.0.3306': attribute type 3 has an invalid length. [ 1067.965059][T17887] netlink: 'syz.0.3306': attribute type 3 has an invalid length. [ 1068.047290][T17889] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3245'. [ 1068.049849][T17887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3306'. [ 1068.159820][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1068.423890][ T30] audit: type=1400 audit(1742104453.518:2019): avc: denied { unmount } for pid=16633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1068.537810][T17897] syzkaller0: entered promiscuous mode [ 1068.543378][T17897] syzkaller0: entered allmulticast mode [ 1068.552332][T17881] batadv_slave_1: left promiscuous mode [ 1068.557959][T17881] batadv_slave_1: left allmulticast mode [ 1068.763971][ T30] audit: type=1400 audit(1742104453.858:2020): avc: denied { mount } for pid=17900 comm="syz.1.3312" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1069.002327][T17906] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1069.014119][T17906] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1069.456931][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1069.500213][ T30] audit: type=1400 audit(1742104454.578:2021): avc: denied { unmount } for pid=16633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1069.523858][T17157] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1069.729444][T17157] usb 7-1: Using ep0 maxpacket: 8 [ 1069.735887][T17157] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.759895][T17157] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1069.770103][T17923] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3316'. [ 1069.799385][T17157] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1069.826038][T17157] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1069.837641][T17157] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1069.857461][T17157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.898043][T17157] hub 7-1:1.0: bad descriptor, ignoring hub [ 1069.904245][T17157] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1069.923149][T17157] cdc_wdm 7-1:1.0: skipping garbage [ 1069.928472][T17157] cdc_wdm 7-1:1.0: skipping garbage [ 1069.951261][T17157] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1069.957573][T17157] cdc_wdm 7-1:1.0: Unknown control protocol [ 1070.229109][T17926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.246466][T17926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.714878][T17928] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1070.766040][ T30] audit: type=1400 audit(1742104455.858:2022): avc: denied { ioctl } for pid=17927 comm="syz.1.3317" path="/newroot/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xaea4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1070.872532][ T30] audit: type=1400 audit(1742104455.958:2023): avc: denied { unmount } for pid=16633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1071.797480][T17941] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3320'. [ 1071.874316][T17157] usb 7-1: USB disconnect, device number 79 [ 1072.007448][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1072.249456][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3319'. [ 1072.440922][T17920] lo speed is unknown, defaulting to 1000 [ 1072.654697][T17952] FAULT_INJECTION: forcing a failure. [ 1072.654697][T17952] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.668392][T17952] CPU: 0 UID: 0 PID: 17952 Comm: syz.6.3322 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 1072.668414][T17952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1072.668424][T17952] Call Trace: [ 1072.668429][T17952] [ 1072.668441][T17952] dump_stack_lvl+0x16c/0x1f0 [ 1072.668468][T17952] should_fail_ex+0x50a/0x650 [ 1072.668491][T17952] ? fs_reclaim_acquire+0xae/0x150 [ 1072.668513][T17952] ? alloc_fs_context+0x57/0x9c0 [ 1072.668528][T17952] should_failslab+0xc2/0x120 [ 1072.668546][T17952] __kmalloc_cache_noprof+0x68/0x410 [ 1072.668573][T17952] alloc_fs_context+0x57/0x9c0 [ 1072.668593][T17952] path_mount+0xb08/0x1f10 [ 1072.668613][T17952] ? kmem_cache_free+0x2e2/0x4d0 [ 1072.668629][T17952] ? __pfx_path_mount+0x10/0x10 [ 1072.668649][T17952] ? putname+0x13c/0x180 [ 1072.668670][T17952] __x64_sys_mount+0x28f/0x310 [ 1072.668688][T17952] ? __pfx___x64_sys_mount+0x10/0x10 [ 1072.668705][T17952] ? trace_csd_function_exit+0x17f/0x1f0 [ 1072.668727][T17952] do_syscall_64+0xcd/0x250 [ 1072.668750][T17952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.668773][T17952] RIP: 0033:0x7fe19f98d169 [ 1072.668787][T17952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.668802][T17952] RSP: 002b:00007fe1a0830038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1072.668817][T17952] RAX: ffffffffffffffda RBX: 00007fe19fba6080 RCX: 00007fe19f98d169 [ 1072.668829][T17952] RDX: 0000400000000080 RSI: 0000400000000180 RDI: 00004000000000c0 [ 1072.668839][T17952] RBP: 00007fe1a0830090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.668849][T17952] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000002 [ 1072.668859][T17952] R13: 0000000000000001 R14: 00007fe19fba6080 R15: 00007ffd7d342928 [ 1072.668880][T17952] [ 1073.290325][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1073.920788][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1074.305538][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1074.501949][ T30] audit: type=1400 audit(1742104459.598:2024): avc: denied { ioctl } for pid=17962 comm="syz.1.3327" path="socket:[108207]" dev="sockfs" ino=108207 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1074.560165][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.139253][ T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1075.309486][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1075.330739][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.347550][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1075.359501][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1075.461178][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1075.478902][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1075.652449][ T9] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1075.674132][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.712465][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 1075.721439][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1075.729018][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 1075.735470][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 1075.746205][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1075.753065][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 1075.821017][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1075.879386][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1075.893609][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1075.905591][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1076.450548][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1076.465265][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1076.475118][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1076.483545][ T9] usb 6-1: Product: syz [ 1076.487716][ T9] usb 6-1: Manufacturer: syz [ 1076.497661][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1076.521456][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1076.529762][ T9] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1076.536230][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 1076.589917][T17981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.603374][T17981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.122928][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1077.813588][ T5900] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1077.990826][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.007249][ T5900] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.017910][ T5900] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1078.032069][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.075043][ T9] usb 1-1: USB disconnect, device number 86 [ 1078.090126][ T5900] usb 7-1: config 0 descriptor?? [ 1079.234387][ T30] audit: type=1400 audit(1742104463.658:2025): avc: denied { connect } for pid=18021 comm="syz.0.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1079.255782][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1079.267004][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1080.345598][ T30] audit: type=1400 audit(1742104465.078:2026): avc: denied { setopt } for pid=18021 comm="syz.0.3346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1080.345754][T18016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.448262][ T9] usb 6-1: USB disconnect, device number 77 [ 1080.504379][T18016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.516838][T18016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.527336][T18016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.615733][T18038] SELinux: Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped). [ 1080.659361][ T30] audit: type=1400 audit(1742104465.708:2027): avc: denied { relabelfrom } for pid=18037 comm="syz.7.3350" name="RFCOMM" dev="sockfs" ino=109402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1080.752194][ T5900] usbhid 7-1:0.0: can't add hid device: -71 [ 1080.758873][ T5900] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1080.765923][ T30] audit: type=1400 audit(1742104465.728:2028): avc: denied { relabelto } for pid=18037 comm="syz.7.3350" name="RFCOMM" dev="sockfs" ino=109402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0" [ 1080.768055][ T5900] usb 7-1: USB disconnect, device number 80 [ 1081.442398][T18041] syzkaller0: entered promiscuous mode [ 1081.447935][T18041] syzkaller0: entered allmulticast mode [ 1081.561688][ T30] audit: type=1800 audit(1742104466.168:2029): pid=18044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3352" name="bus" dev="overlay" ino=2461 res=0 errno=0 [ 1081.605376][T18050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3353'. [ 1081.662528][T18051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1081.681202][T18050] bridge0: port 3(vlan2) entered blocking state [ 1081.738705][T18050] bridge0: port 3(vlan2) entered disabled state [ 1081.745916][T18050] vlan2: entered allmulticast mode [ 1081.754887][T18050] vlan2: left allmulticast mode [ 1082.180584][T18061] : entered promiscuous mode [ 1082.223923][T18036] xt_TCPMSS: Only works on TCP SYN packets [ 1082.241363][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1084.946380][ T30] audit: type=1400 audit(1742104470.038:2030): avc: denied { setopt } for pid=18082 comm="syz.6.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1085.322792][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3359'. [ 1085.337175][T18074] bridge2: entered promiscuous mode [ 1085.552784][ T30] audit: type=1400 audit(1742104470.648:2031): avc: denied { ioctl } for pid=18090 comm="syz.7.3367" path="socket:[109577]" dev="sockfs" ino=109577 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1085.592086][T18093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.693537][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1085.700288][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1085.710560][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1085.717104][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1085.717258][T18097] ceph: No mds server is up or the cluster is laggy [ 1085.849485][ T5900] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1086.023578][ T5900] usb 1-1: Using ep0 maxpacket: 8 [ 1086.030152][ T5900] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1086.038165][ T5900] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.064325][ T5900] usb 1-1: config 6 has no interface number 0 [ 1086.079952][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1086.102849][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1086.224619][ T5900] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1086.241178][ T5900] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1086.251851][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.260006][ T5900] usb 1-1: Product: syz [ 1086.264201][ T5900] usb 1-1: Manufacturer: syz [ 1086.268845][ T5900] usb 1-1: SerialNumber: syz [ 1086.292687][ T5900] hso 1-1:6.2: Failed to find INT IN ep [ 1086.789523][ T30] audit: type=1400 audit(1742104471.878:2032): avc: denied { bind } for pid=18112 comm="syz.1.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1086.819307][ T30] audit: type=1400 audit(1742104471.908:2033): avc: denied { read } for pid=18112 comm="syz.1.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1086.857314][T18092] netlink: zone id is out of range [ 1086.863431][T18092] netlink: zone id is out of range [ 1087.214110][T18119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.830858][T18092] netlink: zone id is out of range [ 1087.840366][T18092] netlink: zone id is out of range [ 1087.845876][T18092] netlink: zone id is out of range [ 1088.046122][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1088.604271][ T30] audit: type=1400 audit(1742104473.688:2034): avc: denied { setopt } for pid=18112 comm="syz.1.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1088.646471][T18092] netlink: zone id is out of range [ 1088.726518][T18092] netlink: zone id is out of range [ 1088.802186][T18092] netlink: zone id is out of range [ 1089.138015][T18092] netlink: zone id is out of range [ 1089.155746][T18092] netlink: set zone limit has 8 unknown bytes [ 1089.179993][T18129] fuse: Bad value for 'fd' [ 1089.292886][ T9] usb 1-1: USB disconnect, device number 87 [ 1089.454615][T18146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1089.463692][T18146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1089.523883][T18146] bond1: entered promiscuous mode [ 1090.024884][T18146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1090.333181][T18155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.126842][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1091.221780][ T208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1091.256424][T18163] vlan2: entered allmulticast mode [ 1092.346148][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 1092.777765][T18177] fuse: Unknown parameter '0x0000000000000003' [ 1093.242699][T18200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1093.705607][ T30] audit: type=1400 audit(1742104478.798:2035): avc: denied { accept } for pid=18195 comm="syz.7.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1093.763052][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1093.775704][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1094.144760][T18203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.245863][T18201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.676821][T18211] fuse: Unknown parameter '0x0000000000000003' [ 1095.250877][ T30] audit: type=1400 audit(1742104480.338:2036): avc: denied { mount } for pid=18222 comm="syz.5.3413" name="/" dev="hugetlbfs" ino=110720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1095.668871][T18230] Device name cannot be null; rc = [-22] [ 1095.689448][ T30] audit: type=1400 audit(1742104480.758:2037): avc: denied { mounton } for pid=18228 comm="syz.0.3411" path="/95/bus" dev="tmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1096.019222][T18241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.079197][T14435] Bluetooth: hci0: command 0x0406 tx timeout [ 1096.087582][ T5143] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1096.454432][ T30] audit: type=1400 audit(1742104481.548:2038): avc: denied { listen } for pid=18235 comm="syz.0.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1096.488556][T18242] lo speed is unknown, defaulting to 1000 [ 1096.628261][T18245] fuse: Unknown parameter '0x0000000000000003' [ 1096.884875][T18251] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1096.897791][T18251] cramfs: wrong magic [ 1097.430911][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1097.433564][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1097.853966][ T30] audit: type=1400 audit(1742104482.948:2039): avc: denied { read } for pid=18253 comm="syz.7.3421" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1098.351443][T18267] input: syz0 as /devices/virtual/input/input54 [ 1098.492994][T18266] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3425'. [ 1098.532795][T18269] FAULT_INJECTION: forcing a failure. [ 1098.532795][T18269] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.549416][T18269] CPU: 1 UID: 0 PID: 18269 Comm: syz.6.3426 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 1098.549443][T18269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1098.549453][T18269] Call Trace: [ 1098.549458][T18269] [ 1098.549465][T18269] dump_stack_lvl+0x16c/0x1f0 [ 1098.549494][T18269] should_fail_ex+0x50a/0x650 [ 1098.549518][T18269] ? fs_reclaim_acquire+0xae/0x150 [ 1098.549545][T18269] should_failslab+0xc2/0x120 [ 1098.549565][T18269] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 1098.549584][T18269] ? __d_alloc+0x31/0xaa0 [ 1098.549607][T18269] __d_alloc+0x31/0xaa0 [ 1098.549636][T18269] d_alloc_pseudo+0x1c/0xc0 [ 1098.549659][T18269] alloc_file_pseudo+0xd0/0x230 [ 1098.549682][T18269] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1098.549710][T18269] ioctx_alloc+0x59d/0x2010 [ 1098.549737][T18269] ? __might_fault+0x13b/0x190 [ 1098.549757][T18269] ? __pfx_lock_release+0x10/0x10 [ 1098.549781][T18269] ? trace_lock_acquire+0x14e/0x1f0 [ 1098.549803][T18269] ? __pfx_ioctx_alloc+0x10/0x10 [ 1098.549825][T18269] ? lock_acquire+0x2f/0xb0 [ 1098.549849][T18269] ? __might_fault+0xe3/0x190 [ 1098.549870][T18269] __x64_sys_io_setup+0xc9/0x210 [ 1098.549897][T18269] do_syscall_64+0xcd/0x250 [ 1098.549922][T18269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.549944][T18269] RIP: 0033:0x7fe19f98d169 [ 1098.549957][T18269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.549973][T18269] RSP: 002b:00007fe1a0851038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1098.549989][T18269] RAX: ffffffffffffffda RBX: 00007fe19fba5fa0 RCX: 00007fe19f98d169 [ 1098.550000][T18269] RDX: 0000000000000000 RSI: 0000400000000340 RDI: 0000000000000003 [ 1098.550009][T18269] RBP: 00007fe1a0851090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.550019][T18269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.550029][T18269] R13: 0000000000000000 R14: 00007fe19fba5fa0 R15: 00007ffd7d342928 [ 1098.550053][T18269] [ 1098.757649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.073617][T18282] fuse: Unknown parameter '0x0000000000000003' [ 1099.304979][T18287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1099.519691][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1099.533974][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1100.049482][T18295] SET target dimension over the limit! [ 1100.673636][ T9] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1100.924564][T18305] netlink: 'syz.5.3437': attribute type 10 has an invalid length. [ 1101.105681][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.121707][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.139297][ T9] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1101.157824][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.184607][ T9] usb 7-1: config 0 descriptor?? [ 1101.402814][T18292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.411415][T18292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.420583][T18292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.429025][T18292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.449350][ T5904] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1101.501709][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 1101.508228][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1101.517686][ T9] usb 7-1: USB disconnect, device number 81 [ 1101.629235][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 1101.635946][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.652530][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.665350][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.681342][ T5904] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1101.691554][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.701169][ T5904] usb 1-1: config 0 descriptor?? [ 1102.562798][ T5904] waltop 0003:172F:0037.0032: unknown main item tag 0x0 [ 1102.576887][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1102.597244][ T5904] waltop 0003:172F:0037.0032: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.0-1/input0 [ 1102.660897][T18314] gtp0: entered promiscuous mode [ 1102.681010][T18314] gtp0: entered allmulticast mode [ 1102.737490][T18318] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3442'. [ 1102.746718][T18317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1102.780092][ T5904] usb 1-1: USB disconnect, device number 88 [ 1102.909555][ T30] audit: type=1400 audit(1742104487.948:2040): avc: denied { getopt } for pid=18316 comm="syz.6.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1103.406717][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1104.095858][T18324] Can't find ip_set type bitmap:ip,mac [ 1104.476192][ T30] audit: type=1400 audit(1742104488.808:2041): avc: denied { watch } for pid=18328 comm="syz.0.3446" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1104.592761][ T30] audit: type=1400 audit(1742104488.808:2042): avc: denied { watch_sb } for pid=18328 comm="syz.0.3446" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1104.648398][T18338] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3448'. [ 1105.065823][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3449'. [ 1105.078714][T18351] bridge_slave_1: left allmulticast mode [ 1105.287613][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1105.287825][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1105.330075][T18351] bridge_slave_1: left promiscuous mode [ 1105.431969][T18351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.467609][T18351] bridge_slave_0: left allmulticast mode [ 1105.484464][T18351] bridge_slave_0: left promiscuous mode [ 1105.485268][T18352] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3453'. [ 1105.523411][T18351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.540422][T18358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3455'. [ 1106.859679][T18380] syzkaller0: entered promiscuous mode [ 1106.867813][T18380] syzkaller0: entered allmulticast mode [ 1106.875603][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3463'. [ 1106.958233][ T9] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 1106.987511][ T9] hid-generic 0003:0003:0000.0033: unknown main item tag 0x0 [ 1107.010208][ T9] hid-generic 0003:0003:0000.0033: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1107.042635][T18384] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1107.080379][T18384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1107.089854][T18384] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1107.111643][T18384] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1107.272024][T18390] loop6: detected capacity change from 0 to 524287997 [ 1107.848315][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1107.867720][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0 [ 1107.879354][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1107.888504][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1108.253960][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3469'. [ 1108.564960][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1110.161749][T18397] vlan2: entered allmulticast mode [ 1110.340243][T18408] __nla_validate_parse: 1 callbacks suppressed [ 1110.340260][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3472'. [ 1111.494689][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1111.505580][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1111.870146][T16682] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1112.034460][T16682] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1112.047220][T16682] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.064886][T16682] usb 7-1: Product: syz [ 1112.071775][T16682] usb 7-1: Manufacturer: syz [ 1112.078458][T16682] usb 7-1: SerialNumber: syz [ 1112.424313][T18433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.439676][T16682] usb 7-1: config 0 descriptor?? [ 1112.462279][T16682] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1112.642634][ T30] audit: type=1800 audit(1742104497.738:2043): pid=18443 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3484" name="bus" dev="overlay" ino=651 res=0 errno=0 [ 1112.675096][T16682] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 1112.682903][T16682] sq905c 7-1:0.0: Reading version command failed [ 1112.689735][T16682] sq905c 7-1:0.0: probe with driver sq905c failed with error -32 [ 1112.701393][T16682] usb 7-1: USB disconnect, device number 82 [ 1112.838030][T18448] syzkaller0: entered promiscuous mode [ 1112.843557][T18448] syzkaller0: entered allmulticast mode [ 1112.960182][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1113.064396][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3487'. [ 1113.168597][T14435] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1113.180479][T14435] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1113.191143][T14435] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1113.222449][T14435] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1113.232527][T14435] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1113.248102][T14435] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.247351][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.236124][T18451] bridge0: port 3(vlan2) entered blocking state [ 1115.243331][T18451] bridge0: port 3(vlan2) entered disabled state [ 1115.253110][T18451] vlan2: entered allmulticast mode [ 1115.259570][T18451] vlan2: left allmulticast mode [ 1115.279333][T14435] Bluetooth: hci5: command tx timeout [ 1115.294798][T18452] lo speed is unknown, defaulting to 1000 [ 1115.522894][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.529944][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.560924][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3491'. [ 1115.882121][ T208] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.290563][ T208] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1116.810321][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1116.826060][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1116.900396][T14435] Bluetooth: hci2: unexpected event for opcode 0x2011 [ 1116.903638][ T208] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.918054][ T208] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1116.999390][ T208] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.010174][ T208] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1117.132423][T18452] chnl_net:caif_netlink_parms(): no params data found [ 1117.216434][ T208] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.296100][ T208] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1117.380099][T14435] Bluetooth: hci5: command tx timeout [ 1118.034520][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3498'. [ 1118.101109][T18500] ptrace attach of "./syz-executor exec"[9575] was attempted by ""[18500] [ 1118.118703][ T30] audit: type=1400 audit(1742104503.148:2044): avc: denied { listen } for pid=18496 comm="syz.5.3499" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1118.139329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.146929][ T30] audit: type=1400 audit(1742104503.148:2045): avc: denied { connect } for pid=18496 comm="syz.5.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1118.170857][ T30] audit: type=1400 audit(1742104503.148:2046): avc: denied { name_connect } for pid=18496 comm="syz.5.3499" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1118.199599][ T30] audit: type=1400 audit(1742104503.158:2047): avc: denied { write } for pid=18496 comm="syz.5.3499" laddr=172.20.20.170 lport=46026 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1118.224671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1118.255705][T18452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.275423][T18452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.291892][T18452] bridge_slave_0: entered allmulticast mode [ 1118.303196][T18452] bridge_slave_0: entered promiscuous mode [ 1118.309369][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1118.337756][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3503'. [ 1118.339478][T18505] vlan0: entered allmulticast mode [ 1118.356612][T18505] bridge_slave_0: entered allmulticast mode [ 1118.364601][T18505] bridge_slave_0: left allmulticast mode [ 1118.461113][T18452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.468877][T18452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.504580][T18452] bridge_slave_1: entered allmulticast mode [ 1118.697373][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.718952][T18452] bridge_slave_1: entered promiscuous mode [ 1118.725283][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1118.748154][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.763561][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1118.810529][T18452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.849695][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3501'. [ 1118.869539][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1118.884824][T18452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.895723][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.908603][ T9] usb 1-1: config 0 descriptor?? [ 1119.803110][T14435] Bluetooth: hci5: command tx timeout [ 1119.812720][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1119.903677][T18526] netlink: 'syz.5.3507': attribute type 10 has an invalid length. [ 1120.319978][T18527] No such timeout policy "syz1" [ 1120.521660][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1120.527676][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1120.538510][ T9] usb 1-1: USB disconnect, device number 89 [ 1121.546853][ T208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.556543][ T208] bond_slave_0: left promiscuous mode [ 1121.564482][ T208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1121.574292][ T208] bond_slave_1: left promiscuous mode [ 1121.583015][ T208] bond0 (unregistering): Released all slaves [ 1121.605695][ T208] bond1 (unregistering): Released all slaves [ 1121.621590][ T208] bond2 (unregistering): Released all slaves [ 1121.850819][T14435] Bluetooth: hci5: command tx timeout [ 1122.129029][T18452] team0: Port device team_slave_0 added [ 1122.145200][ T208] : left promiscuous mode [ 1122.203388][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3513'. [ 1122.263998][T18452] team0: Port device team_slave_1 added [ 1122.368635][ T208] IPVS: stopping backup sync thread 13146 ... [ 1122.486545][ T30] audit: type=1400 audit(1742104507.568:2048): avc: denied { create } for pid=18542 comm="syz.5.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1122.561171][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1122.575090][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1122.865994][ T30] audit: type=1400 audit(1742104507.578:2049): avc: denied { setopt } for pid=18542 comm="syz.5.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1122.925824][T18452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.172184][T18452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.305824][T18452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.320738][T18452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.327706][T18452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.353671][T18452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.753378][ T30] audit: type=1400 audit(1742104508.848:2050): avc: denied { append } for pid=18559 comm="syz.0.3517" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1123.842725][T18558] syzkaller0: entered promiscuous mode [ 1123.854433][T18558] syzkaller0: entered allmulticast mode [ 1123.871232][ T5904] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1124.074698][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.117440][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.147260][ T5904] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1124.170984][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.186620][ T5904] usb 6-1: config 0 descriptor?? [ 1124.222022][ T30] audit: type=1400 audit(1742104509.308:2051): avc: denied { getopt } for pid=18570 comm="syz.0.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1124.489448][T13667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1124.889815][T13667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1125.009235][ T5904] usbhid 6-1:0.0: can't add hid device: -71 [ 1125.015322][ T5904] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1125.044449][ T5904] usb 6-1: USB disconnect, device number 78 [ 1125.659211][ T30] audit: type=1804 audit(1742104510.748:2052): pid=18580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3524" name="/newroot/45/file0" dev="tmpfs" ino=251 res=1 errno=0 [ 1125.659415][T18580] FAULT_INJECTION: forcing a failure. [ 1125.659415][T18580] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.719364][T18580] CPU: 0 UID: 0 PID: 18580 Comm: syz.5.3524 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 1125.719390][T18580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1125.719399][T18580] Call Trace: [ 1125.719404][T18580] [ 1125.719411][T18580] dump_stack_lvl+0x16c/0x1f0 [ 1125.719437][T18580] should_fail_ex+0x50a/0x650 [ 1125.719460][T18580] ? fs_reclaim_acquire+0xae/0x150 [ 1125.719482][T18580] ? ima_alloc_init_template+0xb8/0x720 [ 1125.719512][T18580] should_failslab+0xc2/0x120 [ 1125.719529][T18580] __kmalloc_noprof+0xcb/0x510 [ 1125.719550][T18580] ima_alloc_init_template+0xb8/0x720 [ 1125.719573][T18580] ? simple_xattr_get+0x30/0x1d0 [ 1125.719593][T18580] ima_store_measurement+0x1ea/0x5c0 [ 1125.719618][T18580] ? __pfx_ima_store_measurement+0x10/0x10 [ 1125.719641][T18580] ? vfs_getxattr_alloc+0xf1/0x340 [ 1125.719660][T18580] ? ima_get_hash_algo+0x27d/0x410 [ 1125.719679][T18580] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1125.719703][T18580] process_measurement+0x193c/0x2370 [ 1125.719730][T18580] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1125.719746][T18580] ? __pfx_process_measurement+0x10/0x10 [ 1125.719770][T18580] ? __pfx_avc_has_perm+0x10/0x10 [ 1125.719783][T18580] ? trace_lock_acquire+0x14e/0x1f0 [ 1125.719803][T18580] ? lock_acquire+0x2f/0xb0 [ 1125.719821][T18580] ? avc_has_perm_noaudit+0x61/0x3a0 [ 1125.719858][T18580] ? file_map_prot_check+0x1eb/0x360 [ 1125.719880][T18580] ima_file_mmap+0x1aa/0x1d0 [ 1125.719899][T18580] ? __pfx_ima_file_mmap+0x10/0x10 [ 1125.719920][T18580] ? find_held_lock+0x2d/0x110 [ 1125.719939][T18580] security_mmap_file+0x88c/0x990 [ 1125.719961][T18580] vm_mmap_pgoff+0xdb/0x3a0 [ 1125.719979][T18580] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1125.719997][T18580] ? __fget_files+0x206/0x3a0 [ 1125.720015][T18580] ksys_mmap_pgoff+0x32c/0x5c0 [ 1125.720036][T18580] ? __pfx_ksys_write+0x10/0x10 [ 1125.720052][T18580] __x64_sys_mmap+0x125/0x190 [ 1125.720075][T18580] do_syscall_64+0xcd/0x250 [ 1125.720097][T18580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.720117][T18580] RIP: 0033:0x7fc166d8d169 [ 1125.720130][T18580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.720144][T18580] RSP: 002b:00007fc167c35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1125.720159][T18580] RAX: ffffffffffffffda RBX: 00007fc166fa5fa0 RCX: 00007fc166d8d169 [ 1125.720170][T18580] RDX: 000000000000001f RSI: 00000000000040fe RDI: 0000400000ffc000 [ 1125.720180][T18580] RBP: 00007fc167c35090 R08: 0000000000000004 R09: 0000000000000000 [ 1125.720188][T18580] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002 [ 1125.720197][T18580] R13: 0000000000000000 R14: 00007fc166fa5fa0 R15: 00007ffd2be7d8b8 [ 1125.720219][T18580] [ 1125.996990][ T30] audit: type=1804 audit(1742104510.818:2053): pid=18580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz.5.3524" name="/newroot/45/file0" dev="tmpfs" ino=251 res=0 errno=0 [ 1128.213706][T18452] hsr_slave_0: entered promiscuous mode [ 1128.241727][T18452] hsr_slave_1: entered promiscuous mode [ 1128.255865][T18452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1128.264465][T18452] Cannot create hsr debugfs directory [ 1128.336363][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1128.376078][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1130.357344][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1130.360767][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1130.527806][T18616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.539580][T18616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.547756][T18616] netlink: 'syz.1.3534': attribute type 4 has an invalid length. [ 1130.579329][T18616] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1130.716539][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3537'. [ 1130.939370][ T30] audit: type=1400 audit(1742104516.028:2054): avc: denied { write } for pid=18629 comm="syz.5.3539" name="sg0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1131.025273][T18632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 1131.774694][ T208] hsr_slave_0: left promiscuous mode [ 1132.135785][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.156092][ T208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.768152][ T208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.797000][ T208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.845038][ T208] veth1_macvtap: left promiscuous mode [ 1132.852529][ T208] veth0_macvtap: left promiscuous mode [ 1132.858495][ T208] veth1_vlan: left promiscuous mode [ 1132.868082][ T208] veth0_vlan: left promiscuous mode [ 1132.873621][T18648] x_tables: duplicate underflow at hook 2 [ 1132.929245][ T30] audit: type=1400 audit(1742104518.018:2055): avc: denied { mount } for pid=18646 comm="syz.1.3544" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1132.982012][ T30] audit: type=1400 audit(1742104518.048:2056): avc: denied { remount } for pid=18646 comm="syz.1.3544" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1133.271616][T18661] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3546'. [ 1134.085317][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.109561][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.350512][ T208] team_slave_1 (unregistering): left promiscuous mode [ 1134.366660][ T208] team0 (unregistering): Port device team_slave_1 removed [ 1134.413953][ T208] team_slave_0 (unregistering): left promiscuous mode [ 1134.425489][ T208] team0 (unregistering): Port device team_slave_0 removed [ 1134.878826][T18649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1134.888326][T18649] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3544'. [ 1134.922803][ T30] audit: type=1400 audit(1742104520.018:2057): avc: denied { unmount } for pid=16633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1135.102354][T18452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1135.136988][T18452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1135.210637][T18452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1136.161373][T18678] netlink: 'syz.1.3550': attribute type 5 has an invalid length. [ 1136.175763][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1136.175809][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1136.229196][T18678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3550'. [ 1136.720017][T18452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1136.977535][T18452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.996417][T18452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.010908][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.018036][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.052687][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.059804][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.243277][T18452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1137.851818][T18687] vlan2: entered allmulticast mode [ 1139.244180][T18452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.941614][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1139.943804][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1140.106681][T18452] veth0_vlan: entered promiscuous mode [ 1140.123323][T18452] veth1_vlan: entered promiscuous mode [ 1140.151241][T18452] veth0_macvtap: entered promiscuous mode [ 1140.159570][T18452] veth1_macvtap: entered promiscuous mode [ 1140.195435][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.217765][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.227887][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.242691][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.253181][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.268713][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.278882][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1140.293732][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.304913][T18452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.317758][T18720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 1140.354308][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.371583][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.394375][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.407770][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.423713][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.435790][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.450757][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.462132][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.476760][T18452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.487656][T18452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.498493][T18452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.507280][T18452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.516272][T18452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.583429][T18726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1140.616732][T13667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.657110][T13667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.774237][T13666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.783417][T13666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.874454][ T30] audit: type=1400 audit(1742104525.968:2058): avc: denied { read append } for pid=18732 comm="syz.0.3565" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1140.927963][ T30] audit: type=1400 audit(1742104525.968:2059): avc: denied { open } for pid=18732 comm="syz.0.3565" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1141.321131][T18742] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1141.407556][T18742] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3486'. [ 1141.759599][T13667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1141.872960][ T30] audit: type=1400 audit(1742104526.928:2060): avc: denied { write } for pid=18745 comm="syz.1.3569" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1142.116395][T18734] syz.0.3565 (18734): drop_caches: 2 [ 1142.402319][ T208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1142.734402][T18772] : entered promiscuous mode [ 1144.294816][ T5871] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1144.516928][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 1144.596806][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1144.626579][T18810] bridge3: entered promiscuous mode [ 1144.627507][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1144.652266][ T5871] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1144.720459][T18811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1144.889455][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.932538][ T5871] usb 7-1: Product: syz [ 1144.937994][ T5871] usb 7-1: Manufacturer: syz [ 1144.955736][ T5871] usb 7-1: SerialNumber: syz [ 1144.969001][ T5871] usb 7-1: config 0 descriptor?? [ 1144.994324][ T5871] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1145.058211][T18816] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3590'. [ 1145.083783][ T5871] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1145.148567][ T30] audit: type=1400 audit(1742104530.238:2061): avc: denied { ioctl } for pid=18818 comm="syz.1.3591" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1145.600456][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1145.614402][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1145.913979][ T5871] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1145.925955][ T5871] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1146.806117][ T5871] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1147.272057][ T30] audit: type=1804 audit(1742104532.368:2062): pid=18845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3600" name="/newroot/66/file0" dev="tmpfs" ino=363 res=1 errno=0 [ 1147.522497][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1147.591713][ T5871] em28xx 7-1:0.0: AC97 command still being executed: not handled properly! [ 1147.631232][ T5871] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1148.114489][T18857] can0: slcan on ttyS3. [ 1148.163935][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1148.880776][ T5871] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1148.898392][ T5871] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1148.905205][ T5871] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1148.931332][ T5871] usb 7-1: USB disconnect, device number 83 [ 1149.810363][T18856] can0 (unregistered): slcan off ttyS3. [ 1151.338845][T18892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3615'. [ 1151.485654][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1151.503060][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1151.899389][T17157] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1152.486310][T17157] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1152.649990][T17157] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1152.712996][T17157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1152.732381][T18910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1152.748828][T17157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1152.793187][T17157] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1152.829769][T17157] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1152.847354][T17157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.847476][ T30] audit: type=1400 audit(1742104537.938:2063): avc: denied { map } for pid=18917 comm="syz.5.3623" path="socket:[113431]" dev="sockfs" ino=113431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1152.860225][T17157] usb 7-1: config 0 descriptor?? [ 1152.885039][T18904] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1153.288868][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1153.314335][ T30] audit: type=1400 audit(1742104538.398:2064): avc: denied { watch } for pid=18928 comm="syz.1.3627" path="/154/file0" dev="tmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1153.330225][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1153.566568][T18904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.745391][T18904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.087776][T17157] usbhid 7-1:0.0: can't add hid device: -71 [ 1154.109392][T17157] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1154.160729][T17157] usb 7-1: USB disconnect, device number 84 [ 1154.439491][ T5904] usb 6-1: new low-speed USB device number 79 using dummy_hcd [ 1154.630527][ T5904] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.653935][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1154.663911][ T5904] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1154.681810][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.745111][ T5904] usb 6-1: config 0 descriptor?? [ 1154.889531][T17157] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1155.144670][T18954] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3629'. [ 1155.839195][T17157] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1155.888415][T17157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 1155.909319][T17157] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1155.930177][T17157] usb 7-1: language id specifier not provided by device, defaulting to English [ 1156.058105][T18971] SELinux: syz.5.3632 (18971) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1156.106049][T18971] bridge1: entered promiscuous mode [ 1156.340868][T17157] usb 7-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 1156.354724][T17157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.365885][T17157] usb 7-1: config 0 descriptor?? [ 1156.385302][T17157] em28xx 7-1:0.0: New device @ 480 Mbps (2013:0251, interface 0, class 0) [ 1156.428478][ T5904] uclogic 0003:145F:0212.0034: interface is invalid, ignoring [ 1156.436269][T17157] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1156.477521][T18978] vlan2: entered allmulticast mode [ 1156.578857][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.719397][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.905185][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.995627][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.021881][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.119618][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1157.131874][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1157.180499][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.364497][T17157] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1157.371296][T17157] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1157.380068][T17157] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1157.390776][T17157] em28xx 7-1:0.0: No AC97 audio processor [ 1157.409025][T17157] usb 7-1: USB disconnect, device number 85 [ 1157.422815][T17157] em28xx 7-1:0.0: Disconnecting em28xx [ 1158.429997][T13667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1158.454931][T18987] FAULT_INJECTION: forcing a failure. [ 1158.454931][T18987] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.550565][ T5871] usb 6-1: USB disconnect, device number 79 [ 1158.616783][T18995] veth0_vlan: entered allmulticast mode [ 1158.624097][T18987] CPU: 0 UID: 0 PID: 18987 Comm: syz.1.3643 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 1158.624120][T18987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1158.624129][T18987] Call Trace: [ 1158.624134][T18987] [ 1158.624140][T18987] dump_stack_lvl+0x16c/0x1f0 [ 1158.624164][T18987] should_fail_ex+0x50a/0x650 [ 1158.624187][T18987] ? fs_reclaim_acquire+0xae/0x150 [ 1158.624210][T18987] should_failslab+0xc2/0x120 [ 1158.624228][T18987] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1158.624243][T18987] ? __pfx_lock_release+0x10/0x10 [ 1158.624262][T18987] ? trace_lock_acquire+0x14e/0x1f0 [ 1158.624277][T18987] ? getname_kernel+0x52/0x370 [ 1158.624298][T18987] getname_kernel+0x52/0x370 [ 1158.624316][T18987] kern_path+0x1d/0x50 [ 1158.624331][T18987] lookup_bdev+0xd9/0x280 [ 1158.624347][T18987] ? __pfx_lookup_bdev+0x10/0x10 [ 1158.624362][T18987] ? cred_has_capability.isra.0+0x192/0x2f0 [ 1158.624386][T18987] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1158.624412][T18987] ? __pfx_sysv_fill_super+0x10/0x10 [ 1158.624433][T18987] mount_bdev+0x8a/0x2d0 [ 1158.624457][T18987] ? __pfx_mount_bdev+0x10/0x10 [ 1158.624480][T18987] ? cap_capable+0xb3/0x250 [ 1158.624499][T18987] ? __pfx_sysv_mount+0x10/0x10 [ 1158.624518][T18987] legacy_get_tree+0x109/0x220 [ 1158.624536][T18987] vfs_get_tree+0x8b/0x340 [ 1158.624554][T18987] path_mount+0x14e6/0x1f10 [ 1158.624573][T18987] ? kmem_cache_free+0x2e2/0x4d0 [ 1158.624593][T18987] ? __pfx_path_mount+0x10/0x10 [ 1158.624615][T18987] ? putname+0x13c/0x180 [ 1158.624638][T18987] __x64_sys_mount+0x28f/0x310 [ 1158.624657][T18987] ? __pfx___x64_sys_mount+0x10/0x10 [ 1158.624682][T18987] do_syscall_64+0xcd/0x250 [ 1158.624704][T18987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.624725][T18987] RIP: 0033:0x7f02d038d169 [ 1158.624738][T18987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1158.624752][T18987] RSP: 002b:00007f02d1264038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1158.624767][T18987] RAX: ffffffffffffffda RBX: 00007f02d05a6080 RCX: 00007f02d038d169 [ 1158.624777][T18987] RDX: 0000400000000080 RSI: 0000400000000180 RDI: 00004000000000c0 [ 1158.624787][T18987] RBP: 00007f02d1264090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.624797][T18987] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000002 [ 1158.624806][T18987] R13: 0000000000000000 R14: 00007f02d05a6080 R15: 00007fffd11b3848 [ 1158.624829][T18987] [ 1158.871711][ C0] vkms_vblank_simulate: vblank timer overrun [ 1159.139414][T17157] em28xx 7-1:0.0: Freeing device [ 1159.156124][T18996] veth0_vlan: left promiscuous mode [ 1159.162033][T18996] veth0_vlan: entered promiscuous mode [ 1159.171665][T18997] lo speed is unknown, defaulting to 1000 [ 1159.574438][T19011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1160.132288][T19010] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 1160.591863][T19018] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 1161.111284][ T30] audit: type=1326 audit(1742104546.198:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.258718][ T30] audit: type=1326 audit(1742104546.208:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.375681][ T30] audit: type=1326 audit(1742104546.228:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.403248][ T30] audit: type=1326 audit(1742104546.228:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.428484][ T30] audit: type=1326 audit(1742104546.248:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.452376][ T30] audit: type=1326 audit(1742104546.248:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.557522][ T30] audit: type=1326 audit(1742104546.248:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.592484][ T30] audit: type=1326 audit(1742104546.248:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.622560][ T30] audit: type=1326 audit(1742104546.248:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.646517][ T30] audit: type=1326 audit(1742104546.248:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19028 comm="syz.0.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65d18d169 code=0x7ffc0000 [ 1161.967059][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3658'. [ 1162.239541][T13667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1162.250466][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1163.115944][T19058] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 1163.644744][T19072] netlink: 'syz.7.3666': attribute type 13 has an invalid length. [ 1163.749658][T19072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.763224][T19074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19074 comm=syz.7.3666 [ 1163.778033][T19072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.838518][T19072] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.848781][T19072] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.857808][T19072] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.868147][T19072] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.992062][T19061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1164.003550][T19061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1164.011951][T19061] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1164.021396][T19061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1164.027574][T19061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1164.037403][T19061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1164.045538][T19061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1164.071872][T19061] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1164.083521][T19061] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1164.090001][T19061] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1164.098941][T19061] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1165.204634][T19091] lo speed is unknown, defaulting to 1000 [ 1165.673148][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 1166.089341][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 1166.114614][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 1166.121044][T14435] Bluetooth: hci2: command 0x0406 tx timeout [ 1166.159611][T19105] Bluetooth: hci5: command 0x0c1a tx timeout [ 1166.179755][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1166.179768][ T30] audit: type=1400 audit(1742104551.278:2087): avc: denied { read } for pid=19106 comm="syz.0.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1166.180387][T19107] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1166.274392][ T5871] hid-generic 0003:0003:0000.0035: unknown main item tag 0x0 [ 1166.286061][ T5871] hid-generic 0003:0003:0000.0035: unknown main item tag 0x0 [ 1166.298925][T19107] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1166.423197][T19107] netlink: 81 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1166.769310][ T5871] hid-generic 0003:0003:0000.0035: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1166.846026][T19110] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1166.855033][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1166.864187][T19110] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1166.873365][T19110] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1167.112903][T19128] lo speed is unknown, defaulting to 1000 [ 1167.231684][ T30] audit: type=1400 audit(1742104552.298:2088): avc: denied { write } for pid=19123 comm="syz.1.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1167.493430][T19135] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3682'. [ 1167.494336][T19122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3683'. [ 1167.629423][T17157] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1167.808679][T19140] gtp1: entered promiscuous mode [ 1167.817649][T19140] gtp1: entered allmulticast mode [ 1167.830905][T17157] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1167.846036][T17157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.869640][T17157] usb 1-1: config 0 descriptor?? [ 1168.598548][ T5143] Bluetooth: hci2: command 0x0406 tx timeout [ 1168.601704][T19105] Bluetooth: hci0: command 0x0406 tx timeout [ 1168.614036][T19105] Bluetooth: hci4: command 0x0c1a tx timeout [ 1168.614131][ T5143] Bluetooth: hci5: command 0x0c1a tx timeout [ 1168.647055][T13686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1168.647162][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1169.041690][T17157] ath6kl: Failed to submit usb control message: -110 [ 1169.064436][T17157] ath6kl: unable to send the bmi data to the device: -110 [ 1169.066158][T19152] bridge2: entered promiscuous mode [ 1169.084913][T17157] ath6kl: Unable to send get target info: -110 [ 1169.104382][T17157] ath6kl: Failed to init ath6kl core: -110 [ 1169.125715][T17157] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1169.267567][T19128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.319568][T19128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.655913][T17157] usb 1-1: USB disconnect, device number 90 [ 1170.639647][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout [ 1170.799238][ T5143] Bluetooth: hci5: command 0x0c1a tx timeout [ 1171.387642][T19184] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 1171.815720][T19192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1173.068643][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3704'. [ 1173.717655][T19229] netlink: 'syz.7.3708': attribute type 5 has an invalid length. [ 1173.725576][T19229] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3708'. [ 1174.159931][T13667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1174.404669][ T208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1175.165205][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1175.189422][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1175.269375][T10764] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1175.410804][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1175.441169][T10764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.452091][T10764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.462016][T10764] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1175.476119][T10764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.496740][T10764] usb 6-1: config 0 descriptor?? [ 1176.659942][T19246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.668735][T19246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.923033][T19246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.960918][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.967283][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.049513][T19246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.235649][T19268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1177.261563][T10764] usbhid 6-1:0.0: can't add hid device: -71 [ 1177.277143][T10764] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1177.291890][T10764] usb 6-1: USB disconnect, device number 80 [ 1178.517019][T19287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3726'. [ 1178.537858][T19285] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1178.925579][T19293] vlan2: entered promiscuous mode [ 1178.956050][T19293] bond0: entered promiscuous mode [ 1178.967816][T19293] bond_slave_0: entered promiscuous mode [ 1178.983975][T19293] bond_slave_1: entered promiscuous mode [ 1179.031821][T19293] bond0: left promiscuous mode [ 1179.036634][T19293] bond_slave_0: left promiscuous mode [ 1179.060461][T19293] bond_slave_1: left promiscuous mode [ 1179.077443][T19295] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2889887472 (184952798208 ns) > initial count (51438777216 ns). Using initial count to start timer. [ 1179.501533][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1179.521657][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1180.182685][ T208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1180.421584][ T30] audit: type=1400 audit(1742104565.518:2089): avc: denied { mount } for pid=19313 comm="syz.0.3734" name="/" dev="ramfs" ino=116016 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1180.665384][T19326] Cannot find del_set index 0 as target [ 1181.224797][T19332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3740'. [ 1181.432048][ T30] audit: type=1400 audit(1742104566.488:2090): avc: denied { accept } for pid=19313 comm="syz.0.3734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1182.158674][ T30] audit: type=1400 audit(1742104567.238:2091): avc: denied { write } for pid=19338 comm="syz.5.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1182.545322][T19341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.572266][ T30] audit: type=1400 audit(1742104567.661:2092): avc: denied { setopt } for pid=19348 comm="syz.0.3744" lport=57148 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1182.595904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.977385][T19362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3747'. [ 1183.018874][T19364] FAULT_INJECTION: forcing a failure. [ 1183.018874][T19364] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1183.048724][T19364] CPU: 0 UID: 0 PID: 19364 Comm: syz.6.3748 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 1183.048754][T19364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1183.048765][T19364] Call Trace: [ 1183.048771][T19364] [ 1183.048778][T19364] dump_stack_lvl+0x16c/0x1f0 [ 1183.048807][T19364] should_fail_ex+0x50a/0x650 [ 1183.048832][T19364] ? __do_sys_futex_waitv+0x221/0x2c0 [ 1183.048858][T19364] get_futex_key+0x4a3/0x1000 [ 1183.048881][T19364] ? __pfx_get_futex_key+0x10/0x10 [ 1183.048901][T19364] ? __pfx_lock_release+0x10/0x10 [ 1183.048924][T19364] ? trace_lock_acquire+0x14e/0x1f0 [ 1183.048949][T19364] futex_wait_multiple_setup+0x12f/0x6f0 [ 1183.048984][T19364] futex_wait_multiple+0xe7/0x460 [ 1183.049011][T19364] ? __pfx_futex_wait_multiple+0x10/0x10 [ 1183.049035][T19364] ? trace_kmalloc+0x2d/0xd0 [ 1183.049057][T19364] ? __kmalloc_noprof+0x23b/0x510 [ 1183.049082][T19364] __do_sys_futex_waitv+0x17f/0x2c0 [ 1183.049102][T19364] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 1183.049134][T19364] do_syscall_64+0xcd/0x250 [ 1183.049156][T19364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.049179][T19364] RIP: 0033:0x7fec9f18d169 [ 1183.049194][T19364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.049210][T19364] RSP: 002b:00007fec9ff38038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 1183.049227][T19364] RAX: ffffffffffffffda RBX: 00007fec9f3a5fa0 RCX: 00007fec9f18d169 [ 1183.049238][T19364] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000400000001080 [ 1183.049248][T19364] RBP: 00007fec9ff38090 R08: 0000000000000001 R09: 0000000000000000 [ 1183.049258][T19364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.049268][T19364] R13: 0000000000000000 R14: 00007fec9f3a5fa0 R15: 00007ffd8f31fea8 [ 1183.049297][T19364] [ 1183.232635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1183.738987][T19373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3744'. [ 1183.979595][ T30] audit: type=1400 audit(1742104568.771:2093): avc: denied { read } for pid=19369 comm="syz.7.3750" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1184.210387][ T30] audit: type=1400 audit(1742104568.771:2094): avc: denied { open } for pid=19369 comm="syz.7.3750" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1184.929574][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3753'. [ 1185.193919][T19378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1185.844313][ T30] audit: type=1400 audit(1742104570.771:2095): avc: denied { create } for pid=19386 comm="syz.5.3755" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1186.617919][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1186.747271][ T30] audit: type=1400 audit(1742104570.771:2096): avc: denied { read } for pid=19386 comm="syz.5.3755" name="file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1186.894704][ T30] audit: type=1400 audit(1742104570.771:2097): avc: denied { open } for pid=19386 comm="syz.5.3755" path="/91/file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1186.988514][T19399] sd 0:0:1:0: PR command failed: 1026 [ 1186.991195][ T30] audit: type=1400 audit(1742104572.071:2098): avc: denied { read } for pid=19396 comm="syz.6.3756" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1186.994013][T19399] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1187.036413][T19399] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1187.118493][ T30] audit: type=1400 audit(1742104572.071:2099): avc: denied { open } for pid=19396 comm="syz.6.3756" path="/34/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1187.141486][ C0] vkms_vblank_simulate: vblank timer overrun [ 1187.475841][T19413] netlink: 'syz.7.3759': attribute type 1 has an invalid length. [ 1187.489147][ T30] audit: type=1400 audit(1742104572.071:2100): avc: denied { ioctl } for pid=19396 comm="syz.6.3756" path="/34/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1187.513560][ C0] vkms_vblank_simulate: vblank timer overrun [ 1187.527618][ T30] audit: type=1400 audit(1742104572.171:2101): avc: denied { unlink } for pid=17668 comm="syz-executor" name="file0" dev="tmpfs" ino=493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1187.532983][T19413] netlink: 'syz.7.3759': attribute type 1 has an invalid length. [ 1188.215583][ T30] audit: type=1400 audit(1742104573.261:2102): avc: denied { getopt } for pid=19437 comm="syz.7.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1188.460552][T19448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.304279][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1189.613765][T19460] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3774'. [ 1189.669233][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3776'. [ 1189.681818][T19466] bridge0: port 3(vlan2) entered blocking state [ 1189.689432][T19466] bridge0: port 3(vlan2) entered disabled state [ 1189.697879][T19466] vlan2: entered allmulticast mode [ 1189.704430][T19466] vlan2: left allmulticast mode [ 1189.822172][T19472] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3779'. [ 1189.949294][T19477] sd 0:0:1:0: PR command failed: 1026 [ 1189.954829][T19477] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1189.961674][T19477] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1190.005278][ T5904] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1190.015137][T19481] lo speed is unknown, defaulting to 1000 [ 1190.556139][T17157] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1190.744831][T17157] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1190.752965][T17157] usb 1-1: config 0 has no interface number 0 [ 1190.759191][ T5904] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1190.843446][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.851830][T17157] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1190.861798][T17157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.870527][ T5904] usb 6-1: config 0 descriptor?? [ 1190.876966][ T5904] cp210x 6-1:0.0: cp210x converter detected [ 1191.952210][T17157] usb 1-1: config 0 descriptor?? [ 1191.958985][T17157] cp210x 1-1:0.64: cp210x converter detected [ 1191.975357][ T5904] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1192.572064][ T5904] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1192.671616][T13669] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1192.804170][T17157] cp210x 1-1:0.64: failed to get vendor val 0x000e size 3: -32 [ 1192.885353][ T30] audit: type=1400 audit(1742104577.621:2103): avc: denied { getopt } for pid=19480 comm="syz.6.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1193.024305][T19501] netlink: 'syz.1.3786': attribute type 10 has an invalid length. [ 1193.025269][T17157] usb 1-1: cp210x converter now attached to ttyUSB1 [ 1193.050152][ T30] audit: type=1400 audit(1742104577.724:2104): avc: denied { bind } for pid=19467 comm="syz.5.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1193.151572][ T5904] usb 6-1: USB disconnect, device number 81 [ 1193.169418][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1193.203920][T18730] usb 1-1: USB disconnect, device number 91 [ 1193.213560][T18730] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1193.221410][T18730] cp210x 1-1:0.64: device disconnected [ 1193.238739][ T30] audit: type=1326 audit(1742104577.724:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.5.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc166d8d169 code=0x7ffc0000 [ 1193.287059][ T5904] cp210x 6-1:0.0: device disconnected [ 1193.303372][ T30] audit: type=1326 audit(1742104577.733:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.5.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc166d8d169 code=0x7ffc0000 [ 1193.326889][ C0] vkms_vblank_simulate: vblank timer overrun [ 1193.335571][ T30] audit: type=1326 audit(1742104577.733:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.5.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc166d8d169 code=0x7ffc0000 [ 1193.359365][ T30] audit: type=1326 audit(1742104577.733:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.5.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc166d8d169 code=0x7ffc0000 [ 1193.382848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1193.391228][ T30] audit: type=1326 audit(1742104577.733:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.5.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc166d8d169 code=0x7ffc0000 [ 1193.416812][ T30] audit: type=1326 audit(1742104577.742:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.5.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc166d8d169 code=0x7ffc0000 [ 1193.441391][ T30] audit: type=1326 audit(1742104577.742:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.5.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc166d8d169 code=0x7ffc0000 [ 1193.490040][ T30] audit: type=1326 audit(1742104577.742:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19467 comm="syz.5.3777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc166d8d169 code=0x7ffc0000 [ 1193.759061][T19517] dlm: plock device version mismatch: kernel (1.2.0), user (1.3.32769) [ 1194.277986][ T5904] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1195.382459][ T65] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.402555][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.474475][ T5904] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1195.540784][ T5904] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1195.564277][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.572312][ T5904] usb 7-1: Product: syz [ 1195.577510][ T5904] usb 7-1: Manufacturer: syz [ 1195.593342][ T5904] usb 7-1: SerialNumber: syz [ 1195.600677][ T5904] usb 7-1: config 0 descriptor?? [ 1195.632019][ T5904] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1195.647675][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1195.657447][ T5904] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1195.670765][ T5904] usb 7-1: media controller created [ 1195.685233][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1195.702580][T18730] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1195.739867][ T5904] DVB: Unable to find symbol tda10046_attach() [ 1195.761251][ T5904] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1195.772016][ T5904] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1196.824901][T18730] usb 6-1: Using ep0 maxpacket: 8 [ 1196.831347][T18730] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 1196.839715][T18730] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.866855][T18730] usb 6-1: config 6 has no interface number 0 [ 1197.178734][T18730] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1197.199436][T18730] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1197.203307][T19557] lo speed is unknown, defaulting to 1000 [ 1197.208476][T18730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.208498][T18730] usb 6-1: Product: syz [ 1197.239615][T18730] usb 6-1: Manufacturer: syz [ 1197.256617][T18730] usb 6-1: SerialNumber: syz [ 1197.275950][T18730] hso 6-1:6.2: Failed to find INT IN ep [ 1197.423446][ T5904] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1197.456952][ T5904] usb 7-1: USB disconnect, device number 86 [ 1197.500217][T16682] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1197.607686][T19568] netlink: zone id is out of range [ 1197.612996][T19568] netlink: zone id is out of range [ 1197.621529][T19568] netlink: zone id is out of range [ 1197.632768][T19568] netlink: zone id is out of range [ 1197.649568][T19568] netlink: zone id is out of range [ 1197.660125][T19568] netlink: zone id is out of range [ 1197.665284][T19568] netlink: zone id is out of range [ 1197.676143][T16682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1197.689866][T19568] netlink: zone id is out of range [ 1197.695749][T19568] netlink: zone id is out of range [ 1197.701985][T19568] netlink: set zone limit has 8 unknown bytes [ 1197.718628][T16682] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 1197.728912][T16682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.752203][T16682] usb 1-1: config 0 descriptor?? [ 1197.761899][T19565] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1198.340829][T19570] netlink: 'syz.0.3807': attribute type 4 has an invalid length. [ 1198.376769][T10764] usb 6-1: USB disconnect, device number 82 [ 1198.751790][T16682] usbhid 1-1:0.0: can't add hid device: -71 [ 1198.774830][T16682] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1198.802751][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1198.824423][T16682] usb 1-1: USB disconnect, device number 92 [ 1199.892724][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1199.892742][ T30] audit: type=1400 audit(1742104584.160:2132): avc: denied { map } for pid=19580 comm="syz.5.3811" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1200.056334][T19585] lo: entered promiscuous mode [ 1200.069021][T19585] tunl0: entered promiscuous mode [ 1200.077382][T19585] gre0: entered promiscuous mode [ 1200.281782][ T30] audit: type=1400 audit(1742104584.160:2133): avc: denied { execute } for pid=19580 comm="syz.5.3811" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1200.324901][T19585] gretap0: entered promiscuous mode [ 1200.710702][T19585] erspan0: entered promiscuous mode [ 1200.811790][T19585] ip_vti0: entered promiscuous mode [ 1200.851134][T19585] ip6_vti0: entered promiscuous mode [ 1200.877325][T19585] sit0: entered promiscuous mode [ 1200.888768][T19585] ip6tnl0: entered promiscuous mode [ 1200.896101][T19585] ip6gre0: entered promiscuous mode [ 1201.125908][T19585] syz_tun: entered promiscuous mode [ 1201.162696][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1201.197117][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1201.255428][T19585] ip6gretap0: entered promiscuous mode [ 1201.263980][T19585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.272979][T19585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.171723][ T30] audit: type=1400 audit(1742104585.554:2134): avc: denied { bind } for pid=19589 comm="syz.1.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1207.235246][ T30] audit: type=1400 audit(1742104585.554:2135): avc: denied { connect } for pid=19589 comm="syz.1.3814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1207.614631][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1208.663068][T19591] sched: DL replenish lagged too much [ 1211.127986][T13681] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1215.720429][T19585] bridge0: entered promiscuous mode [ 1220.053296][T13666] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1334.694568][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1334.701557][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16633/1:b..l [ 1334.710321][ C1] rcu: (detected by 1, t=10503 jiffies, g=97569, q=2179870 ncpus=2) [ 1334.718397][ C1] task:syz-executor state:R running task stack:23744 pid:16633 tgid:16633 ppid:16620 task_flags:0x400140 flags:0x00000000 [ 1334.733803][ C1] Call Trace: [ 1334.737100][ C1] [ 1334.740040][ C1] __schedule+0xf43/0x5890 [ 1334.744470][ C1] ? hlock_class+0x4e/0x130 [ 1334.748990][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 1334.753953][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1334.758737][ C1] ? __pfx___schedule+0x10/0x10 [ 1334.763689][ C1] ? stack_depot_save_flags+0x28/0x9c0 [ 1334.769172][ C1] ? mark_held_locks+0x9f/0xe0 [ 1334.773965][ C1] preempt_schedule_irq+0x51/0x90 [ 1334.779002][ C1] irqentry_exit+0x36/0x90 [ 1334.783427][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1334.789420][ C1] RIP: 0010:__page_table_check_zero+0x2ca/0x360 [ 1334.795675][ C1] Code: 83 e4 01 4c 89 e6 e8 05 1f 91 ff 4d 85 e4 0f 84 b0 fd ff ff e8 c7 23 91 ff 48 83 ed 01 e9 aa fd ff ff e8 b9 23 91 ff 90 0f 0b b1 23 91 ff 48 89 ef e8 89 cc ff ff 48 83 c4 10 5b 5d 41 5c 41 [ 1334.815298][ C1] RSP: 0018:ffffc900001077b8 EFLAGS: 00000246 [ 1334.821379][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff8228cd10 [ 1334.829364][ C1] RDX: ffff88802542a440 RSI: 0000000000000001 RDI: 0000000000000006 [ 1334.837349][ C1] RBP: ffff88801e100c20 R08: 0000000000000006 R09: 0000000000000001 [ 1334.845337][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000001 [ 1334.853315][ C1] R13: 0000000000000000 R14: ffff88801e100c1c R15: dffffc0000000000 [ 1334.861300][ C1] ? __page_table_check_zero+0x130/0x360 [ 1334.866959][ C1] ? __page_table_check_zero+0x130/0x360 [ 1334.872607][ C1] free_frozen_pages+0x6c2/0xfb0 [ 1334.877557][ C1] __put_partials+0x14c/0x170 [ 1334.882250][ C1] qlist_free_all+0x4e/0x120 [ 1334.886889][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 1334.891748][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 1334.897217][ C1] __kasan_slab_alloc+0x69/0x90 [ 1334.902077][ C1] __kmalloc_noprof+0x1cd/0x510 [ 1334.906935][ C1] ? d_absolute_path+0x137/0x1b0 [ 1334.911902][ C1] ? rcu_is_watching+0x12/0xc0 [ 1334.916677][ C1] tomoyo_encode2+0x100/0x3e0 [ 1334.921367][ C1] tomoyo_encode+0x29/0x50 [ 1334.925791][ C1] tomoyo_realpath_from_path+0x19d/0x720 [ 1334.931442][ C1] tomoyo_path_perm+0x276/0x460 [ 1334.936299][ C1] ? tomoyo_path_perm+0x262/0x460 [ 1334.941331][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1334.946741][ C1] ? __virt_addr_valid+0x5e/0x590 [ 1334.951780][ C1] security_inode_getattr+0x116/0x290 [ 1334.957168][ C1] vfs_statx+0x115/0x210 [ 1334.961419][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1334.966191][ C1] ? getname_flags.part.0+0x1c5/0x550 [ 1334.971578][ C1] vfs_fstatat+0x7b/0xf0 [ 1334.975830][ C1] __do_sys_newfstatat+0xa2/0x130 [ 1334.980863][ C1] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1334.986518][ C1] ? __x64_sys_umount+0x125/0x1a0 [ 1334.991557][ C1] do_syscall_64+0xcd/0x250 [ 1334.996075][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.001980][ C1] RIP: 0033:0x7f02d038b97a [ 1335.006396][ C1] RSP: 002b:00007fffd11b2ad8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 1335.014902][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f02d038b97a [ 1335.022884][ C1] RDX: 00007fffd11b2b00 RSI: 00007fffd11b2b90 RDI: 00000000ffffff9c [ 1335.030864][ C1] RBP: 00007fffd11b2b90 R08: 0000000000000000 R09: 0000000000000000 [ 1335.038844][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007fffd11b3c20 [ 1335.046823][ C1] R13: 00007f02d040e08c R14: 000000000012554e R15: 00007fffd11b3c60 [ 1335.054818][ C1] [ 1335.057839][ C1] rcu: rcu_preempt kthread starved for 9469 jiffies! g97569 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1335.068953][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1335.078930][ C1] rcu: RCU grace-period kthread stack dump: [ 1335.084826][ C1] task:rcu_preempt state:R running task stack:27216 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1335.098328][ C1] Call Trace: [ 1335.101612][ C1] [ 1335.104548][ C1] __schedule+0xf43/0x5890 [ 1335.108973][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1335.114193][ C1] ? __pfx___schedule+0x10/0x10 [ 1335.119051][ C1] ? schedule+0x298/0x350 [ 1335.123384][ C1] ? __pfx_lock_release+0x10/0x10 [ 1335.128424][ C1] ? lock_acquire+0x2f/0xb0 [ 1335.132934][ C1] ? schedule+0x1fd/0x350 [ 1335.137276][ C1] schedule+0xe7/0x350 [ 1335.141349][ C1] schedule_timeout+0x124/0x280 [ 1335.146228][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1335.151602][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1335.156900][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1335.163236][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1335.168708][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1335.173484][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1335.178778][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1335.183472][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1335.188685][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1335.194500][ C1] rcu_gp_kthread+0x271/0x380 [ 1335.199191][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1335.204403][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1335.209609][ C1] ? __kthread_parkme+0x148/0x220 [ 1335.214635][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1335.219846][ C1] kthread+0x3af/0x750 [ 1335.223925][ C1] ? __pfx_kthread+0x10/0x10 [ 1335.228534][ C1] ? __pfx_kthread+0x10/0x10 [ 1335.233129][ C1] ret_from_fork+0x45/0x80 [ 1335.237551][ C1] ? __pfx_kthread+0x10/0x10 [ 1335.242145][ C1] ret_from_fork_asm+0x1a/0x30 [ 1335.246925][ C1] [ 1335.249941][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1335.256265][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-rc6-syzkaller-00205-g3571e8b091f4 #0 [ 1335.266590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1335.276651][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 1335.282733][ C1] Code: ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <65> 48 8b 15 d4 e6 49 7e 65 8b 05 d5 e6 49 7e a9 00 01 ff 00 48 8b [ 1335.302355][ C1] RSP: 0018:ffffc90000a27f40 EFLAGS: 00000282 [ 1335.308434][ C1] RAX: 0000000000000000 RBX: ffff88820d6cec80 RCX: ffffffff893331cd [ 1335.316411][ C1] RDX: ffff88801d698000 RSI: ffffffff892d4257 RDI: ffff88820d6cec80 [ 1335.324390][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1335.332371][ C1] R10: 0000000000000000 R11: 0000000000000004 R12: 0000000000000820 [ 1335.340356][ C1] R13: 0000000000000000 R14: ffff88804cda8000 R15: ffff88804cda8940 [ 1335.348346][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1335.357287][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1335.363877][ C1] CR2: 00007f0e8abdc12c CR3: 000000006f9da000 CR4: 00000000003526f0 [ 1335.371860][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1335.379841][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1335.387821][ C1] Call Trace: [ 1335.391101][ C1] [ 1335.393953][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1335.400295][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1335.405505][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1335.410985][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1335.416631][ C1] ? find_held_lock+0x2d/0x110 [ 1335.421413][ C1] ? rcu_is_watching+0x12/0xc0 [ 1335.426183][ C1] ? update_process_times+0x178/0x2d0 [ 1335.431566][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1335.437296][ C1] ? read_tsc+0x9/0x20 [ 1335.441370][ C1] ? ktime_get+0x1a7/0x310 [ 1335.445799][ C1] ? tick_nohz_handler+0x376/0x530 [ 1335.450916][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1335.456381][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1335.461765][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1335.467488][ C1] ? read_tsc+0x9/0x20 [ 1335.471568][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 1335.476684][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1335.481895][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1335.488067][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 1335.493883][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1335.500059][ C1] ? dev_queue_xmit_nit+0x14d/0xbc0 [ 1335.505269][ C1] ? skb_clone+0x17/0x3f0 [ 1335.509612][ C1] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 1335.515085][ C1] skb_clone+0x25/0x3f0 [ 1335.519251][ C1] dev_queue_xmit_nit+0x38f/0xbc0 [ 1335.524287][ C1] ? netif_skb_features+0x3b0/0xd50 [ 1335.529498][ C1] dev_hard_start_xmit+0x283/0x7b0 [ 1335.534627][ C1] __dev_queue_xmit+0x7f0/0x43e0 [ 1335.539577][ C1] ? __lock_acquire+0x15a9/0x3c40 [ 1335.544633][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1335.550018][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1335.555239][ C1] ? find_held_lock+0x2d/0x110 [ 1335.560023][ C1] ? __ip_finish_output+0x49e/0x950 [ 1335.565237][ C1] ip_finish_output2+0xc34/0x2180 [ 1335.570278][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 1335.575749][ C1] ? ip_skb_dst_mtu+0x496/0xe90 [ 1335.580609][ C1] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 1335.585815][ C1] ? __pfx_nf_hook+0x10/0x10 [ 1335.590412][ C1] ? rcu_is_watching+0x12/0xc0 [ 1335.595192][ C1] __ip_finish_output+0x49e/0x950 [ 1335.600251][ C1] ip_finish_output+0x35/0x380 [ 1335.605040][ C1] ip_output+0x13b/0x2a0 [ 1335.609291][ C1] ? __pfx_ip_output+0x10/0x10 [ 1335.614068][ C1] ip_local_out+0x33e/0x4a0 [ 1335.618585][ C1] synproxy_send_tcp.isra.0+0x439/0x630 [ 1335.624149][ C1] synproxy_send_client_synack+0x6f7/0x900 [ 1335.629976][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1335.636328][ C1] nft_synproxy_do_eval+0xa49/0xd60 [ 1335.641543][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1335.647281][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1335.652066][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 1335.657540][ C1] nft_do_chain+0x2e6/0x18f0 [ 1335.662150][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1335.667186][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 1335.672491][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 1335.677790][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1335.683013][ C1] nft_do_chain_inet+0x18b/0x350 [ 1335.687961][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1335.693431][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 1335.698469][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 1335.703854][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1335.709320][ C1] nf_hook_slow+0xbb/0x200 [ 1335.713743][ C1] nf_hook.constprop.0+0x42e/0x750 [ 1335.718862][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1335.724849][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1335.730489][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1335.735608][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1335.741602][ C1] ip_local_deliver+0x169/0x1f0 [ 1335.746463][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 1335.751846][ C1] ip_rcv+0x2c3/0x5d0 [ 1335.755834][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1335.760338][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 1335.766246][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1335.772670][ C1] ? rcu_is_watching+0x12/0xc0 [ 1335.777446][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1335.782819][ C1] ? process_backlog+0x3f1/0x15f0 [ 1335.787855][ C1] ? process_backlog+0x3f1/0x15f0 [ 1335.792885][ C1] __netif_receive_skb+0x1d/0x160 [ 1335.797918][ C1] process_backlog+0x443/0x15f0 [ 1335.802785][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 1335.808167][ C1] net_rx_action+0xa94/0x1010 [ 1335.812866][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1335.817986][ C1] ? __pfx_lock_release+0x10/0x10 [ 1335.823021][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1335.828230][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1335.833434][ C1] ? sched_clock+0x38/0x60 [ 1335.837854][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 1335.842713][ C1] ? clockevents_program_event+0x155/0x380 [ 1335.848546][ C1] handle_softirqs+0x213/0x8f0 [ 1335.853327][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1335.858630][ C1] __irq_exit_rcu+0x109/0x170 [ 1335.863316][ C1] irq_exit_rcu+0x9/0x30 [ 1335.867565][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1335.873203][ C1] [ 1335.876135][ C1] [ 1335.879066][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1335.885059][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1335.890356][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 08 38 ac 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d f8 1d 87 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1335.909973][ C1] RSP: 0018:ffffc900001b7d58 EFLAGS: 00000246 [ 1335.916050][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b578469 [ 1335.924028][ C1] RDX: 0000000000000001 RSI: ffff8881416a6000 RDI: ffff8881416a6064 [ 1335.932006][ C1] RBP: ffff8881416a6064 R08: 0000000000000001 R09: ffffed10170e6f85 [ 1335.939984][ C1] R10: ffff8880b8737c2b R11: 0000000000000000 R12: ffff888147ea5000 [ 1335.947962][ C1] R13: ffffffff8ee2eaa0 R14: 0000000000000001 R15: 0000000000000000 [ 1335.955949][ C1] ? ct_kernel_exit+0x139/0x190 [ 1335.960818][ C1] acpi_idle_enter+0xc5/0x160 [ 1335.965512][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 1335.970548][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1335.976366][ C1] cpuidle_enter+0x4e/0xa0 [ 1335.980794][ C1] do_idle+0x310/0x3f0 [ 1335.984873][ C1] ? __pfx_do_idle+0x10/0x10 [ 1335.989476][ C1] cpu_startup_entry+0x4f/0x60 [ 1335.994248][ C1] start_secondary+0x222/0x2b0 [ 1335.999019][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1336.004315][ C1] common_startup_64+0x13e/0x148 [ 1336.009274][ C1] [ 1336.395919][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1336.409471][ T1293] ieee802154 phy1 wpan1: encryption failed: -22