last executing test programs: 41m5.341713648s ago: executing program 0 (id=1468): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x74, 0x30, 0x48b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001700), 0x80000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x3) readv(r3, 0x0, 0x0) lseek(r2, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 41m3.595810707s ago: executing program 0 (id=1474): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2}) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_ep_write(r4, 0x82, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) iopl(0xf) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r6, 0x3, r0, 0x5}) 40m59.536004786s ago: executing program 0 (id=1488): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}}, 0x0) 40m57.64366559s ago: executing program 0 (id=1491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 40m56.373111448s ago: executing program 0 (id=1493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x14, r4, 0x1, 0x70bd24, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x87}]}, 0x10) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x6044850) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x40, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r8], 0x3c}}, 0x0) close(r8) 40m55.648202831s ago: executing program 0 (id=1498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, r0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(0x0, 0x3ffffffd, 0x200000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x0, 0xe}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}]}}]}, 0x3c}}, 0x44050) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40m54.722303977s ago: executing program 32 (id=1498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, r0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(0x0, 0x3ffffffd, 0x200000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0x0, 0xe}, {0x3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}]}}]}, 0x3c}}, 0x44050) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 39m16.074463401s ago: executing program 3 (id=1703): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) dup(r3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x20, 0x7, 0x14, "c137ebf4ca0ea4955bf34c26d11f71c7ce398251"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0x9, 0xeaba, 0x0, 0x9d, 0x6, 0x8, 0x9, 0xbdac, 0x2, 0x0, 0x8, 0xffff}}, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0x4d}, &(0x7f00000005c0)={0x20, 0x89, 0x2}}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 39m10.725047009s ago: executing program 3 (id=1715): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x60840, 0x1d2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000005c0)) r4 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r4, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 39m6.882858015s ago: executing program 3 (id=1720): socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x1, 0x0, 0x6000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x1, 0x2, {{0x6, 0x4, 0x2, 0xb, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @loopback, {[@end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000bc0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 39m4.873749399s ago: executing program 3 (id=1724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setreuid(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x6}]}}]}, 0x3c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) 39m3.620619548s ago: executing program 3 (id=1728): prctl$PR_MCE_KILL(0x23, 0x0, 0xabb4e1ce1e1cd1e3) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$fb0(0xffffff9c, 0x0, 0x8000, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000003c0)={0x7, 0x1279c2f5ae9b31fd, &(0x7f0000000280), 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$cgroup_int(r1, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) 39m1.109712785s ago: executing program 3 (id=1734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usbip_server_init(0x3) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) lstat(0x0, 0x0) 38m45.67578412s ago: executing program 33 (id=1734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usbip_server_init(0x3) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) lstat(0x0, 0x0) 33m40.96738334s ago: executing program 4 (id=2408): inotify_add_watch(0xffffffffffffffff, 0x0, 0x400017e) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x8, 0x0, &(0x7f0000000280)) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x11, &(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000852000000100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000181800", @ANYRES32=0x1, @ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)}, &(0x7f0000000180)=0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000200)) r5 = creat(&(0x7f0000001100)='./file0\x00', 0xecf86c37d530494d) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001006f0700000066000014000280080003400000001208000540000000031400000011cd8019c093a0480001000000000000"], 0x7c}}, 0x0) 33m38.849075783s ago: executing program 4 (id=2413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x1, 0x8, 0x6, 0x8, {{0x20, 0x4, 0x0, 0x18, 0x80, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x23, 0x7f, [@loopback, @multicast1, @multicast2, @multicast2, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @rr={0x7, 0xf, 0x10, [@empty, @multicast2, @multicast1]}, @ra={0x94, 0x4}, @cipso={0x86, 0x13, 0x2, [{0x2, 0xd, "5f90c49df829b77873048d"}]}, @lsrr={0x83, 0x1b, 0x33, [@remote, @private=0xa010102, @empty, @broadcast, @multicast1, @loopback]}, @lsrr={0x83, 0x7, 0xd3, [@broadcast]}]}}}}}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x0, 0x2, 0x6, 0x10187, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3ff, 0x0, @void, @value, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x9, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xda, &(0x7f0000000340)=""/218, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0xa}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x4, 0x1, 0x0, 0x7}, {0x4, 0x1, 0x9}], 0x10, 0x4f1, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0) sendfile(r8, r8, 0x0, 0x8000002) 33m37.619042645s ago: executing program 4 (id=2421): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000000)=ANY=[], 0x8, 0x800) msgsnd(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x0) msgsnd(r2, &(0x7f00000005c0)={0x2, "08afb85dee3dde543e23a739f084380e7d39596f6704707b85198e0e4529cf8c5bfe0ca975978b87556b0901e8b0696a579ae4b895bf4f825f08431df4d3aa2620ae890b013f45e147c36694c8edc8ca9a5d9d9f919216a8bb081a8f12eb471e4896f67a1dd99c0c5499b99f97ebb4ced540f8e9b0908649a4273524be151c7ec0cfdbdb92887fc8a1a5a1bf450f55f22dfef7942cc3ad831b2b15caa151691ffe361500edb54d06aceb1f4da070d77707e01a3226db6675d9dfe3a01c583b45671ba3e8224bdf9cb13eee371be92f549ea0e7ddab8cb72249fea6dc"}, 0xe4, 0x800) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000340)=@v1={0x2, "1b24"}, 0x3, 0x1) socket$inet(0x2, 0x4000000805, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 33m35.664431894s ago: executing program 4 (id=2425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000009c0)="0000fc00607bef8eb2bafd0e6083d21ef8b1c6e9ed7ad8f2dd5889e21bd50ef4ae3fdaf23bae3824f4022d14adcb8e43b7fdefe2bb594551881d793d650d0b404ec21499a841e08e2137ddff0c58efc9", 0x50, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 33m34.125876383s ago: executing program 4 (id=2430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) syz_open_dev$MSR(&(0x7f0000000500), 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000004c0)) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c904}, 0x20008084) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000010a40)={{0x1, 0x1, 0x18, r4}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x101ff, 0x6, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f", 0x1}], 0x2) 33m33.965638741s ago: executing program 4 (id=2431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(r2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') 33m33.055677099s ago: executing program 34 (id=2431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(r2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') 13m39.927080145s ago: executing program 6 (id=5324): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r2, &(0x7f0000000cc0), 0x0}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000000}, {0x0, 0x2}}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100005002b7ebd700000000000020000002bf552f37c0eafe73e1d3d3a92d869eae7014359d453a4230c772102bc1e92ad700c5873409b645f20b3a02c9a0bf166d671b6c11cdba32f901d4565116f6cf2c3862621f4261c29", @ANYRES32=0x0, @ANYBLOB="a821000001000500140003006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000600)=@chain={'key_or_keyring:', r0}) 13m38.564295283s ago: executing program 6 (id=5330): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) timer_delete(0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x7, 0x700, 0xfffffff0, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101}}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private, @local}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x2d}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8}]}, 0x68}, 0x1, 0xba01}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01bb0fecf6a6a2d39b6bb5176216181003000000fa44e00cfc", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000015) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) 13m37.403457201s ago: executing program 6 (id=5332): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3a, 0x20000000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwritev(r3, 0x0, 0x0, 0x81, 0x7) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000100010000000000"]) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000003c0)={0x8000201c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mq_open(0x0, 0x42, 0x0, 0x0) 13m33.259330471s ago: executing program 6 (id=5344): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_usbip_server_init(0x3) r0 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x4, 0x25d}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 13m28.488139108s ago: executing program 6 (id=5353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000088500000076000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x5, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x10}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) read$qrtrtun(r7, &(0x7f0000000140)=""/245, 0xf5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xa6, 0x0, 0x10, @private2, @remote, 0x8007, 0x700}}) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000640)={0x1050, 0x12, 0x100, 0x70bd2b, 0x25dfdbff, {0x2b, 0x3, 0x5, 0xd, {0x4e24, 0x4e24, [0xcae, 0x652, 0x8, 0x7f], [0xae7, 0x3, 0x8, 0x4], r9, [0x7, 0x2]}, 0x4, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "ea7de80b366aaf33a726c6d8cf48a59d4f2e901900ffdc473f6ac90ad95facffc602a5dd59026b15b50e1ca16ecad76b9f3ffaf4a63a14dea7641e304791f07e91c2be41dc649af28edefd202fcbe8b8f319457d0c92e202160f0eb639a896423f8a900502c720bea5ffb67f270a81f2a2371b09f03c99c4cdd1b5d1d8c305e9669383e44fda1e2d4ab8e34a429a9d63be44d545522ecfd03c5817db06e108544548077b19446c408cdbec865e3b02da5bc52f36f1497f8e7b1f86aad9efecec834665a0c145b8fdebf4ee96ee237793576d68888e0d70759e113455f8090d1ee1433a8984145354bab932dae58907e0d8fbb5f156b301085964227ea7c5bc82d3c72bdb76b936769179ea1daddf6426b8ceaf9027f9abf4178b845909c6e0a199f84db4a6905821c5181bece85e20e3b5d7ad7fb6c63da562736ff81c1d0dda2da90196a3b48fdd8af7986e87cdd3b816bb99f9ccad8fa5c83ad84cff103daee7bad430253fcb7773cccc8a84a64d869ca6b7416b3eec106901337c176bb84595de8985f5c1a2d7eb5621eb9ec012ee41db49b62240ede50784d38efd931ebfc4079af617d0815269fede416ac128b052b9aa2c57a64cb1a267272502d9dc44756d789de21cf17453bc191602fe403cdd43b9a690d95caabcb05694ccd5f57f6033292c19882327567dca567f11a7201789bc09115c3173906b0b79581dbe79ebf233ee184f6408d3d6a1ddc74ec1f70675b21f40e2cfc3cffbdaa819c9fc68b6f296119e3b0429ae54d9c74a879d67d7ba0f6dbe4261c381dbc972f826306791774a21e6263fbebdf074e0cc5db9f1a26bf13d27c3e641842081cadc2419bd35fec6cf647ce136cb8f13a794a5ad8cdc78d3d43001860be13dd7a5ea31a6148941841043d753a11f86a3a246efd757858fd32fc0099f4a3c0986697d8f3ea4b0ff1c261abc337bc304a40259e64b11d80a84a788fad2986178b417ea0003673ae3bfadf47865f2b158e64e2f83cb7f7b917768da7ce0be46098ef1d908e8a6d060280881af06a6629ffb982e6a39b4c435787c5ae958607f6e58d0378765ec691e05d64d7e9cbe4f7df169b45bf8193f1a28253797dde02859817acdb33a453e6c167465f8e0bab8be91c9cc915c54d51f7a251f0fb0a33ae3aad1d057a67faa1244948212961c7db3b6affc000608634769a0d4e72f9822e06e1ba689e08db8ce4668f75d3a78ba6f3e2fa9414ad18be58feec90f71f8c250e81c6d744746842a2d796588224b24fc2abf040a155beb36c13ad7817db6148e7ebfbf53ca0501862676e44fe72a42d4770d365048545f4af9e9d4a962fbb69b50a412979433ccac3ba9e6547246642d0238be38879f0ef2242aebe189cef3e4d4febae7c9605e05166c297c54cc1567f52db2ecf6298119164a486f940e2b352ef92b4d29febc5f2b904cdc3bc25e5eafc2925f37b8a5134b5d7d9a2f3e2576a2f442919f6d87b7b70b42280c319c427084790def1789f813a64dc1a29c6b0e525e9fc210bc87ff4b93ad43360720053929e37778be08671b55f0b3862787892c0fccba7af1fa963581ef39f0026fc4be366a6781e7026bed874ac6210973951758f8a6a900c322f72e2ace38204d9b1732a40bdc1f019497ebbcc64ca327ed6f23e53472a7d33558a76116403aa7896f4b1d79456c71f3c44d39ca916c4bc49f54324f0d7e5326195d66b5e02e8bc943e54abf2371aba0816bab6d5f54843bd3ed69644c10e1920368013f82a85497871bee913f4ef03134d676c9c790d59bd072bcf090a7289e4031077beb5812d03887df775f02084006b48a1f749c3a12769ac395c7729b65c040d6e28ce1960cc5d2780e101bfefe1f918822e7523a2b34498c61b3c078b10094565468053b66a781c9d976d4f2ff7ba67c06a3b67679d671b14964e2dc0e3d68d38c72d5a479f2e06ac4d4b90c23bc6d18cc19195cf13e8be9a4acc05318df527f2a81d9c7045ee4e954fa7f203d48163ddb717304f86de78a4b8a8631452819fe53e3c956dd9c6c23ec3cd5ee3cd52c8f90af621b16a415d4fd06fe3bb85bbbaa74434cdb8af349957c209963e215e36dd7aea27e73e6b15a9206a89bd81ae7f3cdb88351aefbd8f77fc03847a2ccdaea7ff59736d256466eb99740d516a719265ef40a654da906c20445f0f1218714da6a77a1f463754b1f74aa2baf43eaed08fc65d9ca3d4b35d34b35d565c090ac215fb080c56b0b7fba426f6f20146b490edceefcba2f58e636838b34da8efc4903ea62933b6a60d3cef3d733331d90c783b7c80115263c68d1e80109f5286bba0303cb984b476d357109315b70c32efe9525feb65bcc75b898d8bc35b866bf2c1422c7ece71a63fea6f911827e6bd1f55a73e391783d22515f030993ed4c9a19cd857a6a5383ec69279edd376b23bdc56680931e26d94c0f7c55e40969283fa581cc7db6e1f3e2ebef3e7de4bc5b103fb1a5f8fc3e95a68abd36b2073d33c4d6ad3f71df71c0d1e00c6a26936ea0492ef02ab99c20a61e73c0b42608339964e1e4b7ca3fce05a1dc56d08398170b7fedc9bb98026b3749c00b42e555cc30af955a6850ea149e2bb59a1f5b1667682891eba30705174c86fa11f9905fa154ebe113d66dc4988aa115d6c72bb4d31abf03c5ef43756473f1404a2ef5e0733ad11ae7f75403148bc000fe985b9d6fb668429d90e462a41119e5438224305a9055b7217d7738e18f16021a4b9934e6b8fb15807c2703538f9b2dd71dce0381f9114dfcfd2a590a4fafd39ac3e5e6a12bb56da53f5a1fe34564572dfb58e95a2890d6928099f00f656435b329153822487bbfd003a545bb40d7cc40eabd9d2104724d1a2219fcf5ac7d31d548bde34c654dc3299009c8bd0d2df5cd493f14d044ccd9be9f8dd4b2c5bbf271c6b261c08e540f552704a6c9c14e3658766ae77a2ceeecc5785e167651e8a35211eb812de617a26313eba198107623345a58a3b934421211e13b3ed86e93f5b3a83a6676496e114007e0d311429164191bb71dd65a2e9a6e3c9037d8d9be11b4f45aa4245e28da174dd01f415fc0934b346dc15dff6389a14d10aacdb091d327b3f14545c5da64930f7a31673a764d86a58073c3e202ff00e310636db4626a20ae50022111c19405c5ff3f7f47b780bc9ccdda0e0de6b97071d7a666517bd5615f57c9ad892626fb9036f4bd851efc0e705ece9fe17590e197ef8d601e3e7dc6526c3c09f2faccc1fdb4923a17fddc34dfdbab30e77f1a48a4fb5c4baa775493aa80ab388d09335952beb3aefed4384856cf1b89ff34d6dbd3dde699acad3e75d65a26428b6ba092be749cac1ddca6da041828b4f2bdc5e2d5f35c6269f1828d5aeec6430262333cca7d5be4f6e253aad9b16dffda2a52c90b46aed8b31ee8349db4cf285548f856063ffc6e2299c954994926d5d3f482426737e5bd6c145ab3a74bd52986914e2da95328f754aaa2cdb813939930a7ed3a00d412bc094f4d14b159538d83e6c7ee435874d65ff4ac99158ec43cf22ca98c5ac913cb3f47b619183a3c91764f834954d37cb78036be588690b159034047a473c81884d4873848a7a545869af7f60c099a431cfc4b159b9456ee351b40f6c9eb57bfe1e9eb98a019c57dd6e655245aa2c4dfa2af01a550eb94dad3c9649bb3f242ce19123388615e8ff16405be05d9801998267078ed2833747c2bb4d886c2abba69492a4eb2ee97e8658e01b5e656eb9db06a905fbecbcc6ebe0a10db21d3ca9f3021a0e8531a5c3a71fc53e9807aceb1107026e9775e9f842efb17410e70b41db64e57c5ecdb3f1a770ced7657962d09cff6338f48b50b4a04096c98a22f68e72b968a4a5e4b071e89dc0842e7f41bd3e5554e6d6969ccce2faebc1e54047f7a314e9570a8a0f3b9b22264cd43f65d790a728bd392ea87d9973bf4fff1d059ffa12d48535e724acbd5773468d3571ea43053fb210dddc91a6928889af7d91d6c07f77e666bc4ec977700f7b045bcc82bd606996aa8346df4d38bbc9fc59632482a301d856205a8b44163f9f0602beae70053370f41f9c02c2ed3da95a09dc90e79b765ee3f40956f7e6f26809a84763df48146078291c942184d0d1cfd8b5248e95ae2e4f3684c77a74c14433574917d4d2ff5d831aae978c4703129c55457b44abc1d655f4eb9c6c6ba67b7d3cce451cad32afe9ff0f468cf6ac9b3582d898a6c39e7b61da2a3d28e066c9fd56dadc3cb2178def437fc741e64065a0cf33bcaab997336a2061d9bf785f7b4745b437be953e75fc441ea1a8f8616e70fab2d43377786e58639355c031dcd432d9a2382f6f5d7eb201785dd64061f21a2d42b316139a24835bf371da8ec0f50883b32924366eb2b008153b0d3692ca03ca085dbf6164d4f84c06faa8549da3fe81a69ae00ab67dcdee8955a0e45a34194d3f4036cd4da6f58e99f06b3c9cad0a2a9370d2b75037b8ad49684a499af1c4986db361fde6cdfa79b564719fea23276a04f31ea995b8735dffc264a70b1aff727b75f9760637e3a8f39daddca2f3603466ef0dbbb350b8d92c236f17b92ed7a7f864e9af421dcec37d959f7d01fb00a44cb39f5fc99a582e91162dc9ee28d729f0cdee56c09ccf851726e71714e87d4daa44b3bd282eb95418a4c970ec705252879f9c94119d43a045c62267cfc6e7d3db4fc396b07ce9b92843a656fb66f7395824f188040363727360fb96d480716bea81187afa70bb1028e67cc640b645408b663e0d9d794cbf33b06d3383770969a1a904d82e9df3a0b9a06e67a49cc1042190bdc49fec54e28b36ad142ad7798b378245667f6e84d2204082e3c64c2aac0163f04a9dc6f3f766b0d849c49f5d912b1b13cb849141415902ad2d69e68c9a9e97a61071fbe8cdd943e8a446011dbe20fb7b2cf6fa477fbbb68adb760cfd4cd54e7a840aa744b230141a518fb2d72f1bd7bcfe0fba46eb67af1a705ed1d3c5c8cb493d7e18c0ece60b8aff1e21702041d5a0dda443b77e2c937dea39b13db2c8eef075837e1394f085106fec69bd1097943cdf43fb9c42e6c2bccf02f549b06c82036202124713e641240d20f8cdc20594e70915f356e339c5473c0c755fa518854aafae64a12cf9d85edc3197fbf98849fb7c8389bd6b60dca8ce91f461bc4dd5107d467701970679e24b3be766634c40f00b4341fddd3051870f064504bc4e5da5df9b02ca88540acf53d8cedfddd5259a6f0d5dcf192273e77b13d86955eeda8c78908cdd583c01573ac1586833258e925c8e4fda62137a2842e86f5e5cfe57b8c8d3ec88e16016f32788802790bda7f5dabbc3448e1a8a6da553545b34d27dc5a3cc0a340c4fd93f0493864bd8c8d774eef5e166b0bf4ab2960a0da3fb963b5ba70597fcab1bca6020eda9f59491d69ab3c64c573fc86f9cc99eb401a57581437efd02cf09d8864fceca139996640bd1ccfc6a30e82a141b12360812ce9ff3eba7a5d5886e0a10ec6c2479c2f9e9cc3262de57c8c9d1b3594b4c83ea838924de1d09c729f3218344788579c83d0c117bc0fa203039daacd0ddb23310ce883dc9041ea6c4714e2bf85b9f77a0ef4d66c8a0504622e36ed0c1100a1e1f5b34032337d85a0d02c98fa76ae21d420afee3b2ab16942d87089a790bd7826c89d3d3432248e32255a8c09e531a51fa85df33ce382768cea921f2fab963a33c28f4bdf293a1bfcabb3ef2c42234a0e5765ff6395a350d4b9d0eecf698eb1010da607ef7f6dadebf4ff497ff0"}]}, 0x1050}, 0x1, 0x0, 0x0, 0x20000000}, 0x401) syz_usb_connect(0x3, 0x1ec, &(0x7f00000017c0)={{0x12, 0x1, 0x0, 0x3, 0x31, 0x4a, 0x10, 0x67b, 0xaaa2, 0x6815, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1da, 0x1, 0x9, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x13, 0x4, 0xb, 0x58, 0xc2, 0xf0, 0x74, [], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x8, 0x9, 0x29, [@generic={0x3a, 0x9, "ad767e574ba1cafca4c3f2a3e77cf54ce2e66557b9462e8f71678af991911b1781460d79ab58b42d63b5d6d303dffe8079a24dc76a249d69"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xb64}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x6, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6f, 0x3}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x3, 0x8, 0x8}}, {{0x9, 0x5, 0x85, 0x1, 0x40, 0x6, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x3}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x1, 0x2f, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0x4, 0xff23dddeb455d4d2, 0x9, 0x8, 0x8}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x0, 0x80, 0xff, [@generic={0x92, 0x24, "7da083817ccd42c5c82be6e2512fe58e59db44dba5479c75b79d0c23d3f4b2d233dcf5496125de2c5ebcef239f824c51c2a391eeebb3fc1f0d77cdbd6cb86fa36f34acde32b24a166b095653f880c5ec5439b58c2ed6c4fe514e9b3bc6d78cd047ac39f17ed3a5ffd3d62ef62a736fe93f6a46c5e490272d3b6032a55128a812db067b957092f33f49438889b0f6c630"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x9}]}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0xd, 0x7f, 0xf1, [@generic={0x5a, 0x22, "c1aaec71a9e742dbe0098a542ae7255fd8bfff9ecc7f41c5eb366af893816d799bcb9488a5471c352a75fbec443ae2c3f3b40b2e1d3a198cc39f1370fee690fa2825f6f22be0bdb5540ee40fd27d92a20f6b39df7b9121eb"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6f, 0x8}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x3d, 0x2, 0x1}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x4, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6a, 0xfff8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x2}]}}]}}]}}]}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13m24.841943534s ago: executing program 6 (id=5363): semget$private(0x0, 0x1, 0x48) r0 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f00000005c0)=@buf="8e5e53640d0102935511b97754", 0x1}, 0x20) setpriority(0x2, 0x0, 0xffffffffffffffcd) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) socket$netlink(0x10, 0x3, 0x8) open$dir(0x0, 0x22c401, 0x25) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 13m8.135345155s ago: executing program 35 (id=5363): semget$private(0x0, 0x1, 0x48) r0 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f00000005c0)=@buf="8e5e53640d0102935511b97754", 0x1}, 0x20) setpriority(0x2, 0x0, 0xffffffffffffffcd) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) socket$netlink(0x10, 0x3, 0x8) open$dir(0x0, 0x22c401, 0x25) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 12.994416802s ago: executing program 7 (id=7403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x10000000) read$dsp(r6, &(0x7f0000000300)=""/79, 0x4f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000871b684f419d94d58c000000000000000000fad4eef605403c252fb1090001422135819d37bca7ee22a1a4e7a528c90400d69ac207dc8e9f662fbb53ceb0c88c3b6de192fb00"/87], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 10.53646598s ago: executing program 7 (id=7412): unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x4, 0x38, &(0x7f00000035c0)="8c0de332eb0b0da565ec4af5dd689c24ab6ef23a4efaa76032fdf4e0ede78e9b6d387a354784001ffcd4c51fb8e6e625a9f6abadd49f8793") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) rt_sigqueueinfo(0x0, 0x8, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYBLOB="249954a3513541457cd3e33e0af343051929e6d3a18491e904591a8e28333e812c50e1cfe7b8965a16dd5970eed096cc6bc6157138d2831912a224ebcb592a2816df5909c94cbc5204e3075d16984ee065f21a019c4f116716d027544401cdba197b4ddcde290b5b531349b789cb51e1f41c098341346916d6b2bd1e756ecb14512edc0734b8ba19ebca9f3ed7d37955dbaca8bac23d58b2ee2a19be07d6b3174a8d3594105e663b0a390a94cf0887931285f6c26e102910739eddc5a49d493a517f65cf47dbd80cbca64fb516bd200944f2aa9bf308eab64e9c7eda7f1a9557dc290206804e7aa46eb3248ffd", @ANYRES8, @ANYRES32], 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0xfffffffffffffd11) 7.486605926s ago: executing program 5 (id=7422): syz_open_dev$sndctrl(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001dc0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x5840, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r4 = getpid() syz_pidfd_open(r4, 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='\x00', 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getuid() getresuid(&(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) 7.469487382s ago: executing program 8 (id=7424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.975949857s ago: executing program 8 (id=7427): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r2, 0x0, 0x0}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) syz_open_dev$usbfs(&(0x7f00000002c0), 0x75, 0x301601) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000000}, {0x0, 0x2}}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100005002b7ebd700000000000020000002bf552f37c0eafe73e1d3d3a92d869eae7014359d453a4230c772102bc1e92ad700c5873409b645f20b3a02c9a0bf166d671b6c11cdba32f901d4565116f6cf2c3862621f4261c29", @ANYRES32=0x0, @ANYBLOB="a821000001000500140003006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000600)=@chain={'key_or_keyring:', r0}) 6.877520971s ago: executing program 5 (id=7428): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r4, &(0x7f00000001c0)=""/212, 0xd4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) r6 = syz_io_uring_setup(0x6f21, &(0x7f0000000540)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12, 0x1}) io_uring_enter(r6, 0x2def, 0xb80c, 0xe, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu '], 0x5) write$cgroup_subtree(r11, &(0x7f0000000480)={[{0x2b, 'hugetlb'}, {0x2b, 'rdma'}]}, 0xf) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f00000003c0)=[{r2, 0x48}], 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0x80]}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x400004, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20060000}, 0x0) 6.388151542s ago: executing program 1 (id=7429): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x101200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r2, 0x1, 0x4, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) fallocate(0xffffffffffffffff, 0x0, 0xfffffffb, 0xffeffeff000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x800, 0x30, 0x9, 0x3}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001400)={r6, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x5}}, 0x0, 0xc}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x78, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x5a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x64, 0x2, 0x0, 0x0, 0x2}}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x0, 0x10, 0x2000}}, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0xa, 0x60}}, @void}}]}, 0x78}}, 0x0) r11 = dup(r7) write$UHID_INPUT(r11, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) 5.868165423s ago: executing program 8 (id=7431): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001000), 0x0, 0x2000) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x5}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x35}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, r8, 0x0) 4.809237214s ago: executing program 1 (id=7433): syz_usb_connect(0x0, 0x50, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ec667d40dd0432900bfd0000000109023e0001000000000904000000020a0000052406000005240000000d240f01000000000000000000092412"], 0x0) 4.747754073s ago: executing program 5 (id=7434): finit_module(0xffffffffffffffff, 0x0, 0x100000000000000) 4.670336454s ago: executing program 5 (id=7435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50cd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000780)='contention_end\x00', r0}, 0x18) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) write$vhost_msg_v2(r1, &(0x7f0000002240)={0x2, 0x0, {0x0, 0xe0749d04fc370ad3, 0x0, 0x2, 0x2}}, 0x48) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x814) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000600", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0200000001000000000000000000000000c847505050"], 0x50) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r5, 0x0, 0x24004010) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d72646d612cce6328f1f5add5a4491362ff706f72743d3078303030303030"]) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="00082abd7000fedbdf250600000008000300", @ANYRES32=0x0, @ANYBLOB="0a0018000303030303030000080005000600000005005300010000000a0018000303030303031c0000080005000c0000000a001800030303030303006fa8fc10321c160f94e14552de781d3104907dba28d4"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x24000011) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 4.670040102s ago: executing program 8 (id=7436): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905f850513c"], 0x0) 4.529278527s ago: executing program 7 (id=7437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x54) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x42, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="145b6d000000000001000040"], 0x18}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) read$FUSE(r2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x4, 0x2bf7e9, 0x194d27}) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r9) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r7, 0x0, 0x1, 0x0, 0xffbfffff, 0x0, 0x3, 0xffffffffffffff7b}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) 4.108273747s ago: executing program 1 (id=7439): syz_clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffffffffff49, 0x0, 0x0}, 0x97) 4.037382129s ago: executing program 1 (id=7441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000050000000800"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fstatfs(r1, &(0x7f0000000180)=""/33) fchdir(r3) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x1, 0x1, "f5"}, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000901, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) sendto$packet(r4, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @local}, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r10 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xc, 0x181500) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r10, 0x81785501, &(0x7f00000003c0)=""/64) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 3.852329437s ago: executing program 2 (id=7443): timerfd_create(0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpriority(0x0, r1) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x300, 0x0, 0x1ff}}) openat$kvm(0xffffff9c, 0x0, 0x40080, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000140)={0x3, 0x0, @ioapic={0x2, 0x2, 0x6, 0x4, 0x0, [{0x7, 0x5, 0x6, '\x00', 0x7}, {0x3, 0x7, 0x7, '\x00', 0x40}, {0x0, 0x7, 0x1, '\x00', 0x4}, {0x72, 0x7f, 0xd, '\x00', 0x1}, {0x9, 0x9, 0x1, '\x00', 0x6}, {0xb, 0x53, 0x4, '\x00', 0x6}, {0x7, 0x4, 0xf, '\x00', 0x5}, {0x7d, 0x80, 0x6, '\x00', 0xe}, {0x9, 0x6, 0x6}, {0x35, 0x6, 0x4, '\x00', 0xf}, {0x1, 0x5, 0x2, '\x00', 0xf}, {0x3, 0xc, 0x6, '\x00', 0x81}, {0x1, 0x3, 0x2, '\x00', 0x1}, {0x9, 0x3, 0x80, '\x00', 0x5}, {0x74, 0x6, 0x2, '\x00', 0x5}, {0xff, 0x8, 0x7, '\x00', 0xfc}, {0x6, 0x9, 0xf2, '\x00', 0x4}, {0xf, 0xde, 0x96, '\x00', 0x81}, {0x7, 0x2, 0x4f, '\x00', 0x8}, {0x1, 0x8, 0x3, '\x00', 0x80}, {0x74, 0xb, 0x8, '\x00', 0x8}, {0x8, 0x1, 0x9f, '\x00', 0x7}, {0x1, 0x8, 0x6, '\x00', 0xe2}, {0x40, 0xf8, 0x0, '\x00', 0x4}]}}) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x2556, 0x1000, 0x2, 0x24d}, &(0x7f00000006c0), 0x0) 3.849808879s ago: executing program 7 (id=7444): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="6034c90d89932c6d16"], 0x4d) 3.774020343s ago: executing program 7 (id=7445): syz_open_dev$sndctrl(0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x2, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x5840, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) r4 = getpid() syz_pidfd_open(r4, 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='\x00', 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getuid() getresuid(&(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) 2.683548105s ago: executing program 2 (id=7446): prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x1e) 2.674602777s ago: executing program 5 (id=7447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x54) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x42, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="145b6d000000000001000040"], 0x18}, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) read$FUSE(r2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x4, 0x2bf7e9, 0x194d27}) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) close(r9) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x6, r7, 0x0, 0x1, 0x0, 0xffbfffff, 0x0, 0x3, 0xffffffffffffff7b}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) 2.664473623s ago: executing program 1 (id=7448): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_delete(0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x7, 0x700, 0xfffffff1, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101}}}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private, @local}}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x2d}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0xba01}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="01bb0fecf6a6a2d39b6bb5176216181003000000fa44e00cfc", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000015) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) 2.605118317s ago: executing program 7 (id=7449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(adiantum(lrw(serpent),aes-asm,ghash-ce-sync),sha512_m'}, 0x58) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, 0x0) r5 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) socket$alg(0x26, 0x5, 0x0) clock_settime(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 1.768669073s ago: executing program 8 (id=7450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000880)={"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"}) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.565936582s ago: executing program 2 (id=7460): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 284.579425ms ago: executing program 1 (id=7451): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x15, r2}) read$dsp(r0, &(0x7f0000000200)=""/210, 0xd2) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r8, 0x0, 0x6a) splice(r5, 0x0, r8, 0x0, 0x8ec3, 0x0) readv(r7, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1) splice(r7, 0x0, r4, 0x0, 0x2008484c, 0xb) write$binfmt_elf64(r6, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0500c3c2652e997044130610000008000300", @ANYRES32=r11, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x48, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x48}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f00000005c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r12 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r12, 0x0, 0x0, 0x8) fcntl$addseals(r12, 0x409, 0xe) ftruncate(r12, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000812110000110211000000000000000008000000000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 241.506244ms ago: executing program 2 (id=7452): semctl$SETALL(0x0, 0x0, 0x13, &(0x7f0000000100)) 241.007798ms ago: executing program 5 (id=7453): syz_usb_connect(0x2, 0x10e, &(0x7f00000047c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff0100042402", @ANYBLOB="7e943709a26e0512574b35a82af516647900665043e2091a17b3cd926b0824fbbe25bc1c509edcf4108f5e351df1758952ab7601229730888a3c08c12d1c0d73cc7f598da3011f5ad737027cd370d2e85d5a4e5afec3943a6d8d0850eb3e7e51b4a1a22704e29d57676b13f7c04ebb2b15fafbde00000008432e6e20768763f9fa356f36da6b91bb308d"], 0x0) 120.232738ms ago: executing program 2 (id=7454): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r2, &(0x7f0000000cc0), 0x0}, 0x20) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) syz_open_dev$usbfs(&(0x7f00000002c0), 0x75, 0x301601) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000000000000}, {0x0, 0x2}}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100005002b7ebd700000000000020000002bf552f37c0eafe73e1d3d3a92d869eae7014359d453a4230c772102bc1e92ad700c5873409b645f20b3a02c9a0bf166d671b6c11cdba32f901d4565116f6cf2c3862621f4261c29", @ANYRES32=0x0, @ANYBLOB="a821000001000500140003006e657464657673696d30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000600)=@chain={'key_or_keyring:', r0}) 112.135893ms ago: executing program 2 (id=7455): syz_usb_connect$cdc_ecm(0x0, 0x150, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109023e010101000000090400000002060000052406000005240000000d240f01000000000000000000032413"], 0x0) 0s ago: executing program 8 (id=7456): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b75c9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec0000000000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28104b543e868a8adc703b346760c14f26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): no=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2709.331431][ T30] audit: type=1400 audit(2000000149.439:3257): avc: denied { ioctl } for pid=741 comm="syz.7.6429" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2709.411169][ T754] fuse: Bad value for 'group_id' [ 2709.417603][ T754] fuse: Bad value for 'group_id' [ 2709.426842][ T754] overlayfs: conflicting options: userxattr,verity=require [ 2710.135159][ T30] audit: type=1400 audit(2000000149.514:3258): avc: denied { read write } for pid=741 comm="syz.7.6429" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2710.375464][ T30] audit: type=1400 audit(2000000149.514:3259): avc: denied { open } for pid=741 comm="syz.7.6429" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2710.648676][ T776] fuse: Bad value for 'group_id' [ 2710.653849][ T776] fuse: Bad value for 'group_id' [ 2710.665827][ T776] overlayfs: conflicting options: userxattr,verity=require [ 2711.247364][ T779] @: renamed from vlan0 [ 2711.651653][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2712.077840][ T794] netlink: 'syz.5.6442': attribute type 1 has an invalid length. [ 2712.085706][ T794] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6442'. [ 2712.112966][ T794] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6442'. [ 2712.923377][ T793] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2712.972362][ T793] fuse: Bad value for 'fd' [ 2713.025077][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2713.025092][ T30] audit: type=1400 audit(2000000153.845:3270): avc: denied { create } for pid=795 comm="syz.5.6443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2713.232971][ T30] audit: type=1400 audit(2000000153.873:3271): avc: denied { setopt } for pid=795 comm="syz.5.6443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2713.411572][ T30] audit: type=1400 audit(2000000154.200:3272): avc: denied { setopt } for pid=797 comm="syz.1.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2713.949025][ T801] batadv_slave_0: entered promiscuous mode [ 2715.352581][ T831] ceph: No mds server is up or the cluster is laggy [ 2715.690456][ T808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2715.702382][T13965] libceph: mon0 (1)[c::]:6789 connect error [ 2715.970008][ T829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6452'. [ 2716.336186][ T30] audit: type=1400 audit(2000000156.941:3273): avc: denied { read } for pid=828 comm="syz.5.6453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2717.400385][ T30] audit: type=1400 audit(2000000157.942:3274): avc: denied { create } for pid=846 comm="syz.2.6454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2717.830803][ T30] audit: type=1400 audit(2000000158.250:3275): avc: denied { write } for pid=856 comm="syz.8.6459" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2718.130464][ T867] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2718.240350][ T874] netlink: 'syz.8.6464': attribute type 10 has an invalid length. [ 2718.393949][ T30] audit: type=1400 audit(2000000158.709:3276): avc: denied { ioctl } for pid=868 comm="syz.8.6464" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2718.659648][ T872] fuse: Bad value for 'fd' [ 2719.794542][ T877] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2719.871010][ T882] overlayfs: workdir and upperdir must reside under the same mount [ 2719.885197][ T877] fuse: Bad value for 'fd' [ 2719.900690][ T878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6465'. [ 2719.957083][ T30] audit: type=1400 audit(2000000160.308:3277): avc: denied { create } for pid=881 comm="syz.8.6466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2720.329640][ T30] audit: type=1400 audit(2000000160.308:3278): avc: denied { read } for pid=881 comm="syz.8.6466" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2720.444203][ T30] audit: type=1400 audit(2000000160.318:3279): avc: denied { open } for pid=881 comm="syz.8.6466" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2720.630290][ T30] audit: type=1400 audit(2000000160.430:3280): avc: denied { create } for pid=881 comm="syz.8.6466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2721.170540][ T30] audit: type=1400 audit(2000000160.458:3281): avc: denied { create } for pid=849 comm="syz.1.6457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2721.268127][ T30] audit: type=1400 audit(2000000160.523:3282): avc: denied { setopt } for pid=881 comm="syz.8.6466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2721.288658][ T30] audit: type=1400 audit(2000000161.197:3283): avc: denied { write } for pid=888 comm="syz.5.6467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2721.308628][ T30] audit: type=1400 audit(2000000161.552:3284): avc: denied { unmount } for pid=29083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2721.853424][T26932] libceph: mon0 (1)[c::]:6789 connect error [ 2721.890621][ T30] audit: type=1400 audit(2000000162.142:3285): avc: denied { write } for pid=903 comm="syz.2.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2722.224426][T26932] libceph: mon0 (1)[c::]:6789 connect error [ 2722.246506][ T899] ceph: No mds server is up or the cluster is laggy [ 2722.878837][ T905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2723.077729][ T937] netlink: 'syz.5.6475': attribute type 9 has an invalid length. [ 2723.315986][ T937] netlink: 'syz.5.6475': attribute type 9 has an invalid length. [ 2723.953385][ T951] NILFS (nullb0): couldn't find nilfs on the device [ 2724.028039][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2724.028072][ T30] audit: type=1400 audit(2000000164.059:3289): avc: denied { mounton } for pid=943 comm="syz.7.6477" path="/668/file0" dev="tmpfs" ino=3740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2724.288986][ T30] audit: type=1400 audit(2000000164.359:3290): avc: denied { write } for pid=948 comm="syz.5.6478" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2724.311644][ C1] vkms_vblank_simulate: vblank timer overrun [ 2725.254769][ T967] fuse: Bad value for 'group_id' [ 2725.259836][ T967] fuse: Bad value for 'group_id' [ 2725.273406][ T967] overlayfs: conflicting options: userxattr,verity=require [ 2725.792567][ T971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6484'. [ 2726.271128][ T977] fuse: Bad value for 'group_id' [ 2726.276283][ T977] fuse: Bad value for 'group_id' [ 2726.286109][ T977] overlayfs: conflicting options: userxattr,verity=require [ 2727.446842][ T996] fuse: Bad value for 'group_id' [ 2727.453321][ T996] fuse: Bad value for 'group_id' [ 2727.833160][ T994] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2727.863357][ T994] fuse: Bad value for 'fd' [ 2727.890453][ T30] audit: type=1400 audit(2000000167.735:3291): avc: denied { mount } for pid=995 comm="syz.2.6491" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2727.930371][ T999] netlink: 'syz.2.6491': attribute type 10 has an invalid length. [ 2727.967647][ T999] netlink: 'syz.2.6491': attribute type 21 has an invalid length. [ 2727.976528][ T999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6491'. [ 2728.652438][ T30] audit: type=1400 audit(2000000168.082:3292): avc: denied { write } for pid=1002 comm="syz.5.6492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2728.726077][ T30] audit: type=1400 audit(2000000168.091:3293): avc: denied { nlmsg_write } for pid=1002 comm="syz.5.6492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2729.684159][ T1020] fuse: Bad value for 'group_id' [ 2729.689186][ T1020] fuse: Bad value for 'group_id' [ 2729.949933][ T1017] overlayfs: conflicting options: userxattr,verity=require [ 2730.039385][ T30] audit: type=1400 audit(2000000169.765:3294): avc: denied { write } for pid=1015 comm="syz.5.6497" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2730.079273][ T30] audit: type=1400 audit(2000000169.765:3295): avc: denied { open } for pid=1015 comm="syz.5.6497" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2730.236203][ T30] audit: type=1400 audit(2000000169.924:3296): avc: denied { mount } for pid=1015 comm="syz.5.6497" name="/" dev="overlay" ino=5087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2730.429157][ T30] audit: type=1400 audit(2000000169.934:3297): avc: denied { create } for pid=1015 comm="syz.5.6497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2730.455492][ T30] audit: type=1400 audit(2000000170.111:3298): avc: denied { unmount } for pid=11866 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2731.453585][ T1040] netlink: 'syz.2.6500': attribute type 10 has an invalid length. [ 2731.583677][ T30] audit: type=1400 audit(2000000170.888:3299): avc: denied { ioctl } for pid=1029 comm="syz.5.6499" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 2732.476554][ T1053] fuse: Bad value for 'group_id' [ 2732.481562][ T1053] fuse: Bad value for 'group_id' [ 2733.700425][ T1064] fuse: Bad value for 'fd' [ 2734.119277][ T30] audit: type=1400 audit(2000000173.572:3300): avc: denied { accept } for pid=1069 comm="syz.1.6507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2734.376343][ T30] audit: type=1400 audit(2000000173.572:3301): avc: denied { write } for pid=1069 comm="syz.1.6507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2734.701979][ T1080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6510'. [ 2734.775087][ T30] audit: type=1400 audit(2000000173.572:3302): avc: denied { ioctl } for pid=1069 comm="syz.1.6507" path="socket:[96130]" dev="sockfs" ino=96130 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2734.808021][ T30] audit: type=1400 audit(2000000174.077:3303): avc: denied { watch watch_reads } for pid=1069 comm="syz.1.6507" path="/1434" dev="tmpfs" ino=7846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2735.176016][ T1098] overlayfs: failed to clone upperpath [ 2735.561377][ T1066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2736.930142][ T1107] fuse: Bad value for 'group_id' [ 2736.935231][ T1107] fuse: Bad value for 'group_id' [ 2738.377267][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2738.377279][ T30] audit: type=1326 audit(2000000176.743:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2738.438527][ T30] audit: type=1326 audit(2000000176.743:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2738.590065][ T1125] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2738.650577][ T1134] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2738.683555][ T30] audit: type=1326 audit(2000000176.743:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2738.701753][ T1125] fuse: Bad value for 'fd' [ 2738.727877][ T1134] fuse: Bad value for 'fd' [ 2738.784105][ T1141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6522'. [ 2738.803708][ T1140] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[1140] [ 2739.007338][ T30] audit: type=1326 audit(2000000176.743:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2739.063584][ T1143] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2739.125666][ T1143] fuse: Bad value for 'fd' [ 2739.142318][ T30] audit: type=1326 audit(2000000176.743:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2739.187776][ T30] audit: type=1326 audit(2000000176.743:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2739.231656][ T30] audit: type=1326 audit(2000000176.743:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2739.262150][ T30] audit: type=1326 audit(2000000176.753:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2739.289389][ T30] audit: type=1326 audit(2000000176.753:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2739.319227][ T30] audit: type=1326 audit(2000000176.753:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1108 comm="syz.1.6517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa90d8e969 code=0x7ffc0000 [ 2740.216711][ T1157] geneve1: entered promiscuous mode [ 2740.221925][ T1157] geneve1: entered allmulticast mode [ 2741.084514][ T1163] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 2741.722815][ T1171] fuse: Bad value for 'group_id' [ 2741.727829][ T1171] fuse: Bad value for 'group_id' [ 2744.061425][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2744.061437][ T30] audit: type=1400 audit(2000000182.870:3327): avc: denied { read } for pid=1179 comm="syz.5.6534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2744.633508][ T30] audit: type=1400 audit(2000000183.357:3328): avc: denied { mount } for pid=1179 comm="syz.5.6534" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2745.043908][ T30] audit: type=1400 audit(2000000183.357:3329): avc: denied { read } for pid=1179 comm="syz.5.6534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2745.391248][ T1217] virtio-fs: tag not found [ 2745.828517][ T1223] hub 8-0:1.0: USB hub found [ 2745.834747][ T1223] hub 8-0:1.0: 1 port detected [ 2746.593687][ T1222] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2746.686455][ T1232] fuse: Bad value for 'group_id' [ 2746.691551][ T1232] fuse: Bad value for 'group_id' [ 2747.176209][ T1222] fuse: Bad value for 'fd' [ 2747.210877][ T30] audit: type=1400 audit(2000000185.817:3330): avc: denied { setopt } for pid=1235 comm="syz.8.6546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2747.559351][ T30] audit: type=1400 audit(2000000186.144:3331): avc: denied { setopt } for pid=1235 comm="syz.8.6546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2748.326205][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 2748.478996][ T1240] ceph: No mds server is up or the cluster is laggy [ 2748.961986][ T1257] : entered promiscuous mode [ 2749.064904][ T1258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6550'. [ 2749.082559][ T30] audit: type=1400 audit(2000000187.575:3332): avc: denied { ioctl } for pid=1252 comm="syz.1.6550" path="socket:[97106]" dev="sockfs" ino=97106 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2749.455973][ T1261] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2749.587271][ T1261] fuse: Bad value for 'fd' [ 2750.681769][ T30] audit: type=1400 audit(2000000188.679:3333): avc: denied { ioctl } for pid=1275 comm="syz.2.6554" path="socket:[97119]" dev="sockfs" ino=97119 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2750.730657][ T30] audit: type=1400 audit(2000000188.679:3334): avc: denied { connect } for pid=1275 comm="syz.2.6554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2750.757538][ T30] audit: type=1400 audit(2000000188.679:3335): avc: denied { write } for pid=1275 comm="syz.2.6554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2751.925229][ T1299] fuse: Bad value for 'group_id' [ 2751.930242][ T1299] fuse: Bad value for 'group_id' [ 2752.490037][ T30] audit: type=1400 audit(2000000190.709:3336): avc: denied { write } for pid=1297 comm="syz.7.6559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2753.006371][ T30] audit: type=1400 audit(2000000191.242:3337): avc: denied { write } for pid=1302 comm="syz.5.6560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2753.344824][ T30] audit: type=1400 audit(2000000191.438:3338): avc: denied { ioctl } for pid=1316 comm="syz.1.6565" path="socket:[97482]" dev="sockfs" ino=97482 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2753.398150][ T1314] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2753.458529][ T1314] fuse: Bad value for 'fd' [ 2755.283692][ T1351] fuse: Bad value for 'group_id' [ 2755.288751][ T1351] fuse: Bad value for 'group_id' [ 2755.774062][ T1350] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2755.819593][ T1350] fuse: Bad value for 'fd' [ 2756.323638][ T1357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6573'. [ 2756.898269][ T1368] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2757.250385][ T1369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6575'. [ 2757.800795][ T30] audit: type=1400 audit(2000000194.899:3339): avc: denied { create } for pid=1365 comm="syz.5.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2757.875394][ T30] audit: type=1400 audit(2000000194.918:3340): avc: denied { getopt } for pid=1365 comm="syz.5.6576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2757.895390][ C0] vkms_vblank_simulate: vblank timer overrun [ 2758.507307][ T1381] fuse: Unknown parameter 'fd0x0000000000000009' [ 2759.528652][ T1386] netlink: 'syz.2.6581': attribute type 10 has an invalid length. [ 2760.992683][ T1402] fuse: Bad value for 'group_id' [ 2760.997807][ T1402] fuse: Bad value for 'group_id' [ 2761.804956][ T1409] vivid-000: disconnect [ 2761.829804][ T1409] netlink: 'syz.5.6585': attribute type 13 has an invalid length. [ 2761.843159][ T1409] vivid-000: reconnect [ 2761.872725][ T30] audit: type=1400 audit(2000000199.483:3341): avc: denied { append } for pid=1399 comm="syz.5.6585" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2762.236178][ T30] audit: type=1400 audit(2000000199.492:3342): avc: denied { bind } for pid=1399 comm="syz.5.6585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2762.526878][ T1420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6589'. [ 2763.249024][ T30] audit: type=1400 audit(2000000199.951:3343): avc: denied { read } for pid=1413 comm="syz.8.6588" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2763.273855][ T30] audit: type=1400 audit(2000000199.951:3344): avc: denied { open } for pid=1413 comm="syz.8.6588" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2763.310654][ T1421] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2763.323273][ T30] audit: type=1400 audit(2000000199.951:3345): avc: denied { ioctl } for pid=1413 comm="syz.8.6588" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2763.348330][ C0] vkms_vblank_simulate: vblank timer overrun [ 2763.453825][ T1422] block device autoloading is deprecated and will be removed. [ 2763.482433][ T30] audit: type=1400 audit(2000000200.839:3346): avc: denied { ioctl } for pid=1413 comm="syz.8.6588" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=97626 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2763.505894][ T1427] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6588'. [ 2763.508455][ C0] vkms_vblank_simulate: vblank timer overrun [ 2763.526940][ T1424] fuse: Bad value for 'fd' [ 2763.557323][ T1422] input: syz0 as /devices/virtual/input/input26 [ 2763.650064][T13965] libceph: mon0 (1)[c::]:6789 connect error [ 2763.982618][T13965] libceph: mon0 (1)[c::]:6789 connect error [ 2764.323419][ T30] audit: type=1400 audit(2000000201.129:3347): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=3247 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2764.345969][ C0] vkms_vblank_simulate: vblank timer overrun [ 2764.363310][ T1426] ceph: No mds server is up or the cluster is laggy [ 2764.439400][ T30] audit: type=1400 audit(2000000201.129:3348): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3247 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2764.487462][ T30] audit: type=1400 audit(2000000201.129:3349): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3247 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2764.614814][ T30] audit: type=1800 audit(2000000201.167:3350): pid=1414 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.6588" name="/newroot/203/file0" dev="tmpfs" ino=1178 res=0 errno=0 [ 2764.731314][ T30] audit: type=1400 audit(2000000201.971:3351): avc: denied { read write } for pid=1441 comm="syz.5.6594" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2764.755931][ C0] vkms_vblank_simulate: vblank timer overrun [ 2765.614982][ T1454] fuse: Bad value for 'group_id' [ 2765.620486][ T1454] fuse: Bad value for 'group_id' [ 2765.771946][ T30] audit: type=1400 audit(2000000201.980:3352): avc: denied { open } for pid=1441 comm="syz.5.6594" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2767.045242][ T1463] fuse: Bad value for 'group_id' [ 2767.051715][ T1463] fuse: Bad value for 'group_id' [ 2768.506780][ T1479] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.6600'. [ 2769.280565][ T1497] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2769.326130][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2769.460161][ T1498] fuse: Bad value for 'group_id' [ 2769.465294][ T1498] fuse: Bad value for 'group_id' [ 2770.132652][ T30] audit: type=1400 audit(2000000206.508:3357): avc: denied { write } for pid=1490 comm="syz.8.6605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2770.475713][ T1497] fuse: Bad value for 'fd' [ 2770.500250][ T30] audit: type=1400 audit(2000000206.545:3358): avc: denied { mount } for pid=1490 comm="syz.8.6605" name="/" dev="rpc_pipefs" ino=98435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 2771.477295][ T1516] fuse: Bad value for 'group_id' [ 2771.508478][ T1516] fuse: Bad value for 'group_id' [ 2771.537328][ T1516] overlayfs: missing 'lowerdir' [ 2771.576631][ T30] audit: type=1400 audit(2000000208.612:3359): avc: denied { shutdown } for pid=1504 comm="syz.5.6608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2772.779572][ T30] audit: type=1400 audit(2000000209.735:3360): avc: denied { setopt } for pid=1529 comm="syz.1.6614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2772.926600][ T30] audit: type=1400 audit(2000000209.875:3361): avc: denied { read } for pid=1527 comm="syz.2.6613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2773.137899][ T1534] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6614'. [ 2773.333016][ T30] audit: type=1400 audit(2000000210.175:3362): avc: denied { listen } for pid=1531 comm="syz.7.6615" path="/687/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2773.684724][ T30] audit: type=1400 audit(2000000210.408:3363): avc: denied { write } for pid=1527 comm="syz.2.6613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2774.155489][ T1544] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2775.681260][ T1557] fuse: Bad value for 'group_id' [ 2775.686701][ T1557] fuse: Bad value for 'group_id' [ 2776.915467][ T1570] fuse: Bad value for 'group_id' [ 2776.920492][ T1570] fuse: Bad value for 'group_id' [ 2777.392509][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2778.433719][ T1593] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2778.447067][ T1593] fuse: Bad value for 'fd' [ 2778.548391][ T1594] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2778.559957][ T1594] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2779.779538][ T1580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2779.805129][ T30] audit: type=1400 audit(2000000216.301:3364): avc: denied { unmount } for pid=11866 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2780.108388][ T1608] rdma_rxe: rxe_newlink: failed to add lo [ 2780.274218][ T1610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2780.940427][ T30] audit: type=1400 audit(2000000216.741:3365): avc: denied { append } for pid=1606 comm="syz.5.6632" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2781.253248][ T30] audit: type=1400 audit(2000000216.825:3366): avc: denied { bind } for pid=1606 comm="syz.5.6632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2783.605937][ T1634] overlayfs: failed to clone upperpath [ 2783.606244][ T30] audit: type=1400 audit(2000000219.847:3367): avc: denied { mount } for pid=1624 comm="syz.2.6638" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2784.201801][ T1642] overlayfs: failed to clone upperpath [ 2785.136742][ T30] audit: type=1400 audit(2000000221.287:3368): avc: denied { override_creds } for pid=1648 comm="syz.1.6642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2785.409225][T13965] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2785.447663][ T1658] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6642'. [ 2786.227093][ T30] audit: type=1326 audit(2000000222.269:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2786.493207][ T1666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2786.500135][ T1666] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2786.674339][ T1666] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2786.680339][ T1666] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2786.741792][ T30] audit: type=1326 audit(2000000222.269:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2786.767087][ T30] audit: type=1326 audit(2000000222.269:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2786.798125][ T30] audit: type=1326 audit(2000000222.269:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2786.823009][ T30] audit: type=1326 audit(2000000222.269:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2786.852844][T26932] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2786.876751][ T30] audit: type=1326 audit(2000000222.269:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2786.921488][ T30] audit: type=1326 audit(2000000222.269:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2787.057582][ T30] audit: type=1326 audit(2000000222.269:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2787.057854][T26932] usb 9-1: Using ep0 maxpacket: 8 [ 2787.474124][ T30] audit: type=1326 audit(2000000222.269:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 2787.533885][ T30] audit: type=1326 audit(2000000222.269:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.8.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 2787.561376][T26932] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2787.608600][T26932] usb 9-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 2787.641742][T26932] usb 9-1: config 8 interface 0 has no altsetting 0 [ 2787.750963][T26932] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 2787.814129][T26932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2787.876958][T26932] usb 9-1: Product: äŠ [ 2787.893037][T13965] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2787.906415][T13965] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2787.914104][T13965] usb 6-1: can't read configurations, error -71 [ 2787.933010][T26932] usb 9-1: Manufacturer: з [ 2788.089802][T26932] usb 9-1: SerialNumber: ဇ [ 2788.110473][ T1664] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2788.261714][ T1690] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2788.379650][ T1697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6653'. [ 2788.833877][ T1695] fuse: Bad value for 'fd' [ 2789.214507][ T1703] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2789.526198][ T1711] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2790.139740][ T1703] fuse: Bad value for 'fd' [ 2790.164646][ T1711] fuse: Bad value for 'fd' [ 2790.761363][T26932] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2790.797973][T26932] usb 9-1: selecting invalid altsetting 0 [ 2790.897895][T26932] usb 9-1: USB disconnect, device number 9 [ 2791.759831][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 2791.771609][ T30] audit: type=1400 audit(2000000227.442:3424): avc: denied { ioctl } for pid=1722 comm="syz.5.6659" path="socket:[98015]" dev="sockfs" ino=98015 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2792.087554][ T30] audit: type=1400 audit(2000000227.479:3425): avc: denied { write } for pid=1722 comm="syz.5.6659" path="socket:[98016]" dev="sockfs" ino=98016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2792.577694][ T30] audit: type=1400 audit(2000000228.265:3426): avc: denied { unmount } for pid=18157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2793.596382][ T30] audit: type=1400 audit(2000000229.173:3427): avc: denied { nlmsg_write } for pid=1741 comm="syz.7.6664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2793.617074][ C0] vkms_vblank_simulate: vblank timer overrun [ 2793.636778][ T1750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6667'. [ 2794.317488][ T30] audit: type=1400 audit(2000000229.182:3428): avc: denied { audit_write } for pid=1741 comm="syz.7.6664" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2794.516305][ T30] audit: type=1400 audit(2000000229.266:3429): avc: denied { create } for pid=1744 comm="syz.1.6667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2795.068785][ T1758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2795.194460][ T1780] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2795.241168][ T1780] fuse: Bad value for 'fd' [ 2795.520407][ T30] audit: type=1400 audit(2000000231.015:3430): avc: denied { bind } for pid=1781 comm="syz.1.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2796.091619][ T1790] fuse: Bad value for 'group_id' [ 2796.098076][ T1790] fuse: Bad value for 'group_id' [ 2796.618245][ T1792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6675'. [ 2796.636419][ T30] audit: type=1400 audit(2000000232.054:3431): avc: denied { read write } for pid=1786 comm="syz.7.6675" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2797.213996][ T1799] netlink: 'syz.8.6677': attribute type 21 has an invalid length. [ 2797.796699][ T1806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6679'. [ 2798.494783][ T30] audit: type=1400 audit(2000000233.120:3432): avc: denied { ioctl } for pid=1804 comm="syz.7.6679" path="/dev/sg0" dev="devtmpfs" ino=771 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2798.520257][ C0] vkms_vblank_simulate: vblank timer overrun [ 2798.963916][ T30] audit: type=1400 audit(2000000233.213:3433): avc: denied { getopt } for pid=1804 comm="syz.7.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2799.302547][ T1817] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6680'. [ 2799.424414][ T30] audit: type=1400 audit(2000000234.111:3434): avc: denied { create } for pid=1801 comm="syz.2.6678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2800.044708][ T30] audit: type=1400 audit(2000000234.766:3435): avc: denied { setopt } for pid=1811 comm="syz.1.6681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2800.813531][ T1838] fuse: Bad value for 'group_id' [ 2800.818596][ T1838] fuse: Bad value for 'group_id' [ 2802.030289][ T30] audit: type=1400 audit(2000000237.049:3436): avc: denied { create } for pid=1842 comm="syz.8.6689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2802.080896][ T30] audit: type=1400 audit(2000000237.049:3437): avc: denied { ioctl } for pid=1842 comm="syz.8.6689" path="socket:[98952]" dev="sockfs" ino=98952 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2802.401081][T13965] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2802.428759][ T1853] fuse: Unknown parameter 'grou00000000000000000000' [ 2803.543218][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 2803.710949][ T1861] ceph: No mds server is up or the cluster is laggy [ 2803.737025][T13965] usb 9-1: Using ep0 maxpacket: 8 [ 2803.761327][T13965] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2803.773706][T13965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2803.782354][T13965] usb 9-1: Product: syz [ 2803.786678][T13965] usb 9-1: Manufacturer: syz [ 2803.793100][T13965] usb 9-1: SerialNumber: syz [ 2803.812089][T13965] usb 9-1: config 0 descriptor?? [ 2803.825816][T13965] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2803.926010][ T10] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2804.130596][ T10] usb 6-1: config 4 has an invalid interface number: 156 but max is 0 [ 2804.181108][ T10] usb 6-1: config 4 has no interface number 0 [ 2804.229179][ T10] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 2804.373874][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2804.389324][ T10] usb 6-1: Product: syz [ 2804.393599][ T10] usb 6-1: Manufacturer: syz [ 2804.398300][ T10] usb 6-1: SerialNumber: syz [ 2804.420734][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 2804.431112][ T10] usb 6-1: setting power ON [ 2804.443985][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 2804.459319][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2804.648786][T13965] gspca_sonixj: reg_r err -110 [ 2804.778016][ T1881] fuse: Bad value for 'group_id' [ 2804.783151][ T1881] fuse: Bad value for 'group_id' [ 2805.324020][ T10] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 2805.336330][ T10] dvb_usb_cxusb 6-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 2805.417127][ T30] audit: type=1400 audit(2000000240.248:3438): avc: denied { append } for pid=1865 comm="syz.5.6694" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2805.464106][T13965] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 2805.498828][ T10] usb 6-1: USB disconnect, device number 33 [ 2805.505556][T13965] usb 9-1: USB disconnect, device number 10 [ 2806.027846][ T1893] @: renamed from vlan0 (while UP) [ 2806.105616][ T1897] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6702'. [ 2806.141937][ T1896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6703'. [ 2807.666398][ T30] audit: type=1804 audit(2000000242.100:3439): pid=1913 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6706" name="file0" dev="tmpfs" ino=8120 res=1 errno=0 [ 2808.233387][ T1921] fuse: Bad value for 'group_id' [ 2808.240023][ T1921] fuse: Bad value for 'group_id' [ 2809.738280][ T1937] virtio-fs: tag not found [ 2810.584334][ T30] audit: type=1400 audit(2000000245.102:3440): avc: denied { create } for pid=1939 comm="syz.7.6714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2810.804977][ T1939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2811.697418][ T30] audit: type=1400 audit(2000000246.141:3441): avc: denied { ioctl } for pid=1956 comm="syz.8.6720" path="socket:[99094]" dev="sockfs" ino=99094 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2811.722124][ C1] vkms_vblank_simulate: vblank timer overrun [ 2813.018890][ T1965] hfsplus: unable to find HFS+ superblock [ 2813.285195][ T30] audit: type=1400 audit(2000000247.609:3442): avc: denied { listen } for pid=1966 comm="syz.8.6722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2815.167406][ T1993] tipc: Enabling of bearer rejected, already enabled [ 2815.205600][ T1988] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2815.258382][ T1988] fuse: Bad value for 'fd' [ 2815.358536][ T1995] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2817.415303][ T2018] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2817.440866][ T30] audit: type=1400 audit(2000000251.482:3443): avc: denied { mount } for pid=2017 comm="syz.7.6736" name="/" dev="ramfs" ino=99202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2818.379696][ T2039] fuse: Bad value for 'group_id' [ 2818.384790][ T2039] fuse: Bad value for 'group_id' [ 2818.398413][ T2039] overlayfs: missing 'lowerdir' [ 2820.635796][ T2051] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 2821.084229][ T2060] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6745'. [ 2821.196442][ T2060] input: syz1 as /devices/virtual/input/input27 [ 2821.290814][ T30] audit: type=1400 audit(2000000254.961:3444): avc: denied { write } for pid=2057 comm="syz.7.6745" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2822.776223][ T2077] new mount options do not match the existing superblock, will be ignored [ 2822.819284][ T30] audit: type=1400 audit(2000000256.524:3445): avc: denied { remount } for pid=2068 comm="syz.1.6749" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2823.808867][ T30] audit: type=1400 audit(2000000257.178:3446): avc: denied { wake_alarm } for pid=2065 comm="syz.8.6747" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2825.096900][ T2094] fuse: Bad value for 'group_id' [ 2825.101988][ T2094] fuse: Bad value for 'group_id' [ 2825.106953][ T2091] overlayfs: missing 'lowerdir' [ 2825.182464][ T30] audit: type=1400 audit(2000000258.694:3447): avc: denied { bind } for pid=2089 comm="syz.7.6754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2825.483602][ T2098] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 2825.504500][ T2098] fuse: Bad value for 'fd' [ 2826.521648][ T2111] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2826.807856][ T2117] netlink: 'syz.7.6757': attribute type 9 has an invalid length. [ 2827.451310][ T2119] netlink: 'syz.7.6757': attribute type 9 has an invalid length. [ 2828.227214][ T2127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6762'. [ 2829.360285][ T2134] virtio-fs: tag not found [ 2830.432752][ T2143] fuse: Bad value for 'group_id' [ 2830.437778][ T2143] fuse: Bad value for 'group_id' [ 2830.709201][ T2141] overlayfs: missing 'lowerdir' [ 2831.382406][ T2155] : entered promiscuous mode [ 2831.446044][ T2155] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6772'. [ 2831.666065][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6771'. [ 2832.702375][ T30] audit: type=1400 audit(2000000265.784:3448): avc: denied { connect } for pid=2177 comm="syz.5.6780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2832.728087][ T2176] virtio-fs: tag not found [ 2832.916557][ T30] audit: type=1400 audit(2000000265.990:3449): avc: denied { connect } for pid=2159 comm="syz.7.6773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2833.542714][ T30] audit: type=1400 audit(2000000266.065:3450): avc: denied { create } for pid=2177 comm="syz.5.6780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2833.885581][ T2189] fuse: Bad value for 'group_id' [ 2833.890562][ T2189] fuse: Bad value for 'group_id' [ 2833.898391][ T2189] overlayfs: missing 'lowerdir' [ 2834.889052][ T2211] fuse: Bad value for 'group_id' [ 2834.895546][ T2211] fuse: Bad value for 'group_id' [ 2834.918802][ T2211] overlayfs: conflicting options: userxattr,verity=require [ 2834.935352][ T2210] : entered promiscuous mode [ 2834.961920][ T2210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6787'. [ 2835.827892][ T2216] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6788'. [ 2837.428160][ T2230] fuse: Bad value for 'group_id' [ 2837.433235][ T2230] fuse: Bad value for 'group_id' [ 2837.440257][ T2230] overlayfs: missing 'lowerdir' [ 2837.752682][ T2226] virtio-fs: tag not found [ 2837.782350][ T2228] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2837.789464][ T2228] overlayfs: failed to set xattr on upper [ 2837.855871][ T2238] fuse: Bad value for 'group_id' [ 2837.860885][ T2238] fuse: Bad value for 'group_id' [ 2837.872693][ T2238] overlayfs: missing 'lowerdir' [ 2838.248476][ T2228] overlayfs: ...falling back to redirect_dir=nofollow. [ 2838.255330][ T2228] overlayfs: ...falling back to metacopy=off. [ 2838.261408][ T2228] overlayfs: ...falling back to index=off. [ 2838.267182][ T2228] overlayfs: ...falling back to uuid=null. [ 2838.274532][ T30] audit: type=1400 audit(2000000270.545:3451): avc: denied { mounton } for pid=2218 comm="syz.8.6792" path="/bus" dev="ramfs" ino=100566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 2838.552072][ T2242] batman_adv: batadv0: Adding interface: dummy0 [ 2838.560286][ T2242] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2838.585537][ C0] vkms_vblank_simulate: vblank timer overrun [ 2838.593383][ T2242] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 2840.266397][ T30] audit: type=1400 audit(2000000272.865:3452): avc: denied { bind } for pid=2259 comm="syz.7.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2840.374611][ T2265] fuse: Bad value for 'group_id' [ 2840.379614][ T2265] fuse: Bad value for 'group_id' [ 2840.393979][ T2265] overlayfs: conflicting options: userxattr,verity=require [ 2840.849300][ T30] audit: type=1400 audit(2000000272.893:3453): avc: denied { bind } for pid=2259 comm="syz.7.6802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2840.871653][ T30] audit: type=1400 audit(2000000273.380:3454): avc: denied { mount } for pid=2252 comm="syz.2.6801" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2841.052707][ T30] audit: type=1400 audit(2000000273.380:3455): avc: denied { search } for pid=2252 comm="syz.2.6801" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2841.176893][ T30] audit: type=1400 audit(2000000273.380:3456): avc: denied { search } for pid=2252 comm="syz.2.6801" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2841.205772][ T30] audit: type=1400 audit(2000000273.380:3457): avc: denied { search } for pid=2252 comm="syz.2.6801" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2841.530679][ T30] audit: type=1400 audit(2000000273.380:3458): avc: denied { search } for pid=2252 comm="syz.2.6801" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2841.650925][ T2279] fuse: Bad value for 'group_id' [ 2841.656050][ T2279] fuse: Bad value for 'group_id' [ 2841.668814][ T2279] overlayfs: missing 'lowerdir' [ 2842.212599][ T30] audit: type=1400 audit(2000000273.380:3459): avc: denied { search } for pid=2252 comm="syz.2.6801" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2842.285162][ T2284] virtio-fs: tag not found [ 2842.317502][ T2276] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6803'. [ 2842.319566][ T30] audit: type=1400 audit(2000000273.595:3460): avc: denied { search } for pid=2252 comm="syz.2.6801" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2843.133525][ T2294] fuse: Bad value for 'group_id' [ 2843.138542][ T2294] fuse: Bad value for 'group_id' [ 2843.469530][ T2294] overlayfs: missing 'lowerdir' [ 2843.561657][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2844.092725][ T2303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6812'. [ 2844.101641][ T2303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6812'. [ 2844.179657][ T2305] fuse: Bad value for 'group_id' [ 2844.184650][ T2305] fuse: Bad value for 'group_id' [ 2844.197519][ T2305] overlayfs: conflicting options: userxattr,verity=require [ 2844.594543][ T2303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6812'. [ 2844.603535][ T2303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6812'. [ 2845.761560][ T2321] fuse: Bad value for 'group_id' [ 2845.766647][ T2321] fuse: Bad value for 'group_id' [ 2845.777192][ T2321] overlayfs: conflicting options: userxattr,verity=require [ 2846.151421][ T2324] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6810'. [ 2847.010257][ T2309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2847.265963][ T2335] No source specified [ 2848.224858][ T2349] fuse: Bad value for 'group_id' [ 2848.229888][ T2349] fuse: Bad value for 'group_id' [ 2848.242589][ T2349] overlayfs: missing 'lowerdir' [ 2848.673980][ T2351] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6821'. [ 2848.876501][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2848.876518][ T30] audit: type=1400 audit(2000000280.769:3468): avc: denied { bind } for pid=2346 comm="syz.7.6821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2848.981743][ T30] audit: type=1400 audit(2000000280.769:3469): avc: denied { write } for pid=2346 comm="syz.7.6821" path="socket:[100189]" dev="sockfs" ino=100189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2849.060691][ T30] audit: type=1400 audit(2000000281.003:3470): avc: denied { setopt } for pid=2342 comm="syz.2.6819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2849.370611][ T2359] fuse: Bad value for 'group_id' [ 2849.375879][ T2359] fuse: Bad value for 'group_id' [ 2849.778294][ T2347] dlm: no locking on control device [ 2849.794226][ T2359] overlayfs: missing 'lowerdir' [ 2850.573816][ T2366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6824'. [ 2851.308744][ T2379] netlink: 'syz.8.6828': attribute type 1 has an invalid length. [ 2852.347629][ T30] audit: type=1400 audit(2000000284.155:3471): avc: denied { bind } for pid=2377 comm="syz.8.6828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2853.281540][ T2373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2853.791496][ T2379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2854.456353][ T30] audit: type=1400 audit(2000000286.101:3472): avc: denied { write } for pid=2399 comm="syz.7.6832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2857.051339][ T2437] fuse: Bad value for 'group_id' [ 2857.056401][ T2437] fuse: Bad value for 'group_id' [ 2857.105286][ T2437] overlayfs: missing 'lowerdir' [ 2857.685321][ T2440] syz.8.6839: attempt to access beyond end of device [ 2857.685321][ T2440] loop8: rw=0, sector=1, nr_sectors = 1 limit=0 [ 2857.698470][ T2440] qnx4: unable to read the superblock [ 2858.835170][ T2448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6840'. [ 2859.889422][ T2442] dlm: no locking on control device [ 2860.430295][ T2464] fuse: Bad value for 'group_id' [ 2860.435331][ T2464] fuse: Bad value for 'group_id' [ 2863.950140][ T2509] lo speed is unknown, defaulting to 1000 [ 2863.955908][ T2509] lo speed is unknown, defaulting to 1000 [ 2863.963078][ T2509] lo speed is unknown, defaulting to 1000 [ 2863.972002][ T2509] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -2 [ 2863.985203][ T2509] lo speed is unknown, defaulting to 1000 [ 2863.992647][ T2509] lo speed is unknown, defaulting to 1000 [ 2863.999089][ T2509] lo speed is unknown, defaulting to 1000 [ 2864.006200][ T2509] lo speed is unknown, defaulting to 1000 [ 2864.012661][ T2509] lo speed is unknown, defaulting to 1000 [ 2864.019118][ T2509] lo speed is unknown, defaulting to 1000 [ 2864.050936][ T2511] netlink: 'syz.1.6858': attribute type 7 has an invalid length. [ 2864.388715][ T2522] fuse: Bad value for 'group_id' [ 2864.393739][ T2522] fuse: Bad value for 'group_id' [ 2864.408419][ T2522] overlayfs: conflicting options: userxattr,verity=require [ 2864.762375][ T30] audit: type=1400 audit(2000000295.371:3473): avc: denied { bind } for pid=2513 comm="syz.1.6860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2864.804139][ T30] audit: type=1400 audit(2000000295.371:3474): avc: denied { listen } for pid=2513 comm="syz.1.6860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2864.825221][ T30] audit: type=1400 audit(2000000295.782:3475): avc: denied { accept } for pid=2513 comm="syz.1.6860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2864.844792][ C0] vkms_vblank_simulate: vblank timer overrun [ 2864.851233][ T30] audit: type=1400 audit(2000000295.782:3476): avc: denied { read } for pid=2513 comm="syz.1.6860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2867.020701][ T30] audit: type=1326 audit(2000000297.878:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2554 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03d38e969 code=0x7ffc0000 [ 2867.044618][ T30] audit: type=1326 audit(2000000297.878:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2554 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03d38e969 code=0x7ffc0000 [ 2867.129226][ T30] audit: type=1326 audit(2000000297.990:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2554 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe03d38e969 code=0x7ffc0000 [ 2867.268088][ T2564] fuse: Bad value for 'group_id' [ 2867.273144][ T2564] fuse: Bad value for 'group_id' [ 2867.300975][ T2564] overlayfs: conflicting options: userxattr,verity=require [ 2867.633242][ T30] audit: type=1326 audit(2000000297.990:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2554 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03d38e969 code=0x7ffc0000 [ 2867.818180][ T30] audit: type=1326 audit(2000000297.990:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2554 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe03d38e969 code=0x7ffc0000 [ 2868.039614][ T30] audit: type=1326 audit(2000000298.841:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2554 comm="syz.2.6870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fe03d38e969 code=0x7ffc0000 [ 2868.780269][ T2547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2868.799202][ T2585] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 2868.813001][ T2585] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 2868.898130][ T2586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6873'. [ 2869.763410][ T2595] fuse: Bad value for 'group_id' [ 2869.768421][ T2595] fuse: Bad value for 'group_id' [ 2869.781709][ T2595] overlayfs: conflicting options: userxattr,verity=require [ 2869.952656][ T2597] fuse: Bad value for 'group_id' [ 2869.959494][ T2597] fuse: Bad value for 'group_id' [ 2869.966261][ T2597] overlayfs: missing 'lowerdir' [ 2872.142830][ T2634] rdma_rxe: rxe_newlink: failed to add lo [ 2872.328605][ T2634] netlink: 'syz.7.6883': attribute type 1 has an invalid length. [ 2872.336735][ T2634] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6883'. [ 2872.724262][ T2635] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2873.370820][ T2623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2873.941033][ T2655] fuse: Bad value for 'group_id' [ 2873.946218][ T2655] fuse: Bad value for 'group_id' [ 2873.960233][ T2655] overlayfs: conflicting options: userxattr,verity=require [ 2875.015933][ T2671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6890'. [ 2875.880733][ T2666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2876.669858][ T2704] overlayfs: failed to resolve './file0': -2 [ 2877.597369][ T2709] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6900'. [ 2879.730972][ T2730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2879.854881][ T2755] smc: net device bond0 applied user defined pnetid SYZ2 [ 2880.212020][ T2756] rdma_rxe: rxe_newlink: failed to add lo [ 2880.341429][ T2756] netlink: 'syz.5.6908': attribute type 1 has an invalid length. [ 2880.349550][ T2756] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6908'. [ 2881.288192][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2881.436792][ T30] audit: type=1400 audit(2000000311.245:3505): avc: denied { open } for pid=2761 comm="syz.7.6912" path="/dev/ptyr2" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2881.467333][ T2770] cgroup: cgroup_addrm_files: failed to add cpus, err=-12 [ 2882.560272][ T2784] input: syz0 as /devices/virtual/input/input28 [ 2883.237896][ T30] audit: type=1400 audit(2000000312.732:3506): avc: denied { bind } for pid=2773 comm="syz.1.6914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2883.612664][ T30] audit: type=1400 audit(2000000313.415:3507): avc: denied { ioctl } for pid=2761 comm="syz.7.6912" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 2883.637709][ C1] vkms_vblank_simulate: vblank timer overrun [ 2884.135724][ T30] audit: type=1400 audit(2000000313.901:3508): avc: denied { getopt } for pid=2808 comm="syz.2.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2884.331991][ T2817] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6922'. [ 2885.157532][ T2821] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6923'. [ 2886.078218][ T2850] rdma_rxe: rxe_newlink: failed to add lo [ 2886.691395][ T2833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2887.662915][ T2874] fuse: Bad value for 'fd' [ 2889.239070][ T2892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6938'. [ 2889.279956][ T30] audit: type=1400 audit(2000000318.709:3509): avc: denied { execute } for pid=2882 comm="syz.7.6936" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 2889.303431][ C1] vkms_vblank_simulate: vblank timer overrun [ 2889.792417][ T2883] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 2889.803660][ T2883] SELinux: failed to load policy [ 2889.837186][ T30] audit: type=1400 audit(2000000319.233:3510): avc: denied { read } for pid=2882 comm="syz.7.6936" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2890.375136][ T30] audit: type=1400 audit(2000000319.233:3511): avc: denied { open } for pid=2882 comm="syz.7.6936" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2891.552368][ T2915] virtio-fs: tag not found [ 2892.236954][ T2935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6946'. [ 2892.259090][ T2935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6946'. [ 2892.830800][ T2920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2893.113170][ T2950] netlink: 'syz.7.6950': attribute type 23 has an invalid length. [ 2893.410679][ T2957] fuse: Bad value for 'group_id' [ 2893.415694][ T2957] fuse: Bad value for 'group_id' [ 2893.429721][ T2957] overlayfs: conflicting options: userxattr,verity=require [ 2894.605054][ T2978] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 2894.614237][ T2978] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 2894.746783][ T2979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6956'. [ 2895.514699][ T2991] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2895.588167][ T30] audit: type=1400 audit(2000000324.555:3512): avc: denied { name_bind 0x1000000 } for pid=2985 comm="syz.1.6963" path="socket:[102212]" dev="sockfs" ino=102212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2897.052956][ T2998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6964'. [ 2897.399178][ T3003] netlink: 'syz.1.6965': attribute type 10 has an invalid length. [ 2897.407028][ T3003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6965'. [ 2897.416541][ T3003] batadv0: entered promiscuous mode [ 2897.421827][ T3003] batadv0: entered allmulticast mode [ 2897.427941][ T3003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2897.435261][ T3003] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2897.459161][ T3003] batman_adv: batadv0: Adding interface: dummy0 [ 2897.465489][ T3003] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2897.491294][ T3003] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 2897.758638][ T3008] fuse: Bad value for 'group_id' [ 2897.763730][ T3008] fuse: Bad value for 'group_id' [ 2897.773852][ T3008] overlayfs: conflicting options: userxattr,verity=require [ 2899.766803][ T3027] delete_channel: no stack [ 2901.062014][ T3049] netlink: 'syz.2.6979': attribute type 10 has an invalid length. [ 2901.189037][ T3052] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6978'. [ 2901.584340][ T30] audit: type=1400 audit(2000000329.784:3513): avc: denied { mount } for pid=3048 comm="syz.2.6979" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2901.623944][ T30] audit: type=1400 audit(2000000330.261:3514): avc: denied { connect } for pid=3022 comm="syz.1.6972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2902.009657][ T3058] fuse: Bad value for 'group_id' [ 2902.014666][ T3058] fuse: Bad value for 'group_id' [ 2902.026722][ T3058] overlayfs: conflicting options: userxattr,verity=require [ 2905.194019][ T3082] loop6: detected capacity change from 0 to 128 [ 2905.238329][ T30] audit: type=1326 audit(2000000333.601:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.7.6984" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10bab8e969 code=0x0 [ 2905.319750][ T3085] Invalid logical block size (-1) [ 2905.371965][ T3086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6988'. [ 2905.721211][ T3095] tipc: Enabling of bearer rejected, failed to enable media [ 2906.039663][ T3098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6990'. [ 2906.063077][ T30] audit: type=1400 audit(2000000334.414:3516): avc: denied { execute } for pid=3069 comm="syz.7.6984" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=103520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2906.256861][ T30] audit: type=1400 audit(2000000334.583:3517): avc: denied { create } for pid=3087 comm="syz.1.6990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2906.388896][ T30] audit: type=1400 audit(2000000334.723:3518): avc: denied { sys_admin } for pid=3087 comm="syz.1.6990" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2906.615400][ T30] audit: type=1400 audit(2000000334.723:3519): avc: denied { create } for pid=3103 comm="syz.2.6993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 2907.210059][ T3114] syz.2.6993: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2907.233702][ T3114] CPU: 1 UID: 0 PID: 3114 Comm: syz.2.6993 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 2907.233731][ T3114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2907.233744][ T3114] Call Trace: [ 2907.233751][ T3114] [ 2907.233759][ T3114] dump_stack_lvl+0x16c/0x1f0 [ 2907.233790][ T3114] warn_alloc+0x248/0x3a0 [ 2907.233816][ T3114] ? __pfx_warn_alloc+0x10/0x10 [ 2907.233837][ T3114] ? __pfx_stack_trace_save+0x10/0x10 [ 2907.233861][ T3114] ? stack_depot_save_flags+0x28/0xa40 [ 2907.233898][ T3114] ? kasan_save_stack+0x42/0x60 [ 2907.233918][ T3114] ? kasan_save_stack+0x33/0x60 [ 2907.233936][ T3114] ? kasan_save_track+0x14/0x30 [ 2907.233956][ T3114] ? xskq_create+0x52/0x1d0 [ 2907.233976][ T3114] ? xsk_setsockopt+0x640/0x840 [ 2907.233995][ T3114] ? do_sock_setsockopt+0x221/0x470 [ 2907.234025][ T3114] ? xskq_create+0xfb/0x1d0 [ 2907.234047][ T3114] __vmalloc_node_range_noprof+0x10ce/0x1520 [ 2907.234089][ T3114] ? xskq_create+0xfb/0x1d0 [ 2907.234115][ T3114] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2907.234155][ T3114] ? xskq_create+0xfb/0x1d0 [ 2907.234176][ T3114] vmalloc_user_noprof+0x9e/0xe0 [ 2907.234206][ T3114] ? xskq_create+0xfb/0x1d0 [ 2907.234227][ T3114] xskq_create+0xfb/0x1d0 [ 2907.234249][ T3114] xsk_setsockopt+0x640/0x840 [ 2907.234270][ T3114] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2907.234293][ T3114] ? __lock_acquire+0x622/0x1c90 [ 2907.234326][ T3114] ? selinux_socket_setsockopt+0x6a/0x80 [ 2907.234356][ T3114] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2907.234378][ T3114] do_sock_setsockopt+0x221/0x470 [ 2907.234407][ T3114] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2907.234453][ T3114] __sys_setsockopt+0x1a0/0x230 [ 2907.234482][ T3114] __x64_sys_setsockopt+0xbd/0x160 [ 2907.234504][ T3114] ? do_syscall_64+0x91/0x4c0 [ 2907.234528][ T3114] ? lockdep_hardirqs_on+0x7c/0x110 [ 2907.234550][ T3114] do_syscall_64+0xcd/0x4c0 [ 2907.234577][ T3114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2907.234596][ T3114] RIP: 0033:0x7fe03d38e969 [ 2907.234612][ T3114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2907.234631][ T3114] RSP: 002b:00007fe03e176038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2907.234650][ T3114] RAX: ffffffffffffffda RBX: 00007fe03d5b6160 RCX: 00007fe03d38e969 [ 2907.234667][ T3114] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 2907.234678][ T3114] RBP: 00007fe03d410ab1 R08: 0000000000000052 R09: 0000000000000000 [ 2907.234690][ T3114] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2907.234701][ T3114] R13: 0000000000000000 R14: 00007fe03d5b6160 R15: 00007ffea5e97938 [ 2907.234728][ T3114] [ 2907.234787][ T3114] Mem-Info: [ 2907.475559][ T3113] block device autoloading is deprecated and will be removed. [ 2907.561649][ T3114] active_anon:46323 inactive_anon:0 isolated_anon:0 [ 2907.561649][ T3114] active_file:11328 inactive_file:51524 isolated_file:0 [ 2907.561649][ T3114] unevictable:773 dirty:455 writeback:0 [ 2907.561649][ T3114] slab_reclaimable:8403 slab_unreclaimable:142137 [ 2907.561649][ T3114] mapped:43548 shmem:42022 pagetables:898 [ 2907.561649][ T3114] sec_pagetables:0 bounce:0 [ 2907.561649][ T3114] kernel_misc_reclaimable:0 [ 2907.561649][ T3114] free:1211825 free_pcp:1345 free_cma:0 [ 2907.563307][ T3113] syz.7.6992: attempt to access beyond end of device [ 2907.563307][ T3113] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2907.571769][ T3114] Node 0 active_anon:185292kB inactive_anon:0kB active_file:45260kB inactive_file:205784kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:174028kB dirty:1820kB writeback:0kB shmem:166552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12576kB pagetables:3592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2907.587823][ T3114] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2907.647809][ C1] vkms_vblank_simulate: vblank timer overrun [ 2907.697064][ C1] vkms_vblank_simulate: vblank timer overrun [ 2907.731189][ C1] vkms_vblank_simulate: vblank timer overrun [ 2907.751010][ T3114] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2907.778910][ T3114] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 2907.784658][ T3114] Node 0 DMA32 free:910112kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:185268kB inactive_anon:0kB active_file:45260kB inactive_file:204216kB unevictable:1556kB writepending:1820kB present:3129332kB managed:2540956kB mlocked:20kB bounce:0kB free_pcp:5548kB local_pcp:780kB free_cma:0kB [ 2907.815933][ T3114] lowmem_reserve[]: 0 0 1 1 1 [ 2907.820633][ T3114] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 2907.848895][ T3114] lowmem_reserve[]: 0 0 0 0 0 [ 2907.853601][ T3114] Node 1 Normal free:3921988kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:312kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2907.882419][ C1] vkms_vblank_simulate: vblank timer overrun [ 2907.889706][ T3114] lowmem_reserve[]: 0 0 0 0 0 [ 2907.894417][ T3114] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2907.907835][ T3114] Node 0 DMA32: 695*4kB (UME) 408*8kB (UME) 324*16kB (UME) 213*32kB (UME) 226*64kB (UME) 511*128kB (UME) 182*256kB (UME) 61*512kB (UME) 35*1024kB (UM) 19*2048kB (UME) 161*4096kB (UM) = 909948kB [ 2907.926852][ C1] vkms_vblank_simulate: vblank timer overrun [ 2907.932849][ T3114] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 2907.945923][ T3114] Node 1 Normal: 11*4kB (UME) 7*8kB (E) 40*16kB (UME) 221*32kB (UME) 93*64kB (UME) 27*128kB (UE) 15*256kB (UME) 9*512kB (UME) 3*1024kB (UME) 5*2048kB (UME) 948*4096kB (M) = 3921988kB [ 2907.964030][ T3114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2907.974400][ T3114] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2907.983685][ T3114] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2907.993222][ T3114] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2908.049981][ T3114] 104871 total pagecache pages [ 2908.054777][ T3114] 0 pages in swap cache [ 2908.058924][ T3114] Free swap = 124996kB [ 2908.063048][ T3114] Total swap = 124996kB [ 2908.067187][ T3114] 2097051 pages RAM [ 2908.070974][ T3114] 0 pages HighMem/MovableOnly [ 2908.075620][ T3114] 429770 pages reserved [ 2908.080615][ T3114] 0 pages cma reserved [ 2908.333435][ T30] audit: type=1400 audit(2000000335.481:3520): avc: denied { setopt } for pid=3103 comm="syz.2.6993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2908.540722][ T3093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2908.850975][ T30] audit: type=1400 audit(2000000336.874:3521): avc: denied { create } for pid=3120 comm="syz.2.6995" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2908.871667][ C1] vkms_vblank_simulate: vblank timer overrun [ 2908.913164][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2909.820028][ T30] audit: type=1400 audit(2000000337.922:3522): avc: denied { unlink } for pid=5811 comm="syz-executor" name="file0" dev="tmpfs" ino=8744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2910.838828][ T30] audit: type=1400 audit(2000000338.455:3523): avc: denied { connect } for pid=3132 comm="syz.8.7000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2910.859413][ T30] audit: type=1400 audit(2000000338.455:3524): avc: denied { read } for pid=3132 comm="syz.8.7000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2910.879128][ T30] audit: type=1400 audit(2000000338.698:3525): avc: denied { mount } for pid=3132 comm="syz.8.7000" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 2910.961158][ T30] audit: type=1400 audit(2000000338.708:3526): avc: denied { search } for pid=3132 comm="syz.8.7000" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 2910.984625][ T30] audit: type=1400 audit(2000000338.708:3527): avc: denied { unmount } for pid=3132 comm="syz.8.7000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 2911.095702][ T30] audit: type=1400 audit(2000000338.708:3528): avc: denied { search } for pid=3132 comm="syz.8.7000" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 2913.840503][ T30] audit: type=1400 audit(2000000341.392:3529): avc: denied { firmware_load } for pid=3150 comm="syz.8.7005" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 2915.005025][ T3174] kAFS: No cell specified [ 2915.107548][ T3178] kAFS: No cell specified [ 2916.679158][ T3185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2917.301906][ T3212] virtio-fs: tag not found [ 2920.645487][ T30] audit: type=1400 audit(2000000348.052:3530): avc: denied { read } for pid=3246 comm="syz.7.7027" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2921.098591][ T30] audit: type=1400 audit(2000000348.071:3531): avc: denied { open } for pid=3246 comm="syz.7.7027" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2921.193564][ T3254] vivid-000: disconnect [ 2921.290111][ T3255] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7027'. [ 2921.301138][ T3255] vcan0: entered promiscuous mode [ 2921.306298][ T3255] vcan0: entered allmulticast mode [ 2921.908710][ T3256] vivid-000: reconnect [ 2922.121043][ T30] audit: type=1400 audit(2000000349.428:3532): avc: denied { listen } for pid=3260 comm="syz.7.7031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2922.154542][ T30] audit: type=1400 audit(2000000349.428:3533): avc: denied { accept } for pid=3260 comm="syz.7.7031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2922.578142][ T3278] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 2922.769658][ T3258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.422210][ T3282] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2923.996617][ T3285] fuse: Bad value for 'group_id' [ 2924.001591][ T3285] fuse: Bad value for 'group_id' [ 2924.009481][ T3285] overlayfs: conflicting options: userxattr,verity=require [ 2924.154289][ T30] audit: type=1326 audit(2000000351.195:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3279 comm="syz.8.7033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7fc00000 [ 2924.579982][ T3298] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7035'. [ 2925.200671][ T3302] netlink: 'syz.2.7039': attribute type 4 has an invalid length. [ 2925.222259][T26932] lo speed is unknown, defaulting to 1000 [ 2925.232289][T26932] s…z0: Port: 1 Link DOWN [ 2925.691248][ T3305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7038'. [ 2925.811836][ T3307] virtio-fs: tag not found [ 2925.845320][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2925.939421][ T3313] netlink: 'syz.7.7034': attribute type 20 has an invalid length. [ 2926.017555][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 2926.212468][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 2926.404698][ T3322] 9pnet_fd: Insufficient options for proto=fd [ 2926.959070][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2926.973565][ T10] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2926.996184][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2927.017419][ T10] usb 9-1: Product: syz [ 2927.026581][ T10] usb 9-1: Manufacturer: syz [ 2927.041741][ T10] usb 9-1: SerialNumber: syz [ 2927.059792][ T10] usb 9-1: config 0 descriptor?? [ 2927.385190][ T10] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 2927.432236][ T10] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 2927.506899][ T3333] fuse: Bad value for 'group_id' [ 2927.511908][ T3333] fuse: Bad value for 'group_id' [ 2927.524045][ T3333] overlayfs: conflicting options: userxattr,verity=require [ 2927.945788][ T24] usb 9-1: USB disconnect, device number 11 [ 2928.067716][ T3320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2928.620672][ T3346] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7051'. [ 2929.175775][ T3349] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7052'. [ 2930.125208][ T3362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7056'. [ 2930.304431][ T30] audit: type=1400 audit(2000000357.079:3535): avc: denied { write } for pid=3370 comm="syz.7.7060" name="file0" dev="tmpfs" ino=4279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2930.539062][ T3375] fuse: Bad value for 'group_id' [ 2930.544087][ T3375] fuse: Bad value for 'group_id' [ 2930.558430][ T3375] overlayfs: conflicting options: userxattr,verity=require [ 2931.302848][ T30] audit: type=1400 audit(2000000357.079:3536): avc: denied { open } for pid=3370 comm="syz.7.7060" path="/766/file0" dev="tmpfs" ino=4279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2931.327142][ T30] audit: type=1400 audit(2000000357.977:3537): avc: denied { ioctl } for pid=3370 comm="syz.7.7060" path="/766/file0" dev="tmpfs" ino=4279 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2931.361597][ T10] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 2931.885466][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 2932.017319][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2932.113368][ T10] usb 9-1: config 0 descriptor?? [ 2932.211759][ T10] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 2932.430450][ T3406] fuse: Bad value for 'group_id' [ 2932.437089][ T3406] fuse: Bad value for 'group_id' [ 2932.455122][ T3406] overlayfs: conflicting options: userxattr,verity=require [ 2932.869847][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 2933.056276][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2933.080537][ T10] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 2933.156867][ T3391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2933.196943][ T10] usb 9-1: media controller created [ 2933.207343][ T3366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2933.217566][ T3366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2933.232448][ T30] audit: type=1400 audit(2000000359.801:3538): avc: denied { mount } for pid=3363 comm="syz.8.7057" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2933.240765][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 2933.305227][ T3388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2933.343764][ T30] audit: type=1400 audit(2000000359.820:3539): avc: denied { accept } for pid=3390 comm="syz.5.7062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2933.356209][ T3410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2933.381543][ T3410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2933.608941][ T10] dvb-usb: MAC address reading failed. [ 2933.651799][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2933.668764][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 2933.681563][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 2933.692223][ T10] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 2933.711985][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input29 [ 2933.765680][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 2933.878941][ T10] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 2933.898124][ T10] usb 9-1: USB disconnect, device number 12 [ 2934.443309][ T10] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 2934.650694][ T3426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7068'. [ 2935.195022][ T3423] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=3423 comm=syz.7.7069 [ 2935.454412][ T3440] fuse: Bad value for 'group_id' [ 2935.460977][ T3440] fuse: Bad value for 'group_id' [ 2935.471922][ T3440] overlayfs: conflicting options: userxattr,verity=require [ 2937.347905][ T3451] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 2938.450193][ T3458] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 2939.283597][ T3471] fuse: Bad value for 'group_id' [ 2939.299638][ T3471] fuse: Bad value for 'group_id' [ 2939.598486][ T3471] overlayfs: conflicting options: userxattr,verity=require [ 2939.742565][ T30] audit: type=1400 audit(2000000365.914:3540): avc: denied { write } for pid=3468 comm="syz.7.7080" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 2940.011679][ T3479] netlink: 'syz.7.7080': attribute type 16 has an invalid length. [ 2940.019625][ T3479] netlink: 'syz.7.7080': attribute type 17 has an invalid length. [ 2940.028215][ T3479] netlink: 'syz.7.7080': attribute type 27 has an invalid length. [ 2941.114218][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7081'. [ 2941.428338][ T3477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2941.428367][ T3460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2941.633416][ T3501] fuse: Bad value for 'group_id' [ 2941.638527][ T3501] fuse: Bad value for 'group_id' [ 2941.645408][ T3501] overlayfs: conflicting options: userxattr,verity=require [ 2942.422108][ T3503] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7083'. [ 2942.577769][ T3511] virtio-fs: tag not found [ 2945.276325][ T3539] fuse: Bad value for 'group_id' [ 2945.282138][ T3539] fuse: Bad value for 'group_id' [ 2945.289287][ T3539] overlayfs: conflicting options: userxattr,verity=require [ 2945.298175][ T3537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7093'. [ 2946.695083][ T3544] virtio-fs: tag not found [ 2946.865247][ T3553] virtio-fs: tag not found [ 2946.870052][ T30] audit: type=1400 audit(2000000372.584:3541): avc: denied { ioctl } for pid=3547 comm="syz.7.7096" path="socket:[104762]" dev="sockfs" ino=104762 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2947.661607][ T3561] siw: device registration error -23 [ 2947.728354][ T30] audit: type=1400 audit(2000000372.930:3542): avc: denied { mount } for pid=3545 comm="syz.5.7097" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2948.284153][ T30] audit: type=1800 audit(2000000373.220:3543): pid=3562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.7097" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 2949.326344][ T30] audit: type=1400 audit(2000000373.622:3544): avc: denied { unmount } for pid=11866 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2949.632760][ T3561] batadv_slave_0: mtu less than device minimum [ 2949.643934][ T30] audit: type=1400 audit(2000000375.175:3545): avc: denied { ioctl } for pid=3547 comm="syz.7.7096" path="socket:[104766]" dev="sockfs" ino=104766 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2950.427932][ T3573] openvswitch: netlink: Key 15 has unexpected len 0 expected 4 [ 2950.540857][ T3567] 9pnet_fd: Insufficient options for proto=fd [ 2952.667988][ T30] audit: type=1400 audit(2000000377.494:3546): avc: denied { read } for pid=3574 comm="syz.5.7102" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2952.994325][ T30] audit: type=1400 audit(2000000377.494:3547): avc: denied { open } for pid=3574 comm="syz.5.7102" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2953.229230][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7107'. [ 2953.331845][ T30] audit: type=1400 audit(2000000377.504:3548): avc: denied { map } for pid=3574 comm="syz.5.7102" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2953.666663][ T3595] fuse: Bad value for 'group_id' [ 2953.671781][ T3595] fuse: Bad value for 'group_id' [ 2953.684029][ T3595] overlayfs: conflicting options: userxattr,verity=require [ 2954.314371][ T3598] fuse: Bad value for 'group_id' [ 2954.319378][ T3598] fuse: Bad value for 'group_id' [ 2954.333595][ T3598] overlayfs: conflicting options: userxattr,verity=require [ 2954.672525][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7107'. [ 2954.770128][ T3602] overlayfs: failed to clone upperpath [ 2955.215031][ T3604] cgroup: cgroup_addrm_files: failed to add cpus, err=-12 [ 2955.492803][ T3612] virtio-fs: tag not found [ 2957.428103][ T3616] /dev/nullb0: Can't lookup blockdev [ 2957.753423][ T30] audit: type=1400 audit(2000000382.761:3549): avc: denied { create } for pid=3625 comm="syz.5.7124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2958.539323][ T3644] virtio-fs: tag not found [ 2959.122988][ T3651] fuse: Bad value for 'group_id' [ 2959.128116][ T3651] fuse: Bad value for 'group_id' [ 2959.145844][ T3651] overlayfs: conflicting options: userxattr,verity=require [ 2959.261743][ T3653] fuse: Bad value for 'group_id' [ 2959.267428][ T3653] fuse: Bad value for 'group_id' [ 2959.274104][ T3653] overlayfs: conflicting options: userxattr,verity=require [ 2959.874307][ T30] audit: type=1400 audit(2000000384.753:3550): avc: denied { read } for pid=3654 comm="syz.5.7120" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2959.920339][ T30] audit: type=1400 audit(2000000384.753:3551): avc: denied { open } for pid=3654 comm="syz.5.7120" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2959.969224][ T30] audit: type=1400 audit(2000000384.828:3552): avc: denied { read write } for pid=3656 comm="syz.7.7121" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2960.037177][ T30] audit: type=1400 audit(2000000384.828:3553): avc: denied { open } for pid=3656 comm="syz.7.7121" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2961.244346][ T30] audit: type=1400 audit(2000000385.137:3554): avc: denied { ioctl } for pid=3654 comm="syz.5.7120" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2963.135834][ T3691] virtio-fs: tag not found [ 2964.965004][ T3705] fuse: Bad value for 'group_id' [ 2964.970087][ T3705] fuse: Bad value for 'group_id' [ 2965.363902][ T3708] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7132'. [ 2965.764256][ T3711] fuse: Bad value for 'group_id' [ 2965.769289][ T3711] fuse: Bad value for 'group_id' [ 2965.775820][ T3703] overlayfs: conflicting options: userxattr,verity=require [ 2966.091474][ T3707] overlayfs: conflicting options: userxattr,verity=require [ 2966.105436][ T3708] netlink: 'syz.5.7132': attribute type 4 has an invalid length. [ 2967.971731][ T3715] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7135'. [ 2967.981700][ T3715] (unnamed net_device) (uninitialized): (slave ip6gretap0): Device is not bonding slave [ 2967.991579][ T3715] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6gretap0) [ 2968.139993][T13965] Process accounting resumed [ 2968.642171][ T3729] fuse: Bad value for 'group_id' [ 2968.647265][ T3729] fuse: Bad value for 'group_id' [ 2968.654596][ T3729] overlayfs: conflicting options: userxattr,verity=require [ 2970.768648][ T3747] virtio-fs: tag not found [ 2971.115337][ T3749] netlink: 'syz.1.7143': attribute type 10 has an invalid length. [ 2971.126041][ T3749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7143'. [ 2971.138289][ T3749] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 2971.208403][ T3752] fuse: Bad value for 'fd' [ 2971.219599][ T3742] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 2971.479965][ T3760] fuse: Bad value for 'group_id' [ 2971.485021][ T3760] fuse: Bad value for 'group_id' [ 2971.496966][ T3760] overlayfs: conflicting options: userxattr,verity=require [ 2971.962386][ T3764] fuse: Bad value for 'group_id' [ 2971.967449][ T3764] fuse: Bad value for 'group_id' [ 2971.977538][ T3764] overlayfs: conflicting options: userxattr,verity=require [ 2972.960420][ T3770] lo: entered promiscuous mode [ 2973.603596][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7149'. [ 2973.763752][ T3770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2974.011016][T26932] lo speed is unknown, defaulting to 1000 [ 2974.038502][T26932] syz2: Port: 1 Link ACTIVE [ 2974.423735][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 2976.615974][ T3793] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 2976.834186][ T3798] fuse: Bad value for 'group_id' [ 2976.850192][ T3798] fuse: Bad value for 'group_id' [ 2976.864137][ T3798] overlayfs: conflicting options: userxattr,verity=require [ 2978.097157][ T3809] use of bytesused == 0 is deprecated and will be removed in the future, [ 2978.188426][ T3809] use the actual size instead. [ 2979.291086][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7157'. [ 2979.982743][ T3827] fuse: Bad value for 'group_id' [ 2979.988031][ T3827] fuse: Bad value for 'group_id' [ 2979.993329][ T3828] overlayfs: conflicting options: userxattr,verity=require [ 2980.478761][ T3835] overlayfs: missing 'workdir' [ 2980.757514][ T3833] bond0: (slave rose0): Error: Device can not be enslaved while up [ 2980.823906][ T30] audit: type=1400 audit(2000000404.191:3555): avc: denied { connect } for pid=3832 comm="syz.7.7161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2980.866819][ T30] audit: type=1400 audit(2000000404.284:3556): avc: denied { ioctl } for pid=3832 comm="syz.7.7161" path="socket:[105810]" dev="sockfs" ino=105810 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2981.412804][ T30] audit: type=1400 audit(2000000404.471:3557): avc: denied { mount } for pid=3834 comm="syz.2.7162" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2982.040576][ T30] audit: type=1804 audit(2000000405.472:3558): pid=3818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.7157" name="/newroot/1041/file0" dev="tmpfs" ino=5763 res=1 errno=0 [ 2982.828596][ T30] audit: type=1400 audit(2000000405.828:3559): avc: denied { mount } for pid=3850 comm="syz.2.7165" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2983.508602][ T3847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2983.847653][ T3872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7168'. [ 2983.893502][ T3872] 9pnet_fd: Insufficient options for proto=fd [ 2984.373502][ T3874] /dev/nullb0: Can't open blockdev [ 2984.380550][ T30] audit: type=1400 audit(2000000407.661:3560): avc: denied { ioctl } for pid=3869 comm="syz.7.7170" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2985.345279][T13965] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2985.628133][T13965] usb 6-1: Using ep0 maxpacket: 16 [ 2985.637150][T13965] usb 6-1: config index 0 descriptor too short (expected 8192, got 18) [ 2985.666113][T13965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2986.140031][T13965] usb 6-1: config 0 has no interfaces? [ 2986.151295][T13965] usb 6-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 2986.165547][T13965] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2986.178055][T13965] usb 6-1: Product: syz [ 2986.182242][T13965] usb 6-1: Manufacturer: syz [ 2986.187289][T13965] usb 6-1: SerialNumber: syz [ 2986.283668][T13965] apple-mfi-fastcharge 6-1: config 0 descriptor?? [ 2987.476104][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7174'. [ 2988.117484][T13965] apple-mfi-fastcharge 6-1: USB disconnect, device number 34 [ 2991.663292][ T3940] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 2991.669811][ T3940] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2991.693370][ T3944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7185'. [ 2991.715774][ T3940] vhci_hcd vhci_hcd.0: Device attached [ 2991.725269][ T3944] batman_adv: batadv0: Removing interface: dummy0 [ 2991.756719][ T3942] vhci_hcd: connection closed [ 2991.756953][ T3522] vhci_hcd: stop threads [ 2991.780593][ T3951] fuse: Unknown parameter '017777777777777777777770000000000000000000000000000000000000000' [ 2991.793653][ T3951] fuse: Bad value for 'fd' [ 2991.800064][ T3522] vhci_hcd: release socket [ 2991.805792][ T3522] vhci_hcd: disconnect device [ 2992.019290][ T3920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.196241][ T3960] erofs (device nullb0): cannot find valid erofs superblock [ 2993.250338][ T30] audit: type=1400 audit(2000000415.958:3561): avc: denied { getopt } for pid=3968 comm="syz.5.7190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2994.266635][ T30] audit: type=1804 audit(2000000416.912:3562): pid=3981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.7193" name="file0" dev="ramfs" ino=106097 res=1 errno=0 [ 2994.427302][ T30] audit: type=1804 audit(2000000416.931:3563): pid=3981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.7193" name="file0" dev="ramfs" ino=106097 res=1 errno=0 [ 2994.450667][ T30] audit: type=1400 audit(2000000416.940:3564): avc: denied { mounton } for pid=3976 comm="syz.2.7193" path="/file0" dev="ramfs" ino=106097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 2994.614836][ T3992] fuse: Bad value for 'group_id' [ 2994.621009][ T3992] fuse: Bad value for 'group_id' [ 2994.628235][ T3992] overlayfs: conflicting options: userxattr,verity=require [ 2996.184086][ T4006] NILFS (nullb0): couldn't find nilfs on the device [ 2996.709473][ T4007] siw: device registration error -23 [ 2998.693983][ T4026] fuse: Bad value for 'fd' [ 3000.715788][ T4048] bond0: (slave batadv0): Releasing backup interface [ 3001.527967][ T30] audit: type=1400 audit(2000000423.703:3565): avc: denied { mount } for pid=4054 comm="syz.5.7209" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 3002.479393][ T4064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7212'. [ 3003.466993][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7215'. [ 3003.483146][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7215'. [ 3005.256801][ T30] audit: type=1400 audit(2000000427.192:3566): avc: denied { block_suspend } for pid=4089 comm="syz.1.7219" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3006.460422][ T4109] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 3008.111930][ T4124] virtio-fs: tag not found [ 3008.733968][ T30] audit: type=1400 audit(2000000430.447:3567): avc: denied { ioctl } for pid=4125 comm="syz.5.7228" path="pid:[4026532795]" dev="nsfs" ino=4026532795 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3009.439656][ T4143] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3009.461135][ T4143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3010.012917][ T30] audit: type=1400 audit(2000000431.168:3568): avc: denied { mounton } for pid=4130 comm="syz.7.7227" path="/800/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 3010.034842][ C0] vkms_vblank_simulate: vblank timer overrun [ 3010.067538][ T4141] virtio-fs: tag not found [ 3011.030645][ T4154] Failed to initialize the IGMP autojoin socket (err -2) [ 3011.730561][ T4173] Invalid logical block size (4) [ 3012.244940][ T4171] virtio-fs: tag not found [ 3012.675426][T25346] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3012.699847][ T4187] virtio-fs: tag not found [ 3013.726179][ T4196] Failed to initialize the IGMP autojoin socket (err -2) [ 3013.773368][ T30] audit: type=1400 audit(2000000435.162:3569): avc: denied { unmount } for pid=18157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 3014.978285][ T4211] siw: device registration error -23 [ 3015.192901][ T4191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3015.746965][ T4220] mkiss: ax0: crc mode is auto. [ 3015.799293][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7252'. [ 3016.293349][ T4227] virtio-fs: tag not found [ 3016.834986][ T30] audit: type=1400 audit(2000000438.024:3570): avc: denied { unmount } for pid=29083 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 3017.385591][ T30] audit: type=1400 audit(2000000438.539:3571): avc: denied { append } for pid=4240 comm="syz.5.7259" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3017.667012][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3017.886420][ T4239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3018.168189][ T4218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3018.238726][ T30] audit: type=1400 audit(2000000438.539:3572): avc: denied { ioctl } for pid=4240 comm="syz.5.7259" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3020.791287][ T4259] Debayer B: ================= START STATUS ================= [ 3020.799643][ T4259] Debayer B: Debayer Mean Window Size: 3 [ 3020.805425][ T4259] Debayer B: ================== END STATUS ================== [ 3020.982029][ T4260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3024.973034][ T4278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.183519][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7274'. [ 3026.390522][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3026.820589][ T4312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.827555][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.350274][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.360038][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.370975][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.380512][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.390043][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.401184][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.410921][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.420387][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7280'. [ 3027.496000][ T30] audit: type=1400 audit(2000000447.865:3573): avc: denied { mounton } for pid=4333 comm="syz.7.7280" path="/proc/3386/cgroup" dev="proc" ino=107741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 3028.314761][ T2468] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 3028.792884][ T4359] (unnamed net_device) (uninitialized): (slave ip6gretap0): Device is not bonding slave [ 3028.802736][ T4359] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6gretap0) [ 3029.118048][ T3443] Process accounting resumed [ 3029.231839][ T4355] ceph: No mds server is up or the cluster is laggy [ 3029.257015][ T2468] usb 8-1: Using ep0 maxpacket: 16 [ 3029.269433][ T2468] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3029.281314][ T3443] libceph: mon0 (1)[c::]:6789 connect error [ 3029.385901][ T2468] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3029.401899][ T2468] usb 8-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 3029.444189][ T2468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3030.066937][ T2468] usb 8-1: Product: syz [ 3030.071235][ T2468] usb 8-1: Manufacturer: syz [ 3030.075884][ T2468] usb 8-1: SerialNumber: syz [ 3030.082761][ T2468] usb 8-1: config 0 descriptor?? [ 3030.171888][ T2468] usb 8-1: USB disconnect, device number 6 [ 3030.932847][ T30] audit: type=1400 audit(2000000451.213:3574): avc: denied { map } for pid=4370 comm="syz.1.7292" path="socket:[107226]" dev="sockfs" ino=107226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 3031.856533][ T4407] __nla_validate_parse: 37 callbacks suppressed [ 3031.856564][ T4407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7299'. [ 3032.482491][ T4382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.498847][ T4388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.809415][ T4416] fuse: Unknown parameter '017777777777777777777770000000000000000000000000000000000000000' [ 3033.009714][ T4416] fuse: Bad value for 'fd' [ 3033.605870][ T30] audit: type=1400 audit(2000000453.645:3575): avc: denied { checkpoint_restore } for pid=4421 comm="syz.5.7302" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3036.632038][ T4433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.627484][ T4468] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 3037.663213][ T4468] fuse: Bad value for 'fd' [ 3037.840089][T26932] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 3039.020179][T26932] usb 9-1: config 0 has no interfaces? [ 3039.043621][T26932] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3039.112301][ T4463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3039.158276][T26932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3039.158304][T26932] usb 9-1: Product: syz [ 3039.158319][T26932] usb 9-1: Manufacturer: syz [ 3039.158335][T26932] usb 9-1: SerialNumber: syz [ 3039.163915][T26932] usb 9-1: config 0 descriptor?? [ 3040.069162][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 3040.097748][ T4466] misc userio: No port type given on /dev/userio [ 3040.107263][ T4466] misc userio: The device must be registered before sending interrupts [ 3042.447703][ T30] audit: type=1400 audit(2000000461.980:3576): avc: denied { setopt } for pid=4493 comm="syz.5.7319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3043.637562][ T4511] overlayfs: missing 'workdir' [ 3043.727282][T13965] usb 9-1: USB disconnect, device number 13 [ 3044.169149][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3044.625398][ T4512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.757244][ T4523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3046.419414][ T4549] infiniband syz1: set down [ 3046.424153][ T4549] infiniband syz1: added bond0 [ 3046.580962][ T4549] syz1: rxe_create_qp: returned err = -2 [ 3046.587247][ T4549] infiniband syz1: Couldn't create ib_mad QP1 [ 3046.598689][ T4549] infiniband syz1: Couldn't open port 1 [ 3046.854033][ T4549] RDS/IB: syz1: added [ 3046.858086][ T4549] smc: adding ib device syz1 with port count 1 [ 3046.864592][ T4549] smc: ib device syz1 port 1 has pnetid [ 3046.900392][ T30] audit: type=1400 audit(2000000466.152:3577): avc: denied { write } for pid=4551 comm="syz.7.7331" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3050.353373][ T30] audit: type=1326 audit(2000000469.201:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3050.381930][ T30] audit: type=1326 audit(2000000469.201:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3050.533147][ T4590] Failed to initialize the IGMP autojoin socket (err -2) [ 3050.822279][ T30] audit: type=1326 audit(2000000469.201:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3050.845612][ C1] vkms_vblank_simulate: vblank timer overrun [ 3050.854192][ T30] audit: type=1326 audit(2000000469.201:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3051.418390][ T30] audit: type=1326 audit(2000000469.201:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3051.469387][ T30] audit: type=1326 audit(2000000469.201:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3051.496581][ T30] audit: type=1326 audit(2000000469.201:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3052.083983][ T30] audit: type=1326 audit(2000000469.201:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3052.084030][ T30] audit: type=1326 audit(2000000469.201:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3052.084067][ T30] audit: type=1326 audit(2000000469.201:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.8.7339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722498e969 code=0x7ffc0000 [ 3053.703625][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7344'. [ 3055.553631][ T4637] overlayfs: failed to clone upperpath [ 3055.881714][ T4637] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 3055.917679][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7352'. [ 3055.944219][ T4642] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7352'. [ 3055.970735][ T4647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3056.151728][ T4649] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7353'. [ 3056.447899][ T4652] netlink: 'syz.5.7354': attribute type 39 has an invalid length. [ 3058.147755][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 3058.147809][ T30] audit: type=1400 audit(2000000476.675:3606): avc: denied { setopt } for pid=4667 comm="syz.7.7357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3058.752244][ T4687] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 3058.863582][ T4687] fuse: Bad value for 'fd' [ 3059.771581][ T4707] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 3059.818473][ T4707] fuse: Bad value for 'fd' [ 3059.898620][ T4708] virtio-fs: tag not found [ 3060.337294][ T4713] overlayfs: failed to clone upperpath [ 3061.100916][ T4729] syz.7.7368: attempt to access beyond end of device [ 3061.100916][ T4729] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3061.115320][ T4729] (syz.7.7368,4729,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 3061.122929][ T4729] (syz.7.7368,4729,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 3061.130298][ T4729] (syz.7.7368,4729,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 3061.138979][ T4729] (syz.7.7368,4729,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 3061.554726][ T30] audit: type=1400 audit(2000000479.865:3607): avc: denied { create } for pid=4732 comm="syz.5.7371" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 3061.860056][ T4742] overlayfs: missing 'lowerdir' [ 3061.942302][ T4743] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 3062.607594][ T30] audit: type=1400 audit(2000000480.239:3608): avc: denied { relabelto } for pid=4732 comm="syz.5.7371" name="bus" dev="tmpfs" ino=5950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 3063.150932][ T30] audit: type=1400 audit(2000000480.239:3609): avc: denied { associate } for pid=4732 comm="syz.5.7371" name="bus" dev="tmpfs" ino=5950 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 3063.606612][ T30] audit: type=1400 audit(2000000480.875:3610): avc: denied { rmdir } for pid=11866 comm="syz-executor" name="bus" dev="tmpfs" ino=5950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 3063.636848][ T30] audit: type=1400 audit(2000000481.399:3611): avc: denied { accept } for pid=4737 comm="syz.7.7372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3065.121932][ T4774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3065.419597][ T30] audit: type=1400 audit(2000000483.185:3612): avc: denied { read } for pid=4767 comm="syz.7.7378" path="socket:[108908]" dev="sockfs" ino=108908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3065.541715][ T4780] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 3065.622109][ T4780] fuse: Bad value for 'fd' [ 3065.784268][ T4784] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 3065.919384][ T4785] fuse: Bad value for 'fd' [ 3066.074947][ T4790] syz.7.7383: attempt to access beyond end of device [ 3066.074947][ T4790] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3066.089786][ T4790] (syz.7.7383,4790,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 3066.097422][ T4790] (syz.7.7383,4790,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 3066.104759][ T4790] (syz.7.7383,4790,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 3066.113413][ T4790] (syz.7.7383,4790,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 3068.670169][ T30] audit: type=1400 audit(2000000486.347:3613): avc: denied { write } for pid=4799 comm="syz.8.7387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3071.172543][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7394'. [ 3071.217882][ T4836] syz.5.7394: attempt to access beyond end of device [ 3071.217882][ T4836] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3071.232590][ T4836] FAT-fs (loop11): unable to read boot sector [ 3071.525610][ T30] audit: type=1400 audit(2000000488.891:3614): avc: denied { mounton } for pid=4831 comm="syz.5.7394" path="/1083/file0" dev="tmpfs" ino=5988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3071.899906][ T4841] syz.8.7393: attempt to access beyond end of device [ 3071.899906][ T4841] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3073.112602][ T30] audit: type=1400 audit(2000000490.650:3615): avc: denied { read } for pid=4842 comm="syz.7.7396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 3075.584363][ T4861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3077.694800][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3077.882609][T26932] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 3078.422052][T26932] usb 9-1: Using ep0 maxpacket: 8 [ 3078.431148][T26932] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3078.464219][T26932] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3078.631884][T26932] usb 9-1: config 1 has no interface number 1 [ 3079.125600][T26932] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3079.155974][T26932] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3079.177901][T26932] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3079.330748][T26932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3079.357249][ T4898] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 3079.862665][T26932] usb 9-1: Product: syz [ 3079.867460][T26932] usb 9-1: Manufacturer: syz [ 3079.915634][T26932] usb 9-1: SerialNumber: syz [ 3079.935582][ T2468] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 3080.017828][ T4898] fuse: Bad value for 'fd' [ 3080.138802][ T2468] usb 8-1: Using ep0 maxpacket: 16 [ 3080.149679][ T2468] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 3080.180816][T26932] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 3080.200658][ T2468] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3080.233380][T26932] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 3080.266157][ T2468] usb 8-1: config 0 descriptor?? [ 3080.300716][T26932] usb 9-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 3080.318023][ T2468] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 3080.361196][T26932] usb 9-1: USB disconnect, device number 14 [ 3081.050809][ T2468] gspca_sonixj: reg_w1 err -110 [ 3081.055837][ T2468] sonixj 8-1:0.0: probe with driver sonixj failed with error -110 [ 3082.053209][ T4948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7423'. [ 3082.064876][ T4948] tmpfs: Bad value for 'mpol' [ 3084.346682][ T4983] fuse: Unknown parameter '017777777777777777777770000000000000000000000000000000000000000' [ 3084.362769][ T4982] fuse: Bad value for 'fd' [ 3084.400329][ T3443] usb 8-1: USB disconnect, device number 7 [ 3084.910851][T26932] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 3085.148749][T26932] usb 9-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 3085.181991][T26932] usb 9-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 3085.211945][T26932] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 15441, setting to 64 [ 3085.286251][T26932] usb 9-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 3085.311593][T26932] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3085.322176][T26932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3085.634603][ T5021] Failed to initialize the IGMP autojoin socket (err -2) [ 3086.200567][T26932] ath6kl: Failed to submit usb control message: -71 [ 3086.444105][T26932] ath6kl: unable to send the bmi data to the device: -71 [ 3086.482123][T26932] ath6kl: Unable to send get target info: -71 [ 3086.521679][T26932] ath6kl: Failed to init ath6kl core: -71 [ 3087.739606][ T5037] vlan0: entered allmulticast mode [ 3087.744906][ T5037] vlan1: entered allmulticast mode [ 3087.750054][ T5037] veth0_vlan: entered allmulticast mode [ 3088.095028][T26932] ath6kl_usb 9-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 3088.108408][T26932] usb 9-1: USB disconnect, device number 15 [ 3088.930109][ T5036] fuse: Unknown parameter '017777777777777777777770000000000000000000000000000000000000000' [ 3088.952387][ T5036] fuse: Bad value for 'fd' [ 3089.159764][ T5064] ------------[ cut here ]------------ [ 3089.166011][ T5064] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:34 [ 3089.173841][ T5064] index 20 is out of range for type '__u8 [16]' [ 3089.180132][ T5064] CPU: 1 UID: 0 PID: 5064 Comm: syz.8.7456 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 3089.180157][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3089.180166][ T5064] Call Trace: [ 3089.180171][ T5064] [ 3089.180177][ T5064] dump_stack_lvl+0x16c/0x1f0 [ 3089.180197][ T5064] __ubsan_handle_out_of_bounds+0x11c/0x160 [ 3089.180221][ T5064] ipv6_addr_prefix+0xf2/0x110 [ 3089.180237][ T5064] ip6_route_info_create+0x4b6/0x870 [ 3089.180254][ T5064] ip6_route_add+0x26/0x1d0 [ 3089.180269][ T5064] addrconf_prefix_route+0x2fd/0x510 [ 3089.180284][ T5064] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 3089.180308][ T5064] ? lock_acquire+0x179/0x350 [ 3089.180324][ T5064] ? __pfx_addrconf_get_prefix_route+0x10/0x10 [ 3089.180338][ T5064] ? find_held_lock+0x2b/0x80 [ 3089.180350][ T5064] ? addrconf_prefix_rcv+0xa7e/0x1f70 [ 3089.180362][ T5064] addrconf_prefix_rcv+0x1808/0x1f70 [ 3089.180378][ T5064] ? __pfx_addrconf_prefix_rcv+0x10/0x10 [ 3089.180389][ T5064] ? __ipv6_chk_addr_and_flags+0x2f4/0x750 [ 3089.180406][ T5064] ? neigh_remove_one+0x300/0x310 [ 3089.180426][ T5064] ? ndisc_router_discovery+0x1c49/0x3550 [ 3089.180439][ T5064] ndisc_router_discovery+0x1c49/0x3550 [ 3089.180457][ T5064] ? ip6t_do_table+0xbf5/0x1c30 [ 3089.180468][ T5064] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 3089.180482][ T5064] ? __lock_acquire+0x622/0x1c90 [ 3089.180507][ T5064] ? skb_checksum+0x81f/0x980 [ 3089.180523][ T5064] ndisc_rcv+0x3fa/0x620 [ 3089.180536][ T5064] icmpv6_rcv+0x17c6/0x1c50 [ 3089.180556][ T5064] ? __pfx_icmpv6_rcv+0x10/0x10 [ 3089.180575][ T5064] ip6_protocol_deliver_rcu+0xf86/0x1520 [ 3089.180595][ T5064] ip6_input_finish+0x102/0x180 [ 3089.180608][ T5064] ip6_input+0x105/0x2f0 [ 3089.180620][ T5064] ip6_mc_input+0x465/0xfd0 [ 3089.180634][ T5064] ? __pfx_ip6_mc_input+0x10/0x10 [ 3089.180647][ T5064] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 3089.180661][ T5064] ? __pfx_ip6_mc_input+0x10/0x10 [ 3089.180674][ T5064] ipv6_rcv+0x45d/0x680 [ 3089.180686][ T5064] ? __pfx_ipv6_rcv+0x10/0x10 [ 3089.180696][ T5064] __netif_receive_skb_one_core+0x12d/0x1e0 [ 3089.180709][ T5064] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 3089.180723][ T5064] ? lock_acquire+0x179/0x350 [ 3089.180739][ T5064] ? __phys_addr+0xe8/0x180 [ 3089.180758][ T5064] __netif_receive_skb+0x1d/0x160 [ 3089.180771][ T5064] netif_receive_skb+0x137/0x7b0 [ 3089.180783][ T5064] ? __pfx_netif_receive_skb+0x10/0x10 [ 3089.180801][ T5064] tun_rx_batched.isra.0+0x3ee/0x740 [ 3089.180822][ T5064] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 3089.180843][ T5064] ? tun_get_user+0x1c0d/0x3b80 [ 3089.180861][ T5064] ? rcu_is_watching+0x12/0xc0 [ 3089.180876][ T5064] tun_get_user+0x28a2/0x3b80 [ 3089.180900][ T5064] ? __pfx_tun_get_user+0x10/0x10 [ 3089.180917][ T5064] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 3089.180947][ T5064] ? find_held_lock+0x2b/0x80 [ 3089.180962][ T5064] ? tun_get+0x191/0x370 [ 3089.180981][ T5064] tun_chr_write_iter+0xdc/0x210 [ 3089.181008][ T5064] vfs_write+0x6c7/0x1150 [ 3089.181027][ T5064] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 3089.181047][ T5064] ? __pfx_vfs_write+0x10/0x10 [ 3089.181057][ T5064] ? find_held_lock+0x2b/0x80 [ 3089.181077][ T5064] ksys_write+0x12a/0x250 [ 3089.181089][ T5064] ? __pfx_ksys_write+0x10/0x10 [ 3089.181105][ T5064] do_syscall_64+0xcd/0x4c0 [ 3089.181121][ T5064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3089.181134][ T5064] RIP: 0033:0x7f722498d41f [ 3089.181144][ T5064] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 3089.181155][ T5064] RSP: 002b:00007f7225868000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3089.181167][ T5064] RAX: ffffffffffffffda RBX: 00007f7224bb5fa0 RCX: 00007f722498d41f [ 3089.181174][ T5064] RDX: 00000000000003b6 RSI: 00002000000003c0 RDI: 00000000000000c8 [ 3089.181181][ T5064] RBP: 00007f7224a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3089.181187][ T5064] R10: 00000000000003b6 R11: 0000000000000293 R12: 0000000000000000 [ 3089.181194][ T5064] R13: 0000000000000001 R14: 00007f7224bb5fa0 R15: 00007ffcd053c058 [ 3089.181209][ T5064] [ 3089.181213][ T5064] ---[ end trace ]--- [ 3089.580295][ T5064] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 3089.587479][ T5064] CPU: 1 UID: 0 PID: 5064 Comm: syz.8.7456 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 3089.599093][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3089.609137][ T5064] Call Trace: [ 3089.612402][ T5064] [ 3089.615339][ T5064] dump_stack_lvl+0x3d/0x1f0 [ 3089.619985][ T5064] panic+0x71c/0x800 [ 3089.623884][ T5064] ? __pfx_panic+0x10/0x10 [ 3089.628292][ T5064] ? __pfx__printk+0x10/0x10 [ 3089.632879][ T5064] check_panic_on_warn+0xab/0xb0 [ 3089.637816][ T5064] __ubsan_handle_out_of_bounds+0x143/0x160 [ 3089.643705][ T5064] ipv6_addr_prefix+0xf2/0x110 [ 3089.648452][ T5064] ip6_route_info_create+0x4b6/0x870 [ 3089.653724][ T5064] ip6_route_add+0x26/0x1d0 [ 3089.658211][ T5064] addrconf_prefix_route+0x2fd/0x510 [ 3089.663493][ T5064] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 3089.669300][ T5064] ? lock_acquire+0x179/0x350 [ 3089.673963][ T5064] ? __pfx_addrconf_get_prefix_route+0x10/0x10 [ 3089.680097][ T5064] ? find_held_lock+0x2b/0x80 [ 3089.684764][ T5064] ? addrconf_prefix_rcv+0xa7e/0x1f70 [ 3089.690114][ T5064] addrconf_prefix_rcv+0x1808/0x1f70 [ 3089.695382][ T5064] ? __pfx_addrconf_prefix_rcv+0x10/0x10 [ 3089.700989][ T5064] ? __ipv6_chk_addr_and_flags+0x2f4/0x750 [ 3089.706793][ T5064] ? neigh_remove_one+0x300/0x310 [ 3089.711820][ T5064] ? ndisc_router_discovery+0x1c49/0x3550 [ 3089.717525][ T5064] ndisc_router_discovery+0x1c49/0x3550 [ 3089.723069][ T5064] ? ip6t_do_table+0xbf5/0x1c30 [ 3089.727901][ T5064] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 3089.733778][ T5064] ? __lock_acquire+0x622/0x1c90 [ 3089.738708][ T5064] ? skb_checksum+0x81f/0x980 [ 3089.743459][ T5064] ndisc_rcv+0x3fa/0x620 [ 3089.747944][ T5064] icmpv6_rcv+0x17c6/0x1c50 [ 3089.752450][ T5064] ? __pfx_icmpv6_rcv+0x10/0x10 [ 3089.757301][ T5064] ip6_protocol_deliver_rcu+0xf86/0x1520 [ 3089.763271][ T5064] ip6_input_finish+0x102/0x180 [ 3089.768100][ T5064] ip6_input+0x105/0x2f0 [ 3089.772323][ T5064] ip6_mc_input+0x465/0xfd0 [ 3089.776813][ T5064] ? __pfx_ip6_mc_input+0x10/0x10 [ 3089.781842][ T5064] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 3089.787022][ T5064] ? __pfx_ip6_mc_input+0x10/0x10 [ 3089.792028][ T5064] ipv6_rcv+0x45d/0x680 [ 3089.796164][ T5064] ? __pfx_ipv6_rcv+0x10/0x10 [ 3089.800833][ T5064] __netif_receive_skb_one_core+0x12d/0x1e0 [ 3089.806710][ T5064] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 3089.813106][ T5064] ? lock_acquire+0x179/0x350 [ 3089.817790][ T5064] ? __phys_addr+0xe8/0x180 [ 3089.822280][ T5064] __netif_receive_skb+0x1d/0x160 [ 3089.827288][ T5064] netif_receive_skb+0x137/0x7b0 [ 3089.832217][ T5064] ? __pfx_netif_receive_skb+0x10/0x10 [ 3089.837658][ T5064] tun_rx_batched.isra.0+0x3ee/0x740 [ 3089.842976][ T5064] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 3089.848783][ T5064] ? tun_get_user+0x1c0d/0x3b80 [ 3089.853619][ T5064] ? rcu_is_watching+0x12/0xc0 [ 3089.858371][ T5064] tun_get_user+0x28a2/0x3b80 [ 3089.863089][ T5064] ? __pfx_tun_get_user+0x10/0x10 [ 3089.868124][ T5064] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 3089.873595][ T5064] ? find_held_lock+0x2b/0x80 [ 3089.878268][ T5064] ? tun_get+0x191/0x370 [ 3089.882513][ T5064] tun_chr_write_iter+0xdc/0x210 [ 3089.887438][ T5064] vfs_write+0x6c7/0x1150 [ 3089.891747][ T5064] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 3089.897293][ T5064] ? __pfx_vfs_write+0x10/0x10 [ 3089.902050][ T5064] ? find_held_lock+0x2b/0x80 [ 3089.906715][ T5064] ksys_write+0x12a/0x250 [ 3089.911022][ T5064] ? __pfx_ksys_write+0x10/0x10 [ 3089.915852][ T5064] do_syscall_64+0xcd/0x4c0 [ 3089.920342][ T5064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3089.926213][ T5064] RIP: 0033:0x7f722498d41f [ 3089.930604][ T5064] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 3089.950197][ T5064] RSP: 002b:00007f7225868000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 3089.958600][ T5064] RAX: ffffffffffffffda RBX: 00007f7224bb5fa0 RCX: 00007f722498d41f [ 3089.966981][ T5064] RDX: 00000000000003b6 RSI: 00002000000003c0 RDI: 00000000000000c8 [ 3089.974943][ T5064] RBP: 00007f7224a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3089.982894][ T5064] R10: 00000000000003b6 R11: 0000000000000293 R12: 0000000000000000 [ 3089.990842][ T5064] R13: 0000000000000001 R14: 00007f7224bb5fa0 R15: 00007ffcd053c058 [ 3089.998801][ T5064] [ 3090.002005][ T5064] Kernel Offset: disabled [ 3090.006343][ T5064] Rebooting in 86400 seconds..